Page 1
WEC8500/8050 Operation Manual Version 5.2 WEC8500/WEC8050 (APC) Operation Manual Samsung Electronics America page 1 of 533...
Page 2
Publication Information SAMSUNG ELECTRONICS AMERICA reserves the right without prior notice to revise information in this publication for any reason.SAMSUNG ELECTRONICS AMERICA also reserves the right without prior notice to make changes in design or components of equipment as engineering and...
INTRODUCTION Purpose This manual describes the overview, management, and setup of WEC8500/WEC8050 that is a Samsung Wireless Enterprise (W-EP) Access Point Controller (APC). This manual is written for WEC8500 version 2.4.19R and WEC8050 version 2.4.19R. Document Content and Organization This manual consists of ten Chapters, three Annexes, and a list of Abbreviations.
Open source list used in the APC and its license notice. ANNEX C. Open Source Announcement (WEA302/WEA303/WEA312/ WEA313 (Future Release)/WEA403/WEA412) Open source list used in the Samsung W-EP wireless LAN AP and its license notice. ABBREVIATION Describes the acronyms used in this manual. Conventions The following types of paragraphs contain special information that must be carefully read and thoroughly understood.
- Updated the content overall in accordance with the package version 2.0.0 01. 2014. - Changed contents 1.3.1 WEC8500 Configuration and Functions 4.2.6.3 Tech Support Information 10. 2013. - Updated the content overall in accordance with the package version (WEC8500 version 1.4.4, WEC8050 version 1.0.0)
Page 6
Basic Configuration ........................29 1.4.2 Configuration of Multiple APC for Redundancy................. 30 1.4.3 Clustering Configuration using Multiple APC (WEC8500) ............31 1.4.4 Configuration of Multiple Sites Consisting of Headquarter and Branches....... 34 NAT Configuration between AP and APC ................36 CHAPTER 2.
Page 7
WEC8500/8050 Operation Manual Version 5.2 CHAPTER 3. Data Network Function Port Configuration ........................45 3.1.1 Port management ........................45 Interface Configuration ......................49 3.2.1 Interface management ....................... 49 3.2.2 Managing Interface Group ......................52 VLAN Configuration.........................54 3.3.1 VLAN ............................54 3.3.2 Bridge ............................56 3.3.3...
Page 8
WEC8500/8050 Operation Manual Version 5.2 4.1.5 Managing AP File Transmission....................134 4.1.6 APC Redundancy Configuration ....................134 AP Management ........................140 4.2.1 AP Group Configuration ......................140 4.2.2 Configuring Remote AP Group ....................155 4.2.3 AP Time Synchronization per Group ..................161 4.2.4...
Page 9
WEC8500/8050 Operation Manual Version 5.2 Wi-Fi QoS Configuration .......................244 6.2.1 QoS Configuration of Wireless Terminal ................. 244 6.2.2 QoS Configuration of AP ......................246 6.2.3 Configuring QoS Profile of a Specific Terminal ............... 250 6.2.4 Voice Optimization Configuration..................... 252 802.11h Configuration ......................253 Country Code .........................255...
Page 10
WEC8500/8050 Operation Manual Version 5.2 7.10.2 Connection Limitation per WLAN..................... 299 7.11 Voice Statistics and Communication Failure Detection ............. 301 7.11.1 Voice Statistics Function ......................301 7.11.2 Detecting WLAN-based Communication Failure ..............303 7.12 Voice Signal and Media Monitoring ..................304 7.12.1 Checking Voice Related Wireless Information ................
Page 11
WEC8500/8050 Operation Manual Version 5.2 Telnet/SSH ..........................373 Utilities ............................375 CHAPTER 10. System Management 10.1 SNMP Configuration ......................376 10.1.1 SNMP Community ........................376 10.1.2 SNMP Trap ..........................377 10.2 System Management ......................379 10.2.1 Retrieving System Information ....................379 10.2.2 System Reboot ......................... 384 10.3 System Resource Management ....................386...
Page 12
10.11.8 Managing File in Web UI ......................422 ANNEX A. CLI Command Structure configure ..........................424 show 454 clear 467 debug 470 file ANNEX B. Open Source Announcement (WEC8500/WEC8050) ANNEX C. Open Source Announcement (WEA302/WEA303/ WEA312/WEA313/WEA403/WEA412) (Highlighted- Future Release) Samsung Electronics America page 12 of 533...
Page 13
LIST OF FIGURES Figure 1. System Structure for Wireless Enterprise Solution ............20 Figure 2. W-EP Network Configuration ..................21 Figure 3. WEC8500 Interface-Front/Back ...................23 Figure 4. System LED Configuration ...................23 Figure 5. Management Port Configuration ..................24 Figure 6. Optic port configuration ....................25 Figure 7.
Page 14
WEC8500/8050 Operation Manual Version 5.2 Figure 35. VRRP-Circuit Failover Window (2) ................107 Figure 36. IPWATCHD Configuration Window ................108 Figure 37. ACL Configuration Window ..................110 Figure 38. Window where a Time Profile is Applied to ACL ............110 Figure 39.
Page 15
WEC8500/8050 Operation Manual Version 5.2 Figure 73. ACL Settings Synchronization-Remote Group ............160 Figure 74. AP Time Synchronization Configuration Options............162 Figure 75. Adding Access Points ....................163 Figure 76. AP Profile Setting (1) ....................166 Figure 77. AP Profile Setting (2) ....................168 Figure 78. AP mode configuration .....................169 Figure 79.
Wi-Fi environment. There are two types depending on the AP capacity; WEC8500 and WEC8050. It comprehensively manages all the APs and provides services in a wireless LAN environment. Because AP and APC are connected in tunneling, all the user traffics are exchanged and processed.
W-EP AP Controller (APC), and Wireless Enterprise WLAN Manager (WEM). (Future Release) The Samsung APC and W-EP wireless LAN AP are core devices that provide various services such as user authentication, wireless management, voice and data service, etc. in the 802.11-based Wi-Fi environment. The WEM provides convenient configuration environment, various statistics, and event information to an operator.
WEC8500/8050 Operation Manual Version 5.2 1.2 Network Configuration The network configuration of Samsung W-EP solution that includes APC is shown below. IP-PBX WEC/8050WEC8500 Router Internet … Ethernet Switch W-EP AP … FMC client Figure 2. W-EP Network Configuration IP-PBX As an enterprise call manager, it is a switch required to provide the Fixed Mobile Convergence (FMC) function to a wireless terminal (optional).
Page 22
Terminal that provides the 802.11a/b/g/n interface such as smart phone, tablet PC, or notebook computer, etc. In an Android smart phone, an enterprise Voice over IP (VoIP) application equipped with the Samsung voice engine is called a WeVoIP client (The WeVoIP client is an option).
WEC8500/8050 Operation Manual Version 5.2 1.3 APC Configuration and Functions 1.3.1 WEC8500 Configuration and Functions The Configuration and the purpose of each item of WEC8500 are as follows: Console port USB port System LED Management port 1G Optic port 10G Optic port...
Power is turned off or a fault occurred while the power module 2 is installed. Power module 2 is not installed. Console port (RS232C) A console port is used to check the operational status of WEC8500 or for input through the CLI. Its basic requirements are as follows: Baud rate: 115200 bps ...
- Blinking for data exchange 1G 1~1G 8 1 GbE Optic module connector USB port (Host 2.0) The WEC8500 provides a USB host port that supports the upgrade of WEC8500 operation software. A typical USB memory stick is supported. Samsung Electronics America...
WEC8500/8050 Operation Manual Version 5.2 Power module AC LED DC LED Power Power input switch connector Figure 7. Power module configuration Configuration item Description Power input connector Connector to connect the power cable to Power switch Switch to turn on/off power AC LED Turned on when there is a normal AC power input.
WEC8500/8050 Operation Manual Version 5.2 1.3.2 WEC8050 Configuration and Functions The configuration and the purpose of each item of WEC8050 are as follows: Status LED Console Port Ethernet Port Ground hole Power Figure 8. WEC8050 interface-Front/Back Status LED This LED indicates the various statuses of system. Each LED displays the following information.
WEC8500/8050 Operation Manual Version 5.2 Console port (RS232C) A console port is provided to check the operational status of WEC8050 or for input through the CLI. Its basic requirements are as follows: Default baud rate: 115200 bps Character size: 8 Characters ...
VoIP in a wireless LAN. With this, the wire/wireless integrated voice service can be provided. An example of service configuration diagram using the W-EP wireless LAN system is shown in the below figure. The configuration diagram is based on Samsung APC (WEC8500). Internet...
WEC8500/8050 Operation Manual Version 5.2 The basic W-EP wireless LAN network configuration is a centralized structure where all the wireless user traffics go through tunneling between APC and W-EP wireless LAN AP. Therefore, the network information such as subnet information allocated to a wireless user depends on the configuration of backbone network where the APC is connected.
APC is required for service and management, the complexity of network configuration or management is not high. However, if the capacity of a single APC is not sufficient, multiple APC s must be installed for service. The WEC8500 is a Samsung APC model providing the clustering environment.
1.4.3.1 Configuration of Distributed Clustering Service The configuration of distributed clustering is to install each WEC8500 in a building or a local site according to its capacity. This option can be used when there is no integrated backbone configuration in a site or networks are separated for each building. It is suitable for a site where several buildings are apart from each other.
WEC8500/8050 Operation Manual Version 5.2 1.4.3.2 Configuration of Centralized Clustering Service In the centralized cluster configuration, all the WEC8500s in a site are installed in the center. This is suitable when all the networks in a site are configured around the backbone.
WEC8500/8050 Operation Manual Version 5.2 1.4.4 Configuration of Multiple Sites Consisting of Headquarter and Branches The W-EP wireless LAN network environment usually consists of one headquarter and several branches. In this case, there are two types of network configuration. ...
Page 35
WEC8500/8050 Operation Manual Version 5.2 If user traffics are concentrated on a single centralized APC when there are many branches or they are far from headquarter, performance may be deteriorated due to the time delay of packet transmission, etc. Therefore, use different operation schemes according to the location of W-EP wireless LAN AP in the configuration of headquarter and branches.
