Summary of Contents for NETGEAR WMS5316 - ProSafe 16-AP Wireless Management System
Page 1
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 202-10601-01 March 2010...
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
Page 3
European Union Statement of Compliance Hereby, NETGEAR, Inc. declares that this Wireless Management System is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Èesky NETGEAR, Inc. ProSafe 16 AP Wireless Management System tímto prohlašuje, že tento [Czech] je ve shodì...
Page 4
Nederlands Hierbij verklaart NETGEAR, Inc. dat het toestel ProSafe 16 AP Wireless Management [Dutch] System in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG. Malti NETGEAR, Inc. ProSafe 16 AP Wireless Management Hawnhekk, , jiddikjara li dan...
Page 5
Refer to the Support Information Card that shipped with your ProSafe 16 AP Wireless Management System. World Wide Web NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL) http://www.netgear.com . A direct connection to the Internet and a Web browser such as Internet Explorer are required.
Contents ProSafe 16 AP Wireless Management System WMS5316 Reference Manual About This Manual Conventions and Formats ....................ix How to Print This Manual ....................x Revision History ......................... x Chapter 1 Getting Started Logging In ........................1-2 Basic System Settings ....................1-2 General Settings ......................1-3 Time Settings ......................1-4 IP Settings ........................1-5...
Page 7
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Load Balancing for Managed Access Points ............3-8 Advanced Load Balancing for Access Point Groups ..........3-9 Chapter 4 Security Configuration Security Profiles Lists .....................4-1 Security Profiles List for Access Points ..............4-1 Editing a Security Profile ..................4-2 Advanced Security Profiles List for Access Point Groups ........4-4 Rogue Access Points .....................4-5 MAC Authentication ......................4-6...
Page 8
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual IP Settings ........................6-3 Access Point Groups ......................6-4 Chapter 7 Maintenance User Management ......................7-1 Changing Passwords ......................7-2 Reset ..........................7-2 Rebooting the Wireless Management System ............7-3 Restoring Factory Default Settings ................7-3 Rebooting an Access Point Group ................7-4 SNMP ..........................7-4 SNMP for the Wireless Management System ............7-5 SNMP for Access Point Groups ................7-6...
About This Manual The NETGEAR ® ProSafe™ 16 AP Wireless Management System WMS5316 Reference Manual describes how to install, configure and troubleshoot the ProSafe 16 AP Wireless Management System. Conventions and Formats The conventions, formats, and scope of this manual are described in the following paragraphs: •...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Note: Product updates are available on the NETGEAR, Inc. website at http://kbserver.netgear.com/products/WMS5316.asp. How to Print This Manual To print this manual, your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files.
Chapter 1 Getting Started The ProSafe 16 AP Wireless Management System is a Wireless Management System that allows you to manage up to 16 NETGEAR wireless access points on a LAN. You can use the Wireless Management System to: •...
2. If you are logging in for the first time, use the default user name admin and password (password). NETGEAR recommends that you change the password to a new, more secure password and record it in a secure location. The user interface opens with the Configuration Tab selected. This tab is shown in the following section “Basic System...
Name: This unique value indicates the Wireless Management System name. By default, the name is wms5316. NETGEAR recommends changing the name as soon as possible after setting up. The name must contain only alphabetical characters, numbers, and hyphens, and must be 31 characters or less.
• Use Custom NTP Server: Select this check box if you wish to use an alternate NTP Server. By default, the NETGEAR NTP server is used by the access point. • Hostname / IP Address: Provide the host name or IP address of the NTP server, if you are using a custom NTP server.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual IP Settings On the Configuration tab select System > IP Settings: Figure 1-4 This page lets you to configure the management IP address setting of the Wireless Management System. It has the following options: •...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual VLAN Settings To go to VLAN Settings, click the Configuration tab, and select System > Basic > VLAN Settings. Figure 1-5 The 802.1Q VLAN protocol on the Wireless Management System logically separates traffic on the same physical network.
Page 17
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual If this checkbox is cleared, the Wireless Management System tags all outgoing LAN (Ethernet) frames, and only accepts incoming frames that are tagged with known VLAN IDs. Note: The untagged VLAN checkbox should only be cleared if the hubs or switches on your LAN support the VLAN (802.1Q) standard.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual DHCP Server Settings The Wireless Management System can function as a DHCP server. Multiple DHCP server pools can be added for different VLANs. Click the Configuration tab and select System > Basic DHCP to display the following page: Figure 1-6 This page lets you to enable and configure the DHCP server.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual • Start IP: Enter the starting IP address of the range that can be assigned by the DHCP Server. • End IP: Enter the ending IP address of the range that can be assigned by the DHCP Server. •...
