Samsung Electronics Co WEA453E WLAN Access Point User Manual Model Name Manual Name

Samsung Electronics Co Ltd WLAN Access Point Model Name Manual Name

APC Operation Manual - Professional Installation Guide 1 of 2

 Ver.    2600-00FK1RGA4 6.0        WEC8500/WEC8050 (APC) Operation Manual
    COPYRIGHT This manual is proprietary to SAMSUNG Electronics Co., Ltd. and is protected by copyright. No information contained herein may be copied, translated, transcribed or duplicated for any commercial purposes or disclosed to the third party in any form without the prior written consent of SAMSUNG Electronics Co., Ltd.   TRADEMARKS Product names mentioned in this manual may be trademarks and/or registered trademarks of their respective companies.                         This manual should be read and used as a guideline for properly installing and operating the product.  All reasonable care has been made to ensure that this document is accurate. If you have any comments on this manual, please contact our documentation centre at the following homepage:  Homepage: http://www.samsungdocs.com ©2013~2014 SAMSUNG Electronics Co., Ltd.    All rights reserved.
INTRODUCTION ©  SAMSUNG Electronics Co., Ltd.  page 3 of 628 INTRODUCTION      Purpose This manual describes the overview, management, and setup of WEC8500/WEC8050 that is a Samsung Wireless Enterprise (W-EP) Access Point Controller (APC). This manual is written for WEC8500 version 1.4.4, WEC8050 version 1.0.0.   Document Content and Organization This manual consists of ten Chapters, three Annexes, and a list of Abbreviations.  CHAPTER 1. Access Point Controller System Overview This chapter describes the main functions, network configuration, external configuration and service scenario of APC.  CHAPTER 2. Basic System Configuration This chapter describes how to configure to use Command Line Interface (CLI) and Web UI.  CHAPTER 3. Data Network Function This chapter describes how to set up the data network such as interface, Virtual Local Area Network (VLAN), L3, or Quality of Service (QoS), etc. of APC.  CHAPTER 4. AP Connection Management This chapter describes the connection management function of APC and Samsung W-EP wireless LAN Access Point (AP).  CHAPTER 5. WLAN Management This chapter describes how to set up the Wireless Local Area Network (WLAN) of APC.  CHAPTER 6. Wi-Fi Configuration This chapter describes how to configure the Wireless Fidelity (Wi-Fi) of APC, QoS, and country code.
INTRODUCTION ©  SAMSUNG Electronics Co., Ltd.  page 4 of 628 CHAPTER 7. WLAN Additional Service This chapter describes how to set up WLAN additional services available in the APC.  CHAPTER 8. Security This chapter describes how to set up security related setting such as Remote Authentication Dial-In User Service (RADIUS) server available in the APC, unauthorized AP detection and blocking function, guest access, WEB pass-through, Network Address Translation (NAT), firewall function, etc.  CHAPTER 9. IP Application This chapter describes the Internet Protocol (IP) application functions available in the APC such as Domain Naming Service (DNS), Network Time Protocol (NTP), File Transfer Protocol (FTP)/sFTP, or Telnet/SSH.  CHAPTER 10. System Management This chapter describes the various system management functions available in the APC.  ANNEX A. CLI Command Structure Command structure available in the CLI of APC.  ANNEX B. Open Source Announcement (WEC8500/WEC8050) Open source list used in the APC and its license notice.  ANNEX C. Open Source Announcement (WEA302/WEA303/WEA312/ WEA313/WEA403/WEA412) Open source list used in the Samsung W-EP wireless LAN AP and its license notice.  ABBREVIATION Describes the acronyms used in this manual.  Conventions The following types of paragraphs contain special information that must be carefully read and thoroughly understood. Such information may or may not be enclosed in a rectangular box, separating it from the main text, but is always preceded by an icon and/or a bold title.    NOTE   Indicates additional information as a reference.
INTRODUCTION ©  SAMSUNG Electronics Co., Ltd.  page 5 of 628 Console Screen Output  The lined box with ‘Courier New’ font will be used to distinguish between the main content and console output screen text.  ‘Bold Courier New’ font will indicate the value entered by the operator on the console screen.   Revision History VERSION DATE OF ISSUE REMARKS 6.0 12. 2014. Updated the content overall in accordance with the package version 2.4.0 5.0 05. 2014. Updated the content overall in accordance with the package version 2.0.0 4.0 01. 2014. - Changed contents  1.3.1 WEC8500 Configuration and Functions  4.2.6.3 Tech Support Information 3.0 10. 2013. - Updated the content overall in accordance with the package version (WEC8500 version 1.4.4, WEC8050 version 1.0.0) - Added contents for WEC8050 2.0 06. 2013. - Updated the content overall in accordance with the package version 1.3.0 - Added contents    3.4.6 OS-AWARE  7.4.2 DPC Configuration  7.4.3 DCS Configuration  7.4.4 CHDC Configuration - Changed contents  7.10 Clustering  10.8.2 System Upgrade 1.0 03. 2013. First Version
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 6 of 628 TABLE OF CONTENTS   INTRODUCTION  3 Purpose ....................................................................................................................................... 3 Document Content and Organization .......................................................................................... 3 Conventions ................................................................................................................................ 4 Console Screen Output ............................................................................................................... 5 Revision History .......................................................................................................................... 5 CHAPTER 1. Access Point Controller System Overview  21 1.1 APC Overview .......................................................................................................................... 21 1.2 Network Configuration ............................................................................................................ 23 1.3 APC Configuration and Functions ......................................................................................... 26 1.3.1 WEC8500 Configuration and Functions ...................................................................... 26 1.3.2 WEC8050 Configuration and Functions ...................................................................... 30 1.4 APC Application Configuration and Service Scenario ......................................................... 32 1.4.1 Basic Configuration ..................................................................................................... 32 1.4.2 Configuration of Multiple APC for Redundancy ........................................................... 33 1.4.3 Clustering Configuration using Multiple APC (WEC8500) ........................................... 34 1.4.4 Configuration of Multiple Sites Consisting of Headquarter and Branches ................... 37 1.5 NAT Configuration between AP and APC .............................................................................. 39 CHAPTER 2. Basic System Configuration  40 2.1 Basic System Configuration ................................................................................................... 40 2.1.1 CLI Connection ........................................................................................................... 40 2.1.2 Managing Operator Account ........................................................................................ 41 2.1.3 APC Management Port Configuration ......................................................................... 42 2.1.4 SNMP Community Configuration................................................................................. 42 2.1.5 CLI Basic Usage ......................................................................................................... 42 2.2 Using Web UI ........................................................................................................................... 45 2.2.1 Web UI Connection ..................................................................................................... 45 2.2.2 WEC Main Window ..................................................................................................... 46 2.2.3 Managing Operator Account ........................................................................................ 47
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 7 of 628 2.3 Initial Setup Wizard ..................................................................................................................48 2.3.1 Overview......................................................................................................................48 2.3.2 Connecting ..................................................................................................................48 2.3.3 How to Use ..................................................................................................................49 CHAPTER 3. Data Network Function  52 3.1 Port Configuration ...................................................................................................................52 3.1.1 Port management ........................................................................................................52 3.2 Interface Configuration ...........................................................................................................56 3.2.1 Interface management .................................................................................................56 3.2.2 Managing Interface Group ...........................................................................................59 3.3 VLAN Configuration.................................................................................................................61 3.3.1 VLAN ...........................................................................................................................61 3.3.2 Bridge ..........................................................................................................................63 3.3.3 Spanning Tree .............................................................................................................66 3.4 Layer 3 Protocol Configuration ..............................................................................................70 3.4.1 IP Address Configuration .............................................................................................70 3.4.2 Static Routing Configuration ........................................................................................70 3.4.3 IP Multicast Routing Configuration ..............................................................................71 3.4.4 PIM Configuration ........................................................................................................72 3.4.5 OSPF Configuration ....................................................................................................72 3.4.6 VRRP Configuration .................................................................................................. 110 3.4.7 Configuring IPWATCHD............................................................................................. 113 3.5 QoS   ..................................................................................................................................... 114 3.5.1 ACL Configuration ..................................................................................................... 114 3.5.2 Class-map Configuration ........................................................................................... 118 3.5.3 Policy-map Configuration........................................................................................... 119 3.5.4 Service Policy Configuration ......................................................................................120 3.5.5 Time Profile................................................................................................................121 3.5.6 OS-AWARE ...............................................................................................................124 3.6 Multicast to Unicast ...............................................................................................................127 3.7 IP Multicast Configuration ....................................................................................................127 3.7.1 IP Multicast Routing Configuration ............................................................................127 3.7.2 PIM Configuration ......................................................................................................127 3.8 IGMP Snooping ......................................................................................................................130 3.9 Deep Packet Inspection .........................................................................................................133 3.9.1 Configuring Profile and Application Rule ...................................................................133
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 8 of 628 3.9.2 Configuring Application Group ................................................................................... 134 3.9.3 Checking Statistics by Category ................................................................................ 134 CHAPTER 4. AP Connection Management  139 4.1 APC Management .................................................................................................................. 139 4.1.1 Managing APC List .................................................................................................... 139 4.1.2 Management Interface Configuration ........................................................................ 141 4.1.3 CAPWAP Configuration............................................................................................. 142 4.1.4 AP Registration (Auto Discovery) Configuration ........................................................ 144 4.1.5 Managing AP File Transmission ................................................................................ 145 4.1.6 APC Redundancy Configuration ............................................................................... 145 4.2 AP Management ..................................................................................................................... 151 4.2.1 AP Group Configuration ............................................................................................ 151 4.2.2 Configuring Remote AP Group .................................................................................. 167 4.2.3 AP Time Synchronization per Group ......................................................................... 173 4.2.4 AP Configuration ....................................................................................................... 175 4.2.5 Information Management .......................................................................................... 186 4.2.6 Outdoor AP Configuration ......................................................................................... 189 4.2.7 AP Package Upgrade ................................................................................................ 190 4.2.8 Remote AP Package Upgrade .................................................................................. 195 CHAPTER 5. WLAN Management  204 5.1 WLAN Configuration ............................................................................................................. 204 5.1.1 Basic WLAN Configuration ........................................................................................ 204 5.1.2 WLAN Additional Configuration ................................................................................. 207 5.1.3 WLAN-based ACL Configuration ............................................................................... 209 5.1.4 Managing Root Service ............................................................................................. 211 5.1.5 MCS Configuration Management by WLAN .............................................................. 214 5.2 Local Switching ..................................................................................................................... 217 5.3 Security and Authentication ................................................................................................. 220 5.3.1 Initialization of WLAN Security Function.................................................................... 220 5.3.2 WPA/WPA2 PSK Configuration ................................................................................. 222 5.3.3 WPA/WPA2 802.1x Configuration ............................................................................. 225 5.3.4 Static WEP Configuration .......................................................................................... 229 5.3.5 Dynamic WEP Configuration ..................................................................................... 231 5.4 DHCP Configuration .............................................................................................................. 234 5.4.1 DHCP Server ............................................................................................................ 234 5.4.2 DHCP Relay .............................................................................................................. 242
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 9 of 628 5.4.3 DHCP Proxy ..............................................................................................................243 5.4.4 Option 82 Configuration .............................................................................................244 5.4.5 Primary/Secondary Server Configuration ..................................................................246 5.5 Radio Service Configuration .................................................................................................249 CHAPTER 6. Wi-Fi Configuration  251 6.1 802.11a/b/g/n/ac Radio Property ...........................................................................................251 6.1.1 802.11a/b/g Configuration ..........................................................................................251 6.1.2 802.11n Configuration ................................................................................................256 6.1.3 802.11ac Configuration ..............................................................................................257 6.2 Wi-Fi QoS Configuration .......................................................................................................259 6.2.1 QoS Configuration of Wireless Terminal ....................................................................259 6.2.2 QoS Configuration of AP............................................................................................261 6.2.3 Configuring QoS Profile of a Specific Terminal ..........................................................265 6.2.4 Voice Optimization Configuration ...............................................................................267 6.3 802.11h Configuration ...........................................................................................................268 6.4 Country Code .........................................................................................................................270 CHAPTER 7. WLAN Additional Services  274 7.1 Managing Wireless Terminal .................................................................................................274 7.1.1 Information Retrieval Functions .................................................................................274 7.1.2 Connection History related Configuration ..................................................................275 7.2 Handover Management .........................................................................................................276 7.2.1 Connection History Information .................................................................................276 7.2.2 AirMove Configuration ...............................................................................................276 7.2.3 Inter APC Handover Configuration ............................................................................278 7.3 Call Admission Control (CAC) Configuration ......................................................................279 7.3.1 SIP ALG Configuration ...............................................................................................279 7.3.2 Voice CAC Configuration ...........................................................................................281 7.3.3 Video CAC Configuration ...........................................................................................283 7.4 Radio Resource Management (RRM) ...................................................................................285 7.4.1 RRM Configuration ....................................................................................................285 7.4.2 DPC Configuration .....................................................................................................286 7.4.3 DCS Configuration .....................................................................................................288 7.4.4 CHDC Configuration ..................................................................................................290 7.4.5 Sleeping Cell Detection .............................................................................................294 7.4.6 Energy Saving Groups ...............................................................................................296
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 10 of 628 7.4.7 Energy Saving Auto Classification ............................................................................. 297 7.5 Location Tracking .................................................................................................................. 300 7.6 Spectrum Analysis ................................................................................................................ 301 7.6.1 Retrieving Spectrum Analysis Data ........................................................................... 301 7.6.2 Spectrum Analysis Configuration ............................................................................... 304 7.6.3 Interference Type Configuration ................................................................................ 306 7.7 Controlling Usage per User .................................................................................................. 307 7.8 Remote Packet Capture ........................................................................................................ 309 7.9 Clustering ............................................................................................................................... 311 7.10 Limiting the Number of Connected Users ........................................................................... 315 7.10.1 Limiting Connections per Radio ................................................................................ 315 7.10.2 Connection Limitation per WLAN .............................................................................. 316 7.11 Voice Statistics and Communication Failure Detection ..................................................... 318 7.11.1 Voice Statistics Function ............................................................................................ 318 7.11.2 Detecting WLAN-based Communication Failure ....................................................... 320 7.12 Voice Signal and Media Monitoring ..................................................................................... 321 7.12.1 Checking Voice Related Wireless Information ........................................................... 321 7.12.2 Checking Voice Related Quality Information ............................................................. 326 7.13 Multicast Stream Admission Control ................................................................................... 329 7.13.1 Configuring Admission Control .................................................................................. 329 7.14 Wi-Fi Band Steering .............................................................................................................. 331 7.14.1 Activating Band Steering Function ............................................................................ 331 7.15 Wi-Fi Load Balancing ............................................................................................................ 334 7.15.1 Activating Load Balancing Function .......................................................................... 334 7.16 Station-based Adaptive Load Balancing ............................................................................. 336 7.16.1 Basic Setting of Station-based Adaptive Load Balancing .......................................... 336 7.16.2 Setting AP Group Parameter ..................................................................................... 337 7.16.3 Setting AP Parameters .............................................................................................. 339 CHAPTER 8. Security  341 8.1 RADIUS Server Configuration .............................................................................................. 341 8.1.1 External RADIUS Server ........................................................................................... 341 8.1.2 Internal RADIUS Server ............................................................................................ 347 8.2 Unauthorized AP/Terminal Detection and Blocking ........................................................... 351 8.2.1 Enabling Detection Function ..................................................................................... 351 8.2.2 Detection ................................................................................................................... 352
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 11 of 628 8.2.3 Enabling Blocking Function .......................................................................................370 8.2.4 Blocking .....................................................................................................................370 8.3 Captive Portal .........................................................................................................................374 8.3.1 Configuring Guest Authentication ..............................................................................374 8.3.2 Configuring Guest ACL ..............................................................................................376 8.3.3 Configuring Web Authentication ................................................................................378 8.3.4 Configuring Web Authentication on MAC Authentication Failure ...............................381 8.3.5 Configuring Web Pass-through ..................................................................................385 8.3.6 Configuring One Time Redirection .............................................................................387 8.3.7 Redirection Address Format ......................................................................................389 8.4 NAT and Firewall Configuration............................................................................................390 8.4.1 Firewall Configuration ................................................................................................390 8.4.2 Access List Configuration ..........................................................................................391 8.4.3 NAT Configuration .....................................................................................................392 8.5 MAC Filter ...............................................................................................................................396 8.6 Operator Authentication through Interoperation with TACACS+ Server ..........................399 8.6.1 Configuring External TACACS+ Server .....................................................................399 8.6.2 Configuring Authentication Type of Operator Account ...............................................402 8.7 Role Based Access Control ..................................................................................................403 8.7.1 Configuring Role Profile .............................................................................................403 8.7.2 Configuring Derivation Profile ....................................................................................404 8.7.3 Configuring ACL Profile .............................................................................................407 8.7.4 Configuration Synchronization (Remote AP Group)................................................... 411 8.8 External BYOD Server ...........................................................................................................414 8.8.1 Configuring External BYOD Server ...........................................................................414 8.8.2 Captive Portal Configuration ......................................................................................416 CHAPTER 9. IP Application  419 9.1 DNS   .....................................................................................................................................419 9.1.1 DNS Client Configuration...........................................................................................419 9.1.2 DNS Proxy Configuration...........................................................................................420 9.2 NTP   .....................................................................................................................................422 9.3 FTP/sFTP ................................................................................................................................425 9.4 Telnet/SSH ..............................................................................................................................428 9.5 Utilities ....................................................................................................................................430
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 12 of 628 CHAPTER 10. System Management  431 10.1 SNMP Configuration .............................................................................................................. 431 10.1.1 SNMP Community ..................................................................................................... 431 10.1.2 SNMP Trap ................................................................................................................ 432 10.2 System Management ............................................................................................................. 434 10.2.1 Retrieving System Information .................................................................................. 434 10.2.2 System Reboot .......................................................................................................... 439 10.3 System Resource Management ........................................................................................... 441 10.3.1 Retrieving System Status .......................................................................................... 441 10.3.2 Retrieving and Configuring Threshold ....................................................................... 444 10.4 Managing Alarm and Event ................................................................................................... 445 10.4.1 Retrieving Current Alarm ........................................................................................... 446 10.4.2 Retrieving History ...................................................................................................... 447 10.4.3 External Transmission Configuration ......................................................................... 449 10.4.4 Alarm Filter and Level Configuration ......................................................................... 449 10.5 Managing Traffic Performance ............................................................................................. 451 10.5.1 Managing History Information ................................................................................... 451 10.5.2 Managing Real-time Information Collection............................................................... 452 10.6 Managing License Key .......................................................................................................... 453 10.6.1 Managing SLM License (Activation) Key ................................................................... 453 10.6.2 Managing Old License Key ....................................................................................... 456 10.7 Syslog Configuration ............................................................................................................ 459 10.8 Upgrade .................................................................................................................................. 461 10.8.1 Checking Package Version ....................................................................................... 461 10.8.2 System Upgrade ....................................................................................................... 461 10.9 Configuration Management .................................................................................................. 464 10.10 Debug and Diagnosis ............................................................................................................ 466 10.10.1  Process ..................................................................................................................... 466 10.10.2 Retrieving Crash Information ..................................................................................... 468 10.11 File Management ................................................................................................................... 471 10.11.1 Retrieving Configuration of Current Directory ............................................................ 471 10.11.2 Retrieving Directory List ............................................................................................ 472 10.11.3 Revising File .............................................................................................................. 473 10.11.4 Retrieve File Content................................................................................................. 473 10.11.5 File Download and Upload ........................................................................................ 474 10.11.6 Package File ............................................................................................................. 474 10.11.7 Retrieving Storage Media .......................................................................................... 476
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 13 of 628 10.11.8 Managing File in Web UI ...........................................................................................477 10.11.9 Statistics Function ......................................................................................................480 ANNEX A. CLI Command Structure  522 A.1 configure ................................................................................................................................522 A.2 show........................................................................................................................................552 A.3 clear ........................................................................................................................................564 A.4 debug ......................................................................................................................................566 A.5 file............................................................................................................................................569 A.6 Etc ...........................................................................................................................................569 ANNEX B. Open Source Announcement (WEC8500/WEC8050)  570 ANNEX C. Open Source Announcement (WEA302/WEA303/ WEA312/WEA313/WEA403/WEA412)  599 ABBREVIATION  624
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 14 of 628 LIST OF FIGURES Figure 1. System Structure for Wireless Enterprise Solution ...................................................... 22 Figure 2. W-EP Network Configuration ....................................................................................... 23 Figure 3. WEC8500 Interface-Front/Back ................................................................................... 26 Figure 4. System LED Configuration .......................................................................................... 26 Figure 5. Management Port Configuration .................................................................................. 27 Figure 6. Optic port configuration ............................................................................................... 28 Figure 7. Power module configuration ........................................................................................ 29 Figure 8. WEC8050 interface-Front/Back ................................................................................... 30 Figure 9. Status LED configuration ............................................................................................. 30 Figure 10. Ethernet Port Configurations ..................................................................................... 31 Figure 11. Basic Configuration of W-EP Wireless LAN System .................................................. 32 Figure 12. Example of W-EP Wireless LAN System Configuration for Redundancy .................. 33 Figure 13. Example of W-EP Wireless LAN System Configuration for Distributed Clustering Service ...................................................................................................................... 35 Figure 14. Example of W-EP Wireless LAN System Configuration for Centralized Clustering Service ...................................................................................................................... 36 Figure 15. Example of W-EP Wireless LAN System Configuration for Multiple Sites consisting of Headquarter and Branches ....................................................................................... 37 Figure 16. AP-APC NAT Environment Configuration Diagram .................................................... 39 Figure 17. Web UI Connection Window ...................................................................................... 45 Figure 18. WEC Main Window .................................................................................................... 46 Figure 19. Operator Account Management Window ................................................................... 47 Figure 20. Operator Account Addition Window ........................................................................... 47 Figure 21. Initial Setup Wizard Welcome Screen ....................................................................... 49 Figure 22. Move to the setup step of the initial setup wizard ...................................................... 49 Figure 23. Port Management Window ........................................................................................ 54 Figure 24. Port Configuration Change Window .......................................................................... 55 Figure 25. Interfaces Window (1) ................................................................................................ 57 Figure 26. Interfaces Window (2) ................................................................................................ 57 Figure 27. Interfaces Window (3) ................................................................................................ 58 Figure 28. Interface Group Window (1) ...................................................................................... 59 Figure 29. Interface Group Window (2) ...................................................................................... 60 Figure 30. Spanning Tree Configuration Window (1) .................................................................. 68 Figure 31. Spanning Tree Configuration Window (2) .................................................................. 69 Figure 32. Spanning Tree Configuration Window (3) .................................................................. 69 Figure 33. Static Routing Configuration Window ........................................................................ 71 Figure 34. OSPF Configuration Window ..................................................................................... 73
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 15 of 628 Figure 35. VRRP-Operation Window ........................................................................................ 112 Figure 36. VRRP-Circuit Failover Window (1) ........................................................................... 112 Figure 37. VRRP-Circuit Failover Window (2) ........................................................................... 112 Figure 38. IPWATCHD Configuration Window .......................................................................... 113 Figure 39. ACL Configuration Window ...................................................................................... 115 Figure 40. Window where a Time Profile is Applied to ACL ...................................................... 115 Figure 41. ACL Interface Configuration Window (1) .................................................................. 116 Figure 42. ACL Interface Configuration Window (2) .................................................................. 116 Figure 43. Admin ACL Configuration Window ........................................................................... 118 Figure 44. Time Profile Configuration Window (1) .....................................................................121 Figure 45. Time Profile Configuration Window (2) .....................................................................122 Figure 46. Applying to ACL .......................................................................................................123 Figure 47. IP Multicast Configuration Window ..........................................................................127 Figure 48. PIM-SM Configuration Window (1)...........................................................................128 Figure 49. PIM-SM Configuration Window (2)...........................................................................128 Figure 50. PIM-SM Configuration Window (3)...........................................................................129 Figure 51. PIM-SM Configuration Window (4)...........................................................................129 Figure 52. IGMP Snooping Config Window ...............................................................................131 Figure 53. IGMP Snooping Mroute Creation Window (1) ..........................................................131 Figure 54. IGMP Snooping Mroute Creation Window (2) ..........................................................132 Figure 55. IGMP Snooping Mroute Creation Window (3) ..........................................................132 Figure 56. IGMP Snooping Mroute Creation Window (4) ..........................................................132 Figure 57. APC List Management Window ...............................................................................140 Figure 58. Management interface configuration ........................................................................141 Figure 59. AP Registration Method Setup Window ...................................................................144 Figure 60. Redundancy Configuration Window .........................................................................148 Figure 61. AP retrieving window ................................................................................................149 Figure 62. AP redundancy Configuration Window .....................................................................150 Figure 63. AP groups configuration Window .............................................................................152 Figure 64. AP Group Addition Window ......................................................................................152 Figure 65. General Configuration Window for AP Group ..........................................................155 Figure 66. AP Add/Remove Window for AP Group ...................................................................157 Figure 67. WLAN Add/Remove Window for AP Group ..............................................................158 Figure 68. 802.11a/n Window for AP Group ..............................................................................159 Figure 69. 802.11b/g/n Window for AP Group ...........................................................................160 Figure 70. Advanced Configuration Window for AP Group........................................................166 Figure 71. Remote AP Group Add/Remove Window .................................................................168 Figure 72. Local Authentication Configuration Window for Remote AP Group ..........................169 Figure 73. Window for Configuring Tunneling Forwarding of Remote AP Group ......................171
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 16 of 628 Figure 74. Window for Configuring Local Bridging Forwarding of Remote AP Group ............... 172 Figure 75. AP Time Synchronization Configuration Options ..................................................... 174 Figure 76. Adding Access Points .............................................................................................. 175 Figure 77. AP Profile Setting (1) ............................................................................................... 179 Figure 78. AP Profile Setting (2) ............................................................................................... 181 Figure 79. AP mode configuration ............................................................................................ 182 Figure 80. AP CLI Account Add/Remove Window .................................................................... 183 Figure 81. AP SNMP v1/v2c Community Configuration Window .............................................. 185 Figure 82. AP v3 User Configuration Window ........................................................................... 185 Figure 83. AP Ports window ...................................................................................................... 187 Figure 84. AP Ports detail information window ......................................................................... 187 Figure 85. AP Tech Support Information Receiving Window ..................................................... 188 Figure 86. Outdoor AP Create Window..................................................................................... 190 Figure 87. AP upgrade .............................................................................................................. 193 Figure 88. AP upgrade-global ................................................................................................... 193 Figure 89. AP upgrade-individual .............................................................................................. 194 Figure 90. AP upgrade-advanced ............................................................................................. 195 Figure 91. Remote AP Group Upgrade Activation_1 ................................................................ 196 Figure 92. Remote AP Group Upgrade Activation_2 ................................................................ 197 Figure 93. Checking Master AP Configuration .......................................................................... 198 Figure 94. Checking Master AP Configuration .......................................................................... 198 Figure 95. AP Package Configuration ....................................................................................... 200 Figure 96. Starting AP Upgrade ................................................................................................ 201 Figure 97. Restarting and Upgrading AP .................................................................................. 203 Figure 98. WLAN basic configuration (1) .................................................................................. 206 Figure 99. WLAN basic configuration (2) .................................................................................. 206 Figure 100. WLAN-based ACL configuration ............................................................................ 210 Figure 101. Root service management (1) ............................................................................... 213 Figure 102. Root service management (2) ............................................................................... 213 Figure 103. MCS by WLAN: 802.11a/n/ac Configuration Management window ....................... 216 Figure 104. MCS by WLAN: 802.11b/g/n Configuration Management window ......................... 216 Figure 105. Local Switching Configuration Window of WLAN .................................................. 218 Figure 106. Split ACL Configuration Window of WLAN Allocated to AP .................................... 219 Figure 107. VLAN/ACL/Pre-Auth.ACL Configuration Window of WLAN Allocated to AP .......... 219 Figure 108. Initialization of WLAN security function .................................................................. 221 Figure 109. WPA/WPA2 PSK configuration .............................................................................. 224 Figure 110. WPA/WPA2 802.1x Configuration (1) ..................................................................... 227 Figure 111. WPA/WPA2 802.1x Configuration (2) ..................................................................... 228 Figure 112. Static WEP configuration ....................................................................................... 230
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 17 of 628 Figure 113. Dynamic WEP Configuration Window ....................................................................233 Figure 114. DHCP server configuration .....................................................................................234 Figure 115. DHCP Pool (1) .......................................................................................................240 Figure 116. DHCP Pool (2) .......................................................................................................240 Figure 117. DHCP Relay ...........................................................................................................242 Figure 118. DHCP Proxy ...........................................................................................................243 Figure 119. Option 82 configuration (1) .....................................................................................245 Figure 120. Option 82 configuration (2) ....................................................................................245 Figure 121. Primary/Secondary server configuration (1) ...........................................................247 Figure 122. Primary/Secondary server configuration (2) ...........................................................247 Figure 123. Primary/Secondary server configuration (3) ...........................................................248 Figure 124. Radio service configuration ....................................................................................250 Figure 125. 802.11a/b/g/n radio (1) ...........................................................................................254 Figure 126. 802.11a/b/g/n radio (2) ...........................................................................................255 Figure 127. QoS configuration of a wireless terminal (1) ..........................................................260 Figure 128. QoS configuration of a wireless terminal (2) ..........................................................260 Figure 129. QoS configuration of AP (wireless section) ............................................................264 Figure 130. Configuring QoS profile of a specific terminal ........................................................266 Figure 131. Configuring voice optimization ...............................................................................267 Figure 132. Configuring 802.11h ...............................................................................................269 Figure 133. Country code window (1) .......................................................................................272 Figure 134. Country code window (2) .......................................................................................273 Figure 135. Information viewing window ...................................................................................275 Figure 136. Handover window ..................................................................................................278 Figure 137. SIP ALG configuration window ...............................................................................280 Figure 138. Admission control configuration of 802.11a/n .........................................................282 Figure 139. 802.11a/n Admission Control Configuration Window .............................................284 Figure 140. RRM configuration window ....................................................................................286 Figure 141. DPC settings ..........................................................................................................287 Figure 142. DCS settings ..........................................................................................................290 Figure 143. CHDC settings .......................................................................................................293 Figure 144. Spectrum Analysis Data .........................................................................................304 Figure 145. Controlling Usage per User ....................................................................................308 Figure 146. Clustering window ..................................................................................................314 Figure 147. Clustering addition window ....................................................................................314 Figure 148. Configuring connection limitation per radio ............................................................316 Figure 149. Configuring connection limitation per WLAN ..........................................................317 Figure 150. Voice statistics .......................................................................................................319 Figure 151. Detecting WLAN-based communication failure ......................................................320
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 18 of 628 Figure 152. VoIP Stations Retrieval Screen .............................................................................. 324 Figure 153. Active Call Retrieval Screen .................................................................................. 325 Figure 154. Complete Calls Retrieval Screen ........................................................................... 325 Figure 155. 802.11a/n Admission Control Configuration Window ............................................. 330 Figure 156. Band Steering Function On/Off and Band Setting ................................................. 333 Figure 157. Configuring Load Balancing Function .................................................................... 335 Figure 158. RADIUS server configuration ................................................................................ 343 Figure 159. RADIUS Server MAC Authentication Configuration Window ................................. 346 Figure 160. Wireless Intrusion General Configuration Window ................................................ 351 Figure 161. Managed Rule Configuration Window ................................................................... 353 Figure 162. Managed Addition Window .................................................................................... 353 Figure 163. Unmanaged Rule Configuration Window ............................................................... 355 Figure 164. Unmanaged Rule Addition Window ....................................................................... 355 Figure 165. List Window to Manually Change Classification .................................................... 357 Figure 166. Classification Change Window in AP Detail Screen .............................................. 357 Figure 167. List Window to Manually Remove.......................................................................... 358 Figure 168. Manual Remove Change Window in AP Detail Screen ......................................... 359 Figure 169. Configuration Window for Unauthorized AP Detection Option ............................... 360 Figure 170. Configuration Window for Unauthorized Station Detection Option......................... 362 Figure 171. Configuration Window for Channel Validation........................................................ 363 Figure 172. AP blacklist Configuration Window ........................................................................ 365 Figure 173. Managed AP Window ............................................................................................ 365 Figure 174. Station blacklist Search/Configuration Window ..................................................... 366 Figure 175. Managed Station Search Window .......................................................................... 366 Figure 176. Managed SSID Window ........................................................................................ 367 Figure 177. Managed/Neighbor AP Search/Configuration Window .......................................... 368 Figure 178. Managed/Neighbor AP List Addition Window......................................................... 368 Figure 179. Station Allowed Limit Configuration Window .......................................................... 369 Figure 180. Wireless Intrusion Containment General Configuration Window ........................... 370 Figure 181. List Window for Blocking AP .................................................................................. 371 Figure 182. List Window for Blocking Station ............................................................................ 372 Figure 183. Automatic Blocking Configuration Window ............................................................ 373 Figure 184. Guest User Configuration Window ........................................................................ 375 Figure 185. Guest User List Window ........................................................................................ 376 Figure 186. Guest Auth Configuration Window ......................................................................... 376 Figure 187. Access List Addition Window ................................................................................. 377 Figure 188. Access List Entry Addition Window ........................................................................ 377 Figure 189. WLAN Guest Configuration Window ...................................................................... 380 Figure 190. WLAN Web Policy Configuration Window ............................................................. 380
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 19 of 628 Figure 191. Web Auth Configuration Window ...........................................................................380 Figure 192. WLAN Guest Configuration Window ......................................................................383 Figure 193. WLAN Layer 2 Security Configuration Window ......................................................383 Figure 194. WLAN Web Policy Configuration Window ..............................................................384 Figure 195. Web Auth Configuration Window ...........................................................................384 Figure 196. WLAN Guest Configuration Window ......................................................................386 Figure 197. Web Pass-through Configuration Window .............................................................386 Figure 198. WLAN Guest Configuration Window ......................................................................388 Figure 199. One Time Redirection Configuration Window ........................................................388 Figure 200. Firewall configuration (1) ........................................................................................390 Figure 201. Firewall configuration (2) ........................................................................................391 Figure 202. Access-list configuration ........................................................................................392 Figure 203. NAT configuration (1) .............................................................................................394 Figure 204. NAT configuration (2) .............................................................................................395 Figure 205. MAC configuration .................................................................................................397 Figure 206. MAC entry configuration window(1) .......................................................................397 Figure 207. MAC entry configuration(2) ....................................................................................398 Figure 208. MAC entry configuration(3) ....................................................................................398 Figure 209. TTACACS+ Server Configuration Window .............................................................401 Figure 210. Operator Account Authentication Type Configuration Window ...............................402 Figure 211. Role Profile Configuration ......................................................................................404 Figure 212. Role Profile Add Configuration ...............................................................................404 Figure 213. Derivation Profile Configuration .............................................................................405 Figure 214. Derivation Profile Add Configuration ......................................................................405 Figure 215. Derivation Profile Configuration .............................................................................406 Figure 216. Derivation Profile Add Configuration ......................................................................406 Figure 217. Wlan Derivation Profile Configuration ....................................................................407 Figure 218. Acl Profile Configuration .........................................................................................408 Figure 219. Acl Profile Add Configuration .................................................................................409 Figure 220. Acl Profile Edit Configuration .................................................................................409 Figure 221. Remote Ap Group-Alc Profile Configuration ...........................................................410 Figure 222. ACL Configuration Synchronization - All.................................................................412 Figure 223. ACL Configuration Synchronization - Remote Group .............................................412 Figure 224. ACL Configuration Synchronization - Remote AP ..................................................413 Figure 225. External BYOD Server Configuration Window .......................................................415 Figure 226. DNS client ..............................................................................................................420 Figure 227. DNS proxy .............................................................................................................421 Figure 228. NTP client configuration .........................................................................................424 Figure 229. FTP/SFTP server configuration ..............................................................................427
TABLE OF CONTENTS ©  SAMSUNG Electronics Co., Ltd.  page 20 of 628 Figure 230. Telnet/SSH server configuration ............................................................................ 429 Figure 231. Adding SNMP community ...................................................................................... 432 Figure 232. SNMP trap configuration ....................................................................................... 433 Figure 233. System information ................................................................................................ 437 Figure 234. Reboot (APC) ........................................................................................................ 439 Figure 235. Reboot (AP) ........................................................................................................... 440 Figure 236. Configuring SNMP alarm threshold ....................................................................... 444 Figure 237. Current alarm ........................................................................................................ 446 Figure 238. History ................................................................................................................... 448 Figure 239. Configuring alarm filter and level ........................................................................... 450 Figure 240. SLM License Search and Configuration Window .................................................. 455 Figure 241. Old License Installation Check Window ................................................................. 458 Figure 242. Syslog window ....................................................................................................... 460 Figure 243. Package upgrade (APC) ........................................................................................ 463 Figure 244. DB Backup/Restore ............................................................................................... 465 Figure 245. File management window ...................................................................................... 477
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 21 of 628 CHAPTER 1. Access Point Controller System Overview      1.1  APC Overview The Samsung Access Pointer Controller (APC) comprehensively manages the user information and traffics while managing an Access Point (AP), i.e. a device that provides wireless connection service for a user terminal in a Wi-Fi environment. There are two types depending on the AP capacity; WEC8500 and WEC8050. It comprehensively manages all the APs and provides services in a wireless LAN environment. Because AP and APC are connected in tunneling, all the user traffics are exchanged and processed.    The APC is typically installed at a position where it can be connected to a backbone switch, core switch or router in a network of enterprise environment and it controls a wireless LAN AP and provides the functions for Wireless LAN (WLAN) services such as handover and QoS, security/authentication, etc. The Samsung WEC8500 provides its services up to 500 APs. It can provide its services up to 10,000 connected user devices. Meanwhile, the WEC8050 can accommodate maximum 75 APs and provides the service to maximum 1500 user devices.  The APC provides a WLAN network environment through AP management and also provides various communication services required by enterprise customers in a wireless environment by interoperating with other enterprise solutions. It provides Wireless Enterprise (W-EP) solution in an enterprise environment by making the collaboration applications such as telephone, message, or communicator, etc., that has been used in a legacy wire environment, be able to be used in a wireless terminal such as smart phone, tablet PC, or notebook.
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 22 of 628  Figure 1. System Structure for Wireless Enterprise Solution  The Samsung W-EP solution, as shown in figure, comprehensively includes various enterprise applications which are provided by wire/wireless infrastructure products and wireless terminals. The WLAN network, a wireless infrastructure solution that provides mobility in an enterprise environment, consists of W-EP wireless LAN Access Point (AP), W-EP AP Controller (APC), and Wireless Enterprise WLAN Manager (WEM).   The Samsung APC and W-EP wireless LAN AP are core devices that provide various services such as user authentication, wireless management, voice and data service, etc. in the 802.11-based Wi-Fi environment. The WEM provides convenient configuration environment, various statistics, and event information to an operator.    Term   In this manual, the WEC8500/WEC8050 and APC commonly represent Samsung AP Controller. In addition, the AP means Samsung W-EP wireless LAN AP.  Enterprise   Mobile Server IP-PBX Groupware (Mail, PIMS) FFA/ERP SFA/CRM etc. Call Manager Legacy System Push Mail/Payment Mobile device management, etc.   WLAN Network APC (WEC8500) Wireless Terminal Mail, UC Service based on Android W-EP AP
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 23 of 628 1.2  Network Configuration The network configuration of Samsung W-EP solution that includes APC is shown below.  Figure 2. W-EP Network Configuration  IP-PBX As an enterprise call manager, it is a switch required to provide the Fixed Mobile Convergence (FMC) function to a wireless terminal (optional).  APC (WEC8500/WEC8050) The APC manages all the W-EP wireless LAN APs installed in an enterprise communication environment and it also manages user information and traffics.   Because the W-EP wireless LAN network configuration uses a centralized structure where all the wireless user traffics are in tunneling through the APC, the APC is one of the most important elements related to traffic management and throughput in the W-EP environment.   An APC is typically installed at a position where it can be connected to a backbone switch, core switch or router in a network. It controls the W-EP wireless LAN AP and provides handover, QoS, and security/authentication functions.  WEM In the W-EP wireless LAN environment, various services are provided through a complex network configuration. As many users are involved, its management is complex and difficult. A normal network administrator can hardly handle any problematic issue as well as a normal management task. The WEM is a Network Management System (NMS) that efficiently manages this kind of W-EP wireless LAN network and service environment.   It manages a WLAN network, retrieves and configures the status of APC or W-EP wireless LAN AP. W-EP AP IP-PBX   WEC8050/WEC8500 WEM Router Internet … … Ethernet Switch FMC client
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 24 of 628 W-EP AP (W-EP Wireless LAN AP) The W-EP wireless LAN AP is a device that provides wireless connection service to a user terminal. It should be installed by considering the service area or region that will be provided in an enterprise environment. Typically, the number of W-EP wireless LAN APs is determined by considering the size of installation area and the number of users to secure service coverage.  Ethernet Switch Typically, because an AP is installed in a user area, use a Power over Ethernet (PoE) switch that does not use a power line for the beauties of environment, etc. Install the W-EP wireless LAN APs by considering current consumption and the power capacity PoE switch. In addition, because power drop may occur if the distance between the switch and W-EP wireless LAN AP, the relationship between distance and power must be considered. Typically, the distance between these two must be 100 m or less in order to avoid power drop.  Wireless terminal/FMC Client Terminal that provides the 802.11a/b/g/n interface such as smart phone, tablet PC, or notebook computer, etc. In an Android smart phone, an enterprise Voice over IP (VoIP) application equipped with the Samsung voice engine is called a FMC client (The FMC client is an option).  Wireless additional service In the W-EP environment, various application services are required as well as basic wireless connection services.   The Wireless Intrusion Prevention System (WIPS) provides a security service that is one of the most important elements in an enterprise environment. The WIPS can seamlessly receive wireless connection service through the security services such as unauthorized terminal, unauthorized AP, or ad hoc connection blocking, etc. Location service that manages the location of a terminal in a wireless environment is also an application service required in an enterprise environment. With this, it is possible to manage the location of an effective user or an unauthorized user.  IP application service The IP application servers required in an existing wire network including Dynamic Host Configuration Protocol (DHCP) server, DNS server, web server, or RADIUS authentication server are also used in the W-EP environment. Especially, the DHCP server and RADIUS authentication server play a critical role in the wireless environment.