WEC8500/8050 Operation Manual Version 5.2 NAT Configuration between AP and APC The APC system provides the same services even when the APC or AP is in a NAT environment. If the APC system is in a NAT environment and obtaining a public IP address is difficult,...
WEC8500 # 2) After the first login, you must change the password. Use the changed password for the next login. The default ID of APC is set to ‘samsung’ that has an administrator privilege. Samsung Electronics America page 37 of 533...
WEC8500/8050 Operation Manual Version 5.2 2.1.2 Managing Operator Account An operator who has an administrator privilege (level 1) can create or delete a new operator account. When creating an account, specify the account’s privilege level (level 1-4). To set up operator account related functions, go to configure mode by executing the following command.
192.168.1.2/24. If you wish to change the IP address, follow these instructions: WEC8500# configure terminal WEC8500/configure# interface mgmt0 2) Set up an IP address. WEC8500/configure/interface mgmt0# ip address 100.100.100.1/24 2.1.4 SNMP Community Configuration To connect to the web server of APC, it is necessary to add Simple Network Management Protocol (SNMP) community through CLI.
Page 40
WEC8500/8050 Operation Manual Version 5.2 A usage example is given below. WEC8500# show ? 80211a Display 802.11a network settings 80211bg Display 802.11bg network settings 80211h Display 802.11h configuration access-list List IP access lists alarm Show alarm information Show ap information...
Page 41
WEC8500/8050 Operation Manual Version 5.2 Command error When a command that is not supported by the system is entered, an error message is displayed. WEC8500# command-unknown Error : Command ‘command-unknown’ does not exist When a parameter that is not supported by a command is entered, an error message according to the situation is displayed.
To use the WEC, i.e. Web UI of APC system, the IP address of ethernet port must be set up. When connecting to the IP address of APC ethernet port in a web browser, the below login window is displayed. Log in using a default connection account ‘samsung’. Note: You must first change the default password via CLI connection.
WEC8500/8050 Operation Manual Version 5.2 2.2.2 WEC Main Window The WEC Main window is a screen that appears first after connecting to an APC and it consists of menu bar, sub-menus, and detail windows of each menu. Menu bar Sub-menu Figure 18.
WEC8500/8050 Operation Manual Version 5.2 2.2.3 Managing Operator Account To add a operator account in Web UI, follow the below procedure. In the menu bar of <WEC Main window>, select <Administration> and then select <Local Management Users> menu in the sub menu. The subtree shows the <APC> and <AP>...
3.1.1 Port management The WEC8500 Management port is used to manage the WEC8500. It does not support VLAN and its interface name is ‘mgmt0’. The 8 ports at the right side of Management port are 10/100/1000 BASE T-ports and their names are GE1-8.
Page 46
The port related CLI commands are as follows: [auto-nego, speed, duplex] The commands used to configure an auto-nego, speed, and duplex addresses are shown below. To delete the configuration, enter the ‘no’ parameter. WEC8500/configure/interface ge1# speed-duplex ? 10-full Set 10Mb/s full-duplex 10-half...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <Ports> menu in the sub-menus. Operator can configure the ports. The Ports initial window is shown below.
WEC8500/8050 Operation Manual Version 5.2 [Port Configuration Change] 1) In the Ports initial window, click the <INTERFACE NAME> button to go to port configuration change window. 2) In the port configuration change window, the auto-nego, speed, duplex, admin status, flow control, mtu size, switch port, or ip address, etc. can be configured.
3.2.1 Interface management The WEC8500 Management port is used to manage the WEC8500. It does not support VLAN and its interface name is ‘mgmt0’. The 8 ports at the right side of Management port are 10/100/1000 BASE T-ports and their names are GE1-8.
WEC8500/8050 Operation Manual Version 5.2 [ip address dhcp] This is a command that configures a dynamic IP address using DHCP. The ‘no’ parameter is used to delete the configuration. ip address dhcp no ip address dhcp [shutdown] This is a command that makes the interface not working. The ‘no’ parameter is used to restart the interface.
WEC8500/8050 Operation Manual Version 5.2 Figure 24. Interfaces Window (2) 3) Perform detail configuration in the VLAN detail configuration window. If you specify PRIMARY DHCP SERVER or SECONDARY DHCP SERVER in the DHCP area, you can specify the configuration of a DHCP server.
WEC8500/8050 Operation Manual Version 5.2 3.2.2 Managing Interface Group To use WLAN and other services, it is necessary to configure an interface into an interface group. Configuration using CLI An example of entering into the group configuration mode of ifg_01 interface is shown below.
WEC8500/8050 Operation Manual Version 5.2 Follow the below procedure to add an interface group. 1) In the Interface group initial window, click the <Add> button. 2) Enter the GROUP NAME and GROUP DESCRIPTION information and then select the VLAN interface.
WEC8500/8050 Operation Manual Version 5.2 3.3 VLAN Configuration 3.3.1 VLAN Configuration using CLI To configure VLAN, go to the VLAN interface mode by executing the following command. WEC8500# configure terminal WEC8500/configure# interface vlan WEC8500/configure/interface vlan# The related command is shown below and the range of VLAN ID is 1-4094.
Page 55
1: Displays static VLAN information. [Typical configuration procedure] The typical configuration procedure of VLAN is as follows: WEC8500# configure terminal WEC8500/configure# bridge 1 protocol mstp WEC8500/configure # vlan database WEC8500/configure/vlan#vlan {2-4094} bridge 1 WEC8500/configure/vlan# exit WEC8500/configure# interface vlan1.{2-4094} Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
WEC8500/8050 Operation Manual Version 5.2 3.3.2 Bridge To set up bridge related functions, go to configure mode by executing the following command WEC8500# configure terminal The bridge related commands are as follows: [bridge address] This command configures a bridge address. The ‘no’ parameter is used to clear the configuration.
Page 57
WEC8500/8050 Operation Manual Version 5.2 [bridge protocol] This command creates a bridge in one of the IEEE 802.1Q Spanning-Tree Protocol (STP), IEEE802.1s multiple STP (MSTP), or IEEE 802.1W Rapid STP (RSTP) protocol. bridge 1 protocol [PROTOCOL] no bridge 1 protocol...
Page 58
WEC8500/8050 Operation Manual Version 5.2 [clear mac address-table dynamic bridge] This command deletes the filtering database of bridge operation. clear mac address-table dynamic bridge [BRIDGE_NAME] clear mac address-table dynamic [address/interface/vlan] [WORD] bridge [NAME] Parameter Description KIND Filtering database type (address/vlan/interface) - address: Filtering database using a MAC address - vlan: Filtering database using the VLAN information.
WEC8500/8050 Operation Manual Version 5.2 3.3.3 Spanning Tree Configuration using CLI To set up spanning tree related functions, go to configure mode by executing the following command. WEC8500# configure terminal The related command is as follows. [bridge forward-time] This command configures the forward time of a bridge. The ‘no’ parameter is used for default configuration.
Page 60
WEC8500/8050 Operation Manual Version 5.2 [bridge max-age] This command configures the max-age of a bridge. The ‘no’ parameter is used for default configuration. bridge 1 max-age [MAXAGE] no bridge 1 max-age Parameter Description MAXAGE Configures a maximum time (range: 6-40 s)
WEC8500/8050 Operation Manual Version 5.2 [bridge priority] This command configures the priority of a bridge. The ‘no’ parameter is used to delete a priority. bridge 1 priority [PRIORITY] no bridge 1 priority Parameter Description PRIORITY Bridge priority (range: 0-61440) [bridge shutdown] This command clears bridge settings.
WEC8500/8050 Operation Manual Version 5.2 [Managing the MSTP VLAN instance] When you select the <Instance> menu, the configured MSTP VLAN Instance list is displayed on the window. Click the <Add> or <Delete> button to add or delete an instance. Figure 29. Spanning Tree Configuration Window (2) [Managing MSTP Port] When you select the <Port>...
The procedure for IP address configuration is given below. 1) Go to configure interface configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# interface ge2 2) Set up an IP address. WEC8500/configure/interface ge2# ip address 100.100.100.1/24 3) Enable the interface. WEC8500/configure/interface ge2# no shutdown 3.4.2 Static Routing Configuration Configuration using CLI 1) Go to configure mode of CLI.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <Network> <Static Route> menu in the sub-menus. The configured static route list is displayed on the window. When you click the <Add> or <Delete>...
WEC8500# configure terminal WEC8500/configure# interface ge2 2) Configure the PIM sparse mode to an interface. WEC8500/configure/interface ge2# ip pim sparse-mode 3) Check a configured PIM using the ‘show running-config network’ command. To check the multicast-routing table, use the ‘show ip mroute’ command.
Click the <Add> button and configure the PROCESS ID to 1-10 in the below screen. Configuration using CLI 1) Go to configure ospf configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# router ospf WEC8500/configure# router ospf ? 1 - 10 OSPF process ID WEC8500/configure# router ospf 2 WEC8500/configure/router/ospf 2#...
Page 67
WEC8500/8050 Operation Manual Version 5.2 2) The detail configuration items of a process ID are as follows: WEC8500/configure/router/ospf 2# ? area OSPF area parameters auto-cost Calculate OSPF interface cost according to bandwidth capability Enable specific OSPF feature compatible OSPF compatibility list...
Page 68
Use reference bandwidth method to assign OSPF cost WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth ? 1 - 4294967 The reference bandwidth in terms of Mbits per second WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth 200 ? <cr> WEC8500/configure/router/ospf 2# auto-cost reference-bandwidth 200 Parameter Description reference-bandwidth Enter a value from 1-4294967.
Page 69
WEC8500/8050 Operation Manual Version 5.2 5) CAPABILITY OPAQUE configuration Enter the capability opaque. WEC8500/configure/router/ospf 2# capability ? opaque Opaque LSA WEC8500/configure/router/ospf 2# capability opaque ? <cr> WEC8500/configure/router/ospf 2# capability opaque Parameter Description Capability opaque Enabled when the CLI is entered.
Page 70
WEC8500/configure/router/ospf 2# timers spf exp 3 ? 0 - 2147483647 Maximum Delay between receiving a change to SPF calculation in milliseconds WEC8500/configure/router/ospf 2# timers spf exp 3 100 ? <cr> WEC8500/configure/router/ospf 2# timers spf exp 3 100 Samsung Electronics America page 70 of 533...