Chapter 2 Access Point Discovery You can discover supported NETGEAR access points on the LAN that can be managed by the Wireless Management System. See Appendix A, “Access Point Firmware and Compatibility for a list of compatible access points. The Wireless Management System supports Auto Discovery and IP Discovery.
Use IP discovery to discover access points in a different IP network than the Wireless Management System. You can search for a maximum of 255 IP addresses at a time. NETGEAR recommends that you split up your search if you have access points in multiple networks.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Figure 2-2 2. To specify the range of IP addresses, fill in the Start IP and End IP fields. 3. Click Search. • The Wireless Management System locates devices on the LAN within the range of IP addresses that you specified.
“Compatible Access Point Supported Firmware Versions” in Appendix • If a new NETGEAR access point is not discovered, it might have a MAC address that the Wireless Management System does not recognize, though this is not common. See “Using Discovery OUI” on page 7-15.
Page 24
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual 2. Enter a password for the access point. Figure 2-4 Access Point Discovery v1.0, March 2010...
Chapter 3 Wireless Configuration You can configure centralized RF management and specify wireless settings in the Basic RF Management page. If you use access point groups, you can use the Advanced Wireless Settings page to customize wireless settings for each group. Configuring Centralized RF Management In this screen you can specify RF Management settings.
Page 26
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual 1. Specify the Centralized RF Management: • Centralized RF Management: Selected by default, this Enable radio button allows the Wireless Management System to allocate access point channels based on the access point performance in the local environment.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Advanced Wireless Settings for Access Point Groups This page is for advanced users who wish to control the WLAN settings of the access points manually. Figure 3-2 To manually specify the WLAN parameters for access points: 1.
Page 28
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Table 3-1. Advanced Wireless Settings Field or Setting Description Turn Radio On Disable this option to disable wireless access for the selected mode. To disable all wireless access through this access point, you must turn off the 802.11b/g/n, as well as the 802.11a/n radios.
Basic QoS settings for access points or Advanced QoS Settings for access point groups These settings are applied only to NETGEAR ProSafe access points that support QoS. WMM defines the following four queues in decreasing order of priority: •...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual • Best Effort: The medium priority queue with medium delay is given to this queue. Most standard IP application will use this queue. • Background: Low priority queue with high throughput. Applications, such as FTP, which are not time-sensitive but require high throughput can use this queue.
Load Balancing Load balancing allows the Wireless Management System to distribute access point clients equally among access points. These settings are applied only to managed NETGEAR ProSafe access points that support load balancing. See “Controller Features and Access Point Compatibility” in Appendix A for more information about which access points models support this feature.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Load Balancing for Managed Access Points On the Configuration tab select Wireless > Basic > Load Balancing. Figure 3-5 • Apply to all groups checkbox: Select this checkbox to apply the settings to all managed access points regardless of group.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Advanced Load Balancing for Access Point Groups On the Configuration tab select Wireless > Advanced > Load Balancing: Figure 3-6 • Enable Load Balancing: Allow the Wireless Management System to distribute access point clients equally among access points.
Chapter 4 Security Configuration Security Profiles Lists Details of each wireless network are contained in a security profile. You can use the Basic Profile settings for access points, or the Advanced Profile settings for access point groups. Security Profiles List for Access Points This page lets you edit up to eight Security Profiles per managed access point, depending on the number of profiles each access point supports.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual • SSID: The SSID associated with this profile. • VLAN: The VLAN ID associated with this security profile. • Security: The security standard, such as WPA-PSK, associated with the profile. 3. Select the Enable checkbox to enable (or disable) the corresponding profile. 4.
Page 36
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual • Wireless Client Security Separation: If enabled, the associated wireless clients will not be able to communicate with each other. This feature is intended for hot spots and other public access situations. •...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Advanced Security Profiles List for Access Point Groups Note: Most networks do not require access point groups. See Chapter 1, “Getting Started for more information about Basic Settings for a typical network and Advanced Settings for access point groups.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual 3. Select the a checkbox to enable (or disable) the corresponding profile. 4. To change the settings of a security profile, select the profile and click the Edit button. See “Editing a Security Profile” on page 4-2.
4. When you are finished making changes, click Apply. MAC Authentication This lets you block the network access privilege of the specified stations with the Wireless Management System-managed access point. The settings are applied only to managed NETGEAR ProSafe access points. MAC Authentication for Access Points To set up MAC Authentication: 1.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual A maxiumum of 512 Mac addresses can be supported. 2. Select the Apply to all groups checkbox to apply the settings to all managed access points regardless of group. 3. Select the Turn Access Control On checkbox if you want the access point to interact only with stations present in the Trusted Wireless Stations table.