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 25 of 628 WIPS Solution It monitors the properness of the implementation of the wireless network infrastructure by detecting penetration via unauthorized wireless equipment installed in the internal network, the detoured gateway segment of the internal officers and employees who illegally connect to the commercial WLAN service, etc. and provides the wireless network invasion detection which implements the safe and effective wireless network environment by detecting security vulnerabilities.
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 26 of 628 1.3  APC Configuration and Functions 1.3.1  WEC8500 Configuration and Functions The Configuration and the purpose of each item of WEC8500 are as follows:  Figure 3. WEC8500 Interface-Front/Back  System LED System LED indicates the various statuses of system. Each LED displays the following information.    Figure 4. System LED Configuration  LED Status Description SYS Green The system is operating normally Orange The system is now booting Red Preparing the system for booting FAN (fan module) Green The installed FAN module is operating normally Orange The system is now booting Red Fan module fault has occurred PS1 (power module 1) Green Normal operation of installed power module 1 Red Power is turned off or a fault occurred while the power module 1 is installed. Off Power module 1 is not installed. PS2 (power Green Normal operation of installed power module 2 Power Module Ground hole System LED Console port Management port 1G Optic port 10G Optic port USB port
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 27 of 628 LED Status Description module 2) Red Power is turned off or a fault occurred while the power module 2 is installed. Off Power module 2 is not installed.  Console port (RS232C) A console port is used to check the operational status of WEC8500 or for input through the CLI. Its basic requirements are as follows:  Baud rate: 115200 bps  Character size: 8 characters  Parity: None  Stop bit: 1, Data bit: 8  Flow control: None  Management port (1 GE UTP) The WEC8500 provides a 10/100/1000BASE-T port (RJ-45) for management purpose.   It is working in 10/100 Mbps half duplex/full duplex mode or in 1000 Mbps full duplex mode. Because it supports the automatic MDI/MDI-X function, you can use a straight-through cable for all the network connections to a PC, server, switch, or network hub.  Figure 5. Management Port Configuration  Configuration item Status Description LED Green Turned on for link connection Orange Blinking for data exchange Connector - Connector for UTP cable connection  When connecting a cable to the management port, make sure to check if the cable complies with the 10 BASE-T, 100 BASE-TX, or 1000 BASE-T.    Cable type: UTP or STP cable using RJ-45 connector  10 BASE-T: Category 3 or higher  100 BASE-TX: Category 5 or higher  1000 BASE-T: Category 5 or higher (Category 5e or higher is recommended)  Isolate from wireless frequency disturbing waves  Shut down electrical surge LED Connector
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 28 of 628  Separate the electrical wiring of a switch or related devices and the electromagnetic area of network data line  Cable or connector and safe connection without damaged cable sheath    The 1000 BASE-T standard does not support the forced mode.   The auto-negotiation function must be always used for 1000 BASE-T port or trunk connection.  Optic port It provides two 10 GbE Optic ports and eight 1 GbE Optic ports and the operational status of each port is displayed in LED.  Figure 6. Optic port configuration  Configuration item Port/LED Description 10 GE ports LINK/ACT 1, LINK/ACT 2 LINK/ACT status of each port - Turned on for link connection - Blinking for data exchange 10G 1, 10G 2 10 GbE Optic module connector 1 GE port LINK/ACT 1~LINK/ACT 8 LINK/ACT status of each port - Turned on for link connection - Blinking for data exchange 1G 1~1G 8 1 GbE Optic module connector  USB port (Host 2.0) The WEC8500 provides a USB host port that supports the upgrade of WEC8500 operation software.   A typical USB memory stick is supported.  1G port LINK/ACT LED 1G port Connector 10G port Connector  10G port LINK/ACT LED
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 29 of 628 Power module Figure 7. Power module configuration  Configuration item Description Power input connector Connector to connect the power cable to Power switch Switch to turn on/off power AC LED Turned on when there is a normal AC power input. DC LED Turned on when there is a normal DC power output.  Power input connector AC LED Power switch DC LED
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 30 of 628 1.3.2  WEC8050 Configuration and Functions The configuration and the purpose of each item of WEC8050 are as follows:  Figure 8. WEC8050 interface-Front/Back  Status LED This LED indicates the various statuses of system. Each LED displays the following information.    Figure 9. Status LED configuration  LED Status Description SYS Green The system is operating normally Orange The system is now booting Red Preparing the system for booting FAN Green The installed FAN module is operating normally Orange The system is now booting Red Fan fault PWR Green The power is supplied normally Off The power is turned off or not supplied  Status LED Console Port Ethernet Port Ground hole Power
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 31 of 628 Console port (RS232C) A console port is provided to check the operational status of WEC8050 or for input through the CLI.   Its basic requirements are as follows:  Default baud rate: 115200 bps  Character size: 8 Characters  Parity: None  Stop bit: 1, Data bit: 8  Flow control: None  Ethernet port It has 4 10/100/1000 Base-T ports.  Figure 10. Ethernet Port Configurations  LED Status Description ACT Orange blinking Blinking while data exchanging Off No data exchanging LINK Green Link connection display Off No link connection  LINK LED ACT LED
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 32 of 628 1.4  APC Application Configuration and Service Scenario 1.4.1  Basic Configuration To provide wireless connection service using a wireless LAN in the W-EP environment, the W-EP wireless LAN AP that helps a terminal connect to the network through wireless and an APC that controls the terminal are basically required. Especially, the role of APC is critical to guarantee QoS of various services and provide high level of security functions in an Enterprise communication environment. As various elements are required in the W-EP environment, it is necessary to intuitively or organically manage each element via WEM.    In addition, the IP application servers including authentication server, DHCP server, or DNS server which is a basic network configuration element in a wire enterprise environment are also interoperated to provide more convenient and various mobile services to users. One outstanding example is the FMC service that provides enterprise level VoIP in a wireless LAN. With this, the wire/wireless integrated voice service can be provided.  An example of service configuration diagram using the W-EP wireless LAN system is shown in the below figure. The configuration diagram is based on Samsung APC (WEC8500).  Figure 11. Basic Configuration of W-EP Wireless LAN System  PRI Firewall Internet Backbone switch SBC PSTN IP-PBX Media G/W APC WIPS Loc server WEM AAA server DHCP W-EP AP PoE switch Access switch PoE switch Access switch W-EP AP
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 33 of 628 The basic W-EP wireless LAN network configuration is a centralized structure where all the wireless user traffics go through tunneling between APC and W-EP wireless LAN AP.   Therefore, the network information such as subnet information allocated to a wireless user depends on the configuration of backbone network where the APC is connected.    This provides the following advantages during network configuration and setup.    Installing the APC is just adding it to a legacy data center or backbone network. Therefore, the possibility of physical change of core network can be reduced.   In addition, separate design of wire/wireless network is easy using the APC as a boundary.    No dramatic network change is required to install the W-EP wireless LAN AP.   An AP installed in a user area is located in various local network environments in a wide region. Although it is unavoidable to install or expand a PoE switch, the modification of local network where wire users are already configured can be minimized.    Because the APC relays all the user traffics, it can restrict a wireless attacker’s effects and provide differentiated service for each user.  1.4.2  Configuration of Multiple APC for Redundancy The APC provides the redundancy function to guarantee QoS for various services and provide service stability in the W-EP environment.    An example of service configuration diagram for redundancy is shown in the below figure.  Figure 12. Example of W-EP Wireless LAN System Configuration for Redundancy PRI Firewall Internet  Backbone switch SBC PSTN IP-PBX Media G/W APC WIPS Loc server WEM AAA server DHCP PoE switch Access switch PoE switch Access switch IP-PBX W-EP AP W-EP AP
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 34 of 628 In this configuration, several APC s are used to minimize service disruption caused by a disconnected APC and to enhance service sustainability. Basically, two or more APC s must be installed in the same site for APC redundancy. The redundancy configuration includes active-active configuration, active-standby configuration, and many-to-one configuration. An operator can select a configuration based on the number of available APC s and redundancy level.  1.4.3  Clustering Configuration using Multiple APC (WEC8500) The W-EP environment has various area sizes, user density and number of users. If only a single APC is required for service and management, the complexity of network configuration or management is not high. However, if the capacity of a single APC is not sufficient, multiple APC s must be installed for service. The WEC8500 is a Samsung APC model providing the clustering environment. To set up a wireless LAN network in an environment where multiple WEC8500s are installed, the integrated management system and user service must be provided through clustering configuration between the WEC8500s. This allows inter APC handover.   The WEC8500s configured in a cluster provides a service just like a single WEC8500 through periodic information exchange.       Inter APC handover     The inter APC handover is a handover between APCs. A clustering group is used to provide this function and this clustering group means a virtual area.       Maximum 12 WEC8500s can be bound to a single group. An APC in a group cannot be added to another group.       It provides layer 3 handover and the handover is supported when a terminal moves to an APC which have different subnets. A serving APC is called as an anchor APC and a target APC is called as a foreign APC. The control path and also the tunnel for data traffic between APCs provide security using IPSec.       The inter APC handover provides this function both in the standard Wi-Fi handover and Samsung’s unique AirMove method.
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 35 of 628 1.4.3.1  Configuration of Distributed Clustering Service The configuration of distributed clustering is to install each WEC8500 in a building or a local site according to its capacity. This option can be used when there is no integrated backbone configuration in a site or networks are separated for each building. It is suitable for a site where several buildings are apart from each other.  An example of service configuration diagram is shown in the below figure.  Figure 13. Example of W-EP Wireless LAN System Configuration for Distributed Clustering Service  PRI Firewall Internet Backbone switch SBC PSTN IP-PBX Media G/W Loc server WEM AAA   server DHCP PoE switch Access switch PoE switch Access switch IP-PBX WEC8500 (building-2) APC Clustering W-EP AP W-EP AP WEC8500   (building-1)
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 36 of 628 1.4.3.2  Configuration of Centralized Clustering Service In the centralized cluster configuration, all the WEC8500s in a site are installed in the center. This is suitable when all the networks in a site are configured around the backbone.   This option is suitable for a site where several buildings are close to each other or a large building where a seamless handover service is required using one or more WEC8500s.   Better performance can be obtained if there is a single backbone network and it is preferable in terms of installation or maintenance because its service configuration is simple.    An example of service configuration diagram is shown in the below figure.  Figure 14. Example of W-EP Wireless LAN System Configuration for Centralized Clustering Service  WEM AAA   server DHCP PRI Firewall Internet Backbone switch SBC PSTN IP-PBX Media G/W PoE switch  Access switch  PoE switch  Access switch  IP-PBX APC Clustering Loc server Building-1 Building-2 W-EP AP W-EP AP WEC8500  (building-1) WEC8500 (building-2)
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 37 of 628 1.4.4  Configuration of Multiple Sites Consisting of Headquarter and Branches The W-EP wireless LAN network environment usually consists of one headquarter and several branches.   In this case, there are two types of network configuration.    Hierarchical type: A APC is installed in a branch as well as headquarter.  Branch AP type: A APC is installed only in a headquarter and only a W-EP wireless LAN AP is installed in a branch.  In the hierarchical type, it is advantageous that each branch can use each different service policy. However, the management in headquarter is complex and many low-capacity APCs must be installed, so the branch AP type is commonly used.   The branch AP type has the same structure as a basic W-EP wireless LAN configuration.   A single difference is that a W-EP wireless LAN AP installed in a branch is located at a remote place. The APC in headquarter provides a wireless LAN service in the headquarter building and also provides a wireless LAN service to a remote W-EP wireless LAN AP installed in a branch. As the APC in headquarter manages all the W-EP wireless LAN APs using the same policy, it is easy to use and cost-effective.    An example of service configuration diagram for the branch AP type is shown in the below figure.  Figure 15. Example of W-EP Wireless LAN System Configuration for Multiple Sites consisting of Headquarter and Branches PRI Firewall Internet Backbone switch   SBC PSTN IP-PBX Media G/W APC  WIPS Loc Server WEM AAA server DHCP Router Branch PoE switch   W-EP AP HQ PoE switch  Access switch  PoE switch  Access switch  W-EP AP W-EP AP
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 38 of 628 If user traffics are concentrated on a single centralized APC when there are many branches or they are far from headquarter, performance may be deteriorated due to the time delay of packet transmission, etc. Therefore, use different operation schemes according to the location of W-EP wireless LAN AP in the configuration of headquarter and branches. In other words, the local W-EP wireless LAN AP in a headquarter does traffic tunneling to an APC and the branch AP installed in a branch switches a user traffic directly to a destination address without tunneling to the APC. Even at this time, the APC in headquarter manages all the W-EP wireless LAN APs and users.
CHAPTER 1. Access Point Controller System Overview ©  SAMSUNG Electronics Co., Ltd.  page 39 of 628 1.5  NAT Configuration between AP and APC The APC system provides the same services even when the APC or AP is in a NAT environment. If the APC system is in a NAT environment and obtaining a public IP address is difficult, the APC can be configured to use a private IP address by enabling port mapping on the existing NAT equipment, so that it can provide services to APs on the public IP network and APs existing under other NAT networks.  Using this feature requires that the NAT equipment be applied with the following port settings:  Service TCP Port UDP Port Description General 20, 21 - FTP Server 22 - Secure Shell 23 - Telnet 80, 443 - HTTP Web Server 123 123 NTP AP-APC Connection - 5246, 5247 CAPWAP  An example of service configuration diagram for the NAT environment is illustrated below.  Figure 16. AP-APC NAT Environment Configuration Diagram  IP-PBX WEC8050/ WEC8500 WEM Router Internet … … FMC Client Router … … FMC Client W-EP AP W-EP AP
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 40 of 628 CHAPTER 2. Basic System Configuration      In this chapter, the basic system configuration using web and Command Line Interface (CLI) is introduced and how to use CLI and Web UI is described.  2.1  Basic System Configuration 2.1.1  CLI Connection Connecting to APC using CLI is as follows:  Direct connection to the system console port  Telnet or SSH connection through an Ethernet port  When the booting of APC is completed, log into the system as follows:  1)    For the first connection, log in using ID: ‘samsung’ and Password: ‘samsung’.  USERNAME : samsung PASSWORD : samsung  THIS IS YOUR FIRST LOGIN AFTER USER ACCOUNT HAS BEEN CREATED.  YOU MUST CHANGE YOUR PASSWORD.   ENTER LOGIN PASSWORD    : samsung  ENTER NEW PASSWORD       : ********  CONFIRM NEW PASSWORD    : ********  PASSWORD SUCCESSFULLY CHANGED WEC8500 #  2)    After the first login, you must change the password. Use the changed password for the next login.     The default ID of APC is set to ‘samsung’ that has an administrator privilege.
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 41 of 628 2.1.2  Managing Operator Account An operator who has an administrator privilege (level 1) can create or delete a new operator account. When creating an account, specify the account’s privilege level (level 1-4).  To set up operator account related functions, go to configure mode by executing the following command.  WEC8500# configure terminal WEC8500/configure #  Adding or deleting an account The commands used to create or delete an account are as follows:  mgmt-user [USERNAME] [USERLEVEL] description [DESCRIPTION]: Adds a user  no mgmt-user [USERNAME]: Deletes a user  Parameter Description USERNAME User ID USERLEVEL User level DESCRIPTION Adds user information    WEC8050/configure# mgmt-user test 1 description “test account”   PASSWORD              : *********  CONFIRM PASSWORD    : *********  USER(test) CREATED.  WEC8050/configure# no mgmt-user test user(test) deleted.  Retrieving account information To check user account information use the ‘show mgmt-users’ command.  Changing Password   Use the ‘password’ command to change the password for your account. The ‘password’ command must be executed in the highest user mode.  WEC8500# password  CURRENT PASSWORD        : ********  NEW PASSWORD             : ********  CONFIRM NEW PASSWORD   : ********
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 42 of 628 2.1.3  APC Management Port Configuration To connect to the APC remotely using telnet/SSH or web, it is necessary to set up an IP address to the management port.    Set up the management port as follows:    1)    Go to configure  ‘mgmt0’ interface configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# interface mgmt0  2)    Set up an IP address.  WEC8500/configure/interface mgmt0# ip address 100.100.100.1/24    In case of WEC8050, there is no management (mgmt0) port. After establishing an IP address in one of ports ge1 to ge4 by referring to the contents of 'Port Configuration' and then using the CLI, connect the Ethernet cable to the port.  2.1.4  SNMP Community Configuration To connect to the web server of APC, it is necessary to add Simple Network Management Protocol (SNMP) community through CLI. For more information, see ‘10.1 SNMP Configuration’.  2.1.5  CLI Basic Usage The CLI is a text command based interface used to change or retrieve the system settings. Several users can change the settings at the same time using the CLI of the same system. Because privilege per user is already configured, a user can execute a command allowed by the user’s privilege. Various commands are available for each system function. For more information, see ANNEX ‘CLI Command Structure’.    Command Help The CLI provides a help for all the commands. To see a help for a command and parameter, enter ‘?’. Based on an input character, it shows a help for a command or parameter that can be entered.  Category Description ? Displays the command list and help at the current level Command ? Displays the parameter and help required for a command
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 43 of 628 A usage example is given below.  WEC8500# show ?        80211a                        Display 802.11a network settings       80211bg                      Display 802.11bg network settings       80211h                        Display 802.11h configuration       access-list                  List IP access lists       alarm                         Show alarm information       ap                            Show ap information       ap-debug                     Show ap debug information ...       vap                          Show vap information       version                      Show package version information       vlan                          Display VLAN information       vqm                         Show vqm command       vrrp                      VRRP information       wids                         Wids command       wips                      Wips command       wireless-acl-list        Show wireless-acl-list       wlan                        Show wlan information  WEC8500#  Command automatic completion function The CLI supports the command automatic completion function using the TAB key.   When you press the TAB key after entering the first few characters of a command, the rest characters of the command that starts with the entered characters is automatically entered.   If there are several commands that start with the entered characters, press the TAB key to jump to the next command. The below example shows the ‘show’, ‘save’, or ‘ssh’ command is entered in order by entering ‘s’ and pressing the TAB key.  WEC8500# s  [When the TAB key is pressed]  WEC8500# show  [When the TAB key is pressed once again]  WEC8500# save
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 44 of 628 Command error When a command that is not supported by the system is entered, an error message is displayed.  WEC8500# command-unknown           ^ Error : Command ‘command-unknown’  does not exist  When a parameter that is not supported by a command is entered, an error message according to the situation is displayed.  WEC8500# configure test                        ^ % Invalid parameter (mandatory)  Command modes When the ‘exit’ command is entered, the mode is changed to the upper command mode.
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 45 of 628 2.2  Using Web UI 2.2.1  Web UI Connection To use the WEC, i.e. Web UI of APC system, the IP address of ethernet port must be set up. When connecting to the IP address of APC ethernet port in a web browser, the below login window is displayed. Log in using a default connection account ‘samsung’. After the first login, you go through the course of changing the password. If you have changed the password by connecting to the CLI, you don't have to go through the course of changing the password.  Figure 17. Web UI Connection Window
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 46 of 628 2.2.2  WEC Main Window The WEC Main window consists of menu bar, sub-menus, and detail windows of each menu.  Figure 18. WEC Main Window  Menu bar The menu bar consists of the following items:  : Provides detail configuration or retrieval function for each item. When you select each item, lower menus in the sub-menus area are displayed.  : Displays a user login ID.  : Logs out from the WEC.  : Saves the current configuration information into the system.  : Refreshes the screen.  Sub-menus This provides the detail menus for Monitor, Configuration, Administration, or Help in the menu bar.  Sub-menu Menu bar
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 47 of 628 2.2.3  Managing Operator Account To add a operator account in Web UI, follow the below procedure.  In the menu bar of <WEC Main window>, select <Administration> and then select <Local Management Users> menu in the sub menu. The subtree shows the <APC> and <AP> menu items. Select <APC>.  You can add or delete a operator account in the WEC.  Figure 19. Operator Account Management Window  1)    To add an account, click the <Add> button.  Figure 20. Operator Account Addition Window  2)    Enter an item according to each parameter description, and click the <Apply> button.  ID: Username to add  PASSWORD: User’s initial password  CONFIRM PASSWORD: Re-enter the initial password  LEVEL: User privilege  1 (Administrator): Administrator privilege that allows to execute all the commands    2 (Operator): Can change system configuration.  3 (Monitor): Can retrieve system status.  4 (Lobby Ambassador): Temporary user
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 48 of 628 2.3  Initial Setup Wizard 2.3.1  Overview The initial setup wizard aims to finish the basic settings by guiding the settings required for the basic WLAN service in order when the APC is installed. It supports only the basic settings to operate the WLAN service and the settings which are additional or are not frequently used are not supported here. They must be made through the general WEC screen.  2.3.2  Connecting Connecting condition If being connected to the WEC as web UI at the factory reset state or while there is no WLAN, the APC system is connected to the Initial Setup Wizard instead of the general WEC screen.  Connecting at the factory reset state The connection at the factory reset state is available through the management port.  1)    Connect the Ethernet cable to the management port and then to the PC. 2)    The default IP address of the management port is 192.168.1.2. After configuring the IP address of the PC fit for the bandwidth, open the web browser. 3)    Enter 192.168.1.2 in the address bar of the browser to access.    In case of WEC8050, there is no management (mgmt0) port. After establishing the IP address in one of ports ge1 to ge4 by using the CLI first on reference to ‘3.1 Port Configuration’, connect the Ethernet cable to the port.  Access while the IP address is set If the IP address of the APC is set, check whether the APC and the PC are networked and then open the web browser before accessing the IP address.
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 49 of 628 2.3.3  How to Use If the access to the APC is made through the web browser, follow the login procedure as shown in ‘2.2.1 Web UI Connection’. After that, you can see the Welcome message by connecting to the wizard.  Figure 21. Initial Setup Wizard Welcome Screen  Press the Next button to move to the configuration step 1 and then start the basic settings. Press the Exit button to close the wizard and then move to the general WEC screen. Start the wizard and then deactivate all wireless communications of the APC system as well as the function of automatically registering the AP. The settings are recovered at the last step of the wizard.  Description on the Screen Figure 22. Move to the setup step of the initial setup wizard
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 50 of 628 : Show the current setup step and the whole setup step by being located on the top of the screen. When you hover the mouse over each number, it shows the name of the step and you can click to move to the step just before or after the current step. : When you press the Next button, you move to the next setup step and when you press the Prev button, you return to the previous setup step. : Press the Exit button to close the wizard and then move to the general WEC screen. In the case, you cannot return back to the initial setup wizard screen. If the APC restarts while the WLAN is not created, you can go to the wizard screen again.  Setup Step The initial setup wizard consists of the following setup steps: After setting up the description desired on each screen, click the Apply button to apply the modifications to the system.  1)    General setup:    Set up basic information including the name, location, contact number, etc. of the system.  Set up the basic country code and the basic environment.  Set up the system time and the time zone. Click the PC TIME button to change the time of the APC by setting to the time of the PC. 2)    Interfaces:  Create interfaces. For more information, refer to '3.2.1 Interface Management' and ‘3.3.1 VLAN’. 3)    Interface groups:  Create interface groups and assign the interfaces created at the previous step.  For more information, refer to ‘3.2.2 Managing Interface Group’ 4)    Default Gateway:    Set up a default gateway of the system. The default gateway is a default path to be used when the APC communicates with another equipment on the TCP/IP network. 5)    WLAN:    Create a WLAN. For more information, refer to ‘5. WLAN Management’.  If the L2 Security Type corresponds to one of the following conditions, move to the step of setting up a RADIUS server. For more information on creating a RADIUS server, refer to ‘8.1.1 External RADIUS Server’. (1) 802.1x (2) Static WEP + 802.1x (3) +WPA2 and enabled 802.1x 6)    DHCP proxy:    When an external DHCP server is used, configure settings of proxy or relay. 7)    DHCP internal server:    Configure a DHCP internal server. For more information, refer to ‘5.4.1 DHCP Server’.
CHAPTER 2. Basic System Configuration ©  SAMSUNG Electronics Co., Ltd.  page 51 of 628 8)    DNS:  The APC gets DNS information from a DNS server and provides the DNS relay function that relays the DNS server and a client. If a DNS server is connected to the APC and a UE connected to the APC configures the DNS server as the APC, the DNS service can be received. 9)    NTP:  If the APC is configured as a NTP client, it receives the Coordinated Universal Time (UTC) information from the configured NTP server and synchronizes the local time. 10) Finish:    Finish the basic settings to configure the WLAN of the APC and then close the wizard.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 52 of 628 CHAPTER 3. Data Network Function      In this chapter, how to set up the data network functions of APC including VLAN, link aggregation, and layer 3 protocol is described.  3.1  Port Configuration The APC port is configured with a physical interface.  Physical interface of 11 ports except WEC8500 console port  Physical interface of 4 ports except WEC8050 console port  3.1.1  Port management   The WEC8500 Management port is used to manage the WEC8500. It does not support VLAN and its interface name is ‘mgmt0’. The 8 ports at the right side of Management port are 10/100/1000 BASE T-ports and their names are GE1-8.     To the right side of the 10/100/1000 BASE T-ports, there are two Gigabit ports, i.e. XE1 and XE2. In case of WEC8050, there is no management (mgmt0) port. After establishing the IP address in one of ports ge1 to ge4 by using the CLI first, connect the Ethernet cable to the port.  Configuration using CLI To configure the port related function, enter into the interface mode by entering the ‘interface [INTERFACE_NAME]’ command in the configure mode. An example of entering into the interface setup mode of the management port is shown below.  WEC8500# configure terminal WEC8500/configure# interface mgmt0 WEC8500/configure/interface mgmt0#
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 53 of 628 The port related CLI commands are as follows:  [auto-nego, speed, duplex] The commands used to configure an auto-nego, speed, and duplex addresses are shown below. To delete the configuration, enter the ‘no’ parameter.  WEC8500/configure/interface ge1# speed-duplex ?   10-full                          Set 10Mb/s full-duplex   10-half                          Set 10Mb/s half-duplex   100-full                         Set 100Mb/s full-duplex   100-half                         Set 100Mb/s half-duplex   1000-full                        Set 1000Mb/s full-duplex   1000-half                        Set 1000Mb/s half-duplex   auto-nego                        Set auto negotiation speed/duplex  [admin status] This is a command that makes the port not working. The ‘no’ parameter is used to restart the port.  shutduown no shutdown  [flow control] This is a command that operates flow control to the port. The ‘no’ parameter is used to stop the flow control.  flowcontrol on no flowcontrol on  [switch port] This is a command that changes the port to the L2 mode. The ‘no’ parameter is used to change it to the L3 mode.  switchport no switchport  [ip address] This is a command that configures a static IP address. To delete the configuration, enter the ‘no’ parameter.  ip address {A.B.C.D/mask length}  no ip address {A.B.C.D} {A.B.C.D}  no ip address {A.B.C.D/mask length}
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 54 of 628 Below is an example of port setting to enter the initial setup wizard upon the initial installation of WEC8050.  WEC8500/configure/interface ge1# no shutdown WEC8500/configure/interface ge1# flowcontrol on WEC8500/configure/interface ge1# no switchport WEC8500/configure/interface ge1# ip address 192.168.1.2/24  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Ports> menu in the sub-menus. Operator can configure the ports.    The Ports initial window is shown below. Operator can check the current status of each port.  Figure 23. Port Management Window    The auto-nego, speed, or duplex can be configured only when the cable type is Copper.   They cannot be configured if the cable type is Optic (The auto-nego should always be enabled whether the cable type is copper or optic).
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 55 of 628 [Port Configuration Change]  1)    In the Ports initial window, click the <INTERFACE NAME> button to go to port configuration change window. 2)    In the port configuration change window, the auto-nego, speed, duplex, admin status, flow control, mtu size, switch port, or ip address, etc. can be configured.  Figure 24. Port Configuration Change Window
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 56 of 628 3.2  Interface Configuration The WEC8500 interface consists of the following physical interface and virtual interface.  Physical interface of 11 ports except console port  1024 virtual interfaces using VLAN  There are two types of WEC8050 interface as shown below; physical interface and virtual interface.  Physical interface of 4 ports except console port  128 virtual interfaces using VLAN  3.2.1  Interface management   The WEC8500 Management port is used to manage the WEC8500. It does not support VLAN and its interface name is ‘mgmt0’. The 8 ports at the right side of Management port are 10/100/1000 BASE T-ports and their names are GE1-8.     To the right side of the 10/100/1000 BASE T-ports, there are two Gigabit ports, i.e. XE1 and XE2.  Configuration using CLI To configure the interface related function, go to the interface mode by entering the ‘interface [INTERFACE_NAME]’ command in the configure mode. An example of entering into the interface mode of the management port is shown below.  WEC8500# configure terminal WEC8500/configure# interface mgmt0 WEC8500/configure/interface mgmt0#  The interface related CLI commands are as follows:  [ip address] This is a command that configures a static IP address. The ‘no’ parameter is used to delete the configuration.  ip address {A.B.C.D/mask length}  no ip address {A.B.C.D} {A.B.C.D}  no ip address {A.B.C.D/mask length}
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 57 of 628 [ip address dhcp] This is a command that configures a dynamic IP address using DHCP. The ‘no’ parameter is used to delete the configuration.  ip address dhcp  no ip address dhcp  [shutdown] This is a command that makes the interface not working. The ‘no’ parameter is used to restart the interface.  shutdown  no shutdown  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Interfaces> menu in the sub-menus. You can configure an interface and VLAN.    The Interface initial window is shown below.  Figure 25. Interfaces Window (1)  [Adding VLAN]  1)    In the Interface initial window, click the <Add> button to go to VLAN creation window.  2)    Enter an INTERFACE NAME and VLAN ID in the VLAN creation window.   The INTERFACE NAME describes a VLAN to create and English characters without a space, numbers, and ‘_’ can be used. The VLAN ID is the number from 1 to 4094 and it specifies a unique VLAN value.   Click the <Apply> button to go to detail configuration screen.  Figure 26. Interfaces Window (2)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 58 of 628 3)    Perform detail configuration in the VLAN detail configuration window.   If you specify PRIMARY DHCP SERVER or SECONDARY DHCP SERVER in the DHCP area, you can specify the configuration of a DHCP server. After configuration, click the <Apply> button to apply it to the system.  Figure 27. Interfaces Window (3)  [Deleting VLAN] In the Interface initial window, click the <Delete> button to delete a selected VLAN.   The select VLAN cannot be deleted if it is being used in the system.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 59 of 628 3.2.2  Managing Interface Group To use WLAN and other services, it is necessary to configure an interface into an interface group.    Configuration using CLI An example of entering into the group configuration mode of ifg_01 interface is shown below.  WEC8500# configure terminal WEC8500/configure# if-group ifg_01  Interface Group related commands are as follows:  [Creating or Deleting Interface group] This command creates an interface group. Use ‘no’ parameter to delete an interface group.  if-group [INTERFACE_GROUP_NAME]  no if-group [INTERFACE_GROUP_NAME]  [Adding or deleting Interface] This command adds an interface to an interface group being configured. Use ‘no’ parameter to delete an interface.  add-if[INTERFACE_IP_ADDRESS]  no add-if[INTERFACE_ IP_ADDRESS]  [Retrieving Interface Group Status] This command retrieves the configuration status of an interface group.  show if-group  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Interfaces Groups> menu in the sub-menus. Click the <Add> or <Delete> button to add or delete an interface group.  Figure 28. Interface Group Window (1)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 60 of 628 Follow the below procedure to add an interface group.  1)    In the Interface group initial window, click the <Add> button.  2)    Enter information on GROUP NAME and GROUP DESCRIPTION and then add or delete an interface to or from an interface group.  Figure 29. Interface Group Window (2)  3)    Click the <Apply> button to apply the configuration.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 61 of 628 3.3  VLAN Configuration 3.3.1  VLAN Configuration using CLI To configure VLAN, go to the VLAN interface mode by executing the following command.  WEC8500# configure terminal WEC8500/configure# interface vlan WEC8500/configure/interface vlan#  The related command is shown below and the range of VLAN ID is 1-4094.  [vlan bridge] This command creates VLAN. The ‘no’ parameter is used to delete VLAN.    vlan [VLAN_ID] bridge 1  no vlan [VLAN_ID] bridge 1  [switchport access vlan] This command set the VLAN mode to the access or hybrid mode. The ‘no’ parameter is used to delete the VLAN configuration.  switchport {access/hybrid} vlan [VLAN_ID]  [switchport mode] This command configures the mode of switch port. The ‘no’ parameter is used to delete the configuration.  switchport mode {access/hybrid/trunk}  no switchport mode  [switchport hybrid allowed vlan] This command configures the mode of switch port to hybrid. The ‘no’ parameter is used to delete the configuration.  switchport hybrid allowed vlan: Configures VLAN to hybrid.  switchport hybrid allowed vlan all: Configures all the allowed VLANs to hybrid.  switchport hybrid allowed vlan none: Stops VLAN data transmission/reception.  switchport hybrid allowed vlan add [VLAN_ID]: Adds VLAN to the hybrid mode.  switchport hybrid allowed vlan remove [VLAN_ID]: Deletes VLAN from the hybrid mode.  no switchport hybrid vlan: Deletes all the hybrid settings.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 62 of 628 [switchport trunk allowed vlan] This command configures the mode of switch port to trunk. The ‘no’ parameter is used to delete the configuration.  switchport trunk allowed vlan: Configure VLAN to the trunk mode.  switchport trunk allowed vlan all: Configure all the VLANs to the trunk mode.  switchport trunk allowed vlan none: Stops VLAN data transmission/reception.  switchport trunk allowed vlan add [VLAN_ID]: Adds VLAN to the trunk mode.  switchport trunk allowed vlan remove [VLAN_ID]: Removes VLAN with the trunk mode.  no switchport trunk vlan: Removes all the trunk settings.  [show vlan] This command retrieves VLAN configuration status.  show vlan [VLAN_ID]: Displays specific VLAN information.    show vlan all bridge 1: Displays all the VLAN information.  show vlan brief: Displays all the VLAN information briefly.  show vlan dynamic bridge 1: Displays dynamic VLAN information.  show vlan static bridge 1: Displays static VLAN information.  [Typical configuration procedure] The typical configuration procedure of VLAN is as follows:  WEC8500# configure terminal WEC8500/configure# bridge 1 protocol mstp WEC8500/configure # vlan database WEC8500/configure/vlan#vlan {2-4094} bridge 1 WEC8500/configure/vlan# exit WEC8500/configure# interface vlan1.{2-4094}  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Interfaces> menu in the sub-menus.    For more information about configuration procedure, see ‘3.2.1 Interface Management’.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 63 of 628 3.3.2  Bridge To set up bridge related functions, go to configure mode by executing the following command  WEC8500# configure terminal  The bridge related commands are as follows:  [bridge address] This command configures a bridge address. The ‘no’ parameter is used to clear the configuration.  bridge 1 address [MAC] [forward/discard] [IFNAME]  no bridge 1 address [MAC] [forward/discard] [IFNAME]  Parameter Description MAC MAC address. Entered in the format of HHHH.HHHH.HHHH. forward/discard - forward: Configures forward matching frame. - discard: Configures discard matching frame. IFNAME Interface name of a bridge.  [bridge ageing time] This command configures the age-out time of a bridge. The ‘no’ parameter is used to clear the configuration.  bridge-group 1 ageing-time [AGEINGTIME]  no bridge-group 1 ageing-time  Parameter Description AGEINGTIME age-out time (range: 10-1000000 s)  [bridge protocol] This command creates a bridge in one of the IEEE 802.1Q Spanning-Tree Protocol (STP), IEEE802.1s multiple STP (MSTP), or IEEE 802.1W Rapid STP (RSTP) protocol.  bridge 1 protocol [PROTOCOL]  no bridge 1 protocol  Parameter Description PROTOCOL Protocol to configure (ieee/mstp/rstp) - ieee: STP - mstp: MSTP
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 64 of 628 Parameter Description - rstp: RSTP  [clear mac address-table] This command deletes the filtering database of a default bridge.  clear mac address-table [OPTION] [KIND] [WORD]  Parameter Description OPTION Filtering database option (static/multicast) - static: Filtering database item that is configured as static - multicast: Filtering database item that is automatically configured by the multicast protocol KIND Filtering database type (address/vlan/interface) - address: Filtering database using a MAC address - vlan: Filtering database using the VLAN information. - interface: Filtering database using the interface information WORD Option  [clear mac address-table dynamic] This command deletes bridge operation among the filtering database of a default bridge.  clear mac address-table dynamic [KIND] [WORD]  Parameter Description KIND Filtering database type (address/vlan/interface) - address: Filtering database using a MAC address - vlan: Filtering database using the VLAN information. - interface: Filtering database using the interface information WORD Option  [clear mac address-table dynamic bridge] This command deletes the filtering database of bridge operation.  clear mac address-table dynamic bridge [BRIDGE_NAME]  clear mac address-table dynamic [address/interface/vlan] [WORD] bridge [NAME]  Parameter Description KIND Filtering database type (address/vlan/interface) - address: Filtering database using a MAC address - vlan: Filtering database using the VLAN information. - interface: Filtering database using the interface information WORD Option BRIDGE_NAME Bridge name
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 65 of 628 [show bridge] This command retrieves bridge information.  show bridge  [show interface switchport bridge] This command retrieves the bridge information, i.e. the layer 2 protocol characteristic information of the current VLAN, of a switch port.  show interface switchport bridge [BRIDGE_NAME]  Parameter Description BRIDGE_NAME Bridge name  [switchport] This command configures a switch port, i.e. the layer 2 protocol characteristic information of the current VLAN. The ‘no’ parameter is used for default configuration. Go to interface mode and then execute the command.  switchport  no switchport
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 66 of 628 3.3.3  Spanning Tree Configuration using CLI To set up spanning tree related functions, go to configure mode by executing the following command.  WEC8500# configure terminal  The related command is as follows.  [bridge forward-time] This command configures the forward time of a bridge. The ‘no’ parameter is used for default configuration.  bridge 1 forward-time [FORWARD_DELAY]  no bridge 1 forward-time  Parameter Description FORWARD_DELAY Forward time delay (range: 4-30 s, default: 15)  [bridge hello-time] This command configures the hello time of a bridge. The time required when a bridged LAN is changed to Bridge Protocol Data Units (BPDUs) is called as hello-time. The ‘no’ parameter is used for default configuration.  bridge 1 hello-time [HELLOTIME]  no bridge 1 hello-time  Parameter Description HELLOTIME Hello BPDU interval (range: 1-10 s)  [bridge instance priority] This command configures the bridge priority of MST instance. The ‘no’ parameter is used to delete priority.  bridge 1 instance [INSTANCE_ID] priority [BRIDGE_PRIORITY]  no bridge 1 instance [INSTANCE_ID]  Parameter Description INSTANCE_ID Instance ID (range: 1-64) BRIDGE_PRIORITY Bridge priority (range: 0-61440)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 67 of 628 [bridge max-age] This command configures the max-age of a bridge. The ‘no’ parameter is used for default configuration.  bridge 1 max-age [MAXAGE]  no bridge 1 max-age  Parameter Description MAXAGE Configures a maximum time (range: 6-40 s)  [bridge max-hops] This command configures the maximum allowed number of hops of a Bridge Protocol Data Unit (BPDU) bridge in the MST area.   The ‘no’ parameter is used for default configuration.  bridge 1 max-hops [HOP_COUNT]  no bridge 1 max-hops  Parameter Description HOP_COUNT Maximum allowed number of hops  [bridge multiple-spanning-tree enable] This command configures a MSTP bridge. The ‘no’ parameter is used to clear the configuration.  bridge 1 multiple-spanning-tree enable  no bridge 1 multiple-spanning-tree enable  [bridge rapid-spanning-tree enable] This command configures a RSTP bridge. The ‘no’ parameter is used to clear the configuration.  bridge 1 rapid-spanning-tree enable    no bridge 1 rapid-spanning-tree enable(bridge-forward)  [bridge spanning-tree enable] This command configures a STP bridge. The ‘no’ parameter is used to clear the configuration.  bridge 1 spanning-tree enable    no bridge 1 spanning-tree enable(bridge-forward)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 68 of 628 [bridge priority] This command configures the priority of a bridge. The ‘no’ parameter is used to delete a priority.  bridge 1 priority [PRIORITY]  no bridge 1 priority  Parameter Description PRIORITY Bridge priority (range: 0-61440)  [bridge shutdown] This command clears bridge settings. The ‘no’ parameter is used to restart a bridge.  bridge shutdown [1-32]  no bridge shutdown [1-32]  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <MSTP> menu in the sub-menus.    The sub-menus of the MSTP menu are as follows:  Config: Configures the spanning tree.  Instance: Manages the MSTP VLAN instance.  Port: Manages the MSTP port.  [Configuring Spanning Tree] After selecting the <Config> menu, enter configuration information and then click the <Apply> button.  Figure 30. Spanning Tree Configuration Window (1)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 69 of 628 [Managing the MSTP VLAN instance] When you select the <Instance> menu, the configured MSTP VLAN Instance list is displayed on the window. Click the <Add> or <Delete> button to add or delete an instance.  Figure 31. Spanning Tree Configuration Window (2)  [Managing MSTP Port] When you select the <Port> menu, the configured MSTP Port list is displayed on the window. Click the <Add> or <Delete> button to add or delete a port.  Figure 32. Spanning Tree Configuration Window (3)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 70 of 628 3.4  Layer 3 Protocol Configuration This provides the IP address configuration and static/dynamic routing configuration of an interface. The APC provides the Open Shortest Path First (OSPF) routing protocol.  3.4.1  IP Address Configuration The procedure for IP address configuration is given below.  1)    Go to configure  interface configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# interface ge2  2)    Set up an IP address.  WEC8500/configure/interface ge2# ip address 100.100.100.1/24  3)    Enable the interface.    WEC8500/configure/interface ge2# no shutdown  3.4.2  Static Routing Configuration Configuration using CLI 1)    Go to configure mode of CLI.  WEC8500# configure terminal  2)    Configure static routing.  WEC8500/configure# ip route 10.2.3.0/24 30.30.30.2
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 71 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <Static Route> menu in the sub-menus.   The configured static route list is displayed on the window. When you click the <Add> or <Delete> button, you can add or delete a static routing entry.  Figure 33. Static Routing Configuration Window  After adding or deleting an entry, check if the information is reflected to the list in the Static Route window. If the added information is not displayed, it means the added routing information is not enabled. If the operational status of an interface that will be used as a routing result is not UP, check the interface status through CLI or Web UI.   Because only enabled routing entries are listed in the Web UI, you cannot remove a disabled routing entry.  3.4.3  IP Multicast Routing Configuration 1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Enable or disable multicast-routing.  ip multicast-routing  no multicast-routing  3)    Check multicast-routing using the ‘show running-config network’ command.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 72 of 628 3.4.4  PIM Configuration The procedure for Protocol Independent Multicast (PIM) configuration is given below.  1)    Go to configure  interface configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# interface ge2  2)    Configure the PIM sparse mode to an interface.  WEC8500/configure/interface ge2# ip pim sparse-mode  3)    Check a configured PIM using the ‘show running-config network’ command. To check the multicast-routing table, use the ‘show ip mroute’ command.  WEC8500# show ip mroute (90.90.1.242, 224.0.1.1)         Iif: mgmt0      Oifs: pimreg  3.4.5  OSPF Configuration 3.4.5.1  General settings Configuration using CLI 1)    Go to configure  ospf configuration mode of CLI.  WEC8500# configure terminal  WEC8500/configure# router ospf WEC8500/configure# router ospf ?   1 - 10                         OSPF process ID  2)    Configure the process ID from 1 to 10.    WEC8500/configure# router ospf ? 1 - 10                         OSPF process ID WEC8500/configure# router ospf 2 WEC8500/configure/router/ospf 2#  Parameter Description OSPF process ID Configure the process ID from 1 to 10.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 73 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <General> menu in the sub-menus.    The OSPF initial window is shown below.  Figure 34. OSPF Configuration Window  Click the <Add> button and configure the PROCESS ID to 1-10 in the below screen.   Configuration using CLI 1)    Go to configure  ospf configuration mode of CLI.  WEC8500# configure terminal  WEC8500/configure# router ospf WEC8500/configure# router ospf ? 1 - 10                           OSPF process ID WEC8500/configure# router ospf 2 WEC8500/configure/router/ospf 2#  2)    The detail configuration items of a process ID are as follows:    WEC8500/configure/router/ospf 2# ?        area                        OSPF area parameters       auto-cost                    Calculate OSPF interface cost according to bandwidth       capability                   Enable specific OSPF feature       compatible                   OSPF compatibility list       default-information        Control distribution of default information       default-metric          Set metric of redistributed routes       distance                     Define an administrative distance       distribute-list             Filter networks in routing updates