Page 71
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <Network> <OSPF> <General> menu in the sub-menus. Click a PROCESS ID that user wants to configure. The OSPF configuration window is shown below.
Page 72
Default Information Configuration of General Settings Configuration using CLI 1) Detail configuration of OSPF default-information WEC8500/configure/router/ospf 2# default-information ? originate Distribute a default route WEC8500/configure/router/ospf 2# default-information originate ? always Always advertise default route metric OSPF default metric metric-type OSPF metric type for default routes...
Page 73
WEC8500/8050 Operation Manual Version 5.2 4) Configuration of default-information METRIC-TYPE Configure the OSPF metric-type (1/2) value. WEC8500/configure/router/ospf 2# default-information originate metric- type ? Set OSPF External Type 1 metrics Set OSPF External Type 2 metrics WEC8500/configure/router/ospf 2# default-information originate metric- type 1 ? <cr>...
Page 75
Enter the OSPF INTER-AREA distance value. WEC8500/configure/router/ospf 2# distance ospf inter-area ? 1 - 255 <1-255> Distance for external/inter- area/intra-area routes WEC8500/configure/router/ospf 2# distance ospf inter-area 50 ? <cr> WEC8500/configure/router/ospf 2# distance ospf inter-area 50 WEC8500/configure/router/ospf 2# 5) Configuration of INTRA-AREA distance ospf Enter the OSPF INTRA-AREA distance value.
Page 76
Maximum number of LSAs WEC8500/configure/router/ospf 2# overflow database external 3 ? 0 - 65535 Time to recover (0 not recover) WEC8500/configure/router/ospf 2# overflow database external 3 10 ? <cr> WEC8500/configure/router/ospf 2# overflow database external 3 10 3) Configuration of maximum number of LSAs Enter the maximum number of LSAs and hard limit value.
Page 77
Soft limit; Warning will be given if exceed <cr> WEC8500/configure/router/ospf 2# overflow database 100 hard ? <cr> WEC8500/configure/router/ospf 2# overflow database 100 hard Enter the maximum number of LSAs and soft limit value. WEC8500/configure/router/ospf 2# overflow ? database...
Page 78
Router-id for the OSPF process summary-address Configure IP address summaries timers Adjust routing timers WEC8500/configure/router/ospf 2# network ? A.B.C.D Network number A.B.C.D/M OSPF network prefix Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>...
Page 79
Network number A.B.C.D/M OSPF network prefix WEC8500/configure/router/ospf 2# network 100.100.100.1 ? A.B.C.D OSPF wild card bits(network mask) WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 ? area Set the OSPF area ID WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0 ? area Set the OSPF area ID WEC8500/configure/router/ospf 2# network 100.100.100.1 255.255.255.0...
Page 80
Redistribute information from another routing protocol router-id Router-id for the OSPF process summary-address Configure IP address summaries timers Adjust routing timers WEC8500/configure/router/ospf 2# redistribute ? connected Connected static Static routes ospf Open Shortest Path First (OSPF) WEC8500/configure/router/ospf 2# redistribute Samsung Electronics America...
Page 81
Set tag for routes redistributed into OSPF <cr> WEC8500/configure/router/ospf 2# redistribute connected metric ? 1 - 16777214 OSPF metric WEC8500/configure/router/ospf 2# redistribute connected metric 3 ? <cr> WEC8500/configure/router/ospf 2# redistribute connected metric 3 Samsung Electronics America page 81 of 533...
Page 82
Description metric-type Select 1 or 2. 4) Route-map configuration WEC8500/configure/router/ospf 2# redistribute connected route-map ? <WORD> Pointer to route-map entries WEC8500/configure/router/ospf 2# redistribute connected route-map a ? <cr> WEC8500/configure/router/ospf 2# redistribute connected route-map a Parameter Description route-map entries Enter <WORD>.
Page 83
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <Network> <OSPF> <Redistribute> menu in the sub-menus. After configuring Redistribute default, select a PROCESS ID for detail configuration.
Page 84
Configuration using CLI WEC8500/configure/router/ospf 2# area 1 stub ? no-summary Do not inject inter-area routes into stub <cr> WEC8500/configure/router/ospf 2# area 1 stub no-summary ? <cr> WEC8500/configure/router/ospf 2# area 1 stub no-summary Parameter Description no-summary Select Stub or No Summary.
Page 85
WEC8500/8050 Operation Manual Version 5.2 2) NSSA configuration Configuration using CLI WEC8500/configure/router/ospf 2# area 1 nssa ? default-information-originate Originate Type 7 default into NSSA area no-redistribution No redistribution into this NSSA area no-summary Do not send summary LSA into NSSA...
Page 86
WEC8500/8050 Operation Manual Version 5.2 Metric-type configuration of NSSA default-information-originate WEC8500/configure/router/ospf 1# area 2 nssa default-information- originate metric-type ? 1 - 2 OSPF Link State type WEC8500/configure/router/ospf 1# area 2 nssa default-information- originate metric-type 2 WEC8500/configure/router/ospf 1# Parameter Description OSPF metric-type Select 1 or 2.
Page 87
WEC8500/8050 Operation Manual Version 5.2 Configuring translator-role of NSSA default-information-originate WEC8500/configure/router/ospf 1# area 2 nssa default-information- originate translator-role ? always Translate always candidate Candidate for translator (default) never Do not translate WEC8500/configure/router/ospf 1# area 2 nssa default-information- originate translator-role always ?
Page 88
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <Network> <OSPF> <Area> <NSSA> menu in the sub-menus. The default window is shown below.
Page 89
Define a virtual link and its parameters WEC8500/configure/router/ospf 1# area 2 virtual-link ? A.B.C.D ID (IP addr) associated with virtual link neighbor WEC8500/configure/router/ospf 1# area 2 virtual-link 10.10.10.1 ? authentication Enable authentication authentication-key Set authentication key dead-interval Dead router detection time...
Page 90
10 sec., the dead-interval will be 40 seconds if the hello-interval is not configured. In addition, operator can change it to a value between 1 second and 65535 seconds. WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 dead- interval ? 1 - 65535 Seconds WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 dead-...
Page 91
WEC8500/8050 Operation Manual Version 5.2 WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key 2 md5 ? <WORD> Authentication key (16 chars) WEC8500/configure/router/ospf 2# area 2 virtual-link 10.10.10.1 message-digest-key 2 md5 b WEC8500/configure/router/ospf 2# Retransmit-interval configuration The default retransmit-interval is 5 seconds. In addition, operator can change it to a value between 1 second and 65535 seconds.
Page 92
WEC8500/8050 Operation Manual Version 5.2 Unlike other configurations, there are two tabs at the top; General page and Authentication page. Start configuration in the General page for the basic configuration of Virtual-Link. In the default configuration page, configure PROCESS ID, AREA ID, or LINK ID.
Page 93
WEC8500/8050 Operation Manual Version 5.2 The Authentication page of a Virtual-Link is shown below. Click the <Select Virtual-Link> button. Select a PROCESS ID that you have selected in the General page. And then, configure Digest Key or Digest Authentication. Just like CLI configuration, select a digest key between 1 and 255 and enter a key whose length is 16-character or less for digest authentication.
Page 94
WEC8500/8050 Operation Manual Version 5.2 WEC8500/configure/router/ospf 2# area 2 range ? A.B.C.D/M Area range prefix WEC8500/configure/router/ospf 2# area 2 range 10.10.10.1/16 ? advertise Advertise this range (default) not-advertise DoNotAdvertise this range <cr> WEC8500/configure/router/ospf 2# area 2 range 10.10.10.1/16 The detail items include advertise or no-advertise configuration Configure whether to advertise to the range or not.
Page 95
‘% The area is neither stub, nor NSSA’ WEC8500/configure/router/ospf 2# area 0.0.0.1 default-cost ? 0 - 16777215 Stub's advertised default summary cost WEC8500/configure/router/ospf 2# area 0.0.0.1 default-cost 3 ? <cr> WEC8500/configure/router/ospf 2# area 0.0.0.1 default-cost 3 Shortcut configuration For Shortcut configuration, operator can select one out of 3 selections including default, disable, and enable.
Page 96
WEC8500/8050 Operation Manual Version 5.2 Select a PROCESS ID for detail configuration. As mentioned in the CLI, the Stub or NSSA must be configured to the PROCESS ID in a window where default-cost is selected. If a PROCESS ID without the configuration is completed, the detail configuration can not be performed.
Page 97
A tag is a user-defined 32-bit tag value between 0 and 4294967295. A tag also has a default value and it is 0. WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 tag ? 0 - 4294967295 32-bit tag value WEC8500/configure/router/ospf 2# summary-address 11.1.1.1/16 tag 3...
Page 98
Unlike CLI, there is no no-advertise. A user can change the default Enable to Disable. 3.4.5.10 Passive Interface Configuration Configuration using CLI WEC8500/configure/router/ospf 2# passive-interface ? <WORD> Interface's name WEC8500/configure/router/ospf 2# passive-interface ge2 ? A.B.C.D Address of interface <cr> Parameter Description Interface Name Enter the name of an interface to use directly.
Page 99
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <Network> <OSPF> <Passive Interface> menu in the sub-menus. The configuration page is as follows: After selecting a PROCESS ID that a user will use, select an interface to apply.
Page 100
Link state transmit delay DISABLE OSPF configuration WEC8500/configure/interface ge2# ip ospf disable ? All functionality WEC8500/configure/interface ge2# ip ospf disable all ? <cr> WEC8500/configure/interface ge2# ip ospf disable all MTU configuration The default does not use Maximum Transmission Unit (MTU) configuration.
Page 101
WEC8500/configure/interface ge2# ip ospf database-filter ? Filter all LSA WEC8500/configure/interface ge2# ip ospf database-filter all ? Outgoing LSA WEC8500/configure/interface ge2# ip ospf database-filter all out ? <cr> WEC8500/configure/interface ge2# ip ospf database-filter all out Dead-interval configuration The default value of dead-interval is 4 times of hello-interval. Because the default hello-interval is configured to 10 sec., the dead-interval will be 40 seconds if the hello-...