Page 41
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual 1. On the Configuration tab, select Security >Advanced > MAC Authentication:. Figure 4-6 2. Click a group tab to select the access point group that will use access control. 3. Select the Turn Access Control On checkbox if you want the access point to interact only with stations present in the Trusted Wireless Stations table.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual 6. Click Apply so that your changes take effect. Radius Server Settings If you are using a Radius server in your network for authentication, you must configure Radius settings. You can configure four types of servers: •...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual 2. Select Apply to all groups to apply the settings to all managed access points regardless of group. 3. Fill in the IP Address, Port, and Shared Secret fields for each Radius server. •...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual 1. On the Configuration tab, select Guest Access > Config: Figure 4-8 2. Specify the following settings: – Enable Guest Access: Enable this if you want all HTTP (TCP, port 80) requests to be routed to the URL you specify in the next field.
Chapter 5 Monitoring Monitoring Summary This screen displays a read-only summary of the current managed access point status, rogue access points detected, current wireless stations connected, Wireless Management System system Information and network usage. Clicking on the individual windows will lead to a new screen showing greater detail.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual • Major: Number of managed access points whose configuration differs from the one that set on the Wireless Management System. This is most likely due to an access point running old firmware or because the Wireless Management System did configuration changes Wireless Management System when the access point was down or offline.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual • WMS5316 Firmware version: The current Wireless Management System firmware version. Network Usage You can scroll down to view network usage: Figure 5-2 This section displays average data traffic received and transmitted per managed access point over the last 24 hours.
Page 48
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual • Group: Group configured for the access point. Group 1 is the default setting for unassigned access points. • Access Point: Netbios name of the access point. • IP address: Management IP address used by the Wireless Management System to connect to the access point.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Access Point Status Details From the Access Point Status screen, click the Details button to display this page: Figure 5-4 You can use the Refresh button to update access point statistics and information. The Access Point Status screen displays details of an access point that includes configuration settings, current wireless settings, current clients and current traffic statistics.
Page 50
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Profile Information The section displays configured and enabled security profiles on the access point. • Type: 802.11 b/bg/ng or 802.11 a/na mode for security profile. • SSID: Wireless Network SSID. • Security: The mode of security configured for the profile.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Client Status On the Monitoring tab select Summary > Advanced > Client Status: Figure 5-5 The Client Status list specifies detailed information about each client node currently associated with managed access points. •...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Scroll down to view wireless statistics. Figure 5-6 Display plots of average received/transmitted network traffic per managed access point. Three different plots show Ethernet, Wireless 802.11 b/bg/ng and 802.11 a/na mode traffic separately. Use the Refresh button to update the plots.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Use the Refresh button to update connectivity status. Use the Apply button to save the location of the access points on the floor displayed floor map. DHCP Leases The DHCP Lease screen displays current DHCP clients which have been allocated IP addresses. On the Monitoring tab select Summary >...
Page 54
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual To display the list of unknown rogue access points, On the Monitoring tab, select Rogue Access Point> Unknown: Figure 5-9 You can click Refresh to update the access point list or click Export to save the list to a file. To display the list of known rogue access points, on the Monitoring tab select Rogue Access Point >...
Chapter 6 Configuring Access Point Groups Most networks do not need access point groups. Access point groups are useful if completely separate networks share a single LAN. For example, a shopping mall might need access point groups if several businesses share a LAN, but each business has its own network. Managed Access Point List On the Configuration tab, select Access Point Groups to display the Managed Access Point List: Figure 6-1...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual the Edit page for each access point to change its IP settings, VLAN settings, and password. Table 6-1. Status Field Definitions Status Implies How to Correct Connected Normal operation. The Wireless Management System is able to contact the access point and manage it.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual • Password: The password for the access point. If you use the Wireless Management System to change a password for an access point, if it is offline or down, its password does not change. When the access point is unauthenticated, new password is used to authenticate to the access point and if successful, the new password is saved.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Access Point Groups This page displays details of each access point belonging to a configured group managed by the Wireless Management System. This page also allows you to rename a group and add or delete other managed access points from the group.