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 74 of 628        exit                          Exit from router mode       host                          OSPF stub host entry       max-concurrent-dd          Maximum number allowed to process DD concurrently       maximum-area               Maximum number of ospf area       neighbor                     Specify a neighbor router       network                      Enable routing on an IP network       ospf                          OSPF specific commands       overflow                     Control overflow       passive-interface          Suppress routing updates on an interface       redistribute                Redistribute information from another routing protocol       router-id                    Router-id for the OSPF process       summary-address            Configure IP address summaries       timers                        Adjust routing timers  3)    Router ID configuration   Enter an IP address to use.    WEC8500/configure/router/ospf 2# router-id ? A.B.C.D                          OSPF router-id in IP address format WEC8500/configure/router/ospf 2# router-id 10.10.0.1 ?   <cr>  Parameter Description OSPF router-id in IP address Enter an IP address.  4)    AUTO COST configuration   Enter an OSPF cost value (1-4294967) to use.    WEC8500/configure/router/ospf 2# auto-cost ?   reference-bandwidth          Use reference bandwidth method to assign OSPF cost WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth ?   1 - 4294967                 The reference bandwidth in terms of Mbits per second  WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth 200 ?   <cr> WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth 200  Parameter Description reference-bandwidth Enter a value from 1-4294967.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 75 of 628 5)    CAPABILITY OPAQUE configuration   Enter the capability opaque.  WEC8500/configure/router/ospf 2# capability ?       opaque                       Opaque LSA WEC8500/configure/router/ospf 2# capability opaque ?   <cr> WEC8500/configure/router/ospf 2# capability opaque  Parameter Description Capability opaque Enabled when the CLI is entered.  6)    COMPATIBLE RFC configuration   Enter the compatible rfc1583.  WEC8500/configure/router/ospf 2# compatible ?   rfc1583                          Compatible with RFC 1583 WEC8500/configure/router/ospf 2# compatible rfc1583 ?   <cr> WEC8500/configure/router/ospf 2# compatible rfc1583  Parameter Description compatible rfc1583 Enabled when the CLI is entered.  7)    DEFAULT METRIC configuration   Enter the DEFAULT METRIC (1-16777214) to use.  WEC8500/configure/router/ospf 2# default-metric ?       1 - 16777214                    Default metric WEC8500/configure/router/ospf 2# default-metric 3 ?   <cr> WEC8500/configure/router/ospf 2# default-metric 3  Parameter Description Default metric Enter a value from 1-16777214.  8)    MAX CONCURRENT DD configuration   Enter the MAX CONCURRENT DD (1-65535) to use.  WEC8500/configure/router/ospf 2# max-concurrent-dd ?   1 - 65535                        Number of DD process WEC8500/configure/router/ospf 2# max-concurrent-dd 2 ?   <cr> WEC8500/configure/router/ospf 2# max-concurrent-dd 2
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 76 of 628 9)    MAXIMUM AREA configuration   Enter the DEFAULT METRIC (1-4294967294) to use.  WEC8500/configure/router/ospf 2# maximum-area ?       1 - 4294967294                  Area limit WEC8500/configure/router/ospf 2# maximum-area 3 ?   <cr> WEC8500/configure/router/ospf 2# maximum-area 3  10) SPF TIMER (MILLISECONDS) configuration   Configure the SPF TIMER (MILLISECONDS) value.  WEC8500/configure/router/ospf 2# timers ?       spf                          OSPF SPF timers WEC8500/configure/router/ospf 2# timers spf ?       exp                          Use exponential backoff delays WEC8500/configure/router/ospf 2# timers spf exp ?   0 - 2147483647                  Minimum Delay between receiving a change to SPF calculation in                                     milliseconds WEC8500/configure/router/ospf 2# timers spf exp 3 ?   0 - 2147483647                  Maximum Delay between receiving a change to SPF calculation in                                      milliseconds WEC8500/configure/router/ospf 2# timers spf exp 3 100 ?   <cr> WEC8500/configure/router/ospf 2# timers spf exp 3 100
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 77 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <General> menu in the sub-menus.    Click a PROCESS ID that user wants to configure. The OSPF configuration window is shown below.   Use the value configured in ‘Configuration using CLI’ as a user-defined value in the below screen.     The value configured in ‘Configuration using CLI’ is shown in the below screen.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 78 of 628 3.4.5.2  Default Information Configuration of General Settings   Configuration using CLI 1)    Detail configuration of OSPF default-information    WEC8500/configure/router/ospf 2# default-information ?   originate                        Distribute a default route WEC8500/configure/router/ospf 2# default-information originate ?       always                       Always advertise default route       metric                       OSPF default metric       metric-type                 OSPF metric type for default routes       route-map                    Route map reference    <cr>  2)    Configuration of default-information ALWAYS    WEC8500/configure/router/ospf 2# default-information originate ?        always                       Always advertise default route       metric                       OSPF default metric       metric-type                  OSPF metric type for default routes       route-map                    Route map reference    <cr> WEC8500/configure/router/ospf 2# default-information originate always ?   <cr> WEC8500/configure/router/ospf 2# default-information originate always   WEC8500/configure/router/ospf 2#  3)    Configuration of default-information METRIC   Configure the OSPF metric (0-16777214) value.    WEC8500/configure/router/ospf 2# default-information originate metric ?   0 - 16777214                    OSPF metric WEC8500/configure/router/ospf 2# default-information originate metric 3 ?   <cr> WEC8500/configure/router/ospf 2# default-information originate metric 3  WEC8500/configure/router/ospf 2#
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 79 of 628 4)    Configuration of default-information METRIC-TYPE   Configure the OSPF metric-type (1/2) value.    WEC8500/configure/router/ospf 2# default-information originate metric-type ?   1                                Set OSPF External Type 1 metrics   2                                Set OSPF External Type 2 metrics WEC8500/configure/router/ospf 2# default-information originate metric-type 1 ?   <cr>  5)    Configuration of default-information ROUTE MAP   Enter the name of pointer to route-map entries.    WEC8500/configure/router/ospf 2# default-information originate route-map ?   <WORD>                           Pointer to route-map entries WEC8500/configure/router/ospf 2# default-information originate route-map AA   WEC8500/configure/router/ospf 2#  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <General> menu in the sub-menus.    Click a PROCESS ID that user wants to configure. The OSPF configuration window is shown below.   Use the value configured in ‘Configuration using CLI’ as a user-defined value in the below screen.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 80 of 628 3.4.5.3  Distance Configuration of General Settings   Configuration using CLI 1)    Detail configuration of OSPF distance    WEC8500/configure/router/ospf 2# distance ?                     admin                        OSPF Administrative distance       ospf                          OSPF Distance  2)    Distance admin configuration   Enter the OSPF Admin distance value.      WEC8500/configure/router/ospf 2# distance ?                     admin                        OSPF Administrative distance       ospf                          OSPF Distance  WEC8500/configure/router/ospf 2# distance admin ?   1 - 255                         OSPF Administrative distance  WEC8500/configure/router/ospf 2# distance admin 100  The OSPF Admin distance is displayed as GENERAL in the Web UI.    3)    Configuration of EXTERNAL distance ospf   Enter the OSPF EXTERNAL distance value.      WEC8500/configure/router/ospf 2# distance ospf ?   external                         External routes   inter-area                       Inter-area routes   intra-area                       Intra-area routes WEC8500/configure/router/ospf 2# distance ospf external ?   1 - 255                          <1-255> Distance for external/inter-area/intra-area routes WEC8500/configure/router/ospf 2# distance ospf external 50 WEC8500/configure/router/ospf 2#
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 81 of 628 4)    Configuration of INTER-AREA distance ospf   Enter the OSPF INTER-AREA distance value.      WEC8500/configure/router/ospf 2# distance ospf inter-area ?   1 - 255                          <1-255> Distance for external/inter-area/intra-area routes  WEC8500/configure/router/ospf 2# distance ospf inter-area 50 ?   <cr> WEC8500/configure/router/ospf 2# distance ospf inter-area 50   WEC8500/configure/router/ospf 2#  5)    Configuration of INTRA-AREA distance ospf   Enter the OSPF INTRA-AREA distance value.      WEC8500/configure/router/ospf 2# distance ospf intra-area ?   1 - 255                          <1-255> Distance for external/inter-area/intra-area routes  WEC8500/configure/router/ospf 2# distance ospf intra-area 50 ?   <cr> WEC8500/configure/router/ospf 2# distance ospf intra-area 50   WEC8500/configure/router/ospf 2#  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <General> menu in the sub-menus.    Click a PROCESS ID that user wants to configure. The OSPF configuration window is shown below.   Use the value configured in ‘Configuration using CLI’ as a user-defined value in the below screen.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 82 of 628 3.4.5.4  Overflow Configuration of General Settings   Configuration using CLI 1)    Detail configuration of OSPF overflow    WEC8500/configure/router/ospf 2# overflow ?        database                     Database  WEC8500/configure/router/ospf 2# overflow database ?   external                         External link states   0 - 4294967294                  Maximum number of LSAs  WEC8500/configure/router/ospf 2# overflow database  2)    Overflow external configuration   Enter the maximum number of LSAs and time to recover (0 not recover) value.      WEC8500/configure/router/ospf 2# overflow ?        database                     Database  WEC8500/configure/router/ospf 2# overflow database ?   external                         External link states   0 - 4294967294                  Maximum number of LSAs  WEC8500/configure/router/ospf 2# overflow database external ?   0 - 2147483647                  Maximum number of LSAs  WEC8500/configure/router/ospf 2# overflow database external 3 ?   0 - 65535                        Time to recover (0 not recover)  WEC8500/configure/router/ospf 2# overflow database external 3 10 ?   <cr> WEC8500/configure/router/ospf 2# overflow database external 3 10  3)    Configuration of maximum number of LSAs   Enter the maximum number of LSAs and hard limit value.      WEC8500/configure/router/ospf 2# overflow ?                              database                     Database  WEC8500/configure/router/ospf 2# overflow database ?   external                         External link states   0 - 4294967294                  Maximum number of LSAs
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 83 of 628  WEC8500/configure/router/ospf 2# overflow database 100 ?   hard                              Hard limit; Instance will be shutdown if exceed   soft                              Soft limit; Warning will be given if exceed   <cr> WEC8500/configure/router/ospf 2# overflow database 100 hard ?   <cr> WEC8500/configure/router/ospf 2# overflow database 100 hard  Enter the maximum number of LSAs and soft limit value.      WEC8500/configure/router/ospf 2# overflow ?                              database                     Database  WEC8500/configure/router/ospf 2# overflow database ?   external                         External link states   0 - 4294967294                  Maximum number of LSAs  WEC8500/configure/router/ospf 2# overflow database 100 ?   hard                              Hard limit; Instance will be shutdown if exceed   soft                              Soft limit; Warning will be given if exceed   <cr> WEC8500/configure/router/ospf 2# overflow database 100 soft ?   <cr> WEC8500/configure/router/ospf 2# overflow database 100 soft  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <General> menu in the sub-menus.    Click a PROCESS ID that user wants to configure. The OSPF configuration window is shown below.   Use the value configured in ‘Configuration using CLI’ as a user-defined value in the below screen.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 84 of 628 3.4.5.5  Network Configuration Configuration using CLI Go to configure  ospf configuration mode of CLI.  WEC8500/configure/router/ospf 2# ?        area                         OSPF area parameters       auto-cost                   Calculate OSPF interface cost according to bandwidth       capability                  Enable specific OSPF feature       compatible                  OSPF compatibility list       default-information        Control distribution of default information       default-metric             Set metric of redistributed routes       distance                     Define an administrative distance       distribute-list            Filter networks in routing updates       exit                         Exit from router mode       host                         OSPF stub host entry       max-concurrent-dd          Maximum number allowed to process DD concurrently       maximum-area                Maximum number of ospf area       neighbor                     Specify a neighbor router       network                      Enable routing on an IP network       ospf                         OSPF specific commands       overflow                     Control overflow       passive-interface          Suppress routing updates on an interface       redistribute               Redistribute information from another routing protocol       router-id                   Router-id for the OSPF process       summary-address            Configure IP address summaries       timers                       Adjust routing timers  WEC8500/configure/router/ospf 2# network ?   A.B.C.D                          Network number   A.B.C.D/M                       OSPF network prefix  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Network> menu in the sub-menus.    The OSPF initial window is shown below.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 85 of 628 3.4.5.6  Configuration of Network Details Configuration using CLI 1)    Go to configure  ospf configuration mode of CLI.  WEC8500# configure terminal  WEC8500/configure# router ospf WEC8500/configure# router ospf ?   1 - 10                           OSPF process ID  2)    Network configuration   Configure the ADDRESS, NETMASK, and AREA ID of a user-defined network.    WEC8500/configure/router/ospf 2# network ?   A.B.C.D                          Network number   A.B.C.D/M                        OSPF network prefix WEC8500/configure/router/ospf 2# network 100.100.100.1 ?   A.B.C.D                          OSPF wild card bits(network mask) WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 ?        area                          Set the OSPF area ID  WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 ?        area                          Set the OSPF area ID  WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 area ?   0 - 4294967295                OSPF area ID as a decimal value    A.B.C.D                          OSPF area ID in IP address format WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 area 3  ?   <cr> WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 area 3  Parameter Description NETWORK ADDRESS Network number OSPF network prefix NETMASK OSPF wild card bits (network mask) AREA ID OSPF area ID as a decimal value/ OSPF area ID in IP address format
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 86 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Network> menu in the sub-menus.    Enter the NETWORK ADDRESS, NETMASK, and AREA ID and click the <Apply> button.     3.4.5.7  Redistribute Configuration Configuration using CLI Go to configure  ospf configuration mode of CLI.  WEC8500/configure/router/ospf 2# ?        area                          OSPF area parameters       auto-cost                   Calculate OSPF interface cost according to bandwidth       capability                  Enable specific OSPF feature       compatible                   OSPF compatibility list       default-information        Control distribution of default information       default-metric             Set metric of redistributed routes       distance                     Define an administrative distance       distribute-list            Filter networks in routing updates       exit                          Exit from router mode       host                          OSPF stub host entry       max-concurrent-dd           Maximum number allowed to process DD concurrently       maximum-area              Maximum number of ospf area       neighbor                     Specify a neighbor router       network                      Enable routing on an IP network       ospf                          OSPF specific commands       overflow                     Control overflow       passive-interface          Suppress routing updates on an interface       redistribute                Redistribute information from another routing protocol       router-id                    Router-id for the OSPF process       summary-address            Configure IP address summaries       timers                       Adjust routing timers WEC8500/configure/router/ospf 2# redistribute ?   connected                      Connected   static                           Static routes   ospf                              Open Shortest Path First (OSPF) WEC8500/configure/router/ospf 2# redistribute
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 87 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Redistribute> menu in the sub-menus.    The OSPF Redistribute initial window is shown below.   Configuration using CLI 1)    Connected configuration The metric, metric-type, route-map, tag detail setting and default setting can be configured.      WEC8500/configure/router/ospf 2# redistribute ?   connected                        Connected   static                           Static routes   ospf                              Open Shortest Path First (OSPF) WEC8500/configure/router/ospf 2# redistribute connected ?        metric                       OSPF default metric       metric-type                 OSPF metric type for default routes       route-map                    Route map reference       tag                         Set tag for routes redistributed into OSPF  2)    Metric configuration  WEC8500/configure/router/ospf 2# redistribute connected ?        metric                       OSPF default metric       metric-type                 OSPF metric type for default routes       route-map                    Route map reference       tag                         Set tag for routes redistributed into OSPF   <cr> WEC8500/configure/router/ospf 2# redistribute connected metric ?   1 - 16777214                    OSPF metric  WEC8500/configure/router/ospf 2# redistribute connected metric 3 ?   <cr> WEC8500/configure/router/ospf 2# redistribute connected metric 3
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 88 of 628  Parameter Description metric Enter a value from 1-16777214.  3)    Metric-type configuration  WEC8500/configure/router/ospf 2# redistribute connected metric-type ?   1                                Set OSPF External Type 1 metrics   2                                Set OSPF External Type 2 metrics WEC8500/configure/router/ospf 2# redistribute connected metric-type 1 ?   <cr> WEC8500/configure/router/ospf 2# redistribute connected metric-type 1  Parameter Description metric-type Select 1 or 2.  4)    Route-map configuration  WEC8500/configure/router/ospf 2# redistribute connected route-map ?      <WORD>                           Pointer to route-map entries WEC8500/configure/router/ospf 2# redistribute connected route-map a ?   <cr> WEC8500/configure/router/ospf 2# redistribute connected route-map a  Parameter Description route-map entries Enter <WORD>.  5)    Tag configuration  WEC8500/configure/router/ospf 2# redistribute connected tag ?          0 - 4294967295                32-bit tag value  WEC8500/configure/router/ospf 2# redistribute connected tag 3 ?   <cr> WEC8500/configure/router/ospf 2# redistribute connected tag 3  Parameter Description Tag value Enter a tag value from 0-4294967295.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 89 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Redistribute> menu in the sub-menus.     After configuring Redistribute default, select a PROCESS ID for detail configuration.     Configuring Redistribute details   Configure the details of metric, metric-type, route-map, or tag, etc. which is configured in CLI.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 90 of 628 3.4.5.8  AREA Configuration The Area configuration includes Stub, Not So Stubby Areas (NSSA), Virtual-Link, Range, or Detail.    1)    Stub configuration  Configuration using CLI WEC8500/configure/router/ospf 2# area 1 stub ?   no-summary                      Do not inject inter-area routes into stub   <cr> WEC8500/configure/router/ospf 2# area 1 stub no-summary ?   <cr> WEC8500/configure/router/ospf 2# area 1 stub no-summary  Parameter Description no-summary Select Stub or No Summary.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Area>  <Stub> menu in the sub-menus.   In the Stub add page, configure the details and click the <Apply> button. Then, the initial window is changed as shown below.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 91 of 628 2)    NSSA configuration  Configuration using CLI WEC8500/configure/router/ospf 2# area 1 nssa ?        default-information-originate Originate Type 7 default into NSSA area       no-redistribution          No redistribution into this NSSA area       no-summary                  Do not send summary LSA into NSSA       translator-role            NSSA-ABR Translator role    <cr>  default-information-originate configuration CLI of NSSA   The metric, metric-type, no-redistribution, no-summary, or translator-role details can be configured.    WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate ?        metric                       OSPF default metric       metric-type              OSPF metric type for default routes       no-redistribution          No redistribution into this NSSA area       no-summary                   Do not send summary LSA into NSSA       translator-role            NSSA-ABR Translator role    <cr>  Metric configuration of NSSA default-information-originate    WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate metric ?   0 - 16777214                    OSPF metric  WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate metric 3   WEC8500/configure/router/ospf 1#  Parameter Description OSPF metric Enter a value from 0-16777214.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 92 of 628 Metric-type configuration of NSSA default-information-originate    WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate metric-type ?   1 - 2                            OSPF Link State type  WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate metric-type 2  WEC8500/configure/router/ospf 1#  Parameter Description OSPF metric-type Select 1 or 2.  Configuring no-redistribution of NSSA default-information-originate    WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate ?       metric                       OSPF default metric       metric-type                 OSPF metric type for default routes       no-redistribution        No redistribution into this NSSA area       no-summary                   Do not send summary LSA into NSSA       translator-role             NSSA-ABR Translator role   <cr> WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate no-redistribution ?   <cr> WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate no-redistribution  Parameter Description no-redistribution Enable/Disable Configuration  Configuring no-summary NSSA default-information-originate    WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate no-summary ?    <cr> WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate no-summary   WEC8500/configure/router/ospf 1#  Parameter Description no-summary Enable/Disable Configuration
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 93 of 628 Configuring translator-role of NSSA default-information-originate    WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate translator-role ?   always                           Translate always   candidate                       Candidate for translator (default)   never                            Do not translate WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate translator-role always ?   no-redistribution              No redistribution into this NSSA area   no-summary                       Do not send summary LSA into NSSA   <cr> WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate translator-role candidate ?   no-redistribution              No redistribution into this NSSA area   no-summary                       Do not send summary LSA into NSSA   <cr> WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate translator-role never ?      no-redistribution              No redistribution into this NSSA area   no-summary                      Do not send summary LSA into NSSA   <cr> WEC8500/configure/router/ospf 1# area 2 nssa default-information-originate translator-role never  Parameter Description always Translate always candidate Candidate for translator (default) never Do not translate  After the configuration of each parameter is finished, enable or disable the no-redistribution or no-summary parameter.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 94 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Area>  <NSSA> menu in the sub-menus.  The default window is shown below.     The default configuration screen is shown below.   The NSSA window screen is shown as below after detail configuration is completed.   If you select a Process ID after NSSA default configuration, operator can do detail configuration.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 95 of 628 3)    Virtual-Link configuration    Configuration using CLI WEC8500/configure/router/ospf 1# area 2 ?       authentication              Enable authentication       default-cost                Set the summary-default cost of a NSSA or stub area       filter-list                  Filter networks between OSPF areas       nssa                          Specify a NSSA area       range                        Summarize routes matching address/mask (border routers only)       shortcut                     Configure the area's shortcutting mode       stub                          Configure OSPF area as stub       virtual-link                Define a virtual link and its parameters WEC8500/configure/router/ospf 1# area 2 virtual-link ?   A.B.C.D                          ID (IP addr) associated with virtual link neighbor WEC8500/configure/router/ospf 1# area 2 virtual-link 10.10.10.1 ?       authentication             Enable authentication       authentication-key      Set authentication key       dead-interval               Dead router detection time       hello-interval            Hello packet interval       message-digest-key         Set message digest key       retransmit-interval        LSA retransmit interval       transmit-delay             LSA transmission delay   <cr>  To configure the Virtual-Link, enter an ID (router ID of OSPF that is connected via Virtual) and configure the detail items. The detail items include authentication, authentication-key, dead-interval, hello-interval, message-digest-key, retransmit-interval, or transmit-delay, etc.    Authentication configuration Operator can configure authentication and message-digest.    WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 authentication ?   message-digest                  Use message-digest authentication   <cr> WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 authentication message-digest ?   <cr> WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 authentication message-digest  Authentication-key configuration Enter 8-character word to be used as an authentication key. Use the entered 8-character as an authentication key.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 96 of 628 WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 authentication-key ?   <WORD>                           Authentication key (8 chars) WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 authentication-key aaaaaaaa  WEC8500/configure/router/ospf 2#  Dead-interval configuration The default value of dead-interval is 4 times of hello-interval. Because the default hello-interval is configured to 10 sec., the dead-interval will be 40 seconds if the hello-interval is not configured. In addition, operator can change it to a value between 1 second and 65535 seconds.    WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 dead-interval ?              1 - 65535                        Seconds WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 dead-interval 50 WEC8500/configure/router/ospf 2#  Hello-interval configuration The default hello-interval is 10 seconds. In addition, operator can change it to a value between 1 second and 65535 seconds.    WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 hello-interval ?              1 - 65535                        Seconds WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 hello-interval 50 WEC8500/configure/router/ospf 2#  Message-digest-key configuration The message-digest-key configures a key ID between 1 and 255. After key ID configuration, configure the authentication key by using the md5 algorithm. Operator can enter maximum 16 characters.   When you enter an authentication key, the message-digest-key configuration is completed.    WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key ?   1 - 255                          Key ID  WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key 2 ?       md5                           Use MD5 algorithm
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 97 of 628  WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key 2 md5 ?   <WORD>                           Authentication key (16 chars) WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key 2 md5 b       WEC8500/configure/router/ospf 2#  Retransmit-interval configuration The default retransmit-interval is 5 seconds. In addition, operator can change it to a value between 1 second and 65535 seconds.  WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 retransmit-interval ?         1 - 65535                        Seconds (default: 5)  WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 retransmit-interval  Transmit-delay configuration The default transmit-delay is 1 second. In addition, operator can change it to a value between 1 second and 65535 seconds.  WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 transmit-delay ?          1 - 65535                        Seconds WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 transmit-delay 5 WEC8500/configure/router/ospf 2#  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Area>  <Virtual-Link> menu in the sub-menus.  The default window is shown below.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 98 of 628 Unlike other configurations, there are two tabs at the top; General page and Authentication page.   Start configuration in the General page for the basic configuration of Virtual-Link.     In the default configuration page, configure PROCESS ID, AREA ID, or LINK ID.   For detail configuration, select a PROCESS ID you want. Operator can do detail configuration for an item you select.     The detail configuration page is shown below.     The Authentication page of a Virtual-Link is shown below.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 99 of 628 Click the <Select Virtual-Link> button.   Select a PROCESS ID that you have selected in the General page.    And then, configure Digest Key or Digest Authentication.   Just like CLI configuration, select a digest key between 1 and 255 and enter a key whose length is 16-character or less for digest authentication.     4)    Range configuration    Configuration using CLI To configure the Range detail items, start detail configuration after entering an Area range prefix value.    WEC8500/configure/router/ospf 2# area 2 range ?                                    A.B.C.D/M                        Area range prefix WEC8500/configure/router/ospf 2# area 2 range 10.10.10.1/16 ?   advertise                        Advertise this range (default)   not-advertise                   DoNotAdvertise this range   <cr> WEC8500/configure/router/ospf 2# area 2 range 10.10.10.1/16  The detail items include advertise or no-advertise configuration   Configure whether to advertise to the range or not.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 100 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Area>  <Range> menu in the sub-menus.  The configuration page is as follows:       5)    Detail configuration    Configuration using CLI This is additional explanations for Area. Operator can configure authentication, default-cost, or shortcut.      WEC8500/configure/router/ospf 2# area 2 ?       authentication            Enable authentication       default-cost                Set the summary-default cost of a NSSA or stub area       filter-list               Filter networks between OSPF areas       nssa                         Specify a NSSA area       range                        Summarize routes matching address/mask (border routers only)       shortcut                     Configure the area's shortcutting mode       stub                         Configure OSPF area as stub       virtual-link                Define a virtual link and its parameters  Authentication configuration Operator can select whether to use authentication or message-digest function.    WEC8500/configure/router/ospf 2# area 2 authentication ?                       message-digest                  Use message-digest authentication   <cr> WEC8500/configure/router/ospf 2# area 2 authentication message-digest ?   <cr> WEC8500/configure/router/ospf 2# area 2 authentication message-digest
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 101 of 628 Default-cost configuration Configure a value between 0 and 1677215 as a default-cost. However, operator can configure the default-cost value in AREA ID whether a stub or NSSA is configured.   If you try to configure the default-cost in an ID where neither the two items are configured, the following error phrase is displayed.   ‘% The area is neither stub, nor NSSA’  WEC8500/configure/router/ospf 2# area 0.0.0.1 default-cost ?   0 - 16777215                    Stub's advertised default summary cost WEC8500/configure/router/ospf 2# area 0.0.0.1 default-cost 3 ?   <cr> WEC8500/configure/router/ospf 2# area 0.0.0.1 default-cost 3  Shortcut configuration   For Shortcut configuration, operator can select one out of 3 selections including default, disable, and enable.    WEC8500/configure/router/ospf 2# area 0.0.0.1 shortcut ?        default                          Set default shortcutting behavior   disable                          Disable shortcutting through the area   enable                           Enable shortcutting through the area WEC8500/configure/router/ospf 2# area 0.0.0.1 shortcut enable   WEC8500/configure/router/ospf 2#  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Area>  <Detail> menu in the sub-menus.  The configuration page is as follows:     Select a PROCESS ID for detail configuration. As mentioned in the CLI, the Stub or NSSA must be configured to the PROCESS ID in a window where default-cost is selected. If a PROCESS ID without the configuration is completed, the detail configuration can not be performed. Therefore, the below default-cost configuration is available only when the Stub or NSSA is configured to the ID.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 102 of 628   3.4.5.9  Summary Configuration Configuration using CLI WEC8500/configure/router/ospf 2# summary-address ?   A.B.C.D/M                        IP summary prefix WEC8500/configure/router/ospf 2# summary-address 1.1.1.1/16 ?   not-advertise                   Suppress routes that match the prefix   tag                               Set tag    <cr> WEC8500/configure/router/ospf 2# summary-address 1.1.1.1/16   WEC8500/configure/router/ospf 2#  Parameter Description summary-address A.B.C.D/M  Operator can perform detail configuration only when you enter a summary-address.   The detail configuration includes advertise or TAG configuration.    1)    Advertise Configuration The default is set to Enable. Therefore, if no-advertise is selected in the CLI, the configuration is changed to Disable. 2)    Tag A tag is a user-defined 32-bit tag value between 0 and 4294967295. A tag also has a default value and it is 0.    WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16   WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 tag ?   0 - 4294967295                  32-bit tag value WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 tag 3
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 103 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Summary> menu in the sub-menus.  The configuration page is as follows:   After default configuration, select a PROCESS ID for detail configuration.   The detail configuration includes advertise and TAG configuration mentioned in the CLI. Unlike CLI, there is no no-advertise. A user can change the default Enable to Disable.     3.4.5.10  Passive Interface Configuration Configuration using CLI WEC8500/configure/router/ospf 2# passive-interface ?   <WORD>                           Interface's name WEC8500/configure/router/ospf 2# passive-interface ge2 ?   A.B.C.D                          Address of interface   <cr>  Parameter Description Interface Name Enter the name of an interface to use directly.  A user directly enters an interface name for Passive-interface configuration. Also, a user can enter an address to the interface.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 104 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Passive Interface> menu in the sub-menus.  The configuration page is as follows:   After selecting a PROCESS ID that a user will use, select an interface to apply.     Among the interface items displayed on the screen, configure the interface that a user wants.    3.4.5.11  Interface General Configuration Configuration using CLI Unlike other OSPF configurations, the interface general does not enter into the OSPF mode. Perform related configuration at the interface that a user wants. Therefore, the CLI configuration is as follows:    1)    Go to configure  interface configuration mode of CLI.    WEC8500# configure terminal  WEC8500/configure#  WEC8500/configure# interface ge2  2)    The items for detail configuration are as follows:
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 105 of 628  WEC8500/configure/interface ge2# ip ospf ?       address                      Address of interface       authentication            Enable authentication       authentication-key         Authentication password (key)       cost                          Interface cost       database-filter            Filter OSPF LSA during synchronization and flooding       dead-interval               Interval after which a neighbor is declared dead       disable                      Disable OSPF       hello-interval              Time between HELLO packets       message-digest-key         Message digest authentication password (key)       mtu                          OSPF interface MTU       mtu-ignore                  Time between HELLO packets       network                      Network type       priority                     Router priority       retransmit-interval        Time between retransmitting lost link state advertisements       transmit-delay              Link state transmit delay  DISABLE OSPF configuration  WEC8500/configure/interface ge2# ip ospf disable ?   all                              All functionality WEC8500/configure/interface ge2# ip ospf disable all ?   <cr> WEC8500/configure/interface ge2# ip ospf disable all  MTU configuration The default does not use Maximum Transmission Unit (MTU) configuration.   The range of MTU user configuration is 576-65535.    WEC8500/configure/interface ge2# ip ospf mtu ?   576 - 65535                     WEC8500/configure/interface ge2# ip ospf mtu 600 WEC8500/configure/interface ge2#  Network Type configuration The network type includes 4 types, i.e. broadcast, non-broadcast, point-to-point, and point-to-multipoint. The Ethernet is broadcast configuration.    WEC8500/configure/interface ge2# ip ospf network ?   broadcast                        Specify OSPF broadcast multi-access network   non-broadcast                   Specify OSPF NBMA network
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 106 of 628    point-to-point                  Specify OSPF point-to-point network   point-to-multipoint          Specify OSPF point-to-multipoint network WEC8500/configure/interface ge2# ip ospf network  Authentication configuration This is CLI that selects whether to use user authentication.  WEC8500/configure/interface ge2# ip ospf authentication ?     message-digest                 Use message-digest authentication   null                              Use null authentication   <cr> WEC8500/configure/interface ge2# ip ospf authentication message-digest ?   <cr> WEC8500/configure/interface ge2# ip ospf authentication null ?            <cr> WEC8500/configure/interface ge2# ip ospf authentication null  OSPF Cost configuration Enter a cost value between 1 and 65535.  WEC8500/configure/interface ge2# ip ospf cost ?   1 - 65535                      Cost WEC8500/configure/interface ge2# ip ospf cost 2 ?   <cr>  DATABASE-FILTER configuration    WEC8500/configure/interface ge2# ip ospf database-filter ?   all                              Filter all LSA WEC8500/configure/interface ge2# ip ospf database-filter all ?   out                              Outgoing LSA WEC8500/configure/interface ge2# ip ospf database-filter all out ?   <cr> WEC8500/configure/interface ge2# ip ospf database-filter all out  Dead-interval configuration The default value of dead-interval is 4 times of hello-interval. Because the default hello-interval is configured to 10 sec., the dead-interval will be 40 seconds if the hello-interval is not configured. In addition, operator can change it to a value between 1 second and 65535 seconds.    WEC8500/configure/interface ge2# ip ospf dead-interval ?            1 - 65535                      Seconds
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 107 of 628  WEC8500/configure/interface ge2# ip ospf dead-interval 30 ?   <cr> WEC8500/configure/interface ge2# ip ospf dead-interval 30  Hello-interval configuration The default hello-interval is 10 seconds. In addition, operator can change it to a value between 1 second and 65535 seconds.    WEC8500/configure/interface ge2# ip ospf hello-interval ?   1 - 65535                        Seconds WEC8500/configure/interface ge2# ip ospf hello-interval 50 ?   <cr> WEC8500/configure/interface ge2# ip ospf hello-interval 50  WEC8500/configure/interface ge2#  Retransmit-interval configuration The default retransmit-interval is 5 seconds. In addition, operator can change it to a value between 1 second and 65535 seconds.    WEC8500/configure/interface ge2# ip ospf retransmit-interval ?   1 - 65535                        Seconds (default: 5) WEC8500/configure/interface ge2# ip ospf retransmit-interval 100 ?   <cr> WEC8500/configure/interface ge2# ip ospf retransmit-interval 100  WEC8500/configure/interface ge2#  TRANSMIT DELAY configuration The default transmit-delay is 1 second. In addition, operator can change it to a value between 1 second and 65535 seconds.    WEC8500/configure/interface ge2# ip ospf transmit-delay ?   1 - 65535                        Seconds WEC8500/configure/interface ge2# ip ospf transmit-delay 400 WEC8500/configure/interface ge2#  MTU IGNORE configuration The default configuration is Disable. If you configure CLI, it is changed to Enable.  WEC8500/configure/interface ge2# ip ospf mtu-ignore ?   <cr> WEC8500/configure/interface ge2# ip ospf mtu-ignore  WEC8500/configure/interface ge2#
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 108 of 628 PRIORITY configuration The default OSPF Priority value is 1. A user can configure the priority between 1 and 255.    WEC8500/configure/interface ge2# ip ospf priority ?   0 - 255                          Priority WEC8500/configure/interface ge2# ip ospf priority 2  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <OSPF>  <Interface General> menu in the sub-menus.  The configuration page is as follows: As shown in the below figure, the currently enabled interface items are displayed.   When you select an interface for detail configuration, operator can go to the detail item configuration page.   The Interface General item is also divided into General configuration and Authentication window as a tab.     The General configuration screen is as follows:
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 109 of 628 The detail item configuration page is as follows: When you select the name of an enabled interface, the below detail item configuration page is displayed.     After entering a value that a user wants for the item configured in the above CLI, click the <Apply> button.    Authentication configuration Just as General configuration, click the Authentication configuration in the tab.   Then, the page for authentication related detail configuration is displayed as shown below.   Select an interface that a user wants to configure, and enter the key string (1-255) of the configuration.     The verification page after configuration is as follows:
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 110 of 628 3.4.6  VRRP Configuration The Virtual Router Redundancy Protocol (VRRP) is an Internet protocol that provides the backup router operation method in a LAN. If a fault occurs with a router that transmits a packet from a host in a LAN, decide a virtual IP address in a DHCP manually or by default by using a virtual router fault recovery protocol and share it among routers. Once a primary router and a backup router are decided, the backup router becomes a primary router when a fault occurs with the primary router.  Configuration using CLI To configure the VRRP related function, go to configure  router mode of CLI, enter a router ID and interface name to go to the VRRP configuration mode.    WEC8500# configure terminal WEC8500/configure# router WEC8500/configure# router vrrp WEC8500/configure# router vrrp 1 vlan1.10  WEC8500/configure/router/vrrp#   The following commands are provided.  [advertisement-interval] This command configures the advertisement interval of VRRP in second. A user can configure the interval from 1 to 10.    advertisement-interval [INTERVAL]  Parameter Description INTERVAL Advertisement interval (range: 1-10 s)  [circuit-failover] Enter an interface to configure and its priority.    circuit-failover [WORD] [PRIORITY]  Parameter Description WORD Interface name PRIORITY Priority setup (range: 1-100)  [enable/disable] This command enables or disables the VRRP session.    enable  disable
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 111 of 628 [preempt-delay] This command configures the preempt delay time.    preempt-delay [DELAY_TIME]  Parameter Description DELAY_TIME Preempt delay time (range: 0-3600 s)  [preempt-mode] This command configures whether to use the preempt mode.    preempt-mode [MODE]  Parameter Description MODE - true: Use the preempt mode - false: Stop using the preempt mode.  [priority] This command configures a priority.    priority [PRIORITY]  Parameter Description PRIORITY Priority setup (range: 1-255)  [virtual-ip] This command configures an IP address to use in the VRRP and configure the IP address as master or backup.    virtual-ip [A.B.C.D]  virtual-ip [A.B.C.D] [MODE]  Parameter Description A.B.C.D IP address MODE IP configuration mode (backup/master) - backup: Backup router configuration. - master: Master configuration.  [show vrrp] This command retrieves VRRP configuration.  show vrrp
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 112 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <VRRP> menu in the sub-menus.   The VRRP menu provides two sub menus, i.e. Operation and Circuit Failover.  [Operation] When you click the <Enable>/<Disable> button, you can Enable or disable VRRP.   In addition, when you click the <Add> or <Delete> button, you can add or delete VRRP configuration.  Figure 35. VRRP-Operation Window  [Circuit Failover] When you click the Circuit Failover menu, the VRRP list is displayed on the window.  Figure 36. VRRP-Circuit Failover Window (1)  To perform detail configuration, select one of VRRP items.   After selecting a configuration you want select the <Apply> button to apply the configuration.  Figure 37. VRRP-Circuit Failover Window (2)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 113 of 628 3.4.7  Configuring IPWATCHD The IP WATCH Deamon (IPWATCHD) provides the function of detecting active or passive IP collision. Regardless of IP collision attacker or victim, the information including source ip/mac is transmitted as an evm fault event when the IP collision occurs. At the collision time, the Gratuitous Address Resolution Protocol (GARP) reply is transmitted 3 times to the unicast at every 1 second.   It supports the rate-limit function to deal with an intended ARP attack. Although ARP is entered from a host that is not in the same subnet, it generates GARP by recognizing it as a target if the host has the same APC IP.  Configuration using CLI To configure the IPWATCHD function, enter into the configure mode of CLI.   Configure a TIMEOUT value (that a user wants) to detect an IP address collision.   Operator can enter a value between 10 and 300 seconds.    WEC8500# configure terminal WEC8500/configure#  WEC8500/configure# ipwatch ?   defend-interval               Ipwatch defend-interval configuration WEC8500/configure# ipwatch defend-interval ?   10 - 300                      Ipwatch defend-interval value(seconds) WEC8500/configure# ipwatch defend-interval 30  Parameter Description VALUE Enter a defend-interval (10-300 sec).  The default TIMEOUT value for IP address collision detection is 30 seconds.   When the time is configured, the IPWATCHD daemon is restarted and a log and GARP is generated if there is an IP collision.    Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Network>  <ARP> menu in the sub-menus.   After entering a time value (10-300 seconds) that a user wants in the TIMEOUT FOR IP ADDRESS CONFLICT DETECTION window, click the <Apply> button. Then, the configuration is applied. The default value before user configuration is 30 as shown in the below figure.    Figure 38. IPWATCHD Configuration Window