Page 102
WEC8500/8050 Operation Manual Version 5.2 WEC8500/configure/interface ge2# ip ospf dead-interval 30 ? <cr> WEC8500/configure/interface ge2# ip ospf dead-interval 30 Hello-interval configuration The default hello-interval is 10 seconds. In addition, operator can change it to a value between 1 second and 65535 seconds.
Page 103
Version 5.2 PRIORITY configuration The default OSPF Priority value is 1. A user can configure the priority between 1 and 255. WEC8500/configure/interface ge2# ip ospf priority ? 0 - 255 Priority WEC8500/configure/interface ge2# ip ospf priority 2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
Page 104
WEC8500/8050 Operation Manual Version 5.2 The detail item configuration page is as follows: When you select the name of an enabled interface, the below detail item configuration page is displayed. After entering a value that a user wants for the item configured in the above CLI, click the <Apply>...
ID and interface name to go to the VRRP configuration mode. WEC8500# configure terminal WEC8500/configure# router WEC8500/configure# router vrrp WEC8500/configure# router vrrp 1 vlan1.10 WEC8500/configure/router/vrrp# The following commands are provided. [advertisement-interval] This command configures the advertisement interval of VRRP in second. A user can configure the interval from 1 to 10.
Page 106
WEC8500/8050 Operation Manual Version 5.2 [preempt-delay] This command configures the preempt delay time. preempt-delay [DELAY_TIME] Parameter Description DELAY_TIME Preempt delay time (range: 0-3600 s) [preempt-mode] This command configures whether to use the preempt mode. preempt-mode [MODE] Parameter Description...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <Network> <VRRP> menu in the sub-menus. The VRRP menu provides two sub menus, i.e. Operation and Circuit Failover.
Configure a TIMEOUT value (that a user wants) to detect an IP address collision. Operator can enter a value between 10 and 300 seconds. WEC8500# configure terminal WEC8500/configure# WEC8500/configure# ipwatch ? defend-interval Ipwatch defend-interval configuration WEC8500/configure# ipwatch defend-interval ? 10 - 300 Ipwatch defend-interval value(seconds) WEC8500/configure# ipwatch defend-interval 30 Parameter Description VALUE Enter a defend-interval (10-300 sec).
WEC8500/8050 Operation Manual Version 5.2 3.5 QoS The Access Control List (ACL) allows or blocks a specific network traffic based on an operator’s configuration. The APC provides QoS using ACL. 3.5.1 ACL Configuration 3.5.1.1 Access List Configuration You can create or delete an access list for ACL configuration. To delete an access list, an operator can enter the name of an access list directly or enter a command by copying a value retrieved from the ‘show running-config network’.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security> <Access Control Lists> <IP ACL> menu in the sub-menus. The initial window of ACL rule configuration is shown below. When you click the <Add>...
WEC8500/8050 Operation Manual Version 5.2 Parameter Description DIRECTION Application direction configuration (in/out) ACL_NAME ACL name to configure An example of entering a command that configures ‘acl1’ to the ‘ge2’ interface is shown below. APC# configure terminal APC/configure# interface ge2 APC/configure/interface ge2#ip access-group fqm in acl1 3) To check the configuration information, use the ‘show running-config network’...
Page 112
WEC8500/8050 Operation Manual Version 5.2 3.5.1.3 WLAN ACL Configuration 1) Go to the fqm mode to configure the configure ACL rule of CLI. APC# configure terminal APC/configure# fqm-mode 2) Configure WLAN ACL by entering the ‘ip access-group wireless’ command.
WEC8500/8050 Operation Manual Version 5.2 Figure 41. Admin ACL Configuration Window 3.5.2 Class-map Configuration 1) Go to the fqm mode to configure the configure ACL rule of CLI. APC# configure terminal APC/configure# fqm-mode 2) Go to Class-map mode. ...
WEC8500/8050 Operation Manual Version 5.2 3.5.3 Policy-map Configuration 1) Go to the fqm mode to configure the configure ACL rule of CLI. APC# configure terminal APC/configure# fqm-mode 2) Go to policy-map mode. To delete a policy map, enter ‘no’ parameter in front of the command.
WEC8500/8050 Operation Manual Version 5.2 3.5.4 Service Policy Configuration Apply the policy configured in the policy-map to an interface. 1) Go to configure interface configuring mode to apply the service policy of CLI. APC# configure terminal APC/configure# interface ge2 APC/configure/interface ge2# 2) Apply the policy configured in the policy-map to an interface.
WEC8500/8050 Operation Manual Version 5.2 3.5.5 Time Profile The procedure of configuring a time profile and applying it to ACL is described. 3.5.5.1 Time Profile Configuration Configuration using CLI 1) Go to configure of CLI fqm mode. APC# configure terminal APC/configure# fqm-mode 2) Configure a time profile.
WEC8500/8050 Operation Manual Version 5.2 Select an item in the list and perform detail configuration. Figure 43. Time Profile Configuration Window (2) After finishing configuration in the window, click the <Apply> button to apply it to the system. 3.5.5.2 Applying to ACL Configuration using CLI 1) Go to the fqm mode to configure the configure ...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security> <Access Control Lists> <IP ACL> menu in the sub-menus. To change the configuration of ACL rule, click ACLNAME to change. You can change the configuration using the <Add>...
WEC8500/8050 Operation Manual Version 5.2 3.5.6 OS-AWARE OS-AWARE is a function to use the option value of the DHCP Discover/Request transmitted from a station to check the type of the operating system used by the station. The procedures to set OS-AWARE and apply the OS-AWARE settings to ACL are described below.
Page 120
WEC8500/8050 Operation Manual Version 5.2 os-aware ‘window7’ modification: APC# configure terminal APC/configure# os-aware APC/configure/os-aware # os-aware window7 seq 8 dhcp-option 2 eq FF os-type windows os-aware ‘window7’ deletion: APC# configure terminal APC/configure# os-aware APC/configure/os-aware # no os-aware window7 3) Check the settings by using the ‘show OS-AWARE-all’ or ‘show OS-AWARE- [OS_AWARE NAME]’...
Page 121
WEC8500/8050 Operation Manual Version 5.2 Parameter Description OS_AWARE NAME os-aware name to configure An example of applying ‘window7’ to ‘acl’ is as follows. APC# configure terminal APC/configure# fqm-mode access-list ip acl1 permit seq 1 icmp any any os-aware window7 3) To check the configuration information, use the ‘show running-config network’...
WEC8500/8050 Operation Manual Version 5.2 3.6 Multicast to Unicast Execute the ‘show multi2uni-list’ command to check the list of wireless terminals that use the multicast to unicast function. 3.7 IP Multicast Configuration 3.7.1 IP Multicast Routing Configuration Configuration using CLI 1) Go to configure mode of CLI.
PIM Configuration As a multicast layer3 transmission protocol, the PIM has two modes, i.e. Dense mode and Sparse mode. The WEC8500 supports only PIM Sparse mode and the PIM Sparse mode can be configured for each interface. Configuration using CLI 1) Go to configure of CLI ...
WEC8500/8050 Operation Manual Version 5.2 3) Select an interface to add. Figure 48. PIM-SM Configuration Window (3) 4) The selected interface is displayed on the window. Click the <Apply> button to apply the configuration. Figure 49. PIM-SM Configuration Window (4)
Configuring the IGMP Snooping of a VLAN interface: WEC8500# configure terminal WEC8500/configure# interface vlan1.10 WEC8500/configure/interface vlan1.10# ip igmp snooping In addition, a specific function of the IGMP Snooping functions of a VLAN interface can be enabled or disabled as shown in the below command.
WEC8500/8050 Operation Manual Version 5.2 [ip igmp snooping mroute] This command enables or disables the Mroute function. ip igmp snooping mroute [INTERFACE] no ip igmp snooping mroute [INTERFACE] Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>...
WEC8500/8050 Operation Manual Version 5.2 2) Click the <Select Vlan> button. Figure 52. IGMP Snooping Mroute Creation Window (2) 3) Select a VLAN interface that will be added to the Mroute. Figure 53. IGMP Snooping Mroute Creation Window (3) 4) The selected interface is displayed on the window. Click the <Apply> button to apply the configuration.
WEC8500/8050 Operation Manual Version 5.2 CHAPTER 4. AP Connection Management This chapter describes the various configuration methods to manage the connection between the APC and AP. 4.1 APC Management 4.1.1 Managing APC List To enable the APC system to provide the cluster or redundancy service, several APC systems must be installed at a site and each APC must have the information of other APC systems.
WEC8500/8050 Operation Manual Version 5.2 Configuration using CLI The procedures for configuration are as follows. 1) Go to configure mode of CLI. WEC8500# configure terminal WEC8500/configure# apc WEC8500/configure/apc/apc-list# 2) Go to the apc-list item of CLI. WEC8500/configure# apc WEC8500/configure/apc/apc-list# 3) Add, delete or change APC.
WEC8500/8050 Operation Manual Version 5.2 4.1.2 Management Interface Configuration The APC can communicate with a W-EP wireless LAN AP using management interface. This is one of the information that must be configured first of all for wireless LAN service. Configuration using CLI To configure management interface, execute the command as follows: 1) Go to configure mode of CLI.
WEC8500/8050 Operation Manual Version 5.2 4.1.3 CAPWAP Configuration A secured tunnel is created between APC and W-EP wireless LAN AP using Control And Provisioning Wireless Access Point (CAPWAP), i.e. a standard protocol, and data is transmitted through the tunnel. An encrypted data is used for both wire and wireless sections, high security is provided.
Page 132
WEC8500/8050 Operation Manual Version 5.2 discovery-by-multicast: Configures whether to allow connection to CAPWAP multicast. (The ‘add-multicast-if’ must be configured before configuring whether to allow multicast connection.) discovery-del-timer: If the Join message is not received after receiving a Discovery message, this configures the timeout to discard the previously received Discovery messages.
WEC8500/8050 Operation Manual Version 5.2 4.1.4 AP Registration (Auto Discovery) Configuration The APC provides the AP auto-discovery function that automatically registers APs in the same network without having to configure any settings in advance. To configure the function, execute the following commands.
WEC8500/8050 Operation Manual Version 5.2 4.1.5 Managing AP File Transmission It provides the configuration and transmission management function for the tech support file of the AP. 4.1.5.1 Tech Support Information File 1) Go to configure APC mode of CLI.