Chapter 7 Maintenance User Management The User Management screen lets you add and remove users. The user name admin is the default user name with administrative privileges and cannot be removed. On the Maintenance tab select User Management: Figure 7-1 1.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Changing Passwords This page enables you to change the access point administrator’s password. Figure 7-2 To change the password: 1. Type the old password. (The default password for the user name admin is password) 2.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Rebooting the Wireless Management System On the Maintenance tab select System > Reboot: Figure 7-3 Select the Yes radio button, and then click Apply to reboot the Wireless Management System. Restoring Factory Default Settings You can restore the factory default settings (listed in Table B-1 on page B-1) to the...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual 2. After restoring factory default settings, the WMS5316 will restart. This will take about one minute. Warning: Do not try to go online, turn off the access point, shut down the computer or do anything else to the Wireless Management System until it finishes restarting! When the Test light turns off, wait a few more seconds before doing anything with the Wireless...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual SNMP for the Wireless Management System On the Maintenance tab, select Remote Management > System > SNMP: Figure 7-6 • SNMP checkbox: Enable SNMP for the Wireless Management System. • Read-Only Community Name: The community string to allow the SNMP manager to read the WMS5316 MIB objects.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual SNMP for Access Point Groups Enable SNMP to allow the SNMP network management software, such as HP OpenView, to monitor the managed access points by using SNMPv1/v2 protocol. These settings are only applied on ProSafe access points which support SNMP.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Remote Management You can enable SSH or Telnet in order to remotely log in to the controller. or access point groups. Remote Console for the Wireless Management System From the Maintenance tab select Remote Management > System > Remote Console: Figure 7-8 1.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Advanced Remote Console for Access Point Groups Enable SSH or Telnet to log in to managed access points. These settings are only applied on managed ProSafe access points which support SSH and telnet. Figure 7-9 1.
See the Release Notes included with the software to find out if you need to reconfigure. To upgrade the firmware: 1. Go to the NETGEAR website www.netgear.com customer service downloads section to get new versions of the firmware.
IP address to be set manually. The Wireless Management System restores configuration for already managed access points running supported software version. To upgrade the access point software: 1. Go to the NETGEAR website at www.NETGEAR.com customer service downloads section to get new versions of the access point software for supported models.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual 3. If not done automatically, uncompress the downloaded file. If included, read the Release Notes before continuing. 4. On the Maintenance tab select Upgrade > Access Point Upgrade: Figure 7-12 5. Make sure that status of the managed access point to be upgraded is healthy. Select the managed access point model from the drop-down list;...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual To back up the Wireless Management System settings: 1. On the Maintenance tab select Upgrade > Backup: Figure 7-13 2. Click the Backup button to create a backup file of the current settings: 3.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual 3. Locate and select the previously saved backup file, then click Apply. After restoring previous settings, the Wireless Management System will restart. This will take about one minute. Warning: Do not try to go online, turn off the Wireless Management System, shutdown the computer or do anything else until it finishes restarting! When the Test light turns off, wait a few more seconds before doing anything with the Wireless Management System.
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual System Logs The System Log page displays Wireless Management System system activity. On the Diagnostics tab, select System: Figure 7-16 You can click Refresh to update this window. To clear the existing log, click Clear. Preferably save the contents prior to clearing system log.
3. When you are finished, click Cancel to stop the pinging. Using Discovery OUI The Wireless Management System discovers NETGEAR access points on the LAN from the OUI (Organizationally Unique Identifier) of their unique MAC addresses. The first half of the MAC address is the OUI.
Page 74
Discovery OUI is not often needed, but is useful in the following circumstances: • There is a new NETGEAR access point that has a new OUI. • The WMS5316 controller is running older firmware that does not recognize the new OUI.
5.2.3 WG103 WG103_2.0 WN802Tv2 WN802Tv2_V3.1.2 Limited to channel distribution without neighbor map WG602v4 V1.1.0 Limited to channel distribution without neighbor map For the latest firmware images, visit the NETGEAR support website: http://www.netgear.com/support. Access Point Firmware and Compatibility v1.0, March 2010...
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual Controller Features and Access Point Compatibility Rogue Remote Access Point VLAN Guest Client Topology Access Access Syslog (Time Model Config Access Separation Points SSH/Telnet Server) WNDAP330 WNDAP350 WNAP210 WG302v2 WG103 WN802Tv2 WG602v4 Access Point Firmware and Compatibility v1.0, March 2010...
(LAN) Subnet mask 255.255.255.0 PST for North America, GMT for other locations Time zone Time zone adjusted for daylight Enabled savings time SNMP Enabled Note: For technical specifications, see the NETGEAR website at www.netgear.com. Factory Default Settings v1.0, March 2010...
Index access default factory settings guest 4-10 DHCP leases user management DHCP server access point discovery diagnostics, Ping 7-15 IP discovery discovering access points access point groups Auto Discovery configuring IP discovery rebooting results WLAN settings Discovery OUI 7-15 access point system logs 7-14 DNS server access points...
Page 79
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual IP discovery Ping 7-15 IP Settings IP settings for access point groups QoS for access point groups leases, DHCP QoS for managed access points load balancing load balancing for access point groups load balancing for managed access points Radius server configuration 4-9, 4-10...
Page 80
ProSafe 16 AP Wireless Management System WMS5316 Reference Manual system logs 7-14 system logs, access point 7-14 system logs, downloading 7-13 time, setting timeout untagged VLANs upgrading firmware user management VLAN settings VLANs, management VLANS, untagged wireless access point groups centralized RF management wireless stations status Index-3...