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 114 of 628 3.5  QoS The Access Control List (ACL) allows or blocks a specific network traffic based on an operator’s configuration. The APC provides QoS using ACL.  3.5.1  ACL Configuration 3.5.1.1  Access List Configuration You can create or delete an access list for ACL configuration. To delete an access list, an operator can enter the name of an access list directly or enter a command by copying a value retrieved from the ‘show running-config network’. But, if the access list is being used in the WLAN ACL or Admin ACL, etc., you cannot delete it. Therefore, check if it is being used in the WLAN ACL or Admin ACL first of all.  Configuration using CLI 1)    Go to fqm mode where you can configure the configure  rule of CLI.  APC# configure terminal APC/configure# fqm-mode  2)    Create an access list by entering the ‘access-list’ command. The ‘no’ parameter is used to delete an access list.  access-list [ip/ipv6/mac] [ACL_NAME] [deny/permit/time-profile] seq [seq_NUM] [1/*/ahp/eigrp/esp/gre/icmp/igmp/igrp/ip/nos/ospf/pcp/pim/17/6/ tcp/udp/1-255] [any/A.B.C.D A.B.C.D] eq [eq_VALUE] [any/A.B.C.D A.B.C.D] eq [eq_VALUE] [[[dscp [*|[0-63]]|precedence [*|[0-7])]]]|]  An example of entering a command is shown below.  Creating Access list ‘acl1’:  APC# configure terminal APC/configure# fqm-mode APC/configure# access-list ip acl1 permit seq 1 icmp any any   Deleting Access list ‘acl1’:  APC# configure terminal APC/configure# fqm-mode APC/configure# no access-list ip acl1 permit seq 1 icmp any any  3)    Check a created access list using the ‘show running-config network’ command.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 115 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>  <Access Control Lists>  <IP ACL> menu in the sub-menus. The initial window of ACL rule configuration is shown below. When you click the <Add> or <Delete> button, you can add or delete ACL rule.  Figure 39. ACL Configuration Window  To change the configuration of ACL rule, click ACL NAME to change. You can change the configuration using the <Add> or <Delete> button. In addition, if there is a time profile in an ACL name, the IP ALC window is changed as shown below. After selecting a time profile, click the <Apply> button to apply the time profile to the ACL.  Figure 40. Window where a Time Profile is Applied to ACL  3.5.1.2  ACL Rule Configuration Configuration using CLI 1)    Go to interface configuration mode where you will apply the configure  ACL rule of CLI.  APC# configure terminal APC/configure# interface [name] APC/configure/interface [name]#  2)    Configure ACL to an interface.  ip access-group [MODE] [DIRECTION] [ACL_NAME]  Parameter Description MODE Configuration mode (fw/fqm) DIRECTION Application direction configuration (in/out)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 116 of 628 Parameter Description ACL_NAME ACL name to configure  An example of entering a command that configures ‘acl1’ to the ‘ge2’ interface is shown below.  APC# configure terminal APC/configure# interface ge2 APC/configure/interface ge2#ip access-group fqm in acl1  3)    To check the configuration information, use the ‘show running-config network’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>  <Access Control Lists>  <Access Group (Interface)> menu in the sub-menus.  The initial window of WLAN ACL configuration is shown below. When you click the <Add> or <Delete> button, you can add or delete ACL rule.  Figure 41. ACL Interface Configuration Window (1)  To perform detail configuration, select an interface in the list.    Figure 42. ACL Interface Configuration Window (2)  The types of interfaces you can configure are retrieved. In the INTERFACE, select an interface. For DIRECTION, select Ingress or Egress. For ACL NAME, select an item (name) that is configured in the ACL List configuration. To apply the changed configuration, click the <Apply> button.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 117 of 628 3.5.1.3  WLAN ACL Configuration 1)    Go to the fqm mode to configure the configure  ACL rule of CLI.  APC# configure terminal APC/configure# fqm-mode  2)    Configure WLAN ACL by entering the ‘ip access-group wireless’ command.    ip access-group wireless [ACL_NAME]  Parameter Description ACL_NAME ACL name to configure  3)    To check the configuration information, use the ‘show running-config network’ command.  3.5.1.4  Admin ACL Configuring Configuration using CLI 1)    Go to the fqm mode to configure the configure  ACL rule of CLI.  APC# configure terminal APC/configure# fqm-mode  2)    Configure Admin ACL by entering the ‘ip access-group wireless’ command.  ip access-group system [ACL_NAME]  Parameter Description ACL_NAME ACL name to configure  3)    To check the configuration information, use the ‘show running-config network’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>  <Access Control Lists>  <Access Group (System)> menu in the sub-menus.  The initial window of Access Group is shown below. After selecting a configuration, click the <Apply> button to configure Admin ACL.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 118 of 628  Figure 43. Admin ACL Configuration Window  3.5.2  Class-map Configuration 1)    Go to the fqm mode to configure the configure  ACL rule of CLI.  APC# configure terminal APC/configure# fqm-mode  2)    Go to Class-map mode.  class-map c1  3)    Select match-all or match-any.  match-type [MODE]  Parameter Description MODE Match mode configuration (match-all/match-any)  4)    Perform detail configuration according to match criteria.  Match Criteria Description access-group match access-group [ACCESS_GROUP_NAME] class match class [CLASS_NAME] COS   match cos [COS_VALUE/any] destination IP range match dst ip range [A.B.C.D] [A.B.C.D] IP match ip dscp [DSCP_VALUE/any] match ip precedence [IP_PRECEDENCE_VALUE/any] match ip tos [TOS_VALUE/any] protocol match protocol [PROTOCOL_VALE/any] source IP range match src ip range [A.B.C.D] [A.B.C.D]  5)    Exit the Class-map mode.  exit  6)    To check the configuration information, use the ‘show running-config network’ command.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 119 of 628 3.5.3  Policy-map Configuration 1)    Go to the fqm mode to configure the configure  ACL rule of CLI.  APC# configure terminal APC/configure# fqm-mode  2)    Go to policy-map mode. To delete a policy map, enter ‘no’ parameter in front of the command.  policy-map [POLICY_MAP_NAME]  no policy-map [POLICY_MAP_NAME]  3)    By using the class name configured in the class-map, go to the input mode.  class [CLASSMAP_NAME]  4)    Configure a policy-map using the following command.  [Bandwidth to a class of traffic]  bandwidth percentage [PERCENTAGE_VALUE]  [Configure set action]  mark cos [COS_VALUE]  mark ip dscp [DSCP_VALUE]  mark ip precedence [PRECEDENCE_VALUE]  mark priority [PRIORITY_VALUE]    [Configure police action]  police trtcm cir [1-1000] cbs [125000-125000000] pir [1-1000] pbs [125000-125000000] conform-action(drop|(dscp [0-63]|ip [0-7])|transmit) exceed-action(drop|(dscp [0-63]|ip [0-7])|transmit) violate-action(drop|(dscp [0-63]|ip [0-7])|transmit)(color-aware|color-blind|)  [Peak rate to a class of traffic]  queue-limit [QUEUE_NUM]  [Peak rate to a class of traffic]  shape-peak [PEAK_RATE]  5)    Exit the policy-map mode.  exit  6)    To check the configuration information, use the ‘show running-config network’ command.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 120 of 628 3.5.4  Service Policy Configuration Apply the policy configured in the policy-map to an interface.    1)    Go to configure  interface configuring mode to apply the service policy of CLI.  APC# configure terminal APC/configure# interface ge2 APC/configure/interface ge2#  2)    Apply the policy configured in the policy-map to an interface. The ‘no’ parameter is used to delete the policy.  service-policy [DIRECTION] [POLICY_NAME]  no service-policy [DIRECTION] [POLICY_NAME]  Parameter Description DIRECTION Application direction configuration (in/out) POLICY_NAME Policy to apply  An example of entering a command is shown below.  APC/configure/interface ge2# service-policy in p1 APC/configure/interface ge2# no service-policy in p1  3)    To check the configuration information, use the ‘show running-config network’ command.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 121 of 628 3.5.5  Time Profile The procedure of configuring a time profile and applying it to ACL is described.    3.5.5.1  Time Profile Configuration Configuration using CLI 1)    Go to configure of CLI fqm mode.  APC# configure terminal APC/configure# fqm-mode  2)    Configure a time profile. The ‘no’ parameter is used to delete a time profile.  time-profile [PROFILE_NAME]   day-start (any|YY[-MM[-DD[THH[:MM[:SS]]]]])   day-stop (any|YY[-MM[-DD[THH[:MM[:SS]]]]])   time-start (any|HH:MM[:SS])   time-stop (any|HH:[MM:SS])   monthdays (any|[0-31])   weekdays (any|VARIABLE))  no time-profile [PROFILE_NAME]  Parameter Description PROFILE_NAME Name of a time profile to configure  3)    To check the configured time profile, use the ‘show running-config network’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>  <Access Control Lists>  <Time Profile> menu in the sub-menus.  The configured time profile list is displayed on the window. When you click the <Add> or <Delete> button, you can add or delete a time profile.  Figure 44. Time Profile Configuration Window (1)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 122 of 628 Select an item in the list and perform detail configuration.  Figure 45. Time Profile Configuration Window (2)  After finishing configuration in the window, click the <Apply> button to apply it to the system.  3.5.5.2  Applying to ACL Configuration using CLI 1)    Go to the fqm mode to configure the configure  ACL rule of CLI.  APC# configure terminal APC/configure# fqm-mode  2)    Apply a time-profile to ACL. The ‘no’ parameter is used to delete a time profile.  access-list ip [ACL_NAME] time-profile [PROFILE_NAME]  no access-list ip [ACL_NAME] time-profile [PROFILE_NAME]  Parameter Description ACL_NAME ACL name to configure PROFILE_NAME Name of a time profile to configure  An example of applying ‘t1’ to ‘acl’ is shown below.  APC# configure terminal APC/configure# fqm-mode access-list ip acl1 time-profile t1  3)    To check the configuration information, use the ‘show running-config network’ command.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 123 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>  <Access Control Lists>  <IP ACL> menu in the sub-menus.  To change the configuration of ACL rule, click ACLNAME to change. You can change the configuration using the <Add> or <Delete> button. In addition, if there is a time profile in an ACL name, the IP ACL window is changed as shown below. After selecting a time profile, click the <Apply> button to apply the time profile to the ACL.  Figure 46. Applying to ACL  3.5.5.3  ACL (Time-Profile) Rule Configuration Configuration using CLI 1)    Go to configure  interface configuration mode of CLI.  APC# configure terminal APC/configure# interface ge2  2)    Configure ACL to the interface. The ‘no’ parameter is used to delete ACL.  ip access-group [MODE] [DIRECTION] [ACL_NAME]  no ip access-group [fw/fqm] [DIRECTION] [ACL_NAME]  Parameter Description MODE Configuration mode (fw/fqm) For ACL rule configuration, select ‘fqm’ (The ‘fw’ is used for firewall configuration.) DIRECTION Application direction configuration (in/out) ACL_NAME ACL name to configure  3)    To check the configuration information, use the ‘show running-config network’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>  <Access Control Lists>  <Access Group (Interface)> menu in the sub-menus. Perform configuration by referring to ‘ACL Rule Configuration’.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 124 of 628 3.5.6  OS-AWARE OS-AWARE is a function to use the option value of the DHCP Discover/Request transmitted from a station to check the type of the operating system used by the station.  The procedures to set OS-AWARE and apply the OS-AWARE settings to ACL are described below.    3.5.6.1  OS-AWARE Configuration Configuration using CLI 1)    Go to configure  os-aware mode of CLI.  APC# configure terminal APC/configure# os-aware APC/configure/os-aware # ?        delete                       Os-aware delete operation       exit                          Exit from os-aware mode       os-aware                    Os-aware add operation       update                       Os-aware update  2)    Set the OS-AWARE. Use the ‘delete’ parameter to delete the OS-AWARE.  os-aware [OS_AWARE NAME] dhcp-option [OPTION_NUM] dhcp-option [OPTION_NUM] eq[VALUE] os-type [OS_TYPE NAME]  delete os-aware [OS_AWARE NAME]  update os-aware [OS_AWARE NAME] dhcp-option [OPTION_NUM] dhcp-option [OPTION_NUM] eq [VALUE] os-type [OS_TYPE NAME]  Parameter Description OS_AWARE NAME os-aware name to configure SEQUENCE_NUM Fingerprint pattern match sequence(1~255) OPTION_NUM dhcp option value (1~255) VALUE Fingerprint value(HEX) OS_TYPE NAME os-type name to configure(Unknown, android, ios, windows, mac)  os-aware ‘window7’ creation:  APC# configure terminal APC/configure# os-aware APC/configure/os-aware # os-aware window7 seq 5 dhcp-option 1 eq AA os-type windows
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 125 of 628 os-aware ‘window7’ modification:  APC# configure terminal APC/configure# os-aware APC/configure/os-aware # os-aware window7 seq 8 dhcp-option 2 eq FF os-type windows  os-aware ‘window7’ deletion:  APC# configure terminal APC/configure# os-aware APC/configure/os-aware # no os-aware window7   3)    Check the settings by using the ‘show OS-AWARE-all’ or ‘show OS-AWARE-[OS_AWARE NAME]’ commands. ‘show OS-AWARE-all’ retrieves all OS-AWARE information and ‘show OS-AWARE-[OS_AWARE NAME]’ only retrieves user defined information out of all OS-AWARE information.  =============================================================================================== PLD_INDEX   OS_NAME   TYPE    REFCNT    OPTION    LENGTH   FINGERPRINT OS_TYPE ===============================================================================================      1        window7   0       0          5          2         1234 windows  3.5.6.2  Applying to ACL Configuration using CLI 1)    Go to configure  fqm mode to set the ACL rule of CLI.  APC# configure terminal APC/configure# fqm-mode  2)    Apply the OS-AWARE to ACL. Use the ‘no’ parameter to delete the OS-AWARE  access-list [ip/ipv6/mac] [ACL_NAME] [deny/permit/time-profile] seq [seq_NUM] [1/*/ahp/eigrp/esp/gre/icmp/igmp/igrp/ip/nos/ospf/pcp/pim/17/6/tcp/udp/1-255] [any/A.B.C.D A.B.C.D] eq [eq_VALUE] [any/A.B.C.D A.B.C.D] eq [eq_VALUE] os-aware[OS_AWARE NAME] [[[dscp [*|[0-63]]|precedence [*|[0-7])]]]|]  no access-list [ip/ipv6/mac] [ACL_NAME] [deny/permit/time-profile] seq [seq_NUM] [1/*/ahp/eigrp/esp/gre/icmp/igmp/igrp/ip/nos/ospf/pcp/pim/17/6/tcp/ udp/1-255] [any/A.B.C.D A.B.C.D] eq [eq_VALUE] [any/A.B.C.D A.B.C.D] eq [eq_VALUE] os-aware[OS_AWARE NAME] [[[dscp [*|[0-63]]|precedence [*|[0-7])]]]|]
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 126 of 628  Parameter Description OS_AWARE NAME os-aware name to configure  An example of applying ‘window7’ to ‘acl’ is as follows.  APC# configure terminal APC/configure# fqm-mode access-list ip acl1 permit seq 1 icmp any any os-aware window7  3)    To check the configuration information, use the ‘show running-config network’ command.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 127 of 628 3.6  Multicast to Unicast Execute the ‘show multi2uni-list’ command to check the list of wireless terminals that use the multicast to unicast function.  3.7  IP Multicast Configuration 3.7.1  IP Multicast Routing Configuration Configuration using CLI 1)    Go to configure mode of CLI.  WEC8500# configure terminal  2)    Enable or disable the routing function for IP multicast.  ip multicast-routing: Enable  no ip multicast-routing: Disable  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Multicast>  <IP Multicast> menu in the sub-menus.   After selecting Enable/Disable in the IP Multicast window, click the <Apply> button to apply the configuration.  Figure 47. IP Multicast Configuration Window  3.7.2  PIM Configuration As a multicast layer3 transmission protocol, the PIM has two modes, i.e. Dense mode and Sparse mode. The WEC8500 supports only PIM Sparse mode and the PIM Sparse mode can be configured for each interface.  Configuration using CLI 1)    Go to configure of CLI  mode where you want to perform configuration.  WEC8500# configure terminal WEC8500/configure# interface ge2
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 128 of 628 2)    Perform PIM configuration.  ip pim sparse-mode: Enable  no ip pim sparse-mode: Disable  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Multicast>  <PIM-SM> menu in the sub-menus. When you click the <Add> or <Delete> button, you can add or delete PIM-SM configuration.  Figure 48. PIM-SM Configuration Window (1)  Follow the below procedure to add a PIM.  1)    In the PIM-SM initial window, click the <Add> button.  2)    Click the <Select Interface> button.  Figure 49. PIM-SM Configuration Window (2)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 129 of 628 3)    Select an interface to add.  Figure 50. PIM-SM Configuration Window (3)  4)    The selected interface is displayed on the window. Click the <Apply> button to apply the configuration. Figure 51. PIM-SM Configuration Window (4)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 130 of 628 3.8  IGMP Snooping Configuration using CLI Use the ‘ip igmp snooping’ command to enable or disable Internet Group Management Protocol (IGMP) Snooping.  ip igmp snooping  no ip igmp snooping  When this command is executed in the Configure mode, the IGMP Snooping of a bridge is enabled or disabled. If it is executed in the interface mode, the IGMP Snooping of an interface is enabled or disabled.  Configuring the IGMP Snooping of a bridge:  WEC8500# configure terminal WEC8500/configure# ip igmp snooping  Configuring the IGMP Snooping of a VLAN interface:  WEC8500# configure terminal WEC8500/configure# interface vlan1.10 WEC8500/configure/interface vlan1.10# ip igmp snooping  In addition, a specific function of the IGMP Snooping functions of a VLAN interface can be enabled or disabled as shown in the below command.    [ip igmp snooping fast-leave] This command enables or disables the Fast-Leave function. (Default: Enable status)  ip igmp snooping fast-leave    no ip igmp snooping fast-leave  [ip igmp snooping querier] This command enables or disables the Querier function. (Default: Enable status)  ip igmp snooping querier    no ip igmp snooping querier  [ip igmp snooping report-suppression] This command enables or disables the Report-suppression function. (Default: Enable status)  ip igmp snooping report-suppression  no ip igmp snooping report-suppression
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 131 of 628 [ip igmp snooping mroute] This command enables or disables the Mroute function.  ip igmp snooping mroute [INTERFACE]  no ip igmp snooping mroute [INTERFACE]  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Multicast>  <IGMP Snooping> menu in the sub-menus.    [Config] Enables or disables the IGMP Snooping function or configures related functions.   To perform configuration for STATE, FAST LEAVE, QUERIER STATE, or REPORT SUPRESSION STATE, select Enable or Disable and click the <Apply> button.  Figure 52. IGMP Snooping Config Window  [Mroute] The PIM-SM initial window is shown below. When you click the <Add> or <Delete> button, you can add or delete PIM-SM configuration.  Figure 53. IGMP Snooping Mroute Creation Window (1)  1)    In the PIM-SM initial window, click the <Add> button.
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 132 of 628 2)    Click the <Select Vlan> button.  Figure 54. IGMP Snooping Mroute Creation Window (2)  3)    Select a VLAN interface that will be added to the Mroute.  Figure 55. IGMP Snooping Mroute Creation Window (3)  4)    The selected interface is displayed on the window. Click the <Apply> button to apply the configuration.  Figure 56. IGMP Snooping Mroute Creation Window (4)
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 133 of 628 3.9  Deep Packet Inspection It supports QoS by application. It may allow drop, bandwidth contract, and DSCP marking and it provides statistics by detailed category. The application of DPI in a unit of WLAN is possible and it also provides a monitoring function.  3.9.1  Configuring Profile and Application Rule A profile is a set of application rules and each rule includes the QoS settings of the application. The profile must set at least one application rule.  Configuration using CLI 1)    Enter the DPI Configuration mode.  APC# configure terminal APC/configure# dpi APC/configure/dpi#  2)    Make a profile and add an application rule.  APC/configure/dpi# profile [NAME] APC/configure/dpi/profile [NAME]# rule [APPLICATION] APC/configure/dpi/profile [NAME]/rule [APPLICATION]# action permit APC/configure/dpi/profile [NAME]/rule [APPLICATION]# mark [DSCP] APC/configure/dpi/profile [NAME]/rule [APPLICATION]# bw-contract upstream [BW_CNT] APC/configure/dpi/profile [NAME]/rule [APPLICATION]# bw-contract downstream [BW_CNT] APC/configure/dpi/profile [NAME]# enable  Parameter Description NAME Profile name APPLICATION Application name DSCP DSCP value BW_CNT Bandwidth Contract. Kbps  3)    Designate a WLAN where the profile is applied.  APC# configure terminal APC/configure# wlan [ID] APC/configure/wlan [ID]# dpi-profile [NAME]
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 134 of 628  Parameter Description NAME Profile name ID WLAN ID  3.9.2  Configuring Application Group Possible to configure one or more applications as a group.  Configuration using CLI 1)    Enter the DPI Configuration mode.  APC# configure terminal APC/configure# dpi APC/configure/dpi#  2)    Make a group and add an application.  APC/configure/dpi# app-group [NAME] APC/configure/dpi/app-group [NAME]# application [APPLICATION]  Parameter Description NAME Group name APPLICATION Application name  3.9.3  Checking Statistics by Category The category provides statistical information by application, WLAN, station, device-os-type, and group.  Configuration using CLI 1)    Check the statistical information on all applications.  APC# show dpi stat application    Accumulated Application Stat     --------------------------------------------------------------------------------------------------------------------------------------------------
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 135 of 628       |    ID  |             Application Name |   Upstream Packet Count |           Upstream Byte | Downstream Packet Count   |         Downstream Byte  |      |         |                              * |                           | Upstream Kbps |                           | Downstream Kbps          |      |         |                            **  | Drop                      | Drop           | Drop                      | Drop                      |     --------------------------------------------------------------------------------------------------------------------------------------------------      |     1   |                    BITTORRENT |                       0   |                   0     |                       0   |                       0   |      |     3   |                     FTP_DATA  |                       0   |              0     |                       0   |                       0   |      |     4   |                        TELNET |                       0   |                       0     |                       0   |                       0   |      |     5   |                          TFTP  |                       0   |                       0     |                       0   |                       0   |      |     6   |                         VIMEO |                       0   |                       0     |                       0   |                       0   |      |     7   |               YAHOO_MSG_VOIP |                       0   |                       0     |                       0   |                       0   |      |     8   |                       YOUTUBE |                       1   |                      54     |                       2   |                     220   |      |     9   |                        VSHARE |                       0   |                       0     |                       0   |                       0   |      |    10   |                  FLASH_YAHOO |                       0   |                       0     |                       0   |                       0   |      |    11   |                          BING  |                       0   |                       0     |                       0   |                       0   |      |    12   |                           DNS  |                       0   |                       0     |                       0   |                       0   |      |    13   |                         FLASH |                       0   |                       0     |                       0   |                       0   |      |    14   |                           FTP  |                       0   |                       0     |                       0   |                       0   |      |    15   |                         GMAIL |                       0   |                       0     |                       0   |                       0   |      |    17   |                        GOOGLE |                       0   |                       0     |                       0   |                       0   |      |    18   |                 GOOGLE_EARTH |                       0   |                       0     |                       0   |                       0   |      |    19   |                GOOGLE_GROUPS |                       0   |                       0     |                       0   |                       0   |      |    20   |                  GOOGLE_MAPS |                       0   |                       0     |                       0   |                       0   |      |    21   |                          HTTP  |                       0   |                       0     |                       0   |                       0   |      |    22   |                  HTTP_SECURE |                       3   |                     162    |                       3   |                     193   |      |    23   |                       TWITTER |                       0   |                       0     |                       0   |                       0   |
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 136 of 628        |    24   |                   YAHOO_MAIL  |                       0   |                       0     |                       0   |                       0   |       |    25   |                 YAHOO_SEARCH |                       0   |                       0     |                       0   |                       0   |       |    26   |                        ORKUT  |                       0   |                       0     |                       0   |                       0   |       |    27   |                     FACEBOOK  |                       0   |                       0     |                       0   |                       0   |       |    28   |                     LINKEDIN  |                       0   |                       0     |                       0   |                       0   |       |    29   |             VOICETALKSIGNAL  |                       0   |                       0     |                       0   |                       0   |       |    30   |              KAKAOTALK_VOIP  |                       0   |                       0     |                       0   |                       0   |       |    51   |             COMMON_PATTERNS  |                       0   |                       0     |                       0   |                       0   |     --------------------------------------------------------------------------------------------------------------------------------------------------    Top 10 Applications     -------------------------------------------------------------------------------------------------------------------------------------------------- |  RANK   |    ID  |      Application Name   |   Upstream Packet Count  |           Upstream Byte   | Downstream Packet Count  |         Downstream Byte   | -------------------------------------------------------------------------------------------------------------------------------------------------- |     1   |    22 |            HTTP_SECURE   |                       3   |                     162     |                       3     |                     193     | |     2   |     8 |                YOUTUBE   |                       1   |                      54      |                       2     |                     220     | --------------------------------------------------------------------------------------------------------------------------------------------------  APC#  2)    Check the statistical information on specific applications.  APC# show dpi stat application HTTP_SECURE    - "HTTP_SECURE"(ID: 22) Stat     | Description     |  ""     | Upstream Packet Count ......................                               3 packets     | Upstream Byte ..............................                            162 bytes     | Downstream Packet Count ....................
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 137 of 628  3 packets     | Downstream Byte ............................                            193 bytes     | Upstream Packet Drop Count .................                               0 packets     | Upstream Drop Byte .........................                              0 bytes     | Downstream Packet Drop Count ...............                              0 packets     | Downstream Drop Byte .......................                              0 bytes     |     | Top 10 Stations                                          |----1----2----3----4----5----6----7----8----9---|%     |  1. 00:12:47:F3:CF:A4    100.00%                  355 bytes ||||||||||||||||||||||||||||||||||||||||||||||||||     |     | Top 10 Stations(History)                                |----1----2----3----4----5----6----7----8----9---|%     |     | Top 10 WLANs                                              |----1----2----3----4----5----6----7----8----9---|%     |  1. 1                    100.00%                  355 bytes ||||||||||||||||||||||||||||||||||||||||||||||||||     |     | Top 10 Device types                                       |----1----2----3----4----5----6----7----8----9---|%     |  1. Samsung SM-P900      100.00%                  355 bytes ||||||||||||||||||||||||||||||||||||||||||||||||||     |     | Top 10 OS types                                      |----1----2----3----4----5----6----7----8----9---|%     |  1. Android 4.4.2        100.00%                  355 bytes ||||||||||||||||||||||||||||||||||||||||||||||||||  APC#  Parameter Description APPLICATION Application name  3)    Check the statistical information on all WLANs.  APC# show dpi stat wlan  4 )    Check the statistical information on specific WLANs.  APC# show dpi stat wlan [ID]
CHAPTER 3. Data Network Function ©  SAMSUNG Electronics Co., Ltd.  page 138 of 628  Parameter Description ID WLAN ID  5)    Check the statistical information on all stations.  APC# show dpi stat station  6)    Check the statistical information on specific stations.  APC# show dpi stat station [MAC]  파라미터 설명 MAC Station MAC  7)    Check the statistical information on all device-os-types.  APC# show dpi stat device-os-type  8)    Check the statistical information on specific device-os-types.  APC# show dpi stat device-os-type [TYPE]  Parameter Description TYPE Device of OS type name  9)    Check the statistical information on all application groups.  APC# show dpi stat group  10) Check the statistical information on specific application groups.  APC# show dpi stat group [NAME]  Parameter Description NAME Application group name
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 139 of 628 CHAPTER 4. AP Connection Management      This chapter describes the various configuration methods to manage the connection between the APC and AP.  4.1  APC Management 4.1.1  Managing APC List   To enable the APC system to provide the cluster or redundancy service, several APC systems must be installed at a site and each APC must have the information of other APC systems.    Therefore, the APC system provides the function of managing the list of APCs that will provide the cluster or redundancy function. And the APCs added to the APC list are used during cluster or redundancy configuration.  One APC system that will be saved in the APC list consists of an APC name and Medium Access Control (MAC) information. For the MAC address of another APC system, enter the MAC address retrieved from the Monitor  Summary  Inventory  MAC Address menu of system WEC screen.    By default, its own system information is added to the APC list. For the APC, operator can only change its name, but cannot delete it forcibly or change its MAC address.  The maximum number of APC systems that can be registered per model is as follows:  APC Model The maximum number of APC systems that can be registered WEC8500 12 WEC8050 2
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 140 of 628 Configuration using CLI The procedures for configuration are as follows.  1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure# apc WEC8500/configure/apc/apc-list#   2)    Go to the apc-list item of CLI.  WEC8500/configure# apc WEC8500/configure/apc/apc-list#   3)    Add, delete or change APC.  add-apc [APC_NAME] [MAC_ADDRESS]  del-apc [APC_NAME]  change-apc [CURRENT_APC_NAME] [NEW_APC_NAME]  change-mac [APC_NAME] [MAC_ADDRESS]  Parameter Description APC_NAME APC name CURRENT_APC_NAME Current APC name (before change) NEW_APC_NAME APC name after change IP_ADDRESS APC MAC address (xx:xx:xx:xx:xx:xx) In the APC system, enter the system mac address output parameter value of ‘show system info’ command.)  4)    To check the configured APC list, execute the ‘show apc-list’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <APC Lists> menu in the sub-menus. Operator can add a new APC by clicking the <Add> button in the figure.  Figure 57. APC List Management Window
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 141 of 628 4.1.2  Management Interface Configuration The APC can communicate with a W-EP wireless LAN AP using management interface. This is one of the information that must be configured first of all for wireless LAN service.    Configuration using CLI To configure management interface, execute the command as follows:  1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Configure a management interface.  apc ap-mgmt-if [IP_ADDRESS]  Parameter Description IP_ADDRESS IP address of APC that is used for communication with a W-EP wireless LAN AP  3)    To check the configured IP information, use the ‘show apc summary’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <General> menu in the sub-menus.  After entering a configuration in the AP Management of the window, click the <Apply> button.    Figure 58. Management interface configuration
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 142 of 628 4.1.3  CAPWAP Configuration A secured tunnel is created between APC and W-EP wireless LAN AP using Control And Provisioning Wireless Access Point (CAPWAP), i.e. a standard protocol, and data is transmitted through the tunnel. An encrypted data is used for both wire and wireless sections, high security is provided.  The CAPWAP channel consists of control channel and data channel depending on the type of packet being transmitted/received. The control channel handles provisioning and configuration/control messages and the data channel transmits the data traffic exchanged with a wireless terminal through CAPWAP tunneling. Because the control channel transmits the wireless LAN configuration information, there should be no data loss. Therefore, the re-transmission function is basically provided. In addition, the Datagram Transmission Layer Security (DTLS) is mandatorily used for the security of transmitted data. Meanwhile, as user data traffic is transmitted through the data channel, a faster response is preferred instead of packet transmission reliability. Therefore, the re-transmission function is not provided and the DTLS function is also optional.    For CAPWAP configuration, execute the following commands.  1)    Go to configure  apc capwap of CLI.  WEC8500# configure terminal WEC8500/configure# apc WEC8500/configure/apc/capwap# WEC8500# configure terminal WEC8500/configure# apc WEC8500/configure/apc/capwap#  2)    Configure the CAPWAP function using the following commands.  add-multicast-if [VLAN_ID]: Configure a VLAN ID for multicast interface.  auto-discovery: Configures the function of automatically detecting and registering an AP.  auto-discovery-ap-group [AP_GROUP_ID]: Configures an AP group that will be working when an AP is automatically registered.  change-state-pending-timer [TIMER]: Configures the maximum waiting time until the APC receives the Change State Event Request message from an AP after transmitting the Configuration Status Response message to the AP (RFC 5415).  ctr-src-port [port]: Changes the CAPWAP Control port (RFC5415).  date-check-timer [TIMER]: Configures the maximum waiting time until the APC receives Data Channel Keep-alive (default: 30 seconds)  discovery-by-broadcast: Configures whether to allow connection to CAPWAP broadcast.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 143 of 628  discovery-by-multicast: Configures whether to allow connection to CAPWAP multicast. (The ‘add-multicast-if’ must be configured before configuring whether to allow multicast connection.)  discovery-del-timer: If the Join message is not received after receiving a Discovery message, this configures the timeout to discard the previously received Discovery messages.  dtls-session-delete [TIMER]: Configures the waiting time to disconnect DTLS when releasing the connection between an AP and CAPWAP.  retransmit-interval [INTERVAL]: Configures the re-transmission interval of CAPWAP control packet retransmission.  max-retransmit [COUNT]: Configures maximum number of retransmission when there is no answer for CAPWAP control packet transmission.    wait-dtls-timer [TIMER]: Configures the maximum time until the AP waits without receiving the DTLS handshake message from the APC (RFC 5415) (default: 60 seconds)  wait-join-timer [TIMER]: Configures the maximum time until the APC receives the Join message after finishing DTLS handshake (RFC 5415) (default: 60 seconds)  window-size [size]: Configures the maximum number of packets that can be transmitted without response during CAPWAP control packet transmission.  An example of entering a command is shown below.  WEC8500/configure/apc/capwap# date-check-timer 30  3)    To check the configured CAPWAP information, use the ‘show apc capwap summary’ command.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 144 of 628 4.1.4  AP Registration (Auto Discovery) Configuration The APC provides the AP auto-discovery function that automatically registers APs in the same network without having to configure any settings in advance. To configure the function, execute the following commands.  Configuration using CLI 1)    Go to configure  apc  capwap of CLI.  WEC8500# configure terminal WEC8500/configure# apc WEC8500/configure/apc # capwap WEC8500/configure/apc/capwap #  2)    Configure the automatic registration function.  auto-discovery  3)    Configure an AP group that will be working after AP automatic registration.  auto-discovery-ap-group [AP_GROUP_ID]  Parameter Description AP_GROUP_ID ap-group that will be working after AP automatic registration  4)    To check the configured information, use the ‘show apc capwap summary’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <General> menu from the sub-menus.    After entering a configuration in the AP Registration of the window, click the <Apply> button.    Figure 59. AP Registration Method Setup Window
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 145 of 628 4.1.5  Managing AP File Transmission It provides the configuration and transmission management function for the tech support file of the AP.  4.1.5.1  Tech Support Information File 1)    Go to configure  APC mode of CLI.  WEC8500# configure terminal WEC8500/configure# apc WEC8500/configure/apc#  2)    Configure a file transmission method to collect the AP Tech support information.  tech-support [MODE]  Parameter Description MODE Selects file transmission method (ftp/sftp/http). - tftp is not supported.  3)    If AP debug information collection is failed, configure maximum number of retries.  tech-support max-retry [COUNT]  Parameter Description COUNT Number of retries.  4)    To check the configuration information, use the ‘show ap tech-support’ command.  4.1.6  APC Redundancy Configuration An operator can add a backup APC to an AP to make the backup APC provide the service even when an APC fault occurs.  The maximum number of backup APCs that can be registered to one AP per model is as follows:  APC Model The maximum number of APC systems that can be registered WEC8500 3 (Primary Server, Secondary Server, Tertiary Server) WEC8050 2 (Primary Server, Secondary Server)  If a fault occurs to the primary APC while an AP is connected to the primary APC, the AP is connected to the secondary APC. If a fault also occurs to the secondary APC, the AP is connected to the tertiary APC. For reference, the WEC8050 model does not support a tertiary APC.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 146 of 628 Operator can also configure fallback to return to the original APC from the backup APC during the service. If the fallback operation is configured, the AP periodically performs health check to check whether the primary APC can be connected. When the connection is required, it can immediately perform fallback according to the fallback option or can perform fallback on a specified time. The reason why configuring fallback time zone is to minimize the service interruption due to fallback by making it happens when the load is low.  In an APC, operator can configure the primary and backup APCs of an AP in the following steps.  1)    Register APCs to the APC list.   In the ‘APC List Management’, how to add the APC list is described. 2)    Add the APCs in the APC list to redundancy.   If necessary, configure the fallback function. And then, operator can configure the APCs added to redundancy as the primary, secondary, or tertiary server of an AP. 3)    Configure a primary, secondary, and tertiary server per AP. To make an AP operate in redundancy configuration, configure the Discovery Type of the AP as ‘APC Referal’. Use the Multi-Set function of WEC to configure several APs at the same time.    Configuration using CLI 1)    By referring to the ‘AP List Management’, add the APC list that will be used as a backup APC. 2)    After entering into the configure  redundancy mode, add or delete the APCs in the APC list. If necessary, configure the fallback function.    WEC8500# configure terminal WEC8500/configure# redundancy WEC8500/configure/redundancy#    add-apc [APC_NAME] [IP_ADDRESS] [PORT]  del-apc [APC_NAME]  fallback-enable now    fallback-enable at-time [FALLBACK START-END TIME]  fallback-interval [INTERVAL]  Parameter Description APC_NAME Name of an APC to be added or deleted to/from redundancy The APC must be an APC registered in the APC list. IP_ADDRESS IP address of an APC to add This address is an IP required by an AP to connect to the APC. Therefore, you must enter the AP Management IP address of the APC.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 147 of 628 Parameter Description PORT CAPWAP PORT number of the APC to add This port number is required by an AP to connect to the APC. If no port number is entered, it is set to 5246, the default port number of CAPWAP protocol. It is recommended not to use a different port number if it is specially required. FALLBACK START-END TIME Enter the time zone where an AP connected to the backup (secondary or tertiary) APC can do fallback.   The input format is as follows: - Format: hh:mm-hh:mm   - Example: 2:00-5:00  Fallback is available between 2pm and 5pm. INTERVAL Configures the interval that an AP connected to the backup (secondary or tertiary) APC attempts fallback (second). If a specific time is not entered, the default is 120 seconds. The minimum is 60 seconds and the maximum is 1800 seconds.  3)    Enter into the configure  AP configuration mode of CLI and configure a primary, secondary, and tertiary server. To make an AP operate in redundancy configuration, configure the Discovery of the AP as ‘apc-referal’.  WEC8500# configure terminal WEC8500/configure# ap ap_1 WEC8500/configure/ap ap_1#   discovery apc-referal  primary-apc [APC_NAME]  secondary-apc [APC_NAME]  tertiary-apc [APC_NAME]  Parameter Description APC_NAME Enter the name of an APC registered to redundancy. - Primary apc: The first APC that the AP attempts to connect.   It is usually configured with the currently connected APC. - Secondary-apc, tertiary-apc: APC that the AP attempts to connect when there is no response from the primary-apc. DISCOVERY_TYPE Discovery Type - ap-followed: Discovery type is set by AP. - apc-referal: Discovery type is set by APC using the backup APC lists.   To apply the priority of APC to which the AP will be connected, operator needs to select the apc-referal. - DHCP: Discovery type is interoperating with the DHCP server. To use this mode, IP ADDRESS POLICY of the AP must be set to DHCP. - Auto: Discovery type is automatically changed by the AP for automatic connection to the APC.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 148 of 628 4)    To check the configured apc list, execute the ‘show apc summary’ command.  5)    To check the redundancy information, execute the ‘show redundancy summary’ command.  6)    To check the configured AP profile, execute the ‘show ap detail [AP_PROFILE_ NAME]’ command.  Configuration using Web UI By referring to the ‘APC List Management’, add the APC list that will be used as a backup APC.  1)    In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Redundancy> menu in the sub-menus. Operator can add or delete the APC list that will be used for redundancy. If necessary, operator can configure the fallback function.      Figure 60. Redundancy Configuration Window  Parameter Description APC NAME Name of an APC to be added or deleted to/from redundancy The APC must be an APC registered in the APC list. MAC ADDRESS Because this is a MAC address configured during registration to the APC list, an operator does not have to enter this at the redundancy configuration stage. IP_ADDRESS IP address of an APC to add This address is an IP required by an AP to connect to the APC. Therefore, you must enter the AP Management IP address of the APC. PORT CAPWAP PORT number of the APC to add If no port number is entered, it is set to 5246, the default port number of
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 149 of 628 Parameter Description CAPWAP protocol. It is recommended not to use a different port number if it is specially required. PUBLIC_IP_ADDRESS PUBLIC IP address of the APC to add This address is an IP required by an AP to connect to the APC. If the APC is in the NAT environment, you must enter an official IP configured in the NAT instead of the private IP of APC. PUBLIC_PORT PUBLIC CAPWAP PORT number of the APC to add This port number is required by an AP to connect to the APC. If the APC is under the NAT environment, you must enter the port number configured in the NAT instead of the actual CAPWAP port number of APC. FALLBACK START-END TIME Enter the time zone where an AP connected to the backup (secondary or tertiary) APC can do fallback.   The input format is as follows: Format: hh:mm-hh:mm   Example: 2:00-5:00  Fallback is available between 2pm and 5pm. INTERVAL Configures the interval that an AP connected to the backup (secondary or tertiary) APC attempts fallback (second). If a specific time is not entered, the default is 120 seconds. The minimum is 60 seconds and the maximum is 1800 seconds.  2)    In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points> menu in the sub-menus. Click the name of AP Profile to which the redundancy function will be applied. After configuring the DISCOVERY TYPE of AP to ‘APC Referal’, select the PRIMARY CONTROLLER NAME, SECONDARY CONTROLLER NAME, and TERTIARY CONTROLLER NAME. For the WEC8500 model, the TERTIARY CONTROLLER NAME is not shown in the menu.  Figure 61. AP retrieving window
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 150 of 628   Figure 62. AP redundancy Configuration Window  Parameter Description APC_NAME Enter the name of an APC registered to redundancy. - Primary apc: The first APC that the AP attempts to connect.   It is usually configured with the currently connected APC. - Secondary-apc, tertiary-apc: APC that the AP attempts to connect when there is no response from the primary-apc. DISCOVERY_TYPE Discovery Type - ap-followed: Discovery type is set by AP. - apc-referal: Discovery type is set by APC using the backup APC lists. To apply the priority of APC to which the AP will be connected, operator needs to select the apc-referal. - Auto: Discovery type is automatically changed by the AP for automatic connection to the APC. - DHCP: Discovery type is interoperating with the DHCP server. To use this mode, IP ADDRESS POLICY of the AP must be set to DHCP.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 151 of 628 4.2  AP Management 4.2.1  AP Group Configuration The APC manages the services provided to the AP by group. An operator can add or delete several APs to/from a group. It is also possible to add/remove WLANs to/from an AP group so that the same WLAN services can be provided for each group.  When the APC is installed for the first time, a ‘default’ group is created. When the AP information is created first time, the AP is automatically added to the ‘default’ group.   If the ‘auto-discovery’ mode is enabled in the APC, an AP connected to the APC is automatically added to the ‘default’ group. For reference, operator can specify a specific AP group where an AP will be added during auto-discovery configuration.  An operator can manage the services per group by creating a new AP group and can move or a specific AP to another group or delete it in the original group. The APs deleted in a group are automatically moved to the ‘default’ group.  When a new AP group is created, it is possible to configure AP information for each group. If the Overwrite option is enabled for each setting, the respective setting is applied to all APs within the group.    Generally, up to 16 WLANs can be added to an AP group. However, if a root AP is contained in an AP group, only up to 15 WLANs can be added to the group.  If the AP group information is changed, i.e. if an AP moves to another group, the AP uses the WLAN of a new group. Therefore, some existing WLANs in the AP are deleted and some new WLANs can be added. The detail example is shown below. (Example) Default group: Includes wlan1, wlan2, wlan3, and wlan4. New group: Includes wlan4, wlan5, and wlan6. When the AP_1 moves from the default group to a new group   The APC asks the AP_1 to delete the wlan1, wlan2, and wlan3. The APC asks the AP_1 to add the wlan5 and wlan6.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 152 of 628 Configuration using CLI To manage an AP group, execute the command as follows.  1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Create or delete an AP group. Use ‘no’ parameter in front of the command to delete an AP group.    ap-group [AP_GROUP_NAME]  no ap-group [AP_GROUP_NAME]  3)    Add or delete an AP to or from the AP group. Use ‘no’ parameter in front of the command to delete an AP from the AP group. But, for a default AP group, you cannot delete an AP from the group. If you delete an AP from other AP groups other than the default group, the deleted AP is included into the default AP group.  add-ap [AP_NAME]  no add-ap [AP_NAME]  4)    Use the ‘show ap-group summary’ command to check the AP group information.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <AP Groups> menu in the sub-menus. It provides the group configuration of the AP.   Click the <Add> or <Delete> button to add or delete a group.  Figure 63. AP groups configuration Window  Figure 64. AP Group Addition Window