Page 135
WEC8500/8050 Operation Manual Version 5.2 Operator can also configure fallback to return to the original APC from the backup APC during the service. If the fallback operation is configured, the AP periodically performs health check to check whether the primary APC can be connected. When the connection is required, it can immediately perform fallback according to the fallback option or can perform fallback on a specified time.
Page 136
WEC8500/8050 Operation Manual Version 5.2 Parameter Description PORT CAPWAP PORT number of the APC to add This port number is required by an AP to connect to the APC. If no port number is entered, it is set to 5246, the default port number of CAPWAP protocol.
WEC8500/8050 Operation Manual Version 5.2 4) To check the configured apc list, execute the ‘show apc summary’ command. 5) To check the redundancy information, execute the ‘show redundancy summary’ command. 6) To check the configured AP profile, execute the ‘show ap detail [AP_PROFILE_ NAME]’...
After configuring the DISCOVERY TYPE of AP to ‘APC Referal’, select the PRIMARY CONTROLLER NAME, SECONDARY CONTROLLER NAME, and TERTIARY CONTROLLER NAME. For the WEC8500 model, the TERTIARY CONTROLLER NAME is not shown in the menu.
WEC8500/8050 Operation Manual Version 5.2 Figure 60. AP redundancy Configuration Window Parameter Description APC_NAME Enter the name of an APC registered to redundancy. - Primary apc: The first APC that the AP attempts to connect. It is usually configured with the currently connected APC.
WEC8500/8050 Operation Manual Version 5.2 4.2 AP Management 4.2.1 AP Group Configuration The APC manages the services provided to the AP by group. An operator can add or delete several APs to/from a group. It is also possible to add/remove WLANs to/from an AP group so that the same WLAN services can be provided for each group.
WEC8500/8050 Operation Manual Version 5.2 Configuration using CLI To manage an AP group, execute the command as follows. 1) Go to configure mode of CLI. WEC8500# configure terminal WEC8500/configure# 2) Create or delete an AP group. Use ‘no’ parameter in front of the command to delete an AP group.
Page 142
WEC8500/8050 Operation Manual Version 5.2 General AP Group Settings To aid management of APs in groups, the APC allows configuration of settings which can be applied commonly to each group. The following functions are provided: Parameter Description Description This configures the description of the AP group.
Page 143
WEC8500/8050 Operation Manual Version 5.2 overwrite-ip-mode no overwrite-ip-mode ip-mode overwrite-state no overwrite-state shutdown no shutdown no overwrite-redundancy discovery primary-apc no primary-apc secondary-apc no secondary-apc tertiary-apc ...
WEC8500/8050 Operation Manual Version 5.2 Parameter Description AP are used. - apc-referral: The APC list configured for the APC is used as the discovery list. - DHCP: The APC list information relayed by DHCP option 138 (IPv4) or option 52 (IPv6) is used as the discovery list.
Page 145
WEC8500/8050 Operation Manual Version 5.2 4.2.1.1 Adding/Removing APs To aid management of APs in groups, the APC allows addition/removal of APs to/from AP groups. Configuration using CLI 1) Go to configure mode of CLI. WEC8500# configure terminal WEC8500/configure# 2) Create an AP group or enter the AP group configuration mode.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <AP Groups> in the submenu, and then select an AP group to configure. Under the ‘APs’ tab of the AP group, APs can be added or removed.
WEC8500/8050 Operation Manual Version 5.2 3) Add/remove an WLAN to/from the AP group. Use ‘no’ parameter in front of the command to delete an WLAN from the AP group. add-wlan [WLAN_ID] no add-wlan [WLAN_ID] 4) Use the ‘show ap-group summary’ command to check the AP group information.
WEC8500/8050 Operation Manual Version 5.2 4.2.1.3 802.11a/n Configuration Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <AP Groups> in the submenu, and then select an AP group to configure. Settings can be configured under the ‘802.11a/n’...
WEC8500/8050 Operation Manual Version 5.2 4.2.1.4 802.11b/g/n Configuration Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <AP Groups> in the submenu, and then select an AP group to configure. Settings can be configured under the ‘802.11b/g/n’...
WEC8500/8050 Operation Manual Version 5.2 4.2.1.5 Advanced Configuration In order to provide the same services to the APs allocated to each group, the APC allows configuration of advanced settings for each AP group. Configuring AP Group Profile with CLI 1) Go to configure mode of CLI.
Page 151
WEC8500/8050 Operation Manual Version 5.2 overwrite-vlan no overwrite-vlan vlan-support no vlan-support native-vlanId no native-vlanId Parameter Description DESCRIPTION This contains a brief description of the AP group. OVERWRITE-APC-AP-TIMER If overwrite-apc-ap-timer is enabled, the APC-AP timer setting of the group is applied to all APs within the group.
Page 152
WEC8500/8050 Operation Manual Version 5.2 Parameter Description group are applied to all APs within the group. LED-CONFIG This configures whether to turn the LED on/off. OVERWRITE-VLAN If overwrite-vlan is enabled, the VLAN settings of the AP group are applied to all APs within the group.
Page 153
WEC8500/configure/ap-group default/airmove# target-ap ? keep-ap-config Keep ap config WEC8500/configure/ap-group default/airmove# end 4) Use the ‘show airmove group [ap_group_name]’ command to check the AP group information. WEC8500# show airmove group default Airmove Group Configurations ---------------------------- Airmove State Disable Target AP Keep Ap Config...
WEC8500/8050 Operation Manual Version 5.2 Service time during scanning 100 ms Scanning interval time 1000 ms Number of probe requests Number of scanning channels Value of station roam delta WEC8500# Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <AP Groups>...
WEC8500/8050 Operation Manual Version 5.2 4.2.2 Configuring Remote AP Group If the APs are located in an area where the APC is not located, those APs must be classified into a separate group for service. The APC can manage the APs in another area by grouping them into a remote AP group.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration> and then select the <Remote AP Groups> menu in the sub-menus. Click the <Add> or <Delete> button to add or delete a group.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, select <Remote AP Groups> in the submenu, and then select a remote AP group to configure. Under the ‘General’ tab of the remote AP group, APs can be added or removed.
WEC8500/8050 Operation Manual Version 5.2 no remote-ap-group [REMOTE_AP_GROUP_NAME] 3) Configure Primary Radius Server 1, Primary Radius Server 2, and Primary Radius Server 3. The RADIUS server information must be created in the radius of the security item in advance. To delete the configured RADIUS server information, enter ‘no’...
Page 159
Perform the following commands to synchronize the settings for APs of a specific remote group: WEC8500# configure terminal WEC8500/configure# remote-ap-group rmt_grp_01 WEC8500/configure/remote-ap-group rmt_grp_01# sync-rbac-config Synchronization result can be checked as shown below. WEC8500# show rbac config summary GRP_ID GRP_NAME Role Config File Name ====== ========= ========================== rmt_grp_01 etc/rmtapgrp/rbac_cfg_rmtapgrp1_20140307101643076655.tar rmt_grp_02 etc/rmtapgrp/rbac_cfg_20140305094752849046.tar...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI Configuration > Security > Role Based Access Control ‘Send To Aps’ Figure 72. ACL Settings Synchronization-All Configuration > Remote AP Groups select remote ap group & ‘Send RBAC Config To Aps’...
WEC8500/8050 Operation Manual Version 5.2 4.2.3 AP Time Synchronization per Group The AP can configure its time information using either the time stamp method or the NTP method. In the Time Stamp type, the APC periodically transmits the time of APC to an AP and the AP is operating based on the received time.
WEC8500/8050 Operation Manual Version 5.2 add-ntp [NTP_SERVER_ADDRESS] no add-ntp [NTP_SERVER_ADDRESS] ntp-interval [NUMBER] 3) Configure the method of transmitting the time information to an AP as ‘ntp’. mode ntp 4) Use the ‘show apc ap-time-config’ command to check the configured information.
To configure AP information, execute the command as follows: 1) Go to configure AP configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# ap [ap profile name] WEC8500/configure/ap ap_1# If there exists the same AP when entering [ap profile name], you are guided to the mode where operator can configure the AP.
Page 164
WEC8500/8050 Operation Manual Version 5.2 4.2.4.2 Configuring AP Profile Configuration using CLI To configure an AP profile configuration, execute the command as follows: 1) Go to configure AP configuration AP profile mode of CLI. WEC8500# configure terminal WEC8500/configure# ap ap_1...
Page 165
WEC8500/8050 Operation Manual Version 5.2 edge-ap: Configures whether to enable the Edge AP function. edge-ap-opmode: Smart Handover is enabled as operation mode of the edge AP. In RSSI mode, handover is determined by looking up the RSSI value. In Force mode, handover is performed by force.
WEC8500/8050 Operation Manual Version 5.2 ssh-enable: Configures whether to enable the SSH server of an AP. static-ip [IP_ADDRESS] [NETMASK] [GATEWAY]: Configures the static IP address of an AP. statistics-timer [TIMER]: Configures the time interval of transmitting the statistics information provided by CAPWAP (unit: seconds) ...
Page 167
WEC8500/8050 Operation Manual Version 5.2 MAP LOCATION LOCATION: Information of location where an AP is installed IP ADDRESS: IP address of AP IP ADDRESS POLICY: IP address mode DISCOVERY TYPE: AP discovery type ADMIN STATUS: AP administrative status ...
WEC8500/8050 Operation Manual Version 5.2 Figure 77. AP Profile Setting (2) 4.2.4.3 AP Mode Configuration Configuration using CLI To configure AP mode, execute the command as follows. 1) Go to configure AP configuration AP profile mode of CLI.
The APC operator can add or remove account information relating to the AP CLI. When the APC is first installed, a default account is provided (id: root, password: samsung). Up to three AP CLI accounts can be added, and at least one account must be configured.
WEC8500/8050 Operation Manual Version 5.2 2) Add an AP CLI account. ap-account [ID] [PASSWORD] [LEVEL] Parameter Description This is the ID of the AP CLI account. Only an alphanumeric value of up to eight characters can be entered. Password This is the password of the AP CLI account.
Page 171
WEC8500/8050 Operation Manual Version 5.2 4.2.4.5 AP SNMP Agent Configuration The APC operator can configure SNMP Agent settings for all APs. Configuration using CLI Execute the following commands to configure the SNMP Agent settings of the AP. 1) Go to configure snmp ap mode of CLI.