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 153 of 628 4.2.1.1  General AP Group Settings To aid management of APs in groups, the APC allows configuration of settings which can be applied commonly to each group. The following functions are provided:  Parameter Description Description   This configures the description of the AP group. AP Mode This configures the operation mode of the AP. The operator can select General AP, Root AP, or Repeater AP. Location This configures the installation location information of the AP. IP Mode This configures the IP configuration mode of the AP. The operator can select DHCP or AP Priority. AP Status This configures the up/down status of the AP. Redundancy If the APCs are configured for redundancy, this configures the discovery type and Primary/Secondary/Tertiary Controller settings of the AP.  The APC provides the overwrite option for each AP group setting. If the Overwrite option is enabled for each setting, the respective setting is applied to all APs within the group.   For example, if the Overwrite option is enabled for AP Mode and AP Mode is set to General, all the APs within the group will run as General APs.  Configuration using CLI To configure redundancy settings for the AP group, perform the following commands:  1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Enter the AP Group configuration mode.  ap-group [AP_GROUP_NAME]  3)    Enter the profile configuration mode for the AP group.  Profile  4)    Configure the following AP group profiles:  description  overwrite-ap-mode  no overwrite-ap-mode  ap-mode  overwrite-location  no overwrite-location  location
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 154 of 628  overwrite-ip-mode  no overwrite-ip-mode  ip-mode  overwrite-state  no overwrite-state  shutdown  no shutdown  no overwrite-redundancy  discovery  primary-apc  no primary-apc  secondary-apc  no secondary-apc  tertiary-apc  no tertiary-apc  Parameter Description DESCRIPTION This contains a brief description of the AP group. OVERWRITE-AP-MODE If overwrite-ap-mode is enabled, the AP mode information set for the group is applied to all APs within the group. AP-MODE This is the AP operation mode. The following modes are available: - generalAp: General operation mode. Default value.   - rootAp: AP mode where a repeater AP can be connected. - repeasterAp: AP mode that is connected to a wireless area and the APC through the root AP. OVERWRITE-LOCATION If overwrite-location is enabled, the location information set for the group is applied to all APs within the group. LOCATION This is the location information of the AP. OVERWRITE-IP-MODE If overwrite-ip is enabled, the IP mode information set for the group is applied to all APs within the group. IP-MODE This is the mode of receiving an IP address by the AP. The following modes are available:   - dhcp: The AP receives IP address allocation using DHCP. - ap: The AP uses a manually configured IP address. OVERWRITE-STATE If overwrite-state is enabled, the AP state information set for the group is applied to all APs within the group. shutdown This sets the AP state to UP or DOWN. OVERWRITE-REDUNDANCY If overwrite-redundancy is enabled, the redundancy setting (primary-apc, secondary-apc, tertiary-apc) of the AP group is applied to all APs within the group. DISCOVERY If the APCs are configured for redundancy, this configures the method used for APs to connect to the APC. The following modes are available: - ap-followed: The discovery type and discovery list configured for the
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 155 of 628 Parameter Description AP are used. - apc-referral: The APC list configured for the APC is used as the discovery list. - DHCP: The APC list information relayed by DHCP option 138 (IPv4) or option 52 (IPv6) is used as the discovery list. - auto: Discovery type is automatically changed by the AP for automatic connection to the APC. PRIMARY-APC This is the name of the primary APC server. The AP attempts to connect to this APC first. SECONDARY-APC This is the name of the secondary APC server. If the AP is unable to connect to the primary APC, the AP attempts to connect to this APC on its second connection attempt. TERTIARY-APC This is the name of the tertiary APC server. If the AP is unable to connect to the secondary APC, the AP attempts to connect to this APC on its third connection attempt. The WEC8050 model does not support Tertiary-APC.  5)    Use the ‘show ap-group detail [AP_GROUP_NAME]’ command to check the AP group information.  Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <AP Groups> in the submenu, and then select an AP group to configure. In the ‘General’ tab of the AP group, configure the necessary settings. If the OVERWRITE AP CONFIG checkbox is selected, the respective setting is applied to all APs within the group.  Figure 65. General Configuration Window for AP Group
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 156 of 628 4.2.1.2  Adding/Removing APs To aid management of APs in groups, the APC allows addition/removal of APs to/from AP groups.  Configuration using CLI 1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Create an AP group or enter the AP group configuration mode.  ap-group [AP_GROUP_NAME]  3)    Add/remove an AP to/from the AP group. Use ‘no’ parameter in front of the command to delete an AP from the AP group. However, you cannot delete an AP from a default AP group. If you delete an AP from groups other than the default group, the deleted AP is then included in the default AP group.  add-ap [AP_NAME]  no add-ap [AP_NAME]  4)    Use the ‘show ap-group summary’ command to check the AP group information.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 157 of 628 Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <AP Groups> in the submenu, and then select an AP group to configure. Under the ‘APs’ tab of the AP group, APs can be added or removed.  Figure 66. AP Add/Remove Window for AP Group  4.2.1.3  Adding/Removing WLANs To allows the same WLAN services to be provided to the APs allocated to each group, the APC allows addition/removal of WLANs to/from each AP group.    Configuration using CLI 1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Create an AP group or enter the AP group configuration mode.  ap-group [AP_GROUP_NAME]  3)    Add/remove an WLAN to/from the AP group. Use ‘no’ parameter in front of the command to delete an WLAN from the AP group.    add-wlan [WLAN_ID]  no add-wlan [WLAN_ID]
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 158 of 628 4)    Use the ‘show ap-group summary’ command to check the AP group information.  Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <AP Groups> in the submenu, and then select an AP group to configure. Under the ‘WLANs’ tab of the AP group, WLANs can be added or removed.  Figure 67. WLAN Add/Remove Window for AP Group
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 159 of 628 4.2.1.4  802.11a/n Configuration Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <AP Groups> in the submenu, and then select an AP group to configure. Settings can be configured under the ‘802.11a/n’ tab of the AP group.  Figure 68. 802.11a/n Window for AP Group  The configuration items are as follows:  [Service Configuration of AP Group]  SERVICE: Enable or disable the radio service.  [Channel Configuration]  CURRENT CHANNEL: Channel configuration (range: 36-165)  CHANNEL FIX: The configured channel is configured as fixed and it is not affected by automatic adjustment functions such as RRM. When the <Monitor>  <Access Points>  <Radio>  <802.11a/n/ac> menu is selected, the channel value is shown as * (optional).  [TX Power Setting]  TX CURRENT POWER: TX power (range: 3-23)  TX POWER FIX: The configured TX power is configured as fixed and it is not affected by automatic adjustment functions such as RRM. When the <Monitor>  <Access Points>  <Radio>  <802.11a/n/ac> menu is selected, the TxPower value is shown as * (optional).    To check the configured channel and TX power information, go to <Monitor>  <Access Points>  <Radio>  <802.11a/n/ac>.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 160 of 628 4.2.1.5  802.11b/g/n Configuration Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <AP Groups> in the submenu, and then select an AP group to configure. Settings can be configured under the ‘802.11b/g/n’ tab of the AP group.  Figure 69. 802.11b/g/n Window for AP Group  The configuration items are as follows:  [Service Configuration of AP Group]  SERVICE: Enable or disable the radio service.  [Channel Configuration]  CURRENT CHANNEL: Channel configuration (range: 1-14)  CHANNEL FIX: The configured channel is configured as fixed and it is not affected by automatic adjustment functions such as RRM. When the <Monitor>  <Access Points>  <Radio>  <802.11b/g/n> menu is selected, the channel value is shown as * (optional).  [TX Power Setting]  TX CURRENT POWER: TX power (range: 3-23)  TX POWER FIX: The configured TX power is configured as fixed and it is not affected by automatic adjustment functions such as RRM. When the <Monitor>  <Access Points>  <Radio>  <802.11b/g/n> menu is selected, the TxPower value is shown as * (optional).    To check the configured channel and TX power information, go to <Monitor>  <Access Points>  <Radio>  <802.11b/g/n>.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 161 of 628 4.2.1.6  Advanced Configuration In order to provide the same services to the APs allocated to each group, the APC allows configuration of advanced settings for each AP group.    Configuring AP Group Profile with CLI 1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Create an AP group or enter the AP group configuration mode.  ap-group [AP_GROUP_NAME]  3)    Enter the profile configuration mode for the AP group.  profile  4)    Configure the following AP group profiles:  overwrite-apc-ap-timer  no overwrite-apc-ap-timer  echo-interval  discovery-interval  report-interval  statistics-timer  retransmit-interval  echo-retransmit-interval  max-echo-retransmit  overwrite-telnet-ssh  no overwrite-telnet-ssh  telnet-enable  no telnet-enable  ssh-enable  no ssh-enable  overwrite-console  no overwrite-console  console-enable  no console-enable  overwrite-dtls  no overwrite-dtls  dtls-policy  overwrite-led-control  no overwrite-led-control  led-config
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 162 of 628  overwrite-vlan  no overwrite-vlan  vlan-support  no vlan-support  native-vlanId  no native-vlanId  overwrite-poe-type  no  overwrite-poe-type  overwrite-uplink-bandwidth  no  overwrite-uplink-bandwidth  uplink-bandwidth  overwrite-temperature-alarm  no  overwrite-temperature-alarm  temperature-alarm-on-level  temperature-alarm-off-level  temperature-alarm-control-type  overwrite-link-aggregation  no  overwrite-link-aggregation  link-aggregation  no  link-aggregation  Parameter Description DESCRIPTION This contains a brief description of the AP group. OVERWRITE-APC-AP-TIMER If overwrite-apc-ap-timer is enabled, the APC-AP timer setting of the group is applied to all APs within the group. ECHO-INTERvAL Configures the time when an echo request message is transmitted to the APC where an AP joins (unit: seconds). DISCOVERY-INTERVAL Configures a waiting time until the CAPWAP discovery response message is received (unit: seconds). REPORT-INTERVAL Configures the time interval for transmitting the description error from AP to the APC (unit: seconds). STATISTICS-TIMER Configures the time interval for transmitting the statistical information provided by the CAPWAP (unit: seconds). RETRANSMIT-INTERVAL The APC waits for this length of time before retransmitting an echo request message when there is no response. The APC sets double the length of echo-interval as the echo timeout time. If no echo message is received from the AP for as long as double the length of the echo-interval, the APC judges that the AP is down (unit: seconds). MAX-ECHO-RETRANSMIT The APC waits for this length of time before retransmitting an echo request message when there is no response. The APC sets
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 163 of 628 Parameter Description double the length of echo-interval as the echo timeout time. If no echo message is received from the AP for as long as double the length of the echo-interval, the APC judges that the AP is down (unit: seconds). OVERWRITE-TELNET-SSH If overwrite-telnet-ssh is enabled, the telnet and SSH settings for the AP group are applied to all APs within the group.   TELNET-ENABLE This enables the telnet server and configures telnet port of the AP. SSH-ENABLE This enables the SSH server and configures SSH port of the AP. OVERWRITE-CONSOLE If overwrite-console is enabled, the telnet and SSH settings of the AP group are applied to all APs within the group.   CONSOLE-ENABLE This configures whether to allow console access to the AP. OVERWRITE-DTLS If overwrite-dtls is enabled, the DTLS settings of the AP group are applied to all APs within the group. DTLS-POLICY Configures the DTLS Policy of an AP. OVERWRITE-LED-CONTROL If overwrite-led-control is enabled, the LED settings of the AP group are applied to all APs within the group. LED-CONFIG This configures whether to turn the LED on/off. OVERWRITE-VLAN If overwrite-vlan is enabled, the VLAN settings of the AP group are applied to all APs within the group. VLAN-SUPPORT This configures whether to enable the native VLAN of the AP. NATIVE-VLANID This configures the native VLAN value of the AP. OVERWRITE-POE-TYPE If the overwrite-poe-type is activated, the POE Type information set in the AP group is applied to all APs in the group. POE-TYPE Sets the POE Type information below. 802.3at/802.3af/auto OVERWRITE-UPLINK-BANDWIDTH If the overwrite-uplink-bandwidth is activated, the uplink bandwidth information set in the AP group is applied to all APs in the group. UPLINK-BANDWIDTH Sets the allowed value for AP uplink bandwidth. Possible to set between 1 and 1024 Mbps and if it is set to 0, the uplink bandwidth is not restricted. OVERWRITE-TEMPERATURE-ALARM If the overwrite-temperature-alarm is activated, the temperature alarm information set in the AP group is applied to all APs in the group. TEMPERATURE-ALARM-ON-LEVEL If the temperature of the AP exceeds the Temperature-Alarm-On-Level, the temperature alarm occurs. The default is 98 and possible to set between 50 and 130. TEMPERATURE-ALARM-OFF-LEVEL If the temperature of the AP is less than the Temperature-Alarm-Off-Level, the temperature alarm is cleared. The default is 90 and possible to set between 50 and 130.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 164 of 628 Parameter Description TEMPERATURE-ALARM-CONTROL-TYPE If the temperature alarm occurs, whether the radio of the AP is set to be off or on. OVERWRITE-LINK-AGGREGATION If the overwrite-link-aggregation is activated, the link aggregation information set in the AP group is applied to all APs in the group. LINK-AGGREGATION In case of an AP model for 802.11ac, provide two uplink Ethernet ports. Possible to set link aggregation for two Ethernet ports. If link aggregation is activated, possible to set the following mode: - Both (Destination + Source) - Destination - Source  5)    Use the ‘show ap-group detail [AP_GROUP_NAME]’ command to check the AP group information.  Configuring AirMove Service of AP Group with CLI 1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Create an AP group or enter the AP group configuration mode.  ap-group [AP_GROUP_NAME]  3)    Enter the profile configuration mode for the AP group.  profile  4)    Configure the AirMove service of the AP group.  enable: Enables/disables the AirMove service.  target-ap: This option is used for selecting APs which will be applied with the changes made to the group settings. If 'all' is selected, changes are applied to all APs and config priority of the APs also change to group. If 'keep-ap-config' is selected, only the APs whose config priority is set to group have the airmove value of the group applied to them.  WEC8500# configure terminal WEC8500/configure# ap-group default GroupName : default WEC8500/configure/ap-group default# airmove WEC8500/configure/ap-group default/airmove# ?       decision-delta           Set delta value for handover decision       enable                     Airmove enable       exit                       Exit from airmove mode
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 165 of 628       number-of-channel       Set the number of channel required during one time scanning       number-of-proreq        Set the number of probe request required during one time scanning       scan-time-channel       Set time required for one channel scanning       scan-time-interleave   Set interval time required for new scanning start       scan-time-service       Set time required for STA service during STA’s scanning       scan-trigger-level      Set a trigger level for STA's scanning start       target-ap                Set config target ap       <cr> WEC8500/configure/ap-group default/airmove# enable ?   <cr> WEC8500/configure/ap-group default/airmove# decision-delta ?   1 - 100                       Enter the value [dBm]  WEC8500/configure/ap-group default/airmove# number-of-channel ?   1 - 20                        Enter the number WEC8500/configure/ap-group default/airmove# number-of-proreq ?   1 - 10                     Enter the number  WEC8500/configure/ap-group default/airmove# scan-time-channel ?   0 - 100                     Enter the time [ms]  WEC8500/configure/ap-group default/airmove# scan-time-interleave ?   1000 - 10000                 Enter the time [ms]  WEC8500/configure/ap-group default/airmove# scan-time-service ?   1 - 1000                      Enter the time [ms]  WEC8500/configure/ap-group default/airmove# scan-trigger-level ?   -128 - 0                      Enter the trigger level [dBm]  WEC8500/configure/ap-group default/airmove# target-ap ?   all                            All   keep-ap-config               Keep ap config WEC8500/configure/ap-group default/airmove# end  4)    Use the ‘show airmove group [ap_group_name]’ command to check the AP group information.  WEC8500# show airmove group default  Airmove Group Configurations ----------------------------     Airmove State                       Disable     Target AP                           Keep Ap Config     Scan trigger level                  -70 dBm     Scanning time for one channel     5 ms     Service time during scanning        100 ms     Scanning interval time              1000 ms     Number of probe requests            2     Number of scanning channels         4
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 166 of 628      Value of station roam delta         15 WEC8500#  Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <AP Groups> in the submenu, and then select an AP group to configure. Advanced settings and AirMove settings of the AP group can be changed under the ‘Advanced’ tab of AP Group.  Figure 70. Advanced Configuration Window for AP Group
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 167 of 628 4.2.2  Configuring Remote AP Group If the APs are located in an area where the APC is not located, those APs must be classified into a separate group for service. The APC can manage the APs in another area by grouping them into a remote AP group.  In the Remote AP group, the operator can configure the below information and the APs in the Remote AP group are operating based on the same configuration.  Addition/Deletion of Remote AP  Possible to add or delete APs to be included in the remote AP group.  Local Authentication  Radius Server Possible to set a Radius server which will authenticate a station connecting to the remote AP.  Remote AP User List Possible to add or delete a user (station) to be managed in the remote AP.  Role Based Access Control  Possible to apply the ACL profile.  Tunnel Forwarding  Possible to add the split tunnel ACL settings of the WLAN set with the tunneling mode.  Local Bridging Forwarding  Possible to add settings of VLAN ID, ACL, and Pre-Auth ACL of the WLAN set with the local bridging mode.  When an AP group is added and the remote AP group is checked, APs included in the AP group operates in the remote AP mode.  If an AP is added to or deleted from a remote AP group, the AP is rebooted and reconnected to the APC. If an AP moves between remote AP groups, the AP is not rebooted.  4.2.2.1  Addition/Removal Setting Configuration using CLI 1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Create an AP group.  ap-group[REMOTE_AP_GROUP_NAME]
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 168 of 628 3)    Designate remote AP group properties to the AP group.  group-type remote 4)    When the remote AP group is deleted, use the 'no' parameter in front of the ap-group command to delete the remote AP group.  no ap-group[REMOTE_AP_GROUP_NAME]  Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration> and then select the <AP Groups> menu in the sub-menus. Click the <Add> or <Delete> button to add or delete a group.    Figure 71. Remote AP Group Add/Remove Window  4.2.2.2  Local Authentication Configuration for Remote AP Group Users (stations) accessing the remote AP and the Radius server which authenticates such users can be configured.  Configuration using CLI To configure the local authentication of the remote AP group, perform the command as follows:  1)    Go to configure Remote AP Group configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure#   WEC8500/configure/ap-group {remote-ap-group-name}  WEC8500/configure/ap-group/{remote-ap-group-name}#remote  2)    Configure Primary Radius Server 1, Primary Radius Server 2, and Primary Radius Server 3. The RADIUS server information must be created in the radius of the security item in advance. To delete the configured RADIUS server information, enter ‘no’ parameter in front of the command.  remote primary-radius[RADIUS_SERVER_INDEX]  no remote primary-radius[RADIUS_SERVER_INDEX]  remote secondary-radius[RADIUS_SERVER_INDEX]
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 169 of 628  no remote secondary-radius[RADIUS_SERVER_INDEX]  remote tertiary-radius[RADIUS_SERVER_INDEX]  no remote tertiary-radius[RADIUS_SERVER_INDEX]  3)    Add or delete users (stations) connecting to the remote AP.  add-user [USER NAME]  no add-user [USER NAME]  4)   Execute the ‘show remote-ap-group detail [REMOTE AP GROUP NAME]’ command to check the AP group information.  Configuration using Web UI   In the menu bar of <WEC Main window>, select <Configuration> and then select the <AP Groups> menu in the sub-menus. After selecting the name of a remote AP group, configure a Radius server or add or delete users in "User Authentication" item of the ‘Remote AP Group’ tab.  Figure 72. Local Authentication Configuration Window for Remote AP Group
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 170 of 628 4.2.2.3  Role-based Access Control Configuration of Remote AP Group Explanation on the configuration of the role based access control of the remote AP group is separately made in the “Role Based Access Control” chapter.  4.2.2.4  Configuring Tunneling Forwarding of Remote AP Group Possible to configure the split ACL to a WLAN set with tunneling among WLANs included in the remote AP group.  Configuration using CLI To configure the split ACL of the remote AP group, perform the command as follows:  1)    Go to configure  Remote AP Group configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# WEC8500/configure/ap-group [remote-ap-group-name] WEC8500/configure/ap-group/[remote-ap-group-name]#remote  2)    Designate the split ACL in the WLAN set with the tunneling mode.  tunneling-forwarding [WLAN-ID] [SPLIT-ACL-NAME]  3)    Execute the ‘show ap-group remote-forwarding [REMOTE AP GROUP NAME] ’ command to check the AP group information.  4)    Use the ‘send-remote-acl-to-ap profile-only’ command to send the ACL Profile information of the remote AP group to APs.  5)    Use the ‘send-remote-acl-to-ap all’ command to send the information on the ACL Profile, Tunneling Forwarding and Local Bridging Forwarding of the remote AP group to APs.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <AP Groups> menu in the sub-menus. After selecting the name of the remote AP group, you can configure Tunneling Forwarding in the “ACL Profile” item of the 'Remote AP Group' tab. In addition, you can click the “Send To APs” button to send the information on ACL Profile, Tunnel Forwarding, and Local Bridging Forwarding to APs.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 171 of 628  Figure 73. Window for Configuring Tunneling Forwarding of Remote AP Group  4.2.2.5  Configuring Local Bridging Forwarding of Remote AP Group You can configure the VLAN ID, ACL, and PreAuth ACL to a WLAN set with local bridging among WLANs included in the remote AP group.  Configuration using CLI To configure the local bridging forwarding of the remote AP group, perform the command as follows:  1)    Go to configure  Remote AP Group configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# WEC8500/configure/ap-group [remote-ap-group-name] WEC8500/configure/ap-group/[remote-ap-group-name]#remote  2)    Configure the information on Local Bridging to the WLAN set with the tunneling mode.  local-bridging [WLAN-ID] { vlan-id [VLAN-ID] | acl-name [ACL-NAME] | pre-auth-name [PRE-AUTH-NAME] }  3)    Execute the ‘show ap-group remote-forwarding [REMOTE AP GROUP NAME]’ command to check the AP group information.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 172 of 628 4)    Use the ‘send-remote-acl-to-ap profile-only’ command to send the ACL Profile information of the remote AP group to APs.  5)    Use the ‘send-remote-acl-to-ap all’ command to send the information on the ACL Profile, Tunneling Forwarding and Local Bridging Forwarding of the remote AP group to APs.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <AP Groups> menu in the sub-menus. After selecting the name of the remote AP group, you can configure Local Bridging in the “ACL Profile” item of the 'Remote AP Group' tab. In addition, you can click the “Send To APs” button to send the information on ACL Profile, Tunnel Forwarding, and Local Bridging Forwarding to APs.  Figure 74. Window for Configuring Local Bridging Forwarding of Remote AP Group
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 173 of 628 4.2.3  AP Time Synchronization per Group The AP can configure its time information using either the time stamp method or the NTP method.  In the Time Stamp type, the APC periodically transmits the time of APC to an AP and the AP is operating based on the received time. Unless a user changes the configuration, the default is Time Stamp type and the interval is set to 7200 seconds (2 hours).  In the NTP type, the NTP server information is transmitted to an AP and the AP synchronizes the time with the NTP server. A NTP server list must be created to transmit the NTP server information to an AP and maximum 10 lists can be added. The ntp-interval (2^N) is the interval when an AP receives the time information from the NTP server.   For example, if the ntp-interval is set to 6, an AP receives the time information from the NTP server at every 2^6, i.e. 128 seconds.    The APC provides a function for configuring the time configuration method of the AP.  Configuring Time Stamp type using CLI   1)    Go to configure  apc  ap-time-config configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# apc WEC8500/configure/apc# ap-time-config WEC8500/configure/apc/ap-time-config#  2)    Configure how to transmit the time information to an AP using ‘ac-stamp’ and configure the interval.  mode ac-stamp  ac-stamp-interval [INTERVAL]  3)    To check the information, execute the ‘show apc ap-time-config’ command.    Configuring NTP type using CLI 1)    Go to configure  apc  ap-time-config configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# apc WEC8500/configure/apc# ap-time-config WEC8500/configure/apc/ap-time-config#   2)    Add the NTP server information to transmit to an AP. Maximum 10 NTP server information can be added. To delete the configured NTP server information, enter ‘no’ parameter in front of the command
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 174 of 628  add-ntp [NTP_SERVER_ADDRESS]  no add-ntp [NTP_SERVER_ADDRESS]  ntp-interval [NUMBER]    3)    Configure the method of transmitting the time information to an AP as ‘ntp’.  mode ntp  4)    Use the ‘show apc ap-time-config’ command to check the configured information.    Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <NTP> in the submenu, and then select a time setting mode of the AP (TimeStamp or NTP), timestamp interval, and NTP polling interval. Also, you can add/remove NTP server from which to fetch time access information for the AP.  Figure 75. AP Time Synchronization Configuration Options
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 175 of 628 4.2.4  AP Configuration   The management interface of APC must be configured for the connection between APC and W-EP AP.   4.2.4.1  Configuring MAC address Configuration using CLI To configure AP information, execute the command as follows:    1)    Go to configure  AP configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# ap [ap profile name] WEC8500/configure/ap ap_1#  If there exists the same AP when entering [ap profile name], you are guided to the mode where operator can configure the AP. If there is no same AP, the new AP information is created.  2)    Register the MAC address of the AP.  profile mac [MAC_ADDRESS]  3)    To check the information of a configured AP, use the ‘show ap summary config’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points> menu in the sub-menus.    1)    Click the <Add> button. 2)    Set AP PROFILE NAME and MAC ADDRESS and click the <Apply> button.  Figure 76. Adding Access Points
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 176 of 628 4.2.4.2  Configuring AP Profile   Configuration using CLI To configure an AP profile configuration, execute the command as follows:  1)    Go to configure  AP configuration  AP profile mode of CLI.  WEC8500# configure terminal WEC8500/configure# ap ap_1 WEC8500/configure/ap ap_1# profile WEC8500/configure/ap ap_1/profile#  2)    Configure the profile of an AP using the below command.  name [STRING]: Configures the name of an AP. If it is not entered, the ‘AP_’ + ‘MAC address’ is used as a name. E.g. MAC address: f4:d9:fb:24:cb:a0 AP name: AP_f4d9fb24cba0  ap-mode [generalAp/rootAp/repeaterAp/snifferAp]: Configures the AP operation mode.  ap-stats-history-enable: Configures whether to enable the AP statistics history.  client-ip [IP_ADDRESS]: Configures the client IP address, if the AP operation mode is set to Sniffer AP.  console-enable: This configures whether to allow console access to the AP.  discovery [ap-followed/apc-referal/multicast/broadcast/DHCP]: Configures the discovery type of an AP to find APC.  ap-followed: Finds the APC using the discovery type and discovery list configured in an AP.  apc-referal: Uses the APC list information configured in an APC as the discovery list  DHCP: Uses the APC list information that is received through DHCP option 138 (IPv4) or option 52 (IPv6) as the discovery list.    auto: Discovery type is automatically changed by the AP for automatic connection to the APC.  discovery-interval [INTERVAL]: Configures the time waiting for a CAPWAP discovery response message (unit: seconds)  dtls-policy: Configures the DTLS Policy of an AP.  echo-interval [INTERVAL]: Configures the time when an AP transmits an echo request to the joined APC (Unit: seconds)  echo-retransmit-interval [INTERVAL]: Waiting time to retransmit an echo request message if there is no reply. The APC configures the echo timeout as much as two times of echo-interval. If the APC cannot receive an echo message from an AP until two times of echo-interval is elapsed, the APC assumes that the AP is down (Unit: seconds)
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 177 of 628  edge-ap: Configures whether to enable the Edge AP function.  edge-ap-opmode: Smart Handover is enabled as operation mode of the edge AP. In RSSI mode, handover is determined by looking up the RSSI value. In Force mode, handover is performed by force.  edge-ap-threshold: Configures a threshold value for performing smart handover at the edge AP (range: -60 to -100 dBm, default: -80 dBm).  edge-ap-window: Configures a window value for performing smart handover at the edge AP (range: 200-1000 ms, default: 200 ms).  fragment-size [SIZE]: Configures a fragment size based on MTU to prevent the fragmentation of a CAPWAP packet that is transmitted by an AP to the APC.    ip-mode [dhcp/static/ap]: Configures the IP address of an AP to DHCP, Static or AP Followed.    dhcp: Configures the AP IP operation type to DHCP    static: Configures the AP IP operation type to static  ap: Operates with an IP configured in an AP    led-config: Configures LED on/off setting of the AP.  on: Sets LED of the AP on.  off: Sets LED of the AP off.  off-time: Sets LED of the AP off only for specific hours.  local-bridging: Configures WLAN-VLAN Mapping of the Local Switching WLAN, ACL, and Pre-Authentication ACL of Captive Portal for each remote AP.  vlan-id: Configures a VLAN ID to allocate to the Local Switching WLAN.  acl-name: Configures an ACL name to allocate to the Local Switching WLAN for packet allowance/blocking.  pre-auth-name: Configures a Pre-Authentication ACL name for Captive Portal operation of the Local Switching WLAN.  location [STRING]: Configures the information of location where an AP is installed.  mac [MAC_ADDRESS]: Configures the MAC address of an AP  max-echo-retransmit [COUNT]: Configures the maximum number of retransmission times of an echo request message.  max-retransmit [COUNT]: Configures the maximum number of retransmission times of a CAPWAP control message.  name [STRING]: Configures an AP name.  native-vlanId [VLAN_ID]: Configures the native VLAN in an AP.  primary-apc [APC_AME]: Configures the name of a primary APC.  secondary-apc [APC_AME]: Configures the name of a secondary APC.  tertiary-apc [APC_AME]: Configures the name of a tertiary APC. The WEC8050 model does not support the tertiary-apc function.  repeater-whitelist [MAC ADDRESS]: Adds the Repeater AP Whitelist.    report-interval [INTERVAL]: Configures the time interval for an AP to transmit the description error to the APC (Unit: seconds)  retransmit-interval [INTERVAL]: Configures the waiting time until the AP retransmits a CAPWAP control message when there is no reply from the APC (unit: seconds)
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 178 of 628  ssh-enable: Configures whether to enable the SSH server of an AP.  static-ip [IP_ADDRESS] [NETMASK] [GATEWAY]: Configures the static IP address of an AP.  statistics-timer [TIMER]: Configures the time interval of transmitting the statistics information provided by CAPWAP (unit: seconds)  telnet-enable: Configures whether to enable the telnet server of an AP.  time-config: Configure the timezone per AP.  vlan-support: Configures whether to enable the native VLAN of an AP.  poe-type: Set the POE Type of the AP. You can set 802.3at, 802.3af, and auto.  uplink-bandwidth: Set the allowed value for AP uplink bandwidth. Possible to set between 1 and 1024 Mbps and if it is set to 0, the uplink bandwidth is not restricted.  temperature-alarm-on-level: If the temperature of the AP exceeds the Temperature-Alarm-On-Level, the temperature alarm occurs. The default is 98 and possible to set between 50 and 130.  temperature-alarm-off-level: If the temperature of the AP is less than the Temperature-Alarm-Off-Level, the temperature alarm is cleared. The default is 98 and possible to set between 50 and 130.  temperature-alarm-control-type: If the temperature alarm occurs, set whether the radio of the AP is set to be off or on. link-aggregation: In case of an AP model for 802.11ac, provide two uplink Ethernet ports. Possible to set link aggregation for two Ethernet ports. If the link aggregation is activated, Both (Destination + Source), Destination, and    Source modes are configurable.  OVERWRITE-UPLINK-BANDWIDTH If the overwrite-uplink-bandwidth is activated, the uplink bandwidth information set in the AP group is applied to all APs in the group. UPLINK-BANDWIDTH Set the allowed value for AP uplink bandwidth. Possible to set between 1 and 1024 Mbps and if it is set to 0, the uplink bandwidth is not restricted. OVERWRITE-TEMPERATURE-ALARM If the overwrite-temperature-alarm is activated, the temperature alarm information set in the AP group is applied to all APs in the group. TEMPERATURE-ALARM-ON-LEVEL If the temperature of the AP exceeds the Temperature-Alarm-On-Level, the temperature alarm occurs. The default is 98 and possible to set between 50 and 130. TEMPERATURE-ALARM-OFF-LEVEL If the temperature of the AP is less than the Temperature-Alarm-Off-Level, the temperature alarm is cleared. The default is 90 and possible to set between 50 and 130. TEMPERATURE-ALARM-CONTROL-TYPE If the temperature alarm occurs, set whether the radio of the AP is set to be off or on. OVERWRITE-LINK-AGGREGATION If the overwrite-link-aggregation is activated, the link aggregation information set in the AP group is applied to all APs in the group. LINK-AGGREGATION In case of an AP model for 802.11ac, provide two uplink
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 179 of 628 Ethernet ports. Possible to set link aggregation for two Ethernet ports. If link aggregation is activated, possible to set the following mode: - Both (Destination + Source) - Destination - Source  3)    To check the information of a configured AP profile, use the ‘show ap detail [AP_NAME]’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points>  AP selection  <General> menu in the sub-menus.   The setting options in the General tab are as follows. Click the <Apply> button to apply the settings.  Figure 77. AP Profile Setting (1)   AP NAME: AP name    AP GROUP NAME: Indicates name of the AP GROUP to which the AP belongs.  REMOTE AP GROUP NAME: Indicates name of the REMOTE AP GROUP to which the AP belongs.  AP MODE: AP operational mode (General AP/Root AP/Repeater AP/Sniffer AP)  MAC ADDRESS: Cannot be changed to the MAC address of an AP.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 180 of 628  MAP LOCATION  LOCATION: Information of location where an AP is installed  IP ADDRESS: IP address of AP  IP ADDRESS POLICY: IP address mode  DISCOVERY TYPE: AP discovery type  ADMIN STATUS: AP administrative status    OPER STATUS: Current AP operational status PRIMARY CONTROLLER NAME, SECONDARY CONTROLLER NAME, TERTIARY CONTROLLER NAME: Redundancy mode For WEC8050, the TERTIARY CONTROLLER NAME is not supported.  In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points>  AP  <Advanced> menu in the sub-menus.   The setting options in the Advance tab are as follows. Fill in each item and click the <Apply> button to apply the settings.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 181 of 628  Figure 78. AP Profile Setting (2)  4.2.4.3  AP Mode Configuration Configuration using CLI To configure AP mode, execute the command as follows.  1)    Go to configure  AP configuration  AP profile mode of CLI.  WEC8500# configure terminal WEC8500/configure# ap ap_1 WEC8500/configure/ap ap_1# profile WEC8500/configure/ap ap_1/profile#  2)    Configure the AP mode.  ap-mode [MODE]  Parameter Description MODE AP operation mode (generalAp/rootAp/repeaterAp/snifferAp) - generalAp: Typical operation mode. Default value. - rootAp: AP mode where a repeater AP can be connected. - repeasterAp: AP mode that is connected to a wireless area and the APC through the root AP. - snifferAp: AP mode where the packets operating in a wireless environment can be captured. - relayAp: An AP mode which connects a root AP and a repeater AP wirelessly  3)    To check the information of a configured AP, use the ‘show ap detail [AP_NAME]’ command.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 182 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points>  AP selection  <General> menu in the sub-menus. After selecting the AP MODE NAME item, click the <Apply> button to apply the configuration.  Figure 79. AP mode configuration  4.2.4.4  AP CLI Access Account   The APC operator can add or remove account information relating to the AP CLI. When the APC is first installed, a default account is provided (id: root, password: samsung).   Up to three AP CLI accounts can be added, and at least one account must be configured.   Therefore, if there is only one remaining account, it cannot be deleted. (* While each account may be in any of the three available levels (Administrator/Operator/ Monitor), there are currently no functional differences for the APs.)  Configuration using CLI Execute the following commands to configure the AP access account.  1)    Go to configure  APC mode of CLI.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 183 of 628  WEC8500# configure terminal WEC8500/configure# apc WEC8500/configure/apc #   2)    Add an AP CLI account.  ap-account [ID] [PASSWORD] [LEVEL]  Parameter Description ID This is the ID of the AP CLI account. Only an alphanumeric value of up to eight characters can be entered. Password This is the password of the AP CLI account. Only an alphanumeric value of up to eight characters can be entered. Level This is the level of the AP CLI account. Available values are administrator/operator/monitor.  3)    An account can be deleted by entering the 'no' parameter as shown below.  no ap-account [ID]  4)    Use the ‘show apc ap-account’ command to retrieve the AP configuration information.  Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, and then select <Local Management Users>  AP in the submenu. Click the ‘Add’ or ‘Delete’ button to add or delete the AP CLI account.  Figure 80. AP CLI Account Add/Remove Window
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 184 of 628 4.2.4.5  AP SNMP Agent Configuration The APC operator can configure SNMP Agent settings for all APs.  Configuration using CLI Execute the following commands to configure the SNMP Agent settings of the AP.  1)    Go to configure  snmp  ap mode of CLI.  WEC8500# configure terminal WEC8500/configure# snmp WEC8500/configure/snmp# ap WEC8500/configure/snmp/ap#   2)    Configure the snap agent information of the AP. Enable/disable SNMP of the AP.  enable or no enable  Configure the SNMP port number of the AP.    Port [PORT NUMBER]  Configure the Read Only Community Name of the AP.  ro-community [COMMUNITY NAME]  Configure the Write Only Community Name of the AP.  rw-community [COMMUNITY NAME]  Configure the user information of the AP.    Use r[USER NAME] [AUTHENTICATION TYPE] [AUTHENTICATION KEY] [PRIVATE PROTOCOL] [PRIVATE KEY]  Parameter Description PORT NUMBER This is the SNMP port number. COMMUNITY NAME This is the SNMP Read Only or Write Only Community name. USER NAME This is the SNMP user name. AUTHENTICATION TYPE This is the SNMP authentication type. Either of the following two can be selected: - MD5 - SHA AUTHENTICATION KEY A number in the range of 8 to 20 can be entered. PRIVATE PROTOCOL Either of the following two can be selected: - DES - AES
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 185 of 628 Parameter Description PRIVATE KEY A number in the range of 8 to 20 can be entered.  3)    Use the ‘show snmp ap’ command to retrieve the agent information configured for the AP.  Configuration using Web UI In the menu bar of <WEC Main Window>, select <Administration>, select <AP> in the submenu, and then select <v1/v2c Community> or <v3 User> to configure the SNMP agent information.  Figure 81. AP SNMP v1/v2c Community Configuration Window  Figure 82. AP v3 User Configuration Window
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 186 of 628 4.2.5  Information Management The APC manages the history statistics information, real-time interface statistics information, and tech support information of the AP.    AP History Statistics The AP transmits the interface (WAN and WLAN) and CPU load/memory usage statistics information collected for 5 min. to the APC. The APC forwards the information to the WEM via FTP. If the APC does not interoperate with the WEM, the APC stores the information for 3 days.  AP real-time statistics If the APC requests the interface information to an AP, the AP transmits the interface information (WAN and WLAN) to the APC at every 5 second and the APC stores the information in its internal DB. An operator can retrieve the information by using CLI or WEC.    AP Tech Support If there occurs a problem with a specific AP, an operator can download the Tech Support information from the AP. Execute the following command to use the function.  The Tech Support from an AP includes the following information.  System log message file  System crash information file  System report files (status/configuration information)  Core file used to check application malfunctioning  4.2.5.1  History Statistics Information To check the history statistics information relay status of an AP, use the ‘show ap stats-history’ command.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 187 of 628 4.2.5.2  Real-time Interface Statistics Information Configuration using CLI 1)    Go to configure  AP configuration.  WEC8500# configure terminal WEC8500/configure# ap ap_1  WEC8500/configure/ap ap_1#   2)    Configure to make real-time interface statistics information updated periodically.  WEC8500/configure/ap ap_1# get-if-stats  3)    To check the interface statistics information of an AP, use the ‘show ap if-stats [AP_NAME]’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Monitor> and then select the <Statistics>  <AP Ports> menu in the sub-menus.   As shown below, you can retrieve the real-time interface statistics of the AP.    Select an item in the list, and then you can check detail information.  Figure 83. AP Ports window  Figure 84. AP Ports detail information window
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 188 of 628 4.2.5.3  Tech Support Information Execute the below command to download the Tech Support information from an AP.  Configuration using CLI 1)    Go to configure  AP configuration  tech-support of CLI.  WEC8500# configure terminal WEC8500/configure# ap [ap profile name] WEC8500/configure/ap ap_1# tech-support WEC8500/configure/ap ap_1/tech-support#  2)    Request the coredump file of the AP.  WEC8500/configure/ap ap_1/tech-support# get-coredump (system / radio-coredump)  3)    Request the crashfile of the AP.  WEC8500/configure/ap ap_1/tech-support# get-crash-file (system / radio-coredump)  4)    Request the log file of the AP.  WEC8500/configure/ap ap_1/tech-support# get-log-file  5)    Use ‘show ap tech-support’ command to check the Tech Support file information of APs. Operator can use FTP or sFTP to download Tech Support files.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Administrator> and then select the <Tech Support>  <AP Crash> menu in the sub-menus.   By clicking the profile name of an AP, operator can download the Tech Support file.  Figure 85. AP Tech Support Information Receiving Window
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 189 of 628 4.2.6  Outdoor AP Configuration The APC system provides outdoor AP connection diagnostic functions for outdoor APs. The AP connection diagnostics function checks ping status of outdoor APs and displays the results on the operator’s monitor.    Procedure of using the outdoor AP connection diagnostics function is as follows:    1)    The operator creates/deletes outdoor APWEC using CLI. 2)    The APC system periodically pings the outdoor AP to check the network connection of the AP and stores the results. 3)    The operator uses the WEC, WEM or CLI to determine network connection status of the outdoor AP.  Concerning outdoor AP count:    1)    Outdoor APs are not included in the AP count of the APC license. 2)    Outdoor APs are not included in the ordinary AP count. 3)    The maximum up-ported outdoor AP count is 300 for the WEC8500 model and 75 for the WEC8050 model. 4)    The APC system can retrieve the total/up/down outdoor AP count using the WEC or CLI.  4.2.6.1  Outdoor AP Addition/Removal The APC system allows creation/deletion of outdoor AP information using the WEC or CLI.    Configuration using CLI 1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Create or delete an AP. Use the ‘no’ parameter in front of the command to delete an outdoor AP.    outdoor-ap [PROFILE_NAME] [MAC_ADDRESS] [IP_ADDRESS]  no outdoor-ap [PROFILE_NAME]    3)    Create or delete an outdoor AP. Use the ‘no’ parameter in front of the command to delete an outdoor AP.    4)    Use the ‘show ap summary’ command to check the outdoor AP information.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 190 of 628 Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration> and then select the <Access Points> menu in the sub-menus. To create an outdoor AP, click <Add>, select <3rd Party Outdoor AP>, enter AP PROFILE NAME, MAC ADDRESS, and IP ADDRESS, and then select <Apply>.  Figure 86. Outdoor AP Create Window  4.2.7  AP Package Upgrade Configuration using CLI (Upgrade Function) To manage the AP upgrade function, execute the command as follows:    1)    Go to configure  AP configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# ap ap_1  2)    Request the image file of an AP to upgrade.  WEC8500/configure/ap ap_1# upgrade-request weafama_1.2.4.R.bin  WARNING: AP will be upgrade. Are you sure you want to continue? (y/n) : y WEC8500/configure/ap ap_1#  3)    To check the upgrade file information of the requested AP, use the following command.  WEC8500/configure/ap ap_1# show ap upgrade list     /* (RC/FR/RC)  : RetryCount/FailReason/RebootCause    /* Pri    : VersionPriority (MD-model,A-AP config)  AP_ID   Model    Version(config/current)  Status(RC/FR/RC)    Pri   force     1    WEA302i  1.2.4.R/ 1.2.4.R        Success( 0/ 0/146) AP    No
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 191 of 628 Configuration using CLI (Upgrade environment) To configure AP upgrade related environment, the following command is provided.   First of all, go to the configure  AP-all  upgrade mode of CLI.  WEC8500# configure terminal WEC8500/configure# ap-all WEC8500/configure/ap-all# upgrade WEC8500/configure/ap-all/upgrade#   [select-package] This command configures a package to use during AP upgrade.  select-package [UPGRADE_TYPE] [FILE_NAME]  Parameter Description UPGRADE_TYPE Configures upgrade type (default/quick-upgrade/predownload) - default: AP image that is referred to during provision upgrade. - quick-upgrade: AP image that is referred to for entire AP upgrade upon an operator’s request. - predownload: AP image that is referred to download AP image to AP during entire AP upgrade. FILE_NAME Image file name that will be used for AP upgrade  [target] During entire upgrade, you can select whether to maintain individual configured AP version of an AP or perform upgrade.  Target [AP UPGRADE TARGET]  Parameter Description UPGRADE TARGET Upgrade target (all/ keeping-individual) - all: Perform upgrade for all the APs. (default) - keeping-individual: While maintaining individually configured ap version, perform upgrade for the rest APs.  [transfer-protocol] This command selects a transmission protocol that is used to transmit the package file of an AP from the WEC8500 to the AP.  Transfer-protocol [AP TRANSFER MODE]  Parameter Description TRANSFER_MODE File transmission protocol (ftp/sftp) - ftp: ftp is used for file transmission. - sftp: sftp is used for file transmission.
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 192 of 628 [max-download]   This command configures the maximum number of simultaneous downloads when transmitting the package file of an AP from the APC to the AP.  Max-download [COUNT]  Parameter Description COUNT Maximum number of simultaneous downloads of AP image file (range: 1-50, default: 10)  [max-retry] This command configures maximum number of re-attempts when AP upgrade is failed.  Max-retry [COUNT]  Parameter Description COUNT Maximum number of AP upgrade re-attempts   (range: 1-10, default: 3)  [start] This command provides the entire AP upgrade function.  start [UPGRADE_TYPE]  Parameter Description UPGRADE_TYPE Configures upgrade type (quick-upgrade/predownload) - quick-upgrade: Perform entire ap upgrade upon an operator’s request. - predownload: Download ap image to ap first during entire ap upgrade.  If you perform package upgrade after configuring AP upgrade type to predownload, restart all the APs in the following methods.  WEC8500# configure terminal WEC8500/configure# ap-all WEC8500/configure/ap-all# reboot upgrade  [stop] This command provides the function of stopping the image upgrade of all the APs.  stop  [show ap upgrade] To check the upgrade information of an AP, use the following command.  show ap upgrade summary
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 193 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Administrator> and then select <Package Upgrade>  <AP> menu in the sub menu.   You can perform AP upgrade in the AP Upgrade tab and configure upgrade related environment in the Advanced tab.  [AP Upgrade tab] AP Upgrade tab upgrades all the APs or a specific AP.  Figure 87. AP upgrade  The procedure of entire AP upgrade is as follows:  1)    In the AP Upgrade window, click the <Global> button.  2)    The <Global> area is displayed on the window. After configuring each item, click the <Apply> button.  Figure 88. AP upgrade-global
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 194 of 628  SCOPE: Selects upgrade method. To make the AP working as the package immediately after upgrade, select Quick Upgrade. To download the package to the AP, select the Predownload menu.  TARGE AP: Select an AP target to upgrade. If you select <Keeping individual setting>, an AP that is configured as individual is excluded from upgrade.  SELECT AP PACKAGE: Selects an AP package to upgrade.    3)    If the SCOPE setup is Predownload upgrade, you must restart the AP once download is completed. After selecting the <Administration>  <Reboot>  <AP> menu, select Reboot All with Upgrade to restart the AP.  To upgrade a specific AP, follow the below procedure.  1)    In the AP Upgrade window, click the <Individual> button. 2)    The individual area is displayed on the window. After configuring each item, click the <Apply> button.  Figure 89. AP upgrade-individual   SCOPE: Selects upgrade method. The <to individual> upgrades the selected AP to a specific package and the <to global> makes a select AP working as global.  FORCE UPGRADE: Enable or disable  SELECT AP PACKAGE: Selects an AP package to upgrade..
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 195 of 628 [Advanced tab] Configures AP upgrade related environment settings.  Figure 90. AP upgrade-advanced   TRANSFER MODE: Selects a protocol that transmits an AP package.  MAX DOWNLOAD: Configures maximum number of sessions that can be downloaded simultaneously.  MAX RETRY: Configures maximum number of re-attempts when AP upgrade is failed.  DEFAULT AP PACKAGE: Select an AP package that will be used for automatic upgrade during AP joint.  4.2.8  Remote AP Package Upgrade APs in a remote group can be upgraded by downloading an AP package from a specific AP. This is useful for efficient management of APC-AP bandwidth.  A master AP can be selected for each AP package model. After downloading an AP package from the APC, the master AP allows the AP package to be downloaded to other APs in the remote group.  The operator can manage AP upgrade of the APs in the remote group by checking the AP package download status in the remote group and performing reboot and upgrade.  4.2.8.1  Activating Upgrade The operator can enable/disable the AP upgrade in the remote group. When the AP upgrade is enabled, version priority in AP upgrade status changes to Remote.  Configuration using CLI   Example:  WEC8500# configure terminal WEC8500/configure# ap-group rUpgrade WEC8500/configure/ap-group rUpgrade# remote WEC8500/configure/ap-group rUpgrade/remote# upgrade WEC8500/configure/ap-group rUpgrade/remote/upgrade# enable WEC8500/configure/ap-group rUpgrade/remote/upgrade# no enable
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 196 of 628 CLI for checking configuration:  WEC8500 # show remote-ap-group upgrade config rUpgrade  ================== Remote Ap Group Upgrade Config =================   Group Name              : rUpgrade  Enable                   : Enable  Type                      : Default  Mode                       : FTP  Path                     : package/ap  PortNum                : 21  MAXretries              : 3  ForceOption             : Disable   weafama                :  (APID:0, IP:0.0.0.0)                           :  ()  weafamb                 :  (APID:0, IP:0.0.0.0)                           :  ()  WEC8500# show remote-ap-group upgrade list rUpgrade     /* (RC/FR/RC) : RetryCount/FailReason/RebootCause  AP_ID  Model  Version(config/current)     Status(RC/FR/RC)    MasterAp     1   WEA303i      Remote/1.7.0.U2          None( 0/ 0/128)         -     2   WEA312i      Remote/1.7.0.U2          None( 0/ 0/128)         -     3   WEA303i      Remote/1.7.0.U1          None( 0/ 0/128)         -  Configuration using Web UI Administration > Package Upgrade > Remote AP Group  Example:  Figure 91. Remote AP Group Upgrade Activation_1
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 197 of 628  Figure 92. Remote AP Group Upgrade Activation_2  4.2.8.2  Master AP Configuration (Optional) The operator can configure the master AP for AP upgrade in the remote group. If none is configured, a master AP is automatically selected.  Configuration using CLI   Example:  WEC8500# configure terminal WEC8500/configure# ap-group rUpgrade WEC8500/configure/ap-group rUpgrade# remote WEC8500/configure/ap-group rUpgrade/remote# upgrade WEC8500/configure/ap-group rUpgrade/remote/upgrade# select-masterAP ap_1  WEC8500/configure/ap-group rUpgrade/remote/upgrade# delete-masterAP [weafama/weafamb]  CLI for checking configuration:  WEC8500# show remote-ap-group upgrade config rUpgrade  ================== Remote Ap Group Upgrade Config =================   Group Name              : rUpgrade  Enable                   : Enable  Type                      Default  Mode                      : FTP  Path                      : package/ap  PortNum                  : 21  MAXretries              : 3  ForceOption             : Disable   weafama                : ap_1 (APID:1, IP:10.10.10.160)                            :  ()  weafamb                  :  (APID:0, IP:0.0.0.0)                            :  ()
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 198 of 628  WEC8500# show remote-ap-group upgrade list rUpgrade     /* (RC/FR/RC)   : RetryCount/FailReason/RebootCause  AP_ID   Model  Version(config/current)     Status(RC/FR/RC) MasterAp     1   WEA303i      Global/1.7.0.U2          None( 0/ 0/128)   MasterApCfg     2   WEA312i      Global/1.7.0.U2          None( 0/ 0/146)   -     3   WEA303i      Global/1.7.0.U1          None( 0/ 0/146)   -  Configuration using Web UI Administration > Package Upgrade > Remote AP Group  Example:  Figure 93. Checking Master AP Configuration  Figure 94. Checking Master AP Configuration
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 199 of 628 4.2.8.3  AP Package Configuration The operator can configure an AP package to upgrade in the remote group.  Configuration using CLI   Example:  WEC8500# configure terminal WEC8500/configure# ap-group rUpgrade WEC8500/configure/ap-group rUpgrade# remote WEC8500/configure/ap-group rUpgrade/remote# upgrade WEC8500/configure/ap-group rUpgrade/remote/upgrade# select-package weafama weafama_1.7.0.U.bin  WEC8500/configure/ap-group rUpgrade/remote/upgrade#delete-package [weafama/weafamb]  CLI for checking configuration:  WEC8500# show remote-ap-group upgrade config rUpgrade  ================== Remote Ap Group Upgrade Config =================   Group Name              : rUpgrade  Enable                   : Enable  Type                      : Default  Mode                      : FTP  Path                      : package/ap  PortNum                  : 21  MAXretries              : 3  ForceOption             : Disable   weafama                  : ap_1 (APID:1, IP:10.10.10.160)                            : weafama_1.7.0.U.bin (1.7.0.U)  weafamb                  :  (APID:0, IP:0.0.0.0)                            :  ()
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 200 of 628 Configuration using Web UI Administration > Package Upgrade > Remote AP Group  Example:  Figure 95. AP Package Configuration  4.2.8.4  Starting AP Upgrade The operator can start or stop AP upgrade in the remote group.  Configuration using CLI   Example:  WEC8500# configure terminal WEC8500/configure# ap-group rUpgrade WEC8500/configure/ap-group rUpgrade# remote WEC8500/configure/ap-group rUpgrade/remote# upgrade WEC8500/configure/ap-group rUpgrade/remote/upgrade# start  WEC8500/configure/ap-group rUpgrade/remote/upgrade# stop  CLI for checking configuration:  WEC8500# show remote-ap-group upgrade config rUpgrade  ================== Remote Ap Group Upgrade Config =================   Group Name              : rUpgrade  Enable                   : Enable  Type                      : Predownload  Mode                      : FTP
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 201 of 628   Path                      : package/ap  PortNum                 : 21  MAXretries              : 3  ForceOption             : Disable   weafama                  : ap_1 (APID:1, IP:10.10.10.160)                            : weafama_1.7.0.U.bin (1.7.0.U)  weafamb                  :  (APID:0, IP:0.0.0.0)                            :  () WEC8500# show remote-ap-group upgrade list rUpgrade     /* (RC/FR/RC) : RetryCount/FailReason/RebootCause  AP_ID Model    Version(config/current)    Status(RC/FR/RC)   MasterAp     1   WEA303i Remote/1.7.0.U2   DownloadSuccess( 0/ 0/128) MasterApCfg     2   WEA312i Remote/1.7.0.U2   DownloadSuccess( 0/ 0/146) -     3   WEA303i Remote/1.7.0.U2   DownloadSuccess( 0/ 0/146) -  Configuration using Web UI Administration > Package Upgrade > Remote AP Group  Example:  Figure 96. Starting AP Upgrade
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 202 of 628 4.2.8.5  Restarting and Upgrading AP After downloading the AP package, APs in the remote group are restarted so that they can run on the upgraded version.  Configuration using CLI   Example:  WEC8500# configure terminal WEC8500/configure# ap-group rUpgrade WEC8500/configure/ap-group rUpgrade# remote WEC8500/configure/ap-group rUpgrade/remote# reboot upgrade  CLI for checking configuration:  WEC8500# show remote-ap-group upgrade config rUpgrade  ================== Remote Ap Group Upgrade Config =================   Group Name              : rUpgrade  Enable                   : Enable  Type                      : Default  Mode                      : FTP  Path                      : package/ap  PortNum                  : 21  MAXretries              : 3  ForceOption            : Disable   weafama                 : ap_1 (APID:1, IP:10.10.10.160)                            : weafama_1.7.0.U.bin (1.7.0.U)  weafamb                 :  (APID:0, IP:0.0.0.0)                            :  () WEC8500# show remote-ap-group upgrade list rUpgrade     /* (RC/FR/RC) : RetryCount/FailReason/RebootCause  AP_ID   Model  Version(config/current)  Status(RC/FR/RC)    MasterAp     1   WEA303i     Remote/1.7.0.U         Success( 0/ 0/128)  MasterApCfg     2   WEA312i     Remote/1.7.0.U         Success( 0/ 0/146)  -     3   WEA303i     Remote/1.7.0.U         Success( 0/ 0/146)  -
CHAPTER 4. AP Connection Management ©  SAMSUNG Electronics Co., Ltd.  page 203 of 628 Configuration using Web UI Administration > Package Upgrade > Remote AP Group  Example:  Figure 97. Restarting and Upgrading AP
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 204 of 628 CHAPTER 5. WLAN Management      This chapter describes how to create and configure WLAN that is the most fundamental basis for W-EP wireless LAN service.    5.1  WLAN Configuration 5.1.1  Basic WLAN Configuration The WLAN profile helps configure and manage the WLAN connection service of an AP in the APC. To use WLAN service, it is necessary to basically configure AP group and interface group and specify Service Set Identifier (SSID).  Configuration using CLI Go to the wlan configuration mode from the configure mode of CLI.  WEC8500# configure terminal WEC8500/configure# wlan [WLAN ID]  Parameter Description WLAN_ID WLAN ID (range: 1-255)  The WLAN configuration procedures are as follows:  1)    Go to configure  wlan configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# wlan 1  WEC8500/configure/wlan 1#  2)    Add WLAN to an AP group. Configure an AP group to which WLAN service will be provided. The AP group configuration is only possible in the AP group configuration mode instead of the wlan configuration mode. The below configuration allocates wlan 1 to the apg_01 AP group.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 205 of 628   A newly created WLAN is added to the ‘default’ AP group if the WLAN ID is in the range of 1-16. If its WLAN ID is 17 or above, the WLAN is not included in the AP group.  Maximum 16 WLANs can be allocated to each AP group.  WEC8500# configure terminal WEC8500/configure# ap-group apg_01  WEC8500/configure/ap-group apg_01# add-wlan 1  3)    Configure an interface group to which the WLAN service will be provided. Several VLAN interfaces can be added to an interface group, and the WLAN service is available only through the interface.  if-group [INTERFACE_GROUP_NAME]  4)    Configure a SSID. The SSID is an ID used to connect to each wireless terminal to provide the WLAN service.   Make sure to configure a SSID to use the WLAN service.  ssid [SSID_NAME]  5)  Configure radio by selecting 2.4G, 5G or All (2.4G/5G).  radio  [Radio  ID:  1:  5  GHz,  2:  2.4  GHz,  3:  ALL]    6)    Configure whether to apply the WLAN service.  WEC8500/configure/wlan 1#enable    To apply the various WLAN services to multiple wireless terminals, create the WLAN service in a profile format. Once the WLAN service is started, make each AP use the WLAN service by downloading the profile.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 206 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <General> tab. In the screen, you can use various functions such as adding or deleting a WLAN.  Figure 98. WLAN basic configuration (1)  Figure 99. WLAN basic configuration (2)
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 207 of 628 You can configure various functions such as interface group and SSID, etc.   The configurations available in the General tab are as follows:  INTERFACE GROUP: Configures an interface group.  RADIO AREA: Configures a radio area.  CAPWAP TUNNEL MODE/LOCAL VLAN: Configures the local switching function.  SUPRESS SSID: Enables or disables the function.  AAA OVERRIDE: If the WLAN is enabled with the device authentication function using a AAA server, the AAA-override function can be enabled so that the user-specific settings configured in the AAA server are applied with priority over the APC settings.  MAXIMUM ALLOWED STATIONS: Limits the number of users per WLAN.  GUEST SERVICE: Enables or disables the Guest service.  ADMIN STATUS: Enables or disables the function.  5.1.2  WLAN Additional Configuration Each wireless terminal can receive a differentiated service according to the WLAN configuration. The procedure of configuring the WLAN additional function is as follows.  Configuration using CLI 1)    Go to configure  wlan configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# wlan 1  WEC8500/configure/wlan 1  2)    If the WLAN is enabled with the device authentication function using a AAA server, the AAA-override function can be enabled so that the user-specific settings configured in the AAA server are applied with priority over the APC settings.  WEC8500/configure/wlan 1# aaa-override  3)    Determine whether to configure the Guest service.  guest-flag  4)    Configure a VLAN ID to use locally.    local-vlan [VLAN_ID]  Parameter Description VLAN_ID VLAN ID (range: 1-4094)
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 208 of 628 5)    Specify the service MAC type.    mac-type [MAC_TYPE]  Parameter Description MAC_TYPE - localMac: An AP itself provides data service. - splitMac: Provides data service through the APC.  6)    Select a radio bandwidth to provide the WLAN service.  radio [RADIO]  Parameter Description RADIO - 1: 5 GHz - 2: 2.4 GHz - 3: Supports both 5/2.4 GHz  7)    Select whether to provide the SSID as hidden. If it is set to ‘hidden’, the SSID is not found when other devices do searching.    suppress-ssid  8)    Select the tunnel mode.    tunnel-mode [TUNNEL_MODE]  Parameter Description TUNNEL_MODE - LocalBridging: Make all the user traffics are bridged at the AP. - 8023Tunnel: Make all the user traffics are transmitted in the 802.3 format (Not supported if the MAC type is split mac).  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. For more information about configuration, see ‘5.1 Basic WLAN Configuration’.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 209 of 628 5.1.3  WLAN-based ACL Configuration To configure ACL to apply to the WLAN service, define IP-based ACL first and then configure it to the WLAN.    Configuration using CLI The procedures for configuration are as follows.  1)    Before applying ACL, retrieve ACL that is configured as WLAN ACL.  WEC8500# show running-config network   fqm-mode … ip access-group wireless acl1 !  2)    Go to configure  wlan configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# wlan 1  WEC8500/configure/wlan 1 WEC8500# configure terminal WEC8500/configure# wlan 1  WEC8500/configure/wlan 1  3)    Among retrieved ACLs, enter an ACL name to apply to the WLAN with the ‘acl’ command.    acl [ACL-NAME]  4)    To check the configured ACL, use the ‘show wlan detail’ command.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 210 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <Advanced> tab.    Figure 100. WLAN-based ACL configuration   ACL RULE: Configures the WLAN-based ACL function.  STATIC ADDRESS DISALLOWED  DHCP OVERRIDE  DHCP SERVER: Enter a DHCP server IP address.  WMM: Configures the WiFi Multimedia (WMM) mode.    DTIM: Enter a Delivery Traffic Indication Message (DTIM) value (1-255).  STATION IDLE TIMEOUT: Enter a station idle timeout value. The value range is 30-3600 and it must be the multiple of 15.  VOIP FAILURE DETECT: Configures call failure detection.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 211 of 628 5.1.4  Managing Root Service To provide a wireless LAN service where cable installation is difficult, a W-EP AP can be configured as a repeater mode to relay wireless LAN traffics. To configure this kind of network, the Repeater AP and Root AP are required. The Repeater AP is working as a wireless terminal and the Root AP connects a Repeater AP to a wireless terminal for connection to the APC.   The root AP must be enabled with the repeater service to allow repeater AP connections.  Configuration using CLI 1)    Go to configure  apc configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# apc  WEC8500/configure/apc#  2)    Enable or disable the repeater service. The repeater service must be enabled for the repeater AP to connect to the root AP.  repeater-service: Enabled  no repeater-service: Disabled  3)    Use the ‘show wlan detail repeater’ command to check the root WLAN settings.  WEC8500/configure/apc# show wlan detail repeater  [Changing to Root AP] The procedure of changing a W-EP AP to a Root AP is as follows:  1)    Go to configure mode of CLI.  WEC8500# configure terminal  2)    Check the registered AP list.  WEC8500/configure# show ap summary  3)    Go to AP configuration mode to change to a Root AP.  WEC8500/configure# ap ap_1
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 212 of 628 4)    Configure it to a Root AP.  WEC8500/ configure/ap ap_1# profile ap-mode rootAp  5)    Restart the configured AP.  [Changing to Repeater AP] The procedure of changing a W-EP AP to a Repeater AP is as follows:  1)    Go to configure mode of CLI.  WEC8500# configure terminal  2)    Check the registered AP list.  WEC8500/configure# show ap summary  3)    Go to AP configuration mode of an AP that will be changed to a Repeater AP.  WEC8500/configure# ap ap_2  4)    Configure it to a Repeat AP.  WEC8500/configure/ap ap_2# profile ap-mode repeaterAp  5)    Restart the configured AP.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 213 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <General> menu in the sub-menus. To enable repeater service, configure the INTERFACE GROUP in the Repeater Service of the window, select Enable in the SERVICE, and click the <Apply> button.  Figure 101. Root service management (1)  In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points>  AP selection  <General> menu in the sub-menus. After selecting AP MODE item, click the <Apply> button and restart the AP.  Figure 102. Root service management (2)
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 214 of 628 5.1.5  MCS Configuration Management by WLAN This is a function of configuring data rate and MCS by WLAN. You can configure MCS, etc. by each WLAN differently because it is necessary to configure MCS, etc. differently depending on the types of services such as FMC.  Configuration using CLI 1)    Go to configure  WLAN configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# wlan 1  WEC8500/configure/wlan 1  2)    Go to 80211a or 80211b depending on the bandwidth to configure.  WEC8500/configure/wlan 1# 80211a WEC8500/configure/wlan 1/80211a#  3)    Configure the data rate. The settings described as shown below can be made only when the corresponding WLAN is set to be disabled.  WEC8500/configure/wlan 1/80211a# rate [MODE][RATE]  Parameter Description Mode Mode (basic/supported) - Basic: Basic rate supported for a terminal to access to an AP. - Supported: A connected terminal that supports the supported rate can communicate with an AP at the supported rate. RATE Data rate - Range for 80211a: 6, 9, 12, 18, 24, 36, 48, or 54 Mbps - Range for 80211b: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, or 54 Mbps  4)    Configure the 802.11n Modulation and Coding Scheme (MCS) rate.  WEC8500/configure/wlan 1/80211a# mcs-11n [RATE]  Parameter Description RATE MSC rate (Range: 0~23)
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 215 of 628 5)    Configure the 802.11ac Modulation and Coding Scheme (MCS) rate. Only 5G bandwidth for 802.11ac MCS is configurable.  WEC8500/configure/wlan 1/80211a# mcs-11ac num-ss 2/3 enter the maximum MCS(7~9) for 1 spatial stream(s): 7 the maximum MCS : 7 enter the maximum MCS(7~9) for 2 spatial stream(s): 7 the maximum MCS : 7 enter the maximum MCS(7~9) for 3 spatial stream(s): 7 the maximum MCS : 7  [Wlan:1] Radio : 5GHz, number of SS: 3, max mcs : 7, 7, 7  Enable  6)    You can check the configuration with the ‘show wlan detail #’ command.  WEC8500# show wlan detail 1
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 216 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select the WLAN ID to change in the WLANs screen and move to the <802.11a/n/ac> or <802.11b/g/n> tab depending on the bandwidth.    Figure 103. MCS by WLAN: 802.11a/n/ac Configuration Management window  Figure 104. MCS by WLAN: 802.11b/g/n Configuration Management window
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 217 of 628 5.2  Local Switching The APC provides the local switching function to support a service to an individual network such as a branch office. The local switching function enables an AP to be connected to WAN for external connection in an individual network where the APC is not installed. The control packet of an AP and a wireless terminal is processed in the centralized APC and a general data packet is processed in an individual network. Therefore, if the tunnel mode of the WLAN is changed to local switching, part of the data packet forwarding process performed by the APC is performed by the AP.    The following AP functions must be configured in the WLAN which is configured for local switching:  1)    WLAN-VLAN Mapping  The wireless device traffic connected to the configured local switching WLAN is forwarded by the AP with the configured VLAN tag. 2)    ACL  Packet filtering ACL is performed for the wireless device traffic connected to the configured local switching WLAN.   3)    Preauthetication ACL of Captive Portal    Web preauthentication packet forwarding ACL is processed for the wireless device traffic connected to the local switching WLAN configured for captive portal.  The functions above are activated only for the APs added to the remote AP group.  Configuration using CLI The procedure of local switching configuration is as follows:  1)    By referring to the ‘Configuring Remote AP Group’, add an AP to a remote AP group.  2)    Enter into the configure  wlan configuration mode of CLI, and configure ‘tunnel-mode’ to ‘local-bridging’.  WEC8500# configure terminal WEC8500/configure# wlan 1  WEC8500/configure/wlan 1# tunnel-mode local-bridging   tunnel-mode  local-bridging  3)    Enter into the configure  AP configuration mode of CLI, and configure a local Vlan ID per WLAN.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 218 of 628  WEC8500# configure terminal WEC8500/configure# ap ap_1 WEC8500/configure/ap ap_1# profile WEC8500/configure/ap ap_1/profile#   local-bridging  [WLAN_ID][VLAN_ID/ACL_NAME/PRE_AUTH_ACL_NAME]  Parameter Description WLAN_ID WLAN ID (Range: 1-254) (available only for WLANs the tunnel-mode of which is local-bridging) VLAN_ID VLAN ID (Range: 1-4094) ACL_NAME ACL name to configure for the WLAN service (only for options set in IP ACL) PRE_AUTH_ACL_NAME ACL name to configure for pre-authentication of the WLAN (only for options set in IP ACL)  4)    Operator can check the configuration information by executing the ‘show remote-ap-group summary’, ‘show wlan detail’, ‘show ap local-bridging [AP_PROFILE_ NAME]’ command.    Configuration using Web UI By referring to the ‘Configuring Remote AP Group’, add an AP to a remote AP group.  In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <General> tab. After changing the ‘CAPWAP TUNNEL MODE’ to ‘Local Bridging’, click the <Apply> button.  Figure 105. Local Switching Configuration Window of WLAN
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 219 of 628 In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points> menu in the sub-menus. In the Access Points screen, select an AP to change and go to the <Remote AP> tab.  Select the WLAN set with tunneling and enter the split ACL before clicking the <Add> button.  Figure 106. Split ACL Configuration Window of WLAN Allocated to AP  Select the WLAN set with local bridging and then enter VLAN ID/ACL/Pre-Auth. ACL before clicking the <Add> button.  Figure 107. VLAN/ACL/Pre-Auth.ACL Configuration Window of WLAN Allocated to AP
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 220 of 628 5.3  Security and Authentication The Samsung W-EP AP/APC supports the security and authentication function defined in the IEEE 802.11-based wireless LAN security standard and its main mechanism is as follows:  Wired Equivalent Privacy (WEP)  Wi-Fi Protected Access Version 1 (WPA1), Wi-Fi Protected Access Version 2 (WPA2)  Authentication type: Pre-Shared Key (PSK), 802.1X  Encryption type: Temporal Key Integrity Protocol (TKIP), AES-CCMP  When a new WLAN is added, the initial WLAN security configuration becomes all disabled. Therefore, an operator must configure the security function.    5.3.1  Initialization of WLAN Security Function This is a procedure to disable WLAN, where the security function is configured, to the initial status.  Configuration using CLI An example of initializing the security function of wlan 1 is show below.  1)    Go to configure  wlan configuration mode of CLI.    WEC8500# configure terminal WEC8500/configure# wlan 1   2)    After entering into the security configuration mode, use the ‘setDefault’ command to initialize the security configuration.  WEC8500/configure/wlan 1# security WEC8500/configure/wlan 1/security# setDefault  3)    After applying the changed configuration, exit the security configuration mode.  WEC8500/configure/wlan 1/security# apply WEC8500/configure/wlan 1/security# exit  4)    To check configuration information, use the ‘show wlan security summary’ command.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 221 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <Security>  <L2> tab.  Figure 108. Initialization of WLAN security function  The configuration items available in the window are as follows.  Item Description PROFILE NAME A WLAN configuration name is displayed. L2 SECURITY TYPE Layer2 security function type - None: Security function disabled (Select this to initialize the WLAN security function.) - Static WEP: Static WEP security function - 802.1x (Dynamic WEP): Dynamic WEP security function - Static WEP + 802.1x (Dynamic WEP): Static/Dynamic WEP security function - WPA + WPA2: WPA/WPA2 PSK/802.1x security function WPA POLICY WPA WPA Version 1 function is enabled when selected ENCRYPTION TYPE Encryption type - TKIP: TKIP type - CCMP: AES-CCMP type - Both: TKIP, AES-CCMP type WPA2 POLICY WPA2 The WPA Version 2 function is always enabled and cannot be changed. ENCRYPTION TYPE The only supported encryption method is CCMP and this cannot be changed. - CCMP: AES-CCMP method AUTH KEY MGMT PSK/802.1x Authentication key management type - PSK: PSK (shared key) authentication type - 802.1x: 802.1x authentication type through a RADIUS server PSK FORMAT PSK key input type - ASCII: ASCII character string - HEX: Hexadecimal value PSK KEY PSK key - 8-63 ASCII character string - 64-characters of hexadecimal value
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 222 of 628 Item Description PMK LIFETIME PMK effective time (unit: s, range: 0-1000000, default: 43200) EAPOL REAUTHENTICATION PERIOD EAP re-authentication interval (unit: s, range: 0-100000, default: 0) STATIC WEP WEP KEY FORMAT key input format - ASCII: ASCII character string - HEX: Hexadecimal value WEP KEY SIZE Key length - 40: 40-bit (5-byte) - 104: 104-bit (13-byte) STATIC WEP WEP KEY INDEX Key index (1-4) WEP KEY key value 802.1X(DYNAMIC WEP) WEP KEY SIZE Key length - 40: 40-bit (5-byte) - 104: 104-bit (13-byte)  After selecting the L2 Security Type as None, click the <Apply> button.  5.3.2  WPA/WPA2 PSK Configuration The WPA/WPA2 PSK, one of wireless LAN authentication types, can be used in a small size network where an authentication server is not installed.  The procedure of WPA/ WPA2 PSK configuration is as follows.  Configuration using CLI 1)    Go to configure  wlan configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# wlan 1   2)    Go to security configuration mode and initialize the configuration.  WEC8500/configure/wlan 1# security WEC8500/configure/wlan 1/security# setDefault  3)    Configure the WPA type.  WEC8500/configure/wlan 1/security# [WPA_TYPE]
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 223 of 628  Parameter Description WPA_TYPE WPA type (wpa/wpa2): WPA Version 2 must be enabled at all times. - wpa: WPA Version 1 - wpa2: WPA Version 2  4)    Configure the PSK key.  WEC8500/configure/wlan 1/security# psk [KEY_TYPE] [KEY_STRING]  Parameter Description KEY_TYPE PSK key input format (ascii/hex) - ASCII: ASCII character string - HEX: Hexadecimal value KEY_STRING PSK key  5)    Configure the encryption type.  WEC8500/configure/wlan 1/security# [WPA_TYPE] [ENC_TYPE]  Parameter Description WPA_TYPE WPA type (wpa/wpa2): Use the same value as the WPA type configured before. WPA Version 2 must be enabled at all times. - wpa: WPA Version 1 - wpa2: WPA Version 2 ENC_TYPE Encryption type (tkip/ccmp) - tkip: TKIP type. TKIP cannot be configured for WPA Version 2. - ccmp: AES-CCMP type  6)    Configure the key management algorithm to PSK.  WEC8500/configure/wlan 1/security# keymgmt psk  7)    Disable the 802.1x key management algorithm.  WEC8500/configure/wlan 1/security# no keymgmt ieee8021x
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 224 of 628 8)    Disable the 802.1x authentication.  WEC8500/configure/wlan 1/security# no ieee8021x  9)    After applying the changed configuration, exit the security configuration mode.  WEC8500/configure/wlan 1/security# apply WEC8500/configure/wlan 1/security# exit  10) To check the configuration information, use the following command.  WEC8500/configure# show wlan security summary  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <Security>  <L2> tab.  Figure 109. WPA/WPA2 PSK configuration  After selecting the L2 Security Type as WPA + WPA2 and AUTH KEY MGMT as PSK, click the <Apply> button.  For more information about detail configuration item, see ‘5.3.1 Initialization of WLAN Security Function’.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 225 of 628 5.3.3  WPA/WPA2 802.1x Configuration The WPA/WPA2 802.1x, one of wireless LAN authentication types does authentication through an authentication server such as a Remote Authentication Dial-In User Service (RADIUS) server. To configure WPA/WPA2 802.1x to WLAN, execute the command as follows:    As the 802.1x authentication needs interoperation with a RADIUS server, the RADIUS server required for the WLAN security configuration must be configured first. For more information about RADIUS server configuration, see ‘8.1 RADIUS Server Configuration’.  Configuration using CLI 1)    Go to configure  wlan configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# wlan 1   2)    Go to security configuration mode and initialize the configuration.  WEC8500/configure/wlan 1# security WEC8500/configure/wlan 1/security# setDefault  3)    Configure the WPA type.  WEC8500/configure/wlan 1/security# wpa_type  Parameter Description wpa_type WPA type (wpa/wpa2): WPA Version 2 must be enabled at all times. - wpa: WPA Version 1 - wpa2: WPA Version 2  4)    Configure the encryption type.  WEC8500/configure/wlan 1/security# [WPA_TYPE] [ENC_TYPE]  Parameter Description WPA_TYPE WPA type (wpa/wpa2): Use the same value as the WPA type configured before. WPA Version 2 must be enabled at all times. - wpa: WPA Version 1 - wpa2: WPA Version 2
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 226 of 628 Parameter Description ENC_TYPE Encryption type (tkip/ ccmp) - tkip: TKIP type. TKIP cannot be configured for WPA Version 2. - ccmp: AES-CCMP type  5)    Disable the PSK key management algorithm.  WEC8500/configure/wlan 1/security# no keymgmt psk  6)    Configure the key management algorithm to 802.1x.  WEC8500/configure/wlan 1/security# keymgmt ieee8021x  7)    Enable the 802.1x authentication.  WEC8500/configure/wlan 1/security# ieee8021x  8)    After enabling the RADIUS server function for authentication, specify the index of authentication RADIUS server. The RADIUS server information must be configured in advance.  WEC8500/configure/wlan 1/security# radius-server auth-servers [RADIUS_SERVER_ID_LIST]  Parameter Description RADIUS_SERVER_ID_LIST RADIUS server ID list (Up to 3 IDs can be configured.)  9)    After enabling the RADIUS server function for accounting, specify the index of account RADIUS server. The RADIUS server information must be configured in advance.  WEC8500/configure/wlan 1/security# radius-server acct-servers [RADIUS_SERVER_ID_LIST]  Parameter Description RADIUS_SERVER_ID_LIST RADIUS server ID list (Up to 3 IDs can be configured.)