WEC8500/8050 Operation Manual Version 5.2 Parameter Description PRIVATE KEY A number in the range of 8 to 20 can be entered. 3) Use the ‘show snmp ap’ command to retrieve the agent information configured for the Configuration using Web UI In the menu bar of <WEC Main Window>, select <Administration>, select <AP>...
WEC8500/8050 Operation Manual Version 5.2 4.2.5 Information Management The APC manages the history statistics information, real-time interface statistics information, and tech support information of the AP. AP History Statistics The AP transmits the interface (WAN and WLAN) and CPU load/memory usage statistics information collected for 5 min.
WEC8500/8050 Operation Manual Version 5.2 4.2.5.2 Real-time Interface Statistics Information Configuration using CLI 1) Go to configure AP configuration. WEC8500# configure terminal WEC8500/configure# ap ap_1 WEC8500/configure/ap ap_1# 2) Configure to make real-time interface statistics information updated periodically. WEC8500/configure/ap ap_1# get-if-stats 3) To check the interface statistics information of an AP, use the ‘show ap if-stats...
WEC8500# configure terminal WEC8500/configure# ap [ap profile name] WEC8500/configure/ap ap_1# tech-support WEC8500/configure/ap ap_1/tech-support# 2) Request the coredump file of the AP. WEC8500/configure/ap ap_1/tech-support# get-coredump (system / radio- coredump) 3) Request the crashfile of the AP. WEC8500/configure/ap ap_1/tech-support# get-crash-file (system / radio-coredump) 4) Request the log file of the AP.
1) Outdoor APs are not included in the AP count of the APC license. 2) Outdoor APs are not included in the ordinary AP count. 3) The maximum up-ported outdoor AP count is 300 for the WEC8500 model and 75 for the WEC8050 model.
Are you sure you want to continue? (y/n) : y WEC8500/configure/ap ap_1# 3) To check the upgrade file information of the requested AP, use the following command. WEC8500/configure/ap ap_1# show ap upgrade list /* (RC/FR/RC) : RetryCount/FailReason/RebootCause /* Pri : VersionPriority (MD-model,A-AP config)
Page 178
- keeping-individual: While maintaining individually configured ap version, perform upgrade for the rest APs. [transfer-protocol] This command selects a transmission protocol that is used to transmit the package file of an AP from the WEC8500 to the AP. Transfer-protocol [AP TRANSFER MODE] Parameter...
Page 179
WEC8500/8050 Operation Manual Version 5.2 [max-download] This command configures the maximum number of simultaneous downloads when transmitting the package file of an AP from the APC to the AP. Max-download [COUNT] Parameter Description COUNT Maximum number of simultaneous downloads of AP image...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Administrator> and then select <Package Upgrade> <AP> menu in the sub menu. You can perform AP upgrade in the AP Upgrade tab and configure upgrade related environment in the Advanced tab.
WEC8500/8050 Operation Manual Version 5.2 SCOPE: Selects upgrade method. To make the AP working as the package immediately after upgrade, select Quick Upgrade. To download the package to the AP, select the Predownload menu. TARGE AP: Select an AP target to upgrade. If you select <Keeping individual setting>, an AP that is configured as individual is excluded from upgrade.
When the AP upgrade is enabled, version priority in AP upgrade status changes to Remote. Configuration using CLI Example: WEC8500# configure terminal WEC8500/configure# remote-ap-group rUpgrade WEC8500/configure/remote-ap-group rUpgrade# upgrade WEC8500/configure/remote-ap-group rUpgrade/upgrade# enable WEC8500/configure/remote-ap-group rUpgrade/upgrade# no enable Samsung Electronics America page 182 of 533...
WEC8500/8050 Operation Manual Version 5.2 CLI for checking configuration: WEC8500 # show remote-ap-group upgrade config rUpgrade ================== Remote Ap Group Upgrade Config ================= Group Name : rUpgrade Enable : Enable Type : Default Mode : FTP Path : package/ap PortNum...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI Administration > Package Upgrade > Remote AP Group Example: Figure 96. Restarting and Upgrading AP Samsung Electronics America page 190 of 533...
APC. To use WLAN service, it is necessary to basically configure AP group and interface group and specify Service Set Identifier (SSID). Configuration using CLI Go to the wlan configuration mode from the configure mode of CLI. WEC8500# configure terminal WEC8500/configure# wlan [WLAN ID] Parameter Description WLAN_ID WLAN ID (range: 1-255) The WLAN configuration procedures are as follows: 1) Go to configure ...
Page 192
Maximum 16 WLANs can be allocated to each AP group. WEC8500# configure terminal WEC8500/configure# ap-group apg_01 WEC8500/configure/ap-group apg_01# add-wlan 1 3) Configure an interface group to which the WLAN service will be provided. Several VLAN interfaces can be added to an interface group, and the WLAN service is available only through the interface.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <General> tab. In the screen, you can use various functions such as adding or deleting a WLAN.
WEC8500/8050 Operation Manual Version 5.2 You can configure various functions such as interface group and SSID, etc. The configurations available in the General tab are as follows: INTERFACE GROUP: Configures an interface group. RADIO AREA: Configures a radio area.
Page 195
WEC8500/8050 Operation Manual Version 5.2 5) Specify the service MAC type. mac-type [MAC_TYPE] Parameter Description MAC_TYPE - localMac: An AP itself provides data service. - splitMac: Provides data service through the APC. 6) Select a radio bandwidth to provide the WLAN service.
WLAN. Configuration using CLI The procedures for configuration are as follows. 1) Before applying ACL, retrieve ACL that is configured as WLAN ACL. WEC8500# show running-config network fqm-mode … ip access-group wireless acl1 2) Go to configure wlan configuration mode of CLI.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <Advanced> tab.
Disabled 3) Use the ‘show wlan detail repeater’ command to check the root WLAN settings. WEC8500/configure/apc# show wlan detail repeater [Changing to Root AP] The procedure of changing a W-EP AP to a Root AP is as follows: 1) Go to configure mode of CLI.
Page 199
WEC8500/8050 Operation Manual Version 5.2 4) Configure it to a Root AP. WEC8500/ configure/ap ap_1# profile ap-mode rootAp 5) Restart the configured AP. [Changing to Repeater AP] The procedure of changing a W-EP AP to a Repeater AP is as follows: 1) Go to configure mode of CLI.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <General> menu in the sub-menus. To enable repeater service, configure the INTERFACE GROUP in the Repeater Service of the window, select Enable in the SERVICE, and click the <Apply>...
2) Enter into the configure wlan configuration mode of CLI, and configure ‘tunnel- mode’ to ‘local-bridging’. WEC8500# configure terminal WEC8500/configure# wlan 1 WEC8500/configure/wlan 1# tunnel-mode local-bridging tunnel-mode local-bridging 3) Enter into the configure AP configuration mode of CLI, and configure a local Vlan ID per WLAN.
WEC8500/8050 Operation Manual Version 5.2 WEC8500/configure/ap ap_1# profile WEC8500/configure/ap ap_1/profile# local-bridging [WLAN_ID][VLAN_ID/ACL_NAME/PRE_AUTH_ACL_NAME] Parameter Description WLAN_ID WLAN ID (Range: 1-254) (available only for WLANs the tunnel-mode of which is local-bridging) VLAN_ID VLAN ID (Range: 1-4094) ACL_NAME ACL name to configure for the WLAN service...
WEC8500/8050 Operation Manual Version 5.2 In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points> menu in the sub-menus. In the Access Points screen, select an AP to change and go to the <Remote AP> tab. Select a WLAN that is configured as local bridging, enter a VLAN ID/ACL/Pre-Auth.
WEC8500/8050 Operation Manual Version 5.2 5.3 Security and Authentication The Samsung W-EP AP/APC supports the security and authentication function defined in the IEEE 802.11-based wireless LAN security standard and its main mechanism is as follows: Wired Equivalent Privacy (WEP) ...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <Security> <L2> tab.
WEC8500/8050 Operation Manual Version 5.2 Item Description - 64-characters of hexadecimal value PMK LIFETIME PMK effective time (unit: s, range: 0-1000000, default: 43200) EAPOL REAUTHENTICATION EAP re-authentication interval (unit: s, range: 0-100000, PERIOD default: 0) STATIC WEP WEP KEY key input format...
Page 207
WPA type (wpa/wpa2): WPA Version 2 must be enabled at all times. - wpa: WPA Version 1 - wpa2: WPA Version 2 4) Configure the PSK key. WEC8500/configure/wlan 1/security# psk [KEY_TYPE] [KEY_STRING] Parameter Description KEY_TYPE PSK key input format (ascii/hex)
WEC8500/configure/wlan 1/security# apply WEC8500/configure/wlan 1/security# exit 10) To check the configuration information, use the following command. WEC8500/configure# show wlan security summary Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <Security>...
WPA type (wpa/wpa2): WPA Version 2 must be enabled at all times. - wpa: WPA Version 1 - wpa2: WPA Version 2 4) Configure the encryption type. WEC8500/configure/wlan 1/security# [WPA_TYPE] [ENC_TYPE] Parameter Description WPA_TYPE WPA type (wpa/wpa2): Use the same value as the WPA type configured before.
Page 210
- tkip: TKIP type. TKIP cannot be configured for WPA Version 2. - ccmp: AES-CCMP type 5) Disable the PSK key management algorithm. WEC8500/configure/wlan 1/security# no keymgmt psk 6) Configure the key management algorithm to 802.1x. WEC8500/configure/wlan 1/security# keymgmt ieee8021x 7) Enable the 802.1x authentication.
WEC8500/configure/wlan 1/security# apply WEC8500/configure/wlan 1/security# exit 11) To check the configuration information, use the following command. WEC8500/configure# show wlan security summary 12) To check configuration information, use the ‘show wlan security summary’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs>...
WEC8500/8050 Operation Manual Version 5.2 Item Description SERVER 3 (Can select one out of pre-configured RADIUS servers.) ACCOUNTI Enable/ Whether the accounting function is enabled. Disable - Enable: The accounting function is enabled. SERVER - Disable: The accounting function is disabled.