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 227 of 628 10) After applying the changed configuration, exit the security configuration mode.  WEC8500/configure/wlan 1/security# apply WEC8500/configure/wlan 1/security# exit  11) To check the configuration information, use the following command.  WEC8500/configure# show wlan security summary  12) To check configuration information, use the ‘show wlan security summary’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus.    1)    Select a WLAN ID to change in the WLANs screen and go to the <Security>  <Radius> tab.  Figure 110. WPA/WPA2 802.1x Configuration (1)  Item Description PROFILE NAME A WLAN configuration name is displayed. AUTHENTICATION SERVER Enable/ Disable Whether the authentication function is enabled. - Enable: The authentication function is enabled. - Disable: The authentication function is disabled. RADIUS SERVER 1 Authentication server that will be used as the first priority (Can select one out of pre-configured RADIUS servers.) RADIUS SERVER 2 Authentication server that will be used as the second priority (Can select one out of pre-configured RADIUS servers.) RADIUS SERVER 3 Authentication server that will be used as the third priority (Can select one out of pre-configured RADIUS servers.)
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 228 of 628 Item Description ACCOUNTING SERVER Enable/ Disable Whether the accounting function is enabled. - Enable: The accounting function is enabled. - Disable: The accounting function is disabled. RADIUS SERVER 1 Accounting server that will be used as the first priority (Can select one out of pre-configured RADIUS servers.) RADIUS SERVER 2 Accounting server that will be used as the second priority (Can select one out of pre-configured RADIUS servers.) RADIUS SERVER 3 Accounting server that will be used as the third priority (Can select one out of pre-configured RADIUS servers.) FALLBACK TEST INTERVAL RADIUS server Fallback attempt interval (unit: s, range: 0-500, default: 0), When set to 0, the fallback function is disabled. ACCOUNTING INTERVAL Accounting information transmission interval (unit: s, range: 0-10000, default: 600), When set to 0, the periodic accounting information transmission function is disabled.  Select AUTHENTICATION SERVER and ACCOUNTING SERVER as Enable and configure the rest items.  Internal RADIUS Server Operator can use a RADIUS server in the APC. The internal RADIUS server only supports the authentication function and does not support the accounting or aaa-override, etc. To use an internal RADIUS server, select ‘Internal’ when selecting a RADIUS server during authentication server configuration.    2)    Click the <L2> tab.    Figure 111. WPA/WPA2 802.1x Configuration (2)  Select the L2 Security Type as WPA + WPA2 and AUTH KEY MGMT as 802.1x.   After configuring the rest values as required, click the <Apply> button. For more information about detail configuration item of L2 tab, see ‘5.3.1 Initialization of WLAN Security Function’.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 229 of 628 5.3.4  Static WEP Configuration The WEP is a security algorithm defined in the initial wireless LAN standard.   It provides security by using a cryptographic key and Initial Vector (IV) to encrypt the wireless transmission data exchanged between an AP and a wireless terminal connected to a wireless LAN.    Configuration using CLI For static WEP configuration, execute the following commands.  1)    Go to configure  wlan configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# wlan 1   2)    Go to security configuration mode and initialize the configuration.  WEC8500/configure/wlan 1# security WEC8500/configure/wlan 1/security# setDefault  3)    Disable WPA1, WPA2, and 802.1x authentication.  WEC8500/configure/wlan 1/security# no wpa WEC8500/configure/wlan 1/security# no wpa2 WEC8500/configure/wlan 1/security# no ieee8021x  4)    Enable the WEP.  WEC8500/configure/wlan 1/security# wep  5)    Configure the WEP Shared Key mode.  WEC8500/configure/wlan 1/security# wep shared  6)    Use the following command to configure the cryptographic key of WEP.  WEC8500/configure/wlan 1/security# wep encryption [KEY_TYPE] [KEY_STRING] [KEY_INDEX] [KEY_LENGTH]
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 230 of 628  Parameter Description KEY_TYPE WEP key Input format of WEP cryptographic key (ascii/hex) - ASCII: ASCII character string - HEX: Hexadecimal value KEY STRING WEP cryptographic key KEY_INDEX Key index (range: 1-4) KEY_LENGTH Key length (Bit unit) - 40 - 104  7)    After applying the changed configuration, exit the security configuration mode.  WEC8500/configure/wlan 1/security# apply WEC8500/configure/wlan 1/security# exit  8)    To check configuration information, use the ‘show wlan security summary’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <Security>  <L2> tab.  Figure 112. Static WEP configuration  Select the L2 Security Type as Static WEP. After configuring the rest values as required, click the <Apply> button. For more information about detail configuration item of L2 tab, see ‘5.3.1 Initialization of WLAN Security Function’.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 231 of 628 5.3.5  Dynamic WEP Configuration The Dynamic WEP is a security algorithm that improves the security vulnerabilities of a static WEP by using 802.1x authentication. Unlike the static WEP that is based on a configured fixed key, it creates a cryptographic key by executing 802.1x authentication when a terminal is connected.  Configuration using CLI For dynamic WEP configuration, execute the command as follows:  1)    Go to configure  wlan configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# wlan 1   2)    Go to security configuration mode and initialize the configuration.  WEC8500/configure/wlan 1# security WEC8500/configure/wlan 1/security# setDefault  3)    Enable the 802.1x authentication.  WEC8500/configure/wlan 1/security# ieee8021x  4)    To configure the length of a cryptographic key of dynamic WEP, execute the following command.  WEC8500/configure/wlan 1/security# ieee8021x encryption [KEY_LENGTH]  Parameter Description KEY_LENGTH Key length (Bit unit) - 40 - 104  5)    After enabling the RADIUS server function for authentication, specify the index of authentication RADIUS server. The RADIUS server information must be configured in advance.  WEC8500/configure/wlan 1/security# radius-server auth-servers [RADIUS_SERVER_ID_LIST]
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 232 of 628  Parameter Description RADIUS_SERVER_ID_LIST RADIUS server ID list (Up to 3 IDs can be configured.)  6)    After enabling the RADIUS server function for accounting, specify the index of account RADIUS server. The RADIUS server information must be configured in advance.  WEC8500/configure/wlan 1/security# radius-server acct-servers [RADIUS_SERVER_ID_LIST]  Parameter Description RADIUS_SERVER_ID_LIST RADIUS server ID list (Up to 3 IDs can be configured.)  7)    After applying the changed configuration, exit the security configuration mode.  WEC8500/configure/wlan 1/security# apply WEC8500/configure/wlan 1/security# exit  8)    To check the configuration information, execute the following command.  WEC8500/configure# show wlan security summary  9)    To check configuration information, execute the ‘show wlan security summary’ command.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 233 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus.  1)    Select a WLAN ID to change in the WLANs screen and go to the <Security>  <Radius> tab. For details about configuration, refer to the section 5.3.3.  2)    Click the <L2> tab.    Figure 113. Dynamic WEP Configuration Window  Select the L2 Security Type as Dynamic WEP. After configuring the rest values as required, click the <Apply> button. For more information about detail configuration item of L2 tab, see ‘5.3.1 Initialization of WLAN Security Function’.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 234 of 628 5.4  DHCP Configuration The DHCP service of APC consists of DHCP server, DHCP relay, and DHCP proxy.  5.4.1  DHCP Server 5.4.1.1  DHCP Server Configuration A DHCP server in the APC dynamically allocates an IP address to a client.    Configuration using CLI 1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure #   2)    To enable or disable the DHCP server, enter the ‘ip dhcp’ command. Use ‘no’ in front of the command to disable the configuration.  ip dhcp enable  no ip dhcp enable  3)    To check configuration information, use the ‘show ip dhcp’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <DHCP>  <Internal Server> menu in the sub-menus.  Figure 114. DHCP server configuration  Enable/Disable the DHCP SERVER SERVICE item in the Internal Server window to enable or disable a DHCP server.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 235 of 628 5.4.1.2  DHCP Pool The DHCP pool includes the range of IP address to be allocated to a client, DNS server that will be used by a DHCP client, NTP server, and default router IP address information, etc.  Configuration using CLI [Pool Creation] The procedure of creating a pool in an internal DHCP server and entering into the pool mode is as follows:  1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure #  2)    Enter the ‘ip dhcp pool’ command. Use ‘no’ in front of the command to delete a DHCP pool.  ip dhcp pool [POOL_NAME]  no ip dhcp pool [POOL_NAME]  3)    To check configuration information, use the ‘show ip dhcp’ command. To configure the DHCP Pool related function, execute the command as follows to go to the DHCP pool mode.  WEC8500# configure terminal WEC8500/configure # ip dhcp pool test WEC8500/configure/ip/dhcp/pool test#  [Configuring IP address] Before configuring a DHCP pool, you should configure a network first. If the network is not configured, you cannot execute other commands.  Enter the command as follows to configure the network bandwidth of a DHCP pool to serve. Enter ‘no’ parameter to delete a configured network bandwidth. After entering a separator ‘/’ after an IP address, enter the length of a netmask address or enter a netmask address after the IP address.  network [IP_ADDRESS] [NETMASK]  network [IP_ADDRESS]/[LENGTH]  no network
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 236 of 628  Parameter Description IP_ADDRESS IP address   NETMASK Netmask address LENGTH Netmask length  [Configuring Gateway] This command configures the gateway address of a DHCP client. Enter ‘no’ parameter to delete a configured address.  default-router [IP_ADDRESS]  no default-router  Parameter Description IP_ADDRESS Gateway IP address  [Configuring DNS Server] Up to 3 IP addresses can be configured for a DNS server. Enter ‘no’ parameter to delete a configured DNS server. The lower command ‘all’ is used to delete all the IP addresses of a configured DNS server.  dns-server [IP_ADDRESS]  no dns-server [IP_ADDRESS]  no dns-server all  Parameter Description IP_ADDRESS DNS Server’s IP address  [Configuring Domain Name] This command configures or deletes a domain name.    domain-name [DOMAIN]  no domain-name [DOMAIN]  Parameter Description DOMAIN Domain name to configure (e.g. samsung APC.co.kr)
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 237 of 628 [Configuring Fixed IP Address to MAC Address] This command configures a fixed IP address to a specific MAC address or deletes the configuration.   The ‘range’ of IP address to configure cannot be overlapped with the IP range and maximum 255 IP addresses can be configured. In addition, use the ‘no fix-address all’ command to delete all the configured values.  fix-address [aa:bb:cc:dd:ee:ff A.B.C.D]  no fix-address [aa:bb:cc:dd:ee:ff A.B.C.D]  fix-address all  As shown in the below example, 100.100.100.10 can be always allocated to the IP address of a wireless terminal whose MAC address is 11:22:33:44:55:66.    WEC8500/configure/ip/dhcp/pool test# fix-address 11:22:33:44:55:66 100.100.100.10  [Configuring IP Address Lease Time] Configure the time when a wireless terminal receives an IP address. The ‘lease infinite’ command configures the time infinitely. If ‘no’ parameter is entered in front of the command, it is configured to 24 hours (default).    lease [TIME]  lease infinite  no lease  Parameter Description TIME Lease time (range: 120-8640000, Unit: s)  [Configuring NTP Server] Up to 3 IP addresses of a NTP server can be configured or deleted. In addition, use the ‘no ntp-server all’ command to delete all the configured addresses of a NTP server.    ntp-server [IP_ADDRESS]  no ntp-server [IP_ADDRESS]  no ntp-server all  Parameter Description IP_ADDRESS The IP address of the NTP server
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 238 of 628 [Ping check] When a DHCP server allocates an IP address to a client, ping check can be used to check if an IP address to allocate is being used in the current network.    ping-check [enable/disable]  Parameter Description enable/disable Configures whether to use ping check (default: disable)  [Configuring IP Address Range] A DHCP server configures the range of IP address to allocate to a client. The range of IP address to add is up to 16 and the IP address specified in the range cannot be duplicated with the IP address of fix-address. Enter ‘no’ to delete the range of configured IP address and enter ‘no range all’ to delete all the ranges.    range [IP_ADDRESS]  range [IP_ADDRESS1] [IP_ADDRESS2]  no range [IP_ADDRESS]  no range [IP_ADDRESS1] [IP_ADDRESS2]  no range all  Parameter Description IP_ADDRESS IP address. Use to configure one IP address. IP_ADDRESS1 Start address of IP address range IP_ADDRESS2 Last address of IP address range  [Capwap Access Controller Address Configuration] Up to three IP addresses for a Capwap controller can be configured or deleted. Also, all Capwap controller addresses can be deleted using the ‘no capwap-dhcp-option’ command.    capwap-dhcp-option [IP_ADDRESS]  no capwap-dhcp-option    Parameter Description IP_ADDRESS IP address of the Capwap Controller  [Configuring Option Data] Use the ‘user-option’ command to configure or delete the DHCP option. Use ‘no’ to delete each option and use ‘no user-option all’ to delete all the options.  Option: Up to 254 can be entered (1-254).  Data type: string (character string), octet (hex string), int (32 bit integer), uint (32-bit unsigned integer), int16 (16-bit integer), uint16 (16-bit unsigned integer), ipaddress (IP address)
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 239 of 628  Mode: Can be configured to the active/passive mode.    active: Although a client does not request data transmission, the DHCP server transmits user-option data (Default).  passive: The DHCP server transmits data upon a client’s request.    Command Description - user-option [1-254] string [string] [active/passive] - user-option [1-254] octet aa:bb:cc [active/passive] - user-option [1-254] int [integer] [active/passive] - user-option [1-254] uint [unsigned integer] [active/passive] - user-option [1-254] int16 [16 bit integer] [active/passive] - user-option [1-254] uint16 [16 bit unsigned integer] [active/passive] - user-option [1-254] ipaddress A.B.C.D [active/passive] Configures an option. - no user-option [1-254] string [string] [active/passive] - no user-option [1-254] octet aa:bb:cc [active/passive] - no user-option [1-254] int [integer] [active/passive] - no user-option [1-254] uint [unsigned integer] [active/passive] - no user-option [1-254] int16 [16 bit integer] [active/passive] - no user-option [1-254] uint16 [16 bit unsigned integer] [active/passive] - no user-option [1-254] ipaddress A.B.C.D [active/passive] Deletes a configured option. no user-option all Deletes all the configured options.  A usage example is given below.  WEC8500/configure/ip/dhcp/pool test# user-option 3 string “hi, there” active WEC8500/configure/ip/dhcp/pool test# user-option 200 octet 33:4A:5C:6F:DD passive  WEC8500/configure/ip/dhcp/pool test# user-option 201 int -3000  WEC8500/configure/ip/dhcp/pool test# user-option 202 uint16 300 WEC8500/configure/ip/dhcp/pool test# user-option 203 ipaddress 111.22.22.33  [Retrieving Pool Information] To check the entire information of a DHCP pool, execute the ‘show ip dhcp pool’ command. If you enter a pool name as a parameter as shown in ‘show ip dhcp pool [POOL NAME]’, you can check the information of a specific pool.  [Retrieving DHCP Lease Information] To check the DHCP lease information, execute the ‘show ip dhcp lease’ command.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 240 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <DHCP>  <Internal Server> menu in the sub-menus.  Click the <Add> or <Delete> button to add or delete a DHCP pool.  Figure 115. DHCP Pool (1)  The window where a DHCP pool can be added is shown below.  Figure 116. DHCP Pool (2)
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 241 of 628  POOL NAME: DHCP pool name (mandatory input item)  NETWORK: Network bandwidth IP that a DHCP server will serve (mandatory input item)  MASK: Netmask length IP of an IP that is entered into the NETWORK item (mandatory input item)  LEASE TIME: DHCP IP address lease time (Unit: s, default: 3600 s, Maximum value: 8640000 s)  DOMAIN NAME: Configures a domain name that will be used by a DHCP client in a DNS.  DEFAULT GATEWAY: Gateway IP that will be configured by a DHCP client  1ST/2ND/3RD DNS SERVER: Configures a DNS server that will be used by a DHCP client.  1ST/2ND/3RD NTP SERVER: Configures a NTP server that will be used by a DHCP client.  APC List (Option 138): Configures APL list value corresponding to DHCP user option #138.  Range Pool: Configures the range of IP address that will be leased to a DHCP client. Enter an IP address into the Start IP Address IP box and End Ip Address IP box each and then click the <Add> button to create a list. In addition, select one in the created list and click the <Delete> button to delete it. The IP address range cannot be overlapped with the IP address in a network bandwidth and also the IP address fixed to a MAC address.  Fixed Address Pool: Configures a fixed IP address to the MAC address of a specific DHCP client. Enter a MAC address and an IP address and click the <Add> button to create the list. In addition, select one in the created list and click the <Delete> button to delete it.   The IP address fixed to a MAC address cannot be overlapped with the IP address in a network bandwidth and also the IP address range.  5.4.1.3  Retrieving Number of DHCP Packets To check the number of DHCP packets that the DHCP server receives, execute the ‘show ip dhcp statistics’ command.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 242 of 628 5.4.2  DHCP Relay The DHCP relay forwards a DHCP packet received from a client through broadcast to the DHCP server. Because it switches with the DHCP proxy, the DHCP relay is enabled when the DHCP proxy is disabled.   The DHCP relay is working in the unit of interface. It is disabled in the ‘mgmt0’ and ‘lo’ interface. The DHCP relay is not working even when no IP address is configured in the interface.  Configuration using CLI The procedure of changing to the DHCP relay is as follows:  1)    Go to configure mode of CLI.  WEC8500# configure terminal  2)    Switch to the DHCP relay. The relay and proxy are operating in the switching mode. If a proxy is not used, it is operating in the relay mode.  WEC8500/configure # no ip dhcp-proxy enable  3)    To check the configured DHCP information, use the ‘show ip dhcp-proxy’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <DHCP>  <Proxy> menu in the sub-menus. You can configure the Proxy mode of DHCP to relay/proxy. Change the radio box for configuration in the DHCP PROXY MODE of Global Parameter item.    Figure 117. DHCP Relay
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 243 of 628 5.4.3  DHCP Proxy The procedure of changing to the DHCP proxy is as follows.  Configuration using CLI The CLI configuring a DHCP proxy is located as a command under ‘ip dhcp-proxy’ in the configure mode.    1)    Go to configure mode of CLI.  WEC8500# configure terminal  2)    Switch to the DHCP proxy.  WEC8500/configure#ip dhcp-proxy enable  3)    To check the configured information, use the ‘show ip dhcp-proxy’ command.    4)    Use the below command to check an IP address that is leased through the DHCP proxy.  WEC8500t#show ip dhcp proxy-lease IP address   |    Server IP   |    MAC address   | Lease Expiration time 10.10.10.100      1.1.1.1      00:1c:bf:c1:50:28   2012/08/31 12:00:24  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <DHCP>  <Proxy> menu in the sub-menus. You can configure the Proxy mode of DHCP to relay/proxy. Change the radio box for configuration in the DHCP PROXY MODE of Global Parameter item.    Figure 118. DHCP Proxy
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 244 of 628 5.4.4  Option 82 Configuration The APC uses the DHCP Option 82 to provide various services during IP allocation by forwarding the information such as access control, QoS, or security policy, etc. when a wireless terminal connected to an AP receives an IP address. The Option 82 has two fields, i.e. remote ID and circuit ID. Enter the name of an interface for which the APC constantly does relay/proxy in the circuit ID and enter a part of AP information in the remote ID accordingly. One of the following three data can be used as the remote id of Option 82.  ap-mac: 802.11 MAC data of the AP. The length is 12-byte (Default).  ap-mac-ssid: The character string of SSID is added to the data of AP-MAC. The length is variable.  ap-mac-ssid: Ethernet MAC data of the AP. The length is 12-byte.  To configure Option 82 related functions, go to the interface mode by executing the following command.  WEC8500# configure terminal WEC8500/configure#interface vlan10 WEC8500/configure/interface vlan10#  Configuration using CLI [Configuring Option 82] This command enables or disables the Option 82 function. It can be configured for each interface.  dhcp option-82 [MODE]  Parameter Description MODE Configures whether to use the Option 82 function (enable/disable).  [Configuring Remote ID] The command is shown below.  dhcp option-82 remote-id [MODE]  Parameter Description MODE Specifies one out of the following three data to the Option 82 remote-id. - ap-mac: MAC address of an AP - ap-mac-ssid: MAC address and SSID of an AP - ap- ethermac: Ethernet MAC address of an AP
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 245 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Interfaces> menu in the sub-menus. In the interface, you can see the page where you can change the Option 82.  Figure 119. Option 82 configuration (1)  Select an item in the list and perform detail configuration.  Figure 120. Option 82 configuration (2)  After unchecking the GLOBAL USE check box in the DHCP part, configure OPTION 82 STATE and OPTION 82 TYPE and then click the <Apply> button. In the OPTION 82 STATE, configure Enable/Disable for Option 82 and configure ap-mac, ap-mac-ssid, or ap-ethermac for OPTION 82 TYPE.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 246 of 628 5.4.5  Primary/Secondary Server Configuration The DHCP relay/proxy can transmit a DHCP packet received from a client through broadcast to maximum two DHCP servers. Here, the two servers are called a primary server and a secondary server.    The configuration of primary/secondary servers can be done in the interface mode, but it is also possible in the global mode. If the configuration exists both in the interface mode and global mode, the configuration in the interface mode has a higher priority.  Configuration using CLI [Configuration at Interface] 1)    Go to configure  interface mode of CLI.  WEC8500# configure terminal WEC8500/configure#interface [INTERFACE_NAME]  2)    Enter the ‘dhcp server’ command. To configure only a primary server, do not enter the information of a secondary server.  dhcp server primary A.B.C.D secondary A.B.C.D: Configures both primary/ secondary servers.  dhcp server primary A.B.C.D: Configures only a primary server.  no dhcp server primary A.B.C.D secondary A.B.C.D: Deletes both primary/ secondary servers.  no dhcp server primary A.B.C.D: Deletes a primary server.  [Configuration at Global] 1)    Go to configure mode of CLI.  WEC8500# configure terminal WEC8500/configure#  2)    Enter the ‘ip dhcp-proxy default-dhcp-server’ command. To configure only a primary server, do not enter the information of a secondary server.  ip dhcp-proxy default-dhcp-server primary A.B.C.D secondary A.B.C.D: Configures both global primary/secondary servers.  ip dhcp-proxy default-dhcp-server primary A.B.C.D: Configures only a global primary server.  no ip dhcp-proxy default-dhcp-server primary A.B.C.D secondary A.B.C.D: Deletes both global primary/secondary servers.  no ip dhcp-proxy default-dhcp-server primary A.B.C.D: Deletes a global primary server.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 247 of 628 Configuration using Web UI [Configuration at Interface] In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Interfaces> menu in the sub-menus. In the interface, you can see the page where you can change the Option 82.  Figure 121. Primary/Secondary server configuration (1)  Select an item in the list and perform detail configuration.  Figure 122. Primary/Secondary server configuration (2)  After unchecking the GLOBAL USE checkbox in the DHCP part, configure PRIMARY DHCP SERVER and ‘SECONDARY DHCP SERVER’ and then click the <Apply> button.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 248 of 628 [Configuration at Global] In the menu bar of <WEC Main window>, select <Configuration> and then select the <DHCP>  <Proxy> menu in the sub-menus.  Configure the PRIMARY SERVER and SECONDARY SERVER of the Global Parameter.   If you does Global configuration, the configuration is applied to all the interfaces whose ‘GLOBAL USE’ checkbox is checked in the DHCP configuration of APC interface.  Figure 123. Primary/Secondary server configuration (3)
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 249 of 628 5.5  Radio Service Configuration The APC supports WLAN-based radio configuration. You can enable or disable WMM based on WLAN and change DTIM and station idle timeout.  Configuration using CLI 1)    Go to configure  wlan-radio-service mode of CLI.  APC# configure terminal APC/configure# wlan-radio-service APC/configure/wlan-radio-service#   2)    Configure whether to enable or disable WMM.  wmm-mode [WLAN_ID] [MODE]  Parameter Description WLAN_ID WLAN ID (range: 1-240) MODE WMM configuration mode (disable/enable)  3)    Configure DTIM.  dtim [WLAN_ID] [DTIM]  Parameter Description WLAN_ID WLAN ID (range: 1-240) DTIM Beacon DTIM: 1~255(default: 1)  4)    Configure station idle timeout.  sta-idle-timeout [WLAN_ID] [TIMEOUT]  Parameter Description WLAN_ID WLAN ID (range: 1-240) TIMEOUT Station idle timeout (range: 30-3600, unit: 15 s, default: 300)  5)    To check the configured information, use the ‘show wlan-radio-service’ command.
CHAPTER 5. WLAN Management ©  SAMSUNG Electronics Co., Ltd.  page 250 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <Advanced> tab.  Figure 124. Radio service configuration  After configuring the below items, click the <Apply> button.  WMM: Configures the WMM mode.    DTIM: Enter a DTIM value (1-255).  STATION IDLE TIMEOUT: Enter a station idle timeout value. The value range is 30-3600 and it must be the multiple of 15.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 251 of 628 CHAPTER 6. Wi-Fi Configuration      This chapter describes how to manage the 802.11a, 80211.bg, 802.11n or 80211ac device of W-EP AP.   An 802.11n device supports 2.4 GHz and 5 GHz wireless bandwidth and high data processing speed.  6.1  802.11a/b/g/n/ac Radio Property 6.1.1  802.11a/b/g Configuration The configuration of radio property for 802.11a/b/g/ac is as follows:  Configuration using CLI 1)    Go to configure  radio mode to configure of CLI. The radio mode can be either ‘80211a’ or ‘80211bg’.   An example of entering into 80211a is shown below.  APC# configure terminal APC/configure# 80211a APC/configure/80211a#  2)    Configure the channel of an AP.  channel [CHANNEL] ap [AP_ID]: Configures the channel of an AP.    channel [CHANNEL] ap [AP_ID] fixed: A channel is designed to be fixed and it is not affected by the automatic adjustment function such as RRM. (When executing the ‘show 80211a summary’ or ‘show 80211bg summary’, the channel value is displayed in ‘*’.)  Parameter Description CHANNEL Channel Configuration - Range for 80211a: 36-165 - Range for 80211bg: 1-14 AP_ID AP ID (range: 1-3000)
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 252 of 628 3)    Configure channel of multiple APs belonging to the group.  channel [CHANNEL] group [GROUP_ID] all-ap/active-ap: Channel is configured for multiple APs.  channel [CHANNEL] group [GROUP_ID] all-ap/active-ap fixed: Channel is fixed and is not affected by automatic adjustment functions such as RRM. (Channel values are indicated as * when retrieved by ‘show 80211a summary’ or ‘show 80211bg summary’.)  Parameter Description CHANNEL Channel Configuration - Range for 80211a: 36-165 - Range for 80211bg: 1-14 GROUP_ID ID of the AP group all-ap Applies to all APs in the group active-ap Applies to all live APs in the group  4)    Configure the TX power of an AP.  txPower [POWER] ap [AP_ID]: Configures a TX power.  txPower [POWER] ap [AP_ID]fixed: The TX power is configured as fixed and it is not affected by the automatic adjustment function such as RRM. (When executing the ‘show 80211a summary’ or ‘show 80211bg summary’, the channel value is displayed in ‘*’.)  Parameter Description POWER TX power value (range: 3-23)   AP_ID AP ID (range: 1-3000)  5)    Configure TX power of multiple APs belonging to the group.  txPower [POWER] group [GROUP_ID] all-ap/active-ap: TX Power Setting  txPower [POWER] group [GROUP_ID] all-ap/active-ap fixed: TX power is fixed and is not affected by automatic adjustment functions such as RRM. (Channel values are indicated as * when retrieved by ‘show 80211a summary’ or ‘show 80211bg summary’.)  Parameter Description POWER TX power value (range: 3-23) GROUP_ID ID of the AP group all-ap Applies to all APs in the group active-ap Applies to all live APs in the group
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 253 of 628 6)    To check the configured channel and TX power information, use the following command.  WEC8500# show 80211a[|80211bg] summary AP Name            MAC Address         Operation State  Channel   TxPower ----------------- ----------------- --------------- -------- -------- AP_f4d9fb23bfb9   F4:D9:FB:23:BF:B9  1                   161         10 * AP_f4d9fb23c2b9   F4:D9:FB:23:C2:B9  1                  157          5 AP_f4d9fb23c079   F4:D9:FB:23:C0:79  1                   153          5 AP_f4d9fb23baf9   F4:D9:FB:23:BA:F9  1                  149          5 AP_f4d9fb23beb9   F4:D9:FB:23:BE:B9  1                   64          5   In this example, the AP_f4d9fb23bfb9 whose Tx Power is displayed as 10* has a fixed TX power.  7)    Configure the beacon period of an AP.  beacon period [PERIOD] global  Parameter Description PERIOD Beacon period (range: 40-3500)  8)    Configure the fragmentation threshold of an AP.  threshold fragmentation [THRESHOLD] global  Parameter Description THRESHOLD Fragmentation threshold (range: 256-8000)  9)    Configure the data rate of an AP.  rate [MODE] [RATE] global  Parameter Description MODE Mode (basic/supported) - basic: Basic rate at which a terminal connects to an AP. - supported: A connected terminal that supports the supported rate can communicate with an AP at the supported rate. RATE Data rate - Range for 80211a: 6, 9, 12, 18, 24, 36, 48, or 54 Mbps - Range for 80211bg: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, or 54 Mbps  10) To check the configured beacon period, fragmentation threshold, and data rate information, uses the ‘show 80211a radio-config global’ command.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 254 of 628 11) Configure the bandwidth of the AP. Bandwidth can be configured only for 80211a/n/ac.  bandwidth [BANDWIDTH] ap [AP_ID]: Bandwidth is configured for a specific AP.  bandwidth [BANDWIDTH] global: Bandwidth is configured for all APs.  Parameter Description BANDWIDTH - 20: 20 MHz - 40: 40 MHz - 80: 80 MHz - 160: 160 MHz (to be supported in the future) - 8080: 80 + 80 MHz (to be supported in the future) AP_ID ID of the AP (range: 1-3000)  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points>  <802.11a/n> or <802.11b/g/n> menu in the sub-menus. An example of selecting 802.11a/n is shown below.  Figure 125. 802.11a/b/g/n radio (1)  The configuration items are as follows:  [AP Service Configuration]  SERVICE: Enable or disable the radio service.  [Channel Configuration]  CURRENT CHANNEL: Configures a channel.  Range for 80211a: 36-165  Range for 80211bg: 1-14  CHANNEL FIX: The configured channel is configured as fixed and it is not affected by the automatic adjustment function such as RRM. When selecting the <Monitor>  <Access Points>  <Radio>  <802.11a/n/ac> or <802.11b/g/n> menu, the channel value is displayed as *. (Optional)
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 255 of 628 [TX power Configuration]  TX CURRENT POWER: TX Power (range: 3-23)  TX POWER FIX: The configured TX power is configured as fixed and it is not affected by the automatic adjustment function such as RRM. When selecting the <Monitor>  <Access Points>  <Radio>  <802.11a/n/ac> or <802.11b/g/n> menu, the Tx power value is displayed as *. (Optional)    To check the configured channel and TX power information, go to <Monitor>  <Access Points>  <Radio>  <802.11a/n/ac> or <802.11b/g/n>.   In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio>  <802.11a/n/ac> or <802.11b/g/n>  <802.11h> menu in the sub-menus.   An example of selecting 802.11a/n/ac is shown below.  Figure 126. 802.11a/b/g/n radio (2)  [General]  BANDWIDTH: Configures bandwith (range: 20, 40, 80). Available for 802.11a/n/ac only.  BEACON PERIOD: Beacon period (range: 40-3500)  FRAGMENTATION THRESHOLD: AP fragmentation threshold (range: 256-8000)  MAX. CLIENT COUNTS: Limits the number of connected clients per radio  CONTROLLED VOICE OPTIMIZATION: Configures voice optimization.  [Data Rates] The data rate selection options are as follows:  Basic: Basic rate supported for a terminal to connect to an AP.  Supported: A connected terminal that supports the supported rate can communicate with an AP at the supported rate.  Data Rates: data rate  Range for 80211a: 6, 9, 12, 18, 24, 36, 48, or 54 Mbps  Range for 80211bg: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, or 54 Mbps
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 256 of 628 6.1.2  802.11n Configuration The 802.11n configuration is as follows:  Configuration using CLI 1)    Go to configure  radio mode (80211a or 80211bg) to configure of CLI.  WEC8500# configure terminal WEC8500/configure# 80211a  2)    Go to the 11n-support mode.  WEC8500/configure/80211a#11n-support  3)    Configure an AP so that it can support 802.11n property.  WEC8500/configure/80211a/11n-support# enable [AP_ID]  Parameter Description AP_ID AP ID (range: 1-500)  4)    Configure the Modulation and Coding Scheme (MCS) rate.  WEC8500/configure/80211a/11n-support# mcs [RATE] ap [AP_ID]  Parameter Description RATE MSC rate (range: 0-23) AP_ID AP ID (range: 1-500)  5)    To check the configured 11n-support information, use the ‘show 80211a radio-config ap [AP_ID]’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points>  <802.11a/n/ac> or <802.11b/g/n>  <General> menu in the sub-menus. Perform the configuration by referring to ‘6.1.1 802.11a/b/g Configuration’.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 257 of 628 6.1.3  802.11ac Configuration The 802.11ac configuration is as follows:  Configuration using CLI 1)    Go to configure radio mode of 80211a to configure.  WEC8500# configure terminal WEC8500/configure# 80211a  2)    Enter 11ac-support mode.  WEC8500/configure/80211a#11ac-support  3)    Configure the AP so that it can support the 802.11ac property.  WEC8500/configure/80211a/11ac-support# enable [AP_ID]  Parameter Description AP_ID ID of the AP (range: 1-500)  4)    Configure the Modulation and Coding Scheme (MCS) rate.  WEC8500/configure/80211a/11n-support# mcs [RATE] ap [AP_ID]  Parameter Description RATE MSC rate (range: 0-23) AP_ID ID of the AP (range: 1-500)  5)    To check the configured 11ac-support information, use the ‘show 80211a radio-config ap[AP_ID]’ command.  Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration> and then select <Access Points>  <802.11a/n/ac> or <Radio>  <802.11a/n/ac>  <802.11n/ac> in the submenu.  An example of selecting 802.11a/n/ac is shown below.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 258 of 628   [OPERATIONAL TYPE] Enable/disable 11ac operation.  [VHT (802.11AC) MCS SETTING]  Determine the spatial stream count for each AP model and enter maximum MCS value for each spatial stream count.  Example: maximum of seven MCS for one spatial stream, maximum of eight MCS for two spatial streams, and maximum of nine MCS for three spatial streams  1 spatial stream: 7  2 spatial streams: 8  3 spatial streams: 9  [OPTIONS]  Guard-interval (11n): Select short/long for Guard-interval 20/40 Mhz respectively.  Guard-interval (11ac): Select short/long for Guard-interval 20/40/80 Mhz respectively.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 259 of 628 6.2  Wi-Fi QoS Configuration The APC provides various QoS in the wire/wireless section for every packet type (voice, video, best-effort, or background). The QoS can be configured for each wireless section (2.4 GHz, 5 GHz).    6.2.1  QoS Configuration of Wireless Terminal The system provides probable QoS by changing the Enhanced Distributed Channel Access (EDCA) parameter in a wireless section.    Configuration using CLI To configure an EDCA profile in the upward wireless section of a wireless terminal, execute the command as follows:  1)    Go to configure  radio mode to configure of CLI.  APC# configure terminal APC/configure# [80211a/80211bg]  2)    Apply the EDCA profile.  edca-parameters [PROFILE] station  Parameter Description PROFILE Configures each EDCA profile (wmm_default_sta/wmm_default_ap/ edca_user1/edca_user2).  3)    To check the application status of a configured EDCA profile, use the ‘show 80211a [80211bg] qos edca-parameters wmm_default_sta’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio> <802.11a/n> or <802.11b/g/n>  <QoS> menu in the sub-menus.  In the Qos menu, there are Wired and Wireless tab. To change the Station EDCA parameter, select the Wired tab. If you want to change the AP EDCA parameter to configure the QoS of an AP wireless section, select the Wireless tab.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 260 of 628 [Wired tab]  Figure 127. QoS configuration of a wireless terminal (1)  [Wireless tab]  Figure 128. QoS configuration of a wireless terminal (2)
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 261 of 628 6.2.2  QoS Configuration of AP 6.2.2.1  Wire Section The APC provides QoS in a wire section using 802.1p and Differentiated Services Code Point (DSCP) marking and it can adjust packet traffics because it can adjust queue length depending on packet type.    Configuration using CLI To configure the Station QoS parameter that will be applied to the wire section between APC and AP, execute the command as follows:  1)    Go to configure  QoS mode of a wireless section of CLI.    APC# configure terminal APC/configure# [80211a/80211bg] qos APC/configure/80211a/qos#  2)    Configure a QoS policy to a wire section packet.    802.1P Policy: enable policy [802_1P]  DSCP Policy: enable policy [DSCP_OUTER] [DSCP_INNER]  Parameter Description enable Enables 802.1p or DSCP marking. 802_1P 802.1p configuration (user_priority/default) - user_priority: Marks the 802.1p or User Priority value of an incoming packet into the 802.1p field. - default: Marks pre-configured basic value to the 802.1p field. DSCP_OUTER DSCP Outer configuration (inner_packet/default) - inner_packet: Marks the DSCP value of an incoming packet into the Outer DSCP field. - default: Marks pre-configured basic value to the Outer DSCP field. DSCP_INNER DSCP Inner configuration (no_mark/default) - no_mark: Marks no value into the Inner DSCP field. - default: Marks pre-configured basic value to the Inner DSCP field.  3)    Configure a default 802.1p value per packet.  dot1p-tag [PACKET_TYPE] [802.1P_TAG]  Parameter Description PACKET_TYPE Packet type configuration (voice/video/best_effort/background) 802.1P_TAG Default 802.1p value
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 262 of 628 4)    Configure a default DSCP value per packet.  dscp-tag [PACKET_TYPE] [DSCP TAG]  Parameter Description PACKET_TYPE Packet type configuration (voice/video/best_effort/background) DSCP_TAG Default DSCP value  5)    Configure a protocol to distinguish packet types.  protocol [PROTOCOL]  Parameter Description PROTOCOL Protocol configuration (none/dot1p/dscp) - none: Determine the type of every incoming packet with best effort. - dot1p: Judge the packet type by checking the 802.1p field of an incoming packet. - dscp: Judge the packet type by checking the DSCP field of an incoming packet.  The packet judgment criteria are as follows: For example, if the packet type is voice, the 802.1p input value is 6 or 7 and the input range of DSCP value is 46-63.   Also, if the packet type is video, the 802.1p input value is 4 or 5 and the input range of DSCP value is 24-45.  802.1p DSCP Packet type 6, 7 46~63 voice 4, 5 24~45 video 0, 3 0~7, 16~23 best effort 1, 2 8~15 background  6)    To check the configured policy and QoS parameter information per packet, use the ‘show 80211a[|80211bg] qos policy’ command.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 263 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio>  <802.11a/n> or <802.11b/g/n>  <QoS> menu in the sub-menus.  1)    Select one out of None/Default/User Priority in the 802.1P POLICY drop-down list of Tagging Policy. 2)    To disable a DSCP policy in the DSCP POLICY, select Disable. 3)    To enable a DSCP policy in the DSCP POLICY, select Enable. a)    Select one out of Inner Packet/Default Value in the OUTER DSCP drop-down list. b)    Select one out of No Mark/Default Value in the INNER DSCP drop-down list. 4)    Select one out of None/802.1p/DSCP in the PROTOCOL drop-down list. 5)    Enter 802.1p or a DSCP value into the QoS Default Values. 6)    Click the <Apply> button to apply.  6.2.2.2  Wireless Section The system can provide QoS service in a wireless section for each AP downward packet type (voice, video, best effort, background). You can configure 802.1p and DSCP tag which are the criteria used to select access category.  Configuration using CLI 1)    Go to configure  QoS mode of a wireless section of CLI.    APC# configure terminal APC/configure# [80211a/80211bg] qos APC/configure/80211a/qos#  2)    Configure 802.1p or DSCP tag value to use for a packet type.  ap-tags [PACKET_TYPE] [802.1P TAG] [DSCP TAG]  Parameter Description PACKET_TYPE Packet type configuration (voice/video/best_effort/background) 802.1P_TAG 802.1p configuration DSCP_TAG DSCP tag configuration  3)    To check the QoS parameter information of a configured AP, use the ‘show 80211a [80211bg] qos ac-profile [PACKET_TYPE]’ command.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 264 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio>  <802.11a/n> or <802.11b/g/n>  <QoS> menu in the sub-menus.  Figure 129. QoS configuration of AP (wireless section)  In the Access Point tab, enter 802.1p or a DSCP value into the QoS Default Values.   Click the <Apply> button to apply.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 265 of 628 6.2.3  Configuring QoS Profile of a Specific Terminal You can configure a QoS profile that is applied to a specific wireless terminal.   This QoS profile is applied from the RADIUS server of a wireless terminal during authentication.  Configuration using CLI 1)    Go to configure  QoS profile configuration mode of CLI.    APC# configure terminal APC/configure# qos <profile name> APC/configure/qos Samsung #  2)    Configure 802.1p and a DSCP value that will be used for each access category.  ac [AC] [802.1P_TAG] [DSCP_TAG]  Parameter Description AC Access Category(AC_VO/AC_VI/AC_BE/AC_BK) 802.1P_TAG 802.1p configuration (range: 0-7) DSCP_TAG DSCP tag configuration (range: 0-63)  3)    Configure the brief information of a profile.  description [DESCRIPTION]  Parameter Description DESCRIPTION Profile description  4)    Configure maximum allowed 802.1p priority value used in the Traffic Identifier (TID) field of AP QoS packet.  max-dot1p <802.1p tag>  Parameter Description 802.1P_TAG Maximum allowed 802.1p configuration (range: 0-7)  5)    To check the configured QoS profile information, use the ‘show qos profile’ command.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 266 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <User QoS> menu in the sub-menus. To create a QoS profile to apply to a terminal, click the <Add> button in the initial window.  The QoS addition window consists of the following QoS parameters. By entering each QoS parameter, you can configure the QoS profile of a specific terminal or configure the usage control function for each user.  Figure 130. Configuring QoS profile of a specific terminal   ID: ID (range: 1-16)  PROFILE NAME: Profile name  DESCRIPTION: Profile description  MAX. DOT1P TAG: Maximum allowed 802.1p tag (range: 0-7)  PER-USER UPSTREAM BANDWIDTH CONTRACT: Maximum upward usage (range: 0-450000)  PER-USER DOWNSTREAM BANDWIDTH CONTRACT: Maximum downward usage (range: 0-450000)  VOICE/VIDEO/BEST EFFORT/BACKGROUND: Enter 802.1P TAG (range: 0-7) and DSCP TAG (range: 0-64) for each item.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 267 of 628 6.2.4  Voice Optimization Configuration The APC configures an EDCA parameter value that is optimized for voice service to an AP in real-time.  Configuration using CLI 1)    Go to configure  radio cvo mode to configure of CLI.    APC# configure terminal APC/configure# [80211a|80211bg] cvo APC/configure/80211a/cvo#  2)    Enable or disable the function.  [no] enable  3)    To check the configured information, use the ‘show 80211a cvo config’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio>  <802.11a/n> or <802.11b/g/n>  <General> menu in the sub-menus.  Figure 131. Configuring voice optimization  To enable Controlled Voice Optimization (CVO), select Enable in the CONTROLLED VOICE OPTIMIZATION. To disable it, select Disable.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 268 of 628 6.3  802.11h Configuration The APC supports the configuration and transmission power limitation for the Dynamic Frequency Selection (DFS) function in an AP. When the AP detects radar, an event is sent to the WEM and a detouring channel can be configured in the AP.  Configuration using CLI For channel switching announcement related configuration and power constraint value configuration in an AP, execute the command as follows:  1)    Go to configure  80211h configuration mode of CLI.  APC# configure terminal APC/configure# 80211h APC/configure/80211h#  2)    Configure the 802.11h information.  channel-switch [MODE] [RESTRICTION] [SWITCH COUNT]  Parameter Description MODE Whether the switching announcement function is enabled/disabled RESTRICTION Whether the channel packet transmission restriction mode is enabled (disable/enable) SWITCH COUNT Waiting time until channel switching announcement  3)    Configure the transmission power of a wireless terminal.  power-constraint [VALUE]  Parameter Description VALUE Transmission power(0-31 dB)  4)    To check the configuration information, use the ‘show 80211h configuration’ command.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 269 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio>  <802.11a/n>  <802.11h> menu in the sub-menus.  Figure 132. Configuring 802.11h   POWER CONSTRAINT: Power constraint value (0-100)  CHANNEL SWITCH: Enables channel switch announcement.  RESTRICTION MODE: Configures transmission restriction.  CHANNEL SWTICH COUNT: Enter a waiting time until channel switching announcement. Target Beacon Transmission Times (TBTT)
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 270 of 628 6.4  Country Code You can use a country code to restrict the number of channels that can be used in an AP and the maximum transmission power of each channel.    Configuration using CLI To configure the country code function, go to country mode first by executing the following command.  APC# configure terminal APC/configure# country APC/configure/country#  [Global Country Code Configuration] If you configure a global country code, the country code can be specified to all the connected APs at the same time. The command is shown below.  set-global [COUNTRY_CODE] [VALUE]  Parameter Description COUNTRY_CODE Country code to configure VALUE Environment configuration (both/outdoor/indoor/none)  To check the configuration information, use the ‘show country global-config’ command.  [AP Country Code Configuration] To configure a country code, execute the command as follows:  set-ap [AP_ID] [COUNTRY_CODE] [VALUE]  Parameter Description AP_ID AP ID (range: 1-500) COUNTRY_CODE Country code to configure VALUE Environment configuration (both/outdoor/indoor/none)  To check the configuration information, use the ‘show country ap-config [AP_ID]’ command.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 271 of 628 [Editing Country Code] You can add or delete an operation channel per country and change maximum transmission power per channel.  The command used to add or delete a channel per country is shown below.  add-channel [COUNTRY_CODE] [CHANNEL_NUMBER] [MAX_TX_POWER]: Adds a channel.  del-channel [COUNTRY_CODE] [CHANNEL_NUMBER]: Deletes a channel.  Parameter Description COUNTRY_CODE Country code to configure CHANNEL_NUMBER Channel to configure. MAX _TX_POWER Maximum transmission power per channel.  The command used to change maximum transmission power value of a channel for a specific country code is shown below.  max-tx-power [COUNTRY_CODE] [CHANNEL_NUMBER] [MAX_TX_POWER]  Parameter Description COUNTRY_CODE Country code to configure CHANNEL_NUMBER Channel to configure. MAX _TX_POWER Maximum transmission power per channel.  To check the configuration information, use the ‘show country information [COUNTRY_ CODE]’ command.  Parameter Description COUNTRY_CODE Country code to configure
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 272 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <Country> menu in the sub-menus.    Figure 133. Country code window (1)  [Global Country Code Configuration] 1)    Select a country in the DEFAULT COUNTRY drop-down list of Configured Country Code item. (Only an authenticated country code is supported.) 2)    Select an environment in the DEFAULT ENVIRONMENT drop-down list.  Both: The terminal operation environment includes all the environments.  Outdoor: The terminal operation environment is outdoor.  Indoor: The terminal operation environment is indoor.  Non-country: A terminal is operating under non-country entity. 3)    Click the <Apply> button to apply.  [Editing Country Code] In the Edit Country Code item, you can add or delete an operation channel per country or change maximum transmission power per channel.  1)    Select a country in the COUNTRY drop-down list of Edit Country Code item.   (Only an authenticated country code is supported.) 2)    Select a channel to add in the MAX TX POWER LEVEL (5 GHZ/2.4 GHZ) and enter maximum transmission power level (0-30). 3)    In the MAX TX POWER LEVEL (5 GHZ/2.4 GHZ), unselect a channel to delete. 4)    Click the <Apply> button to apply.
CHAPTER 6. Wi-Fi Configuration ©  SAMSUNG Electronics Co., Ltd.  page 273 of 628 [AP Country Code Configuration] In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points>  <General> menu in the sub-menus.  Figure 134. Country code window (2)  After selecting COUNTRY and ENVIRONMENT, click the <Apply> button.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 274 of 628 CHAPTER 7. WLAN Additional Services      In this chapter, how to configure WLAN additional services such as wireless terminal management, spectrum analysis, Call Admission Control (CAC) and Radio Resource Management (RRM), etc. is described.  7.1  Managing Wireless Terminal 7.1.1  Information Retrieval Functions Configuration using CLI Using the following command, you can retrieve the information of a wireless terminal being serviced by the APC.  show station summary: When you enter this command, the summary information of all the wireless terminals connected to the APC is retrieved.  show station summary ap [AP_ID]: The information of wireless terminals of each AP is retrieved.  show station summary bssid [BSSID_ID]: The information of wireless terminals of each BSSID is retrieved.  show station summary wlan [WLAN_ID]: The information of wireless terminals of each WLAN is retrieved.  show station detail [MAC_ADDRESS]: The detail information of a wireless terminal that has a specific MAC address is retrieved.  show station stats ap-80211-stats [MAC_ADDRESS]: The WI-FI statistics information of a wireless terminal is retrieved.    show station association history [MAC_ADDRESS]: The connection history of a wireless terminal is retrieved.  show station stats debug all: The debug statistics information of a wireless terminal is retrieved.  show station stats management_frame all: The debug statistics information of a wireless terminal is retrieved.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 275 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Monitor> and then select the <Stations> menu in the sub-menus. The brief information of each station is displayed in the window. To check the detail information of a specific station, click the MAC information of the specific station in the Stations window list.  Figure 135. Information viewing window  7.1.2  Connection History related Configuration You can configure maximum value for the connection history of a wireless terminal that will be managed in the APC.    station number-of-assoc-tracking [COUNT]  Parameter Description COUNT Maximum number of association tracking
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 276 of 628 7.2  Handover Management The handover releases a connection with an existing AP and connects to a new AP.   It provides seamless wireless LAN connection to a wireless terminal. The APC provides both 802.11 standard handover and Samsung’s unique AirMove (Network Controlled Handover) handover.    7.2.1  Connection History Information Use the ‘show station association history [MAC_ADDRESS]’ command to check the handover history information of a specific wireless terminal connected to the APC.    7.2.2  AirMove Configuration Unlike the 802.11 standard handover where a wireless terminal performs the handover function by itself, the AirMove handover is performed by the collaboration between wireless terminals compatible with the APC. Therefore, the packet loss or handover time is optimized. Some Samsung smartphones such as Galaxy S2 or S3, etc. provide the AirMove function.  Configuration using CLI To configure the AirMove related function, execute the following command to go to the handover configuration mode.  WEC8500# configure terminal WEC8500/configure# handover  [Handover Option Configuration]  handover [OPTION] [OPTION_DETAIL]  AirMove Configuration Item Description operation mode Operation mode configuration - OPTION: opmode   - OPTION_DETAIL: Each mode (VoIP/STA) buffered-forwarding mode Configures whether to use the buffered forwarding function. - OPTION: fwd-buffering - OPTION_DETAIL: Enable/Disable decision delta Configures the threshold of RSSI difference between a serving AP and a target AP. - OPTION: decision-delta - OPTION_DETAIL: Threshold (dBm) scan time on channel Configures scanning time of a wireless terminal per channel. - option: scan-time-channel - OPTION_DETAIL: Time (ms)
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 277 of 628 AirMove Configuration Item Description scan interleaving time Configures the scanning interval of a wireless terminal. - OPTION: scan-time-interleave - OPTION_DETAIL: Time (ms) Service time in scanning period Configures a period when an wireless terminal transmits/receives an actual data traffic after scanning. - OPTION: scan-time-service - OPTION_DETAIL: Time (ms) scan report level Configures the threshold of a scan report that will be transmitted from an AP to the APC.   - OPTION: scan-report-level - OPTION_DETAIL: scan report level (dBm) Numbers of handover scan attempts per channel Configures the scanning times of a wireless terminal per channel. - OPTION: number-of-proreq - OPTION_DETAIL: Number of times Number of channels for which scan is attempted Configures the number of channels a wireless terminal will scan at a time. - OPTION: number-of-channel - OPTION_DETAIL: Number of channels scan trigger level RSSI intensity at which a wireless terminal starts channel scanning - OPTION -trigger-level - OPTION_DETAIL: RSSI (dBm) station decision delta Configures the threshold of RSSI difference, measured in a wireless terminal, between a serving AP and a target AP. If the threshold is exceeded, a wireless terminal performs its handover. - OPTION: station-decision-delta - OPTION_DETAIL: Threshold (dBm)  An example of using the command for each configuration item is as follows:  WEC8500/configure# handover opmode APP WEC8500/configure# handover buffered-forwarding enable WEC8500/configure# handover decision-delta 10 WEC8500/configure# handover scan-time-channel 10 WEC8500/configure# handover scan-time-interleave 1000 WEC8500/configure# handover scan-time-service 200 WEC8500/configure# handover scan-report-level -90 WEC8500/configure# handover number-of-proreq 3 WEC8500/configure# handover number-of-channel 4 WEC8500/configure# handover scan-trigger-level -65 WEC8500/configure# handover station-decision-delta 10  To check the configuration information, use the ‘show handover configuration’ command.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 278 of 628 [AirMove Enable/Disable Configuration] The AirMove is enabled by default, so use the following command to disable it.  no handover mode NCHO  To check the configuration information, use the ‘show handover configuration’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Mobility Management>  <Handover> menu in the sub-menus.    Figure 136. Handover window  You can enable or disable the intra handover function by selecting Enable/Disable in the INTER APC HAND-OVER item. After configuring a value, click the <Apply> button to apply.  7.2.3  Inter APC Handover Configuration   The Inter APC handover is a technology that supports handover among several APC systems. Depending on network configuration, the Inter APC L3 handover and Inter APC L2 handover services are provided. By using the clustering service, you can configure several APC systems into a single group.  Configures whether to use the Inter APC handover. The default value of Inter APC handover is not configured.  handover inter-apc enable  To check the configuration information, use the ‘show handover configuration’ command.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 279 of 628 7.3  Call Admission Control (CAC) Configuration The CAC function is provided to protect existing calls from the calls incoming to a wireless LAN. The APC does not allow an additional call when maximum allowed number of calls per radio is reached.  7.3.1  SIP ALG Configuration To make Call Admission Control (CAC) working, the Session Initiation Protocol (SIP) Application Layer Gateway (ALG) function must be enabled. The SIP ALG analyzes a SIP packet and forwards VoIP communication status to the CAC.  Configuration using CLI The SIP ALG related commands are as follows:  sipalg enable: Configures whether to enable the SIP ALG function.  sipalg sip-error-resp-enable(SIP ERROR RESPONSE): Configures how to reject a received call when maximum allowed number of calls is exceeded.  Disable (default): No response for a received call connection request message.   The received message is not forwarded to the called side.  Enable: Rejects by transmitting 503 Service Unavailable SIP response for a received call connection request message. The received message is not forwarded to a called side.  sipalg sip-detect-long-call-enable (SIP DETECT LONG DURATION CALL): Configures whether to delete an internal resource by detecting abnormal remaining calls. The values configured in the below two timers are used to judge an abnormal remaining call.  SIP No Answer Timeout (SIP Long Call Setuptimer): Maximum allowed time of the status before call connection (range: 300-3600, default: 600)  SIP Connect Timeout (SIP Long Call EstblshTimer): Maximum allowed time for a connected call (range: 3600-86400, default: 7200)  sipalg sip-long-call-timeout (SIP NO ANSWER TIMEOUT, SIP CONNECT TIMEOUT): Configures a time required to judge an abnormal remaining call and enter SIP No Answer Timeout and SIP Connect Timeout in order.  To enable SIP ALG, execute the command as follows:  1)    Go to configure mode of CLI.  APC# configure terminal
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 280 of 628 2)    Enable the SIP ALG.  APC/configure# sipalg enable  3)    To check the configuration information, use the ‘show sipalg configuration’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>  <General> menu in the sub-menus.  Figure 137. SIP ALG configuration window  After configuring SIP ALG that is a voice CAC related configuration in the SIP ALG, click the <Apply> button.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 281 of 628 7.3.2  Voice CAC Configuration To protect existing calls, the voice CAC function configures maximum allowed number of calls and rejects any call request when the maximum number is exceeded. You can configure the number of marginal voice calls for handover.  Configuration using CLI For voice CAC configuration, execute the command as follows:  1)    Go to configure  voice CAC mode of a wireless section of CLI.  APC# configure terminal APC/configure# [80211a/80211bg] cac voice APC/configure/80211a/cac/voice#  2)    Enable or disable the voice CAC function.  acm [MODE]  Parameter Description MODE Enables or disables the voice CAC function - enable: Enable - disable: Disable  3)    Configure maximum allowed number of voice calls.  max-calls [VALUE]  Parameter Description VALUE Maximum allowed number of voice calls.  4)    Configure the number of marginal voice calls considering the handover.  reserved-ho-calls [VALUE]  Parameter Description VALUE Number of marginal voice calls considering the handover  5)    To check the configured voice CAC information, use the ‘show [80211a | 80211bg] cac voice configuration’ command.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 282 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio> <802.11a/n> or <802.11b/g/n>  <Admission Control> menu in the sub-menus.  Figure 138. Admission control configuration of 802.11a/n  After configuring the below item in the Call Admission Control, click the <Apply> button.  ADMISSION CONTROL: Configures the CAC function.  MAX CALLS: Maximum number of allowed calls (range: 2-30)  HANDOVER CALLS: Number of marginal calls considering handover (range: 0-10) The number of allowed calls is MAX CALLS-HANDOVER CALLS.  MINOR ALARM THRESHOLD: Configures a threshold that generates a Minor alarm (range: 0-15) Enter ‘0’ to prevent the alarm.  MAJOR ALARM THRESHOLD: Configures a threshold that generates a Major alarm (range: 0-30)   Enter ‘0’ to prevent the alarm.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 283 of 628 7.3.3  Video CAC Configuration To protect existing video calls, the video CAC function configures the maximum allowed number of video calls and rejects any call request when the maximum number is exceeded. You can configure the number of marginal calls for handover.  Configuration using CLI For video CAC configuration, execute the command as follows:  1)    Go to configure  video CAC mode of a wireless section of CLI.  APC# configure terminal APC/configure# [80211a/80211bg] cac video APC/configure/80211a/cac/video#  2)    Enable or disable the video CAC function.  acm  [MODE]  Parameter Description Mode Enables or disables the CAC function - enable: Enable - disable: Disable  3)    Select a video CAC method.  method  [method]  Parameter Description method Select a video CAC method (static/chan_util) - static: Based on video calls - chan_util: Based on channel usage  4)    Configure the maximum allowed number of calls.  max-calls  [VALUE]  Parameter Description VALUE Maximum allowed number of video calls  5)    Configure the number of marginal calls with consideration for handover.  reserved-ho-calls  [VALUE]  Parameter Description VALUE Number of marginal calls with consideration for handover
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 284 of 628 6)    Configure the maximum allowed usage of channels.  max-chan-util  [VALUE]  Parameter Description VALUE Maximum allowed usage of channels  7)    Configure the usage of marginal channels with consideration for handover.  reserved-ho-chan-util  [VALUE]  Parameter Description VALUE Usage of marginal channels with consideration for handover  8)    You can view the video CAC information you configured by executing the ‘show [80211a | 80211bg] cac video configuration’ command.  Configuration using Web UI From the menu bar of <WEC Main Window>, select <Configuration> and then select <Radio> <802.11a/n> or <802.11b/g/n>  <Admission Control> in the submenus.  Figure 139. 802.11a/n Admission Control Configuration Window  After configuring the items below in the Call Admission Control, click the <Apply> button.  ADMISSION CONTROL: Configure the video CAC function  METHOD: Select a video CAC method (static/chan_util)  MAX CALLS: Maximum allowed number of calls (range: 2-30)  HANDOVER CALLS: Number of marginal calls with consideration for handover (range: 0-8) The maximum allowed number of calls becomes MAX CALLS-HANDOVER CALLS.  MAX CHANNEL UTILIZATION (%): Maximum allowed usage of channels (range: 5-85)  HANDOVER CHANNEL UTILIZATION (%): Usage of marginal channels with consideration for handover (range: 0-25)
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 285 of 628 7.4  Radio Resource Management (RRM) RRM performs automatic setup function for AP’s channel and Tx Power. RRM is functionally divided into Dynamic Channel Selection (DCS), Dynamic Power control (DPC), and Coverage Hole Detection and Control (CHDC). The DCS automatically sets the channels of the APs. The DPC DCS automatically sets the Tx Power of the AP.   The CHDC adjusts the Tx Power when Coverage Hole occurs.  7.4.1  RRM Configuration This section describes the settings for using the RRM function and the cluster configuration.    Configuration using CLI To configure each function, execute the command as follows:  1)    Go to configure  rrm configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# rrm  2)    Enable RRM. The ‘no’ parameter is used to disable RRM. DCS, DPC and CHDC, which are functions of RRM, can run only if the RRM is enabled.  WEC8500/configure/rrm# enable  3)    In the cluster environment, set the same RF Group Name to all the connected APCs.   A name must consist of up to 15 characters.  WEC8500/configure/rrm# rf-group-name [Name]  4)    Configure priorities between the neighbor list of each Wlan. Go to the wireless section the configuration of which you want to change and then enter neighbor-list setup mode. You can select between rssi and handover, and the default value is rssi.  WEC8500/configure/rrm# 80211a WEC8500/configure/rrm/80211a# neighbor-list WEC8500/configure/rrm/80211a/neighbor-list# wlan-neighbor-priority rssi/handover  5)    To check the configured information, use the ‘show rrm config-summary’ command.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 286 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio>  <802.11a/n/ac> or <802.11b/g/n>  <RRM> menu in the sub-menus. Enable or disable the RRM service at the top of the menu. The RRM can be set in either 802.11a/n/ac screen or 802.11b/g/n screens. Configure priorities between the neighbor list of each Wlan at the bottom of the menu.  Figure 140. RRM configuration window  7.4.2  DPC Configuration This section describes the setting options of the DPC function which automatically sets the Tx Power of the AP.  Configuration using CLI 1)    Go to configure  rrm configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# rrm  2)    Go to the wireless section where you want to change the settings.  WEC8500/configure/rrm# 80211a  3)    Set the DPC function. Enter the dpc setting mode and set it to ‘enable’. Use the ‘no’ parameter to disable the mode. The function operates only when the RRM is set to Enable.  WEC8500/configure/rrm/80211a# dpc WEC8500/configure/rrm/80211a/dpc# enable
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 287 of 628 4)    Execute the following command to change the Received Signal Strength Indication (RSSI) threshold for neighbor AP. The default value is -70 (dBm).  WEC8500/configure/rrm/80211a/dpc# rssi-threshold [value]  5)    If you need to change the RSSI threshold for the station, execute the following command.   The default value is -70 (dBm). This parameter is used only in the DCS-DPC joint algorithm.  WEC8500/configure/rrm/80211a/dpc# rssi-threshold-for-stn [value]  6)    Execute the following command to change the execution interval. The default value is 600 (seconds).  WEC8500/configure/rrm/80211a/dpc# periodic-interval [value]  7)    Execute the following command to change the Tx Power range which is automatically set by DPC. The default minimum is 16 for 80211a and 12 for 80211b.   The default maximum is 20 for both 80211a and 80211b.  WEC8500/configure/rrm/80211a/dpc# txPower min [value] max [value]  8)    Check the settings using the ‘show rrm config-summary’ command.  Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio>  <802.11a/n/ac> or <802.11b/g/n>  <RRM> menu in the sub-menus.  Enable or disable the DPC in the SERVICE field in Dynamic TX Power Control.  Figure 141. DPC settings
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 288 of 628 7.4.3  DCS Configuration   This section describes the setting options of the DCS function which automatically sets the channel of the AP.  Configuration using CLI 1)    Go to configure  rrm configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# rrm  2)    Go to the wireless section where you want to change the settings.  WEC8500/configure/rrm# 80211a  3)    Set the DCS function. Enter the dcs setting mode and set it to ‘enable’. Use the ‘no’ parameter to disable the mode. The function operates only when the RRM is set to Enable.  WEC8500/configure/rrm/80211a# dcs WEC8500/configure/rrm/80211a/dcs# enable  4)    Configure whether to apply the DCS-DPC joint algorithm. If the ‘no’ parameter is selected, the configuration is cleared.  WEC8500/configure/rrm/80211a/dcs# joint-algo-enable  5)    Execute the following command to change the execution interval. The default value is 120 (seconds).  WEC8500/configure/rrm/80211a/dcs# periodic-interval [value]  6)    Execute the following command to change the Channel Utilization threshold.   The default value is 80 (%).  WEC8500/configure/rrm/80211a/dcs# channel-utilization-threshold [value]  7)    Execute the following command to change the My Utilization threshold.   The default is 10 (%) for 802.11a and 40 (%) for 802.11b.  WEC8500/configure/rrm/80211a/dcs# my-utilization-threshold [value]
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 289 of 628 8)    Execute the following command to set the anchor time. The default value is start time 4, end time 5. If both start time and end time are set to the same time, Anchor Run function is disabled.  WEC8500/configure/rrm/80211a/dcs# anchor-time start [value] end [value]  9)    Execute the following command to change the channels that is automatically set by the DCS. Use the ‘no’ parameter to disable the mode.  WEC8500/configure/rrm/80211a/dcs# channel [value]  10) Execute the following command to use the Delayed Channel Change function.   To disable the configuration, enter the ‘no’ parameter. The default is Disable.   The Delayed Channel Change function delays channel change instead of changing it immediately when a channel becomes busy due to channel utilization. If the anchor time is not configured, the default value is used at 4 o’clock.  WEC8500/configure/rrm/80211a/dcs# delayed-channel-change  11) To use the Aware Option function, execute the following command. To disable the configuration, enter the ‘no’ parameter. The Aware Option does not change a channel if there is a specific condition. Therefore, three functions are provided based on whether there is a voice, the association of a station, or traffic in a station. The default is that only the Voice Aware function is enabled. The Station Aware function specifies the number of stations at the same time.  WEC8500/configure/rrm/80211a/dcs# aware-option voice WEC8500/configure/rrm/80211a/dcs# aware-option station [station count] WEC8500/configure/rrm/80211a/dcs# aware-option traffic  12) Check the settings using the ‘show rrm config-summary’ command.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 290 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio>  <802.11a/n/ac> or <802.11b/g/n>  <RRM> menu in the sub-menus. Enable or disable the DCS in the SERVICE field in Dynamic Channel Selection.  Figure 142. DCS settings  7.4.4  CHDC Configuration This section describes the setting options of the CHDC function which adjusts the Tx Power when Coverage Hole occurs.  Configuration using CLI 1)    Go to configure  rrm configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure# rrm  2)    Go to the wireless section where you want to change the settings.  WEC8500/configure/rrm# 80211a  3)    Set the CHDC function. Enter the chdc setting mode and enable it Use the ‘no’ parameter to disable the mode. The function operates only when the RRM is enabled.  WEC8500/configure/rrm/80211a# chdc WEC8500/configure/rrm/80211a/chdc# enable  4)    To use the pre-alarm function, operator can collect the statistics from an AP.   After entering into the chdc configuration mode, complete configuration (statsCollectEnable). To disable the configuration, enter the ‘no’ parameter. All the functions for pre-alarm are available only when both RRM and CHDC are enabled.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 291 of 628  WEC8500/configure/rrm/80211a/chdc# statsCollectEnable Success: DBI set for DPC 11A Stats collect Enable : 1  5)    If a coverage hole is estimated from the statistics for the pre-alarm function, a warning can be transmitted. After entering into the chdc configuration mode, complete configuration (statsWarningEnable). To disable the configuration, enter the ‘no’ parameter.    WEC8500/configure/rrm/80211a/chdc# statsWarningEnable Success: DBI set for DPC 11A Stats Warning Enable : 1  6)    If a coverage hole is estimated from the statistics for the pre-alarm function, CHDC can be executed. After entering into the chdc configuration mode, complete configuration (statsActionEnable). To disable the configuration, enter the ‘no’ parameter.    WEC8500/configure/rrm/80211a/chdc# statsActionEnable Success: DBI set for DPC 11A Stats Action Enable : 1  7)    Configure the minimum value of statistics Failed Client Count for the pre-alarm function.   It can be 1~75.  WEC8500/configure/rrm/80211a/chdc# min-failed-client-count 70 CHDC 802.11a : Set Minimum Failed Client Count Success  8)    Configure the percentage of statistics Failed Client Count for the pre-alarm function.   It can be 10~35.  WEC8500/configure/rrm/80211a/chdc# percent-failed-client-count 20 Success: CHDC 802.11a : Set Percentage of Failed Client Count Success  9)    Configure the threshold of RSSI that will be added to the statistics Failed Client Count for the pre-alarm function. Configure it for Voice Frame and Data Frame. It can be -90~-20 (dB).  WEC8500/configure/rrm/80211a/chdc# rssi-threshold data -75 Success: CHDC 802.11a : Set RSSI THRESHOLD(-75)  Successful  WEC8500/configure/rrm/80211a/chdc# rssi-threshold voice -75 Success: CHDC 802.11a : Set RSSI THRESHOLD(-75)  Successful
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 292 of 628 10) Configure a value that requests an interval to an AP to collect statistics for the pre-alarm function. The default is 120 seconds and it can be 30~3600 seconds.  WEC8500/configure/rrm/80211a/chdc# statsCollectInterval 60 This Value: 60 is already set  11) Configure the minimum value of the idle time-out count of statistics for the pre-alarm function. This parameter can have a value ranging from 0 to 1,000.  WEC8500/configure/rrm/80211a/chdc# min-idle-timeout-count 10 CHDC : Set Minimum IdleTimeOutCnt Success  12) To check the configured information, execute the ‘show rrm config-summary’ command. In the ‘Coverage Hole Detection and Control’, operator can check the current status of all the configured values.  WEC8500/configure/rrm/80211a/chdc# show rrm config-summary  RRM Status  .....   Enabled    Rf Group Name ...   Group                                                80211a/n          80211b/g/n    Dynamic Power Control ----------------------- -----------------     DPC Enable                          ..  Enabled            Enabled     Periodic Interval                 ..  follow DCS        follow DCS     RSSI Threshold for Neighbor AP  ..   -70                -70     RSSI Threshold for Station       ..   -70                -70     TX Power Min. - Max.              ..   17 - 20            14 - 20     Minimum Number of AP              ..   2                  2     Elapsed Time After Last Run    ..   36                  7    Dynamic Channel Selection ------------------- -----------------     DCS Enable                        ..   Enabled            Enabled     DCS-DPC Joint Algorithm Enable  ..   Enabled            Enabled     Periodic Interval                 ..  60                 60     Anchor Time Start                 ..   0                  0     Anchor Time Stop                  ..   23                 23     Interference Level Threshold     ..   80                 80     Channel Utilization Threshold   ..   99                 99     My Utilization Threshold         ..   10                 40     Delayed Channel Change            ..   Enabled            Enabled     Aware-Option: Voice Call         ..   Enabled            Enabled     Aware-Option: Traffic             ..   Enabled            Enabled     Aware-Option: Station Assoc.    ..   Enabled            Enabled     Station Count for Station Aware ..   1                  1     Elapsed Time After Last Run      ..   36                  7    Coverage Hole Detection and Control --------- -----------------     CHDC Enable                       ..   Enabled            Enabled     Statistics Collect Enable        ..   Enabled            Enabled     Statistics Warning Enable       ..  Enabled            Enabled
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 293 of 628      Statistics Action Enable         ..   Enabled            Enabled     RSSI Voice Threshold             ..  -75                -75     RSSI  Data Threshold            ..   80                -30     Minimum Failed Client Count    ..   1                  1     Percentage Min. Failed Count    ..   25                 25     Minimum Idle time-out Count      ..   10                 10     Statistics Collect Interval     ..  120                 60    Neighbor List Management -------------------- -----------------     WLAN Neighbor Priority           ..   Handover           Handover     Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio>  <802.11a/n/ac> or <802.11b/g/n>  <RRM> menu in the sub-menus.  In the Coverage Hole Detection Control window, operator can enable or disable the CHDC and configure the values using the same functions as the CLI.    Figure 143. CHDC settings
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 294 of 628 7.4.5  Sleeping Cell Detection This is a function that allows the APC to detect the statuses of APs that are not performing basic functions and transmit an alarm/warning.  Configuration using CLI 1)    Enable/Disable: Configure whether the silent alarm detection function will be performed. (Enable: function performing, Disable: function not performing)  WEC8500/configure/rrm# sleep-cell-detect WEC8500/configure/rrm/sleep-cell-detect# enable  2)    APC Threshold: Minimum number of connected users throughout the whole APC for sleeping cell detection.   If the total number of STA associations is equal to or smaller than the APC threshold, the day is judged as a holiday and consequently the sleeping cell detection is not performed.  WEC8500/configure/rrm/sleep-cell-detect# apc-threshold  3)    AP Threshold: Minimum number of users connected to an AP for sleeping cell detection.   If the number of STA associations of an AP is equal to or smaller than the AP threshold, a silent alarm occurs.  WEC8500/configure/rrm/sleep-cell-detect# ap-threshold  4)    PERIOD_1ST: Start and end times of sleeping cell detection for Specific Period 1. (For a full day, set the start and end times as the same time.)  WEC8500/configure/rrm/sleep-cell-detect# period_1st  5)    PERIOD_2ND: Start and end times of sleeping cell detection start for Specific Period 2. (For a full day, set the start and end times as the same time.)  WEC8500/configure/rrm/sleep-cell-detect# period_2nd  6)    PERIOD_ALL: Start and end times of sleeping cell detection for periods other than Specific Periods 1 and 2.    WEC8500/configure/rrm/sleep-cell-detect# period_all
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 295 of 628 Configuration using Web UI From the menu bar of <WEC Main Window>, select <Configuration> and then select <Radio>  <Advanced>  <Sleeping Cell Detection> in the submenus.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 296 of 628 7.4.6  Energy Saving Groups  The purpose is to reduce the power consumption of the APC by turning off the RF radios of APs without any connected STA at a specific time when the number of STAs connected to the APC drops drastically.    The APs of the APC are divided into the active group in which APs are always in operation and the standby group in which the RF radios of APs are turned off.   When the standby group (energy saving group) is defined, the APC recognizes the remaining APs as the active group. You can define up to 10 groups.    Configuration using CLI 1)    Enable/Disable: Configure whether the energy saving function will be performed. (Enable: function performing, Disable: function not performing)  WEC8500/configure/rrm# energy-saving-group 1 WEC8500/configure/rrm/energy-saving-group 1# enable  2)    APC Threshold: Maximum number of connected users throughout the whole APC for energy saving detection.   If the total number of STA associations is equal to or smaller than the APC threshold, the day is judged as a holiday and the energy saving function is performed according to the times set for weekends.    WEC8500/configure/rrm/energy-saving-group 1# apc-threshold  3)    WEEKDAY: Start and end times of energy saving for weekdays.   (For a full day, set the start and end times as the same time.)  WEC8500/configure/rrm/energy-saving-group 1# weekday  4)    WEEKDEND: Start and end times of energy saving for weekends.   (For a full day, set the start and end times as the same time.)  WEC8500/configure/rrm/energy-saving-group 1# weekend  5)    ADD-AP: Add AP members to the energy saving group.    WEC8500/configure/rrm/energy-saving-group 1# add-ap
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 297 of 628 6)    DEL-AP: Delete AP members from the energy saving group.  WEC8500/configure/rrm/energy-saving-group 1# del-ap  Configuration using Web UI From the menu bar of <WEC Main Window>, select <Configuration> and then select <Radio>  <Advanced>  <Energy Saving Groups>  <GROUP NAME> in the submenus.   7.4.7  Energy Saving Auto Classification The purpose of the AP without the connected STA at a specific time when the STA connected to the APC is drastically reduced is to reduce power consumption of the APC by turning off the RF radio of the AP. The APs of the APC are classified into an active group to keep them at the operational status all the time and a standby group to make their RF radio off at the designated time. When the APC designates a standby group (energy saving group), the others are recognized as an active group.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 298 of 628 Up to 20 groups can be designated (Same as WEC8500/WEC8050). Energy Saving Auto Classification is not a method under which the operator configures a standby group but a method under which the system automatically classifies an energy saving group by using the analysis of each AP. For the convenience of the operator, the existing Energy Saving Groups and Energy Saving Auto Classification functions can be used by mixture. In short, as shown in the existing method, only Energy Saving Groups or only Energy Saving Auto Classification or both can be used.  Configuration using CLI 1)    Enable/Disable: Check the configuration of whether the Energy Saving Auto Classification function operates. (Enable: Function operation, Disable: No function operation)  WEC8500/configure/rrm# energy-saving-auto-class WEC8500/configure/rrm/energy-saving-auto-class# enable  2)    APC Threshold: The maximum number of all users connecting to the APC for Energy Saving Auto Classification If the number of all STA associations is less than APC threshold, the day is considered as a holiday and the Energy Saving Auto Classification function operates depending on the weekend setting time.  WEC8500/configure/rrm/energy-saving-auto-class# apc-threshold  3)    WEEKDAY: Energy saving start/end time on a weekday (For all day, the start time and the end time are set to the same time.)  WEC8500/configure/rrm/energy-saving-auto-class# weekday  4)    WEEKDEND: Energy saving start/end time on a weekend (For all day, the start time and the end time are set to the same time.)  WEC8500/configure/rrm/energy-saving-auto-class# weekend  5)    UNCONDITIONAL RADIO OFF: Configure whether the AP radio is turned off unconditionally, regardless of the connection of the STA. (radio_off_unconditionally: Unconditionally off, no radio_off_unconditionally: If the STA is connected, keep the state ON.)  ../configure/rrm/energy-saving-auto-class# radio_off_unconditionally
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 299 of 628 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select <Radio>  <Advanced>  <Energy Saving>  <Automatic Classification> menus in the sub-menus.
CHAPTER 7. WLAN Additional Services ©  SAMSUNG Electronics Co., Ltd.  page 300 of 628 7.5  Location Tracking The APC tracks the location information of several terminals in a wireless LAN network based on the wireless data collected from W-EP wireless LAN APs.  To configure the location tracking function, execute the command as follows:  1)    Go to configure  locationtrack configuration mode of CLI.  WEC8500# configure terminal WEC8500/configure # locationtrack WEC8500/configure/locationtrack #  2)    Configure the location tracking function.  WEC8500/configure/locationtrack # enable  3)    To check the configured information, execute the ‘show locationtrack config’ command.  WEC8500/configure/locationtrack # show locationtrack config Location tracking enable....: Enabled Algorithm type..............: 4 Expiry date of history files: 0  4)    Configure the MAC address of a wireless terminal for which the tracking function will be executed.  station [MAC_ADDRESS]  5)    To check the location information of a wireless terminal to track, execute the ‘show locationtrack station’ command.  WEC8500/configure/locationtrack # show locationtrack station No.  stationId station_MAC_Addr  ap_MAC_Addr        (staX,staY)       lastTime(+) ---- --------- ----------------- ----------------- ----------------- -------------------- 1              1 f4:d9:fb:34:20:60 f4:d9:fb:34:20:60 (2432,1947)         0(1374022070)

Navigation menu