WEC8500/configure/wlan 1/security# wep 5) Configure the WEP Shared Key mode. WEC8500/configure/wlan 1/security# wep shared 6) Use the following command to configure the cryptographic key of WEP. WEC8500/configure/wlan 1/security# wep encryption [KEY_TYPE] [KEY_STRING] [KEY_INDEX] [KEY_LENGTH] Samsung Electronics America page 213 of 533...
WEC8500/configure/wlan 1/security# setDefault 3) Enable the 802.1x authentication. WEC8500/configure/wlan 1/security# ieee8021x 4) To configure the length of a cryptographic key of dynamic WEP, execute the following command. WEC8500/configure/wlan 1/security# ieee8021x encryption [KEY_LENGTH] Parameter Description KEY_LENGTH Key length (Bit unit) - 40...
Page 216
7) After applying the changed configuration, exit the security configuration mode. WEC8500/configure/wlan 1/security# apply WEC8500/configure/wlan 1/security# exit 8) To check the configuration information, execute the following command. WEC8500/configure# show wlan security summary 9) To check configuration information, execute the ‘show wlan security summary’ command. Samsung Electronics America...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. 1) Select a WLAN ID to change in the WLANs screen and go to the <Security> ...
WEC8500/8050 Operation Manual Version 5.2 5.4 DHCP Configuration The DHCP service of APC consists of DHCP server, DHCP relay, and DHCP proxy. 5.4.1 DHCP Server 5.4.1.1 DHCP Server Configuration A DHCP server in the APC dynamically allocates an IP address to a client.
To configure the DHCP Pool related function, execute the command as follows to go to the DHCP pool mode. WEC8500# configure terminal WEC8500/configure # ip dhcp pool test WEC8500/configure/ip/dhcp/pool test# [Configuring IP address] Before configuring a DHCP pool, you should configure a network first. If the network is not configured, you cannot execute other commands.
Page 220
IP_ADDRESS DNS Server’s IP address [Configuring Domain Name] This command configures or deletes a domain name. domain-name [DOMAIN] no domain-name [DOMAIN] Parameter Description DOMAIN Domain name to configure (e.g. samsung APC.co.kr) Samsung Electronics America page 220 of 533...
Page 221
As shown in the below example, 100.100.100.10 can be always allocated to the IP address of a wireless terminal whose MAC address is 11:22:33:44:55:66. WEC8500/configure/ip/dhcp/pool test# fix-address 11:22:33:44:55:66 100.100.100.10 [Configuring IP Address Lease Time] Configure the time when a wireless terminal receives an IP address. The ‘lease infinite’...
Page 222
WEC8500/8050 Operation Manual Version 5.2 [Ping check] When a DHCP server allocates an IP address to a client, ping check can be used to check if an IP address to allocate is being used in the current network. ping-check [enable/disable]...
Page 223
- no user-option [1-254] ipaddress A.B.C.D [active/passive] no user-option all Deletes all the configured options. A usage example is given below. WEC8500/configure/ip/dhcp/pool test# user-option 3 string “hi, there” active WEC8500/configure/ip/dhcp/pool test# user-option 200 octet 33:4A:5C:6F:DD passive WEC8500/configure/ip/dhcp/pool test# user-option 201 int -3000...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <DHCP> <Internal Server> menu in the sub-menus. Click the <Add> or <Delete> button to add or delete a DHCP pool.
Page 225
WEC8500/8050 Operation Manual Version 5.2 POOL NAME: DHCP pool name (mandatory input item) NETWORK: Network bandwidth IP that a DHCP server will serve (mandatory input item) MASK: Netmask length IP of an IP that is entered into the NETWORK item (mandatory input item) ...
The relay and proxy are operating in the switching mode. If a proxy is not used, it is operating in the relay mode. WEC8500/configure # no ip dhcp-proxy enable 3) To check the configured DHCP information, use the ‘show ip dhcp-proxy’ command.
WEC8500/8050 Operation Manual Version 5.2 5.4.3 DHCP Proxy The procedure of changing to the DHCP proxy is as follows. Configuration using CLI The CLI configuring a DHCP proxy is located as a command under ‘ip dhcp-proxy’ in the configure mode.
WEC8500/8050 Operation Manual Version 5.2 5.4.4 Option 82 Configuration The APC uses the DHCP Option 82 to provide various services during IP allocation by forwarding the information such as access control, QoS, or security policy, etc. when a wireless terminal connected to an AP receives an IP address.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <Interfaces> menu in the sub-menus. In the interface, you can see the page where you can change the Option 82.
WEC8500/8050 Operation Manual Version 5.2 5.4.5 Primary/Secondary Server Configuration The DHCP relay/proxy can transmit a DHCP packet received from a client through broadcast to maximum two DHCP servers. Here, the two servers are called a primary server and a secondary server.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI [Configuration at Interface] In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <Interfaces> menu in the sub-menus. In the interface, you can see the page where you can change the Option 82.
WEC8500/8050 Operation Manual Version 5.2 [Configuration at Global] In the menu bar of <WEC Main window>, select <Configuration> and then select the <DHCP> <Proxy> menu in the sub-menus. Configure the PRIMARY SERVER and SECONDARY SERVER of the Global Parameter.
WEC8500/8050 Operation Manual Version 5.2 Radio Service Configuration The APC supports WLAN-based radio configuration. You can enable or disable WMM based on WLAN and change DTIM and station idle timeout. Configuration using CLI 1) Go to configure wlan-radio-service mode of CLI.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID to change in the WLANs screen and go to the <Advanced> tab.
WEC8500/8050 Operation Manual Version 5.2 CHAPTER 6. Wi-Fi Configuration This chapter describes how to manage the 802.11a, 80211.bg, 802.11n or 80211ac device of W-EP AP. An 802.11n device supports 2.4 GHz and 5 GHz wireless bandwidth and high data processing speed.
Page 236
WEC8500/8050 Operation Manual Version 5.2 3) Configure channel of multiple APs belonging to the group. channel [CHANNEL] group [GROUP_ID] all-ap/active-ap: Channel is configured for multiple APs. channel [CHANNEL] group [GROUP_ID] all-ap/active-ap fixed: Channel is fixed and is not affected by automatic adjustment functions such as RRM. (Channel values are indicated as * when retrieved by ‘show 80211a summary’...
Page 237
WEC8500/8050 Operation Manual Version 5.2 6) To check the configured channel and TX power information, use the following command. WEC8500# show 80211a[|80211bg] summary AP Name MAC Address Operation State Channel TxPower ----------------- ----------------- --------------- -------- -------- AP_f4d9fb23bfb9 F4:D9:FB:23:BF:B9 1 10 *...
WEC8500/8050 Operation Manual Version 5.2 11) Configure the bandwidth of the AP. Bandwidth can be configured only for 80211a/n/ac. bandwidth [BANDWIDTH] ap [AP_ID]: Bandwidth is configured for a specific AP. bandwidth [BANDWIDTH] global: Bandwidth is configured for all APs.
WEC8500/8050 Operation Manual Version 5.2 [TX power Configuration] TX CURRENT POWER: TX Power (range: 3-23) TX POWER FIX: The configured TX power is configured as fixed and it is not affected by the automatic adjustment function such as RRM. When selecting the <Monitor>...
3) Configure an AP so that it can support 802.11n property. WEC8500/configure/80211a/11n-support# enable [AP_ID] Parameter Description AP_ID AP ID (range: 1-500) 4) Configure the Modulation and Coding Scheme (MCS) rate. WEC8500/configure/80211a/11n-support# mcs [RATE] ap [AP_ID] Parameter Description RATE MSC rate (range: 0-23) AP_ID AP ID (range: 1-500) 5) To check the configured 11n-support information, use the ‘show 80211a radio-config...
WEC8500/configure/80211a/11ac-support# enable [AP_ID] Parameter Description AP_ID ID of the AP (range: 1-500) 4) Configure the Modulation and Coding Scheme (MCS) rate. WEC8500/configure/80211a/11n-support# mcs [RATE] ap [AP_ID] Parameter Description RATE MSC rate (range: 0-23) AP_ID ID of the AP (range: 1-500) 5) To check the configured 11ac-support information, use the ‘show 80211a radio-config...
Page 242
WEC8500/8050 Operation Manual Version 5.2 Samsung Electronics America page 242 of 533...
Page 243
WEC8500/8050 Operation Manual Version 5.2 [OPERATIONAL TYPE] Enable/disable 11ac operation. [VHT (802.11AC) MCS SETTING] Determine the spatial stream count for each AP model and enter maximum MCS value for each spatial stream count. Example: maximum of seven MCS for one spatial stream, maximum of eight MCS for two spatial streams, and maximum of nine MCS for three spatial streams ...
WEC8500/8050 Operation Manual Version 5.2 Wi-Fi QoS Configuration The APC provides various QoS in the wire/wireless section for every packet type (voice, video, best-effort, or background). The QoS can be configured for each wireless section (2.4 GHz, 5 GHz). 6.2.1...
WEC8500/8050 Operation Manual Version 5.2 [Wired tab] Figure 123. QoS configuration of a wireless terminal (1) [Wireless tab] Figure 124. QoS configuration of a wireless terminal (2) Samsung Electronics America page 245 of 533...
WEC8500/8050 Operation Manual Version 5.2 6.2.2 QoS Configuration of AP 6.2.2.1 Wire Section The APC provides QoS in a wire section using 802.1p and Differentiated Services Code Point (DSCP) marking and it can adjust packet traffics because it can adjust queue length depending on packet type.
Page 247
WEC8500/8050 Operation Manual Version 5.2 4) Configure a default DSCP value per packet. dscp-tag [PACKET_TYPE] [DSCP TAG] Parameter Description PACKET_TYPE Packet type configuration (voice/video/best_effort/background) DSCP_TAG Default DSCP value 5) Configure a protocol to distinguish packet types. protocol [PROTOCOL]...
Page 248
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio> <802.11a/n> or <802.11b/g/n> <QoS> menu in the sub-menus. 1) Select one out of None/Default/User Priority in the 802.1P POLICY drop-down list of Tagging Policy.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio> <802.11a/n> or <802.11b/g/n> <QoS> menu in the sub-menus. Figure 125. QoS configuration of AP (wireless section) In the Access Point tab, enter 802.1p or a DSCP value into the QoS Default Values.
WEC8500/8050 Operation Manual Version 5.2 6.2.3 Configuring QoS Profile of a Specific Terminal You can configure a QoS profile that is applied to a specific wireless terminal. This QoS profile is applied from the RADIUS server of a wireless terminal during authentication.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <User QoS> menu in the sub-menus. To create a QoS profile to apply to a terminal, click the <Add>...
WEC8500/8050 Operation Manual Version 5.2 6.2.4 Voice Optimization Configuration The APC configures an EDCA parameter value that is optimized for voice service to an AP in real-time. Configuration using CLI 1) Go to configure radio cvo mode to configure of CLI.
WEC8500/8050 Operation Manual Version 5.2 802.11h Configuration The APC supports the configuration and transmission power limitation for the Dynamic Frequency Selection (DFS) function in an AP. When the AP detects radar, an event is sent to the WEM and a detouring channel can be configured in the AP.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio> <802.11a/n> <802.11h> menu in the sub-menus. Figure 128. Configuring 802.11h POWER CONSTRAINT: Power constraint value (0-100) ...
WEC8500/8050 Operation Manual Version 5.2 Country Code You can use a country code to restrict the number of channels that can be used in an AP and the maximum transmission power of each channel. Configuration using CLI To configure the country code function, go to country mode first by executing the following command.
Page 256
WEC8500/8050 Operation Manual Version 5.2 [Editing Country Code] You can add or delete an operation channel per country and change maximum transmission power per channel. The command used to add or delete a channel per country is shown below. ...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller> <Country> menu in the sub-menus. Figure 129. Country code window (1) [Global Country Code Configuration] 1) Select a country in the DEFAULT COUNTRY drop-down list of Configured Country Code item.
WEC8500/8050 Operation Manual Version 5.2 [AP Country Code Configuration] In the menu bar of <WEC Main window>, select <Configuration> and then select the <Access Points> <General> menu in the sub-menus. Figure 130. Country code window (2) After selecting COUNTRY and ENVIRONMENT, click the <Apply> button.
WEC8500/8050 Operation Manual Version 5.2 CHAPTER 7. WLAN Additional Services In this chapter, how to configure WLAN additional services such as wireless terminal management, spectrum analysis, Call Admission Control (CAC) and Radio Resource Management (RRM), etc. is described. 7.1 Managing Wireless Terminal 7.1.1...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Monitor> and then select the <Stations> menu in the sub-menus. The brief information of each station is displayed in the window. To check the detail information of a specific station, click the MAC information of the specific station in the Stations window list.
AirMove handover is performed by the collaboration between wireless terminals compatible with the APC. Therefore, the packet loss or handover time is optimized. Some Samsung smartphones such as Galaxy S2 or S3, etc. provide the AirMove function.
Page 262
- OPTION: station-decision-delta - OPTION_DETAIL: Threshold (dBm) An example of using the command for each configuration item is as follows: WEC8500/configure# handover opmode APP WEC8500/configure# handover buffered-forwarding enable WEC8500/configure# handover decision-delta 10 WEC8500/configure# handover scan-time-channel 10 WEC8500/configure# handover scan-time-interleave 1000...
WEC8500/8050 Operation Manual Version 5.2 [AirMove Enable/Disable Configuration] The AirMove is enabled by default, so use the following command to disable it. no handover mode NCHO To check the configuration information, use the ‘show handover configuration’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration>...
WEC8500/8050 Operation Manual Version 5.2 Call Admission Control (CAC) Configuration The CAC function is provided to protect existing calls from the calls incoming to a wireless LAN. The APC does not allow an additional call when maximum allowed number of calls per radio is reached.
WEC8500/8050 Operation Manual Version 5.2 2) Enable the SIP ALG. APC/configure# sipalg enable 3) To check the configuration information, use the ‘show sipalg configuration’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Controller>...
WEC8500/8050 Operation Manual Version 5.2 7.3.2 Voice CAC Configuration To protect existing calls, the voice CAC function configures maximum allowed number of calls and rejects any call request when the maximum number is exceeded. You can configure the number of marginal voice calls for handover.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio> <802.11a/n> or <802.11b/g/n> <Admission Control> menu in the sub- menus. Figure 134. Admission control configuration of 802.11a/n After configuring the below item in the Call Admission Control, click the <Apply>...
WEC8500/8050 Operation Manual Version 5.2 7.3.3 Video CAC Configuration To protect existing video calls, the video CAC function configures the maximum allowed number of video calls and rejects any call request when the maximum number is exceeded. You can configure the number of marginal calls for handover.
WEC8500/8050 Operation Manual Version 5.2 6) Configure the maximum allowed usage of channels. max-chan-util [VALUE] Parameter Description VALUE Maximum allowed usage of channels 7) Configure the usage of marginal channels with consideration for handover. reserved-ho-chan-util [VALUE] Parameter Description...
WEC8500/8050 Operation Manual Version 5.2 7.4 Radio Resource Management (RRM) RRM performs automatic setup function for AP’s channel and Tx Power. RRM is functionally divided into Dynamic Channel Selection (DCS), Dynamic Power control (DPC), and Coverage Hole Detection and Control (CHDC). The DCS automatically sets the channels of the APs.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio> <802.11a/n/ac> or <802.11b/g/n> <RRM> menu in the sub-menus. Enable or disable the RRM service at the top of the menu. The RRM can be set in either 802.11a/n/ac screen or 802.11b/g/n screens.
DPC. The default minimum is 16 for 80211a and 12 for 80211b. The default maximum is 20 for both 80211a and 80211b. WEC8500/configure/rrm/80211a/dpc# txPower min [value] max [value] 8) Check the settings using the ‘show rrm config-summary’ command.
WEC8500/8050 Operation Manual Version 5.2 7.4.3 DCS Configuration This section describes the setting options of the DCS function which automatically sets the channel of the AP. Configuration using CLI 1) Go to configure rrm configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# rrm 2) Go to the wireless section where you want to change the settings.
Page 274
4, end time 5. If both start time and end time are set to the same time, Anchor Run function is disabled. WEC8500/configure/rrm/80211a/dcs# anchor-time start [value] end [value] 9) Execute the following command to change the channels that is automatically set by the DCS.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio> <802.11a/n/ac> or <802.11b/g/n> <RRM> menu in the sub-menus. Enable or disable the DCS in the SERVICE field in Dynamic Channel Selection.
Page 276
9) Configure the threshold of RSSI that will be added to the statistics Failed Client Count for the pre-alarm function. Configure it for Voice Frame and Data Frame. It can be - 90~-20 (dB). WEC8500/configure/rrm/80211a/chdc# rssi-threshold data -75 Success: CHDC 802.11a : Set RSSI THRESHOLD(-75) Successful WEC8500/configure/rrm/80211a/chdc# rssi-threshold voice -75 Success: CHDC 802.11a : Set RSSI THRESHOLD(-75) Successful...
Page 277
12) To check the configured information, execute the ‘show rrm config-summary’ command. In the ‘Coverage Hole Detection and Control’, operator can check the current status of all the configured values. WEC8500/configure/rrm/80211a/chdc# show rrm config-summary RRM Status ..Enabled Rf Group Name ...
WEC8500/8050 Operation Manual Version 5.2 7.4.5 Sleeping Cell Detection This is a function that allows the APC to detect the statuses of APs that are not performing basic functions and transmit an alarm/warning. Configuration using CLI 1) Enable/Disable: Configure whether the silent alarm detection function will be performed.
Page 280
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI From the menu bar of <WEC Main Window>, select <Configuration> and then select <Radio> <Advanced> <Sleeping Cell Detection> in the submenus. Samsung Electronics America page 280 of 533...
WEC8500/8050 Operation Manual Version 5.2 7.4.6 Energy Saving The purpose is to reduce the power consumption of the APC by turning off the RF radios of APs without any connected STA at a specific time when the number of STAs connected to the APC drops drastically.
Page 282
WEC8500/8050 Operation Manual Version 5.2 6) DEL-AP: Delete AP members from the energy saving group. WEC8500/configure/rrm/energy-saving-group 1# del-ap Configuration using Web UI From the menu bar of <WEC Main Window>, select <Configuration> and then select <Radio> <Advanced> <Energy Saving Groups> <GROUP NAME> in the submenus.
WEC8500/configure/locationtrack # 2) Configure the location tracking function. WEC8500/configure/locationtrack # enable 3) To check the configured information, execute the ‘show locationtrack config’ command. WEC8500/configure/locationtrack # show locationtrack config Location tracking enable..: Enabled Algorithm type....: 4 Expiry date of history files: 0 4) Configure the MAC address of a wireless terminal for which the tracking function will be executed.
WEC8500/8050 Operation Manual Version 5.2 Spectrum Analysis A non-802.11 device such as microwave oven, bluetooth, or Closed Circuit Television (CCTV), etc. deteriorates data transmitting/receiving performance because it causes interference in a wireless LAN environment. As a function that measures surrounding interference, the spectrum analysis analyzes wireless or Radio Frequency (RF) signals to resolve interference problem instantly.
Page 285
WEC8500/8050 Operation Manual Version 5.2 Operational Status....... Up Map Location........Channel Information: Channel Interval........2000 ms Channel........... 1 2 3 4 5 6 7 8 9 10 11 12 13 Channel ID........... 1 ----------------------------- Num Maximum RSSI Average RSSI --- ------------ ------------...
Page 286
WEC8500/8050 Operation Manual Version 5.2 IP Address........100.100.100.220 Mode..........General Operational Status....... Up Map Location........Affected Channels: Channel Interval......... 2000 ms Channel.......... 1 2 3 4 5 6 7 8 9 10 11 12 13 Real Time Duty Cycle Report:...
WEC8500/8050 Operation Manual Version 5.2 802.11bgn Video Camera......Enabled ZigBee........... Enabled 802.11an Continuous Transmitter....Enabled 802.11an DECT-like Phone......Enabled 802.11an Video Camera......Enabled Real Time Interference Report: Number of Interferers......... 1 Num Evoke Time Interferer Type RSSI Minimum Frequency Maximum...
Page 288
WEC8500/8050 Operation Manual Version 5.2 [Enable/Disable Spectrum] The command that enables or disables the spectrum analysis function is shown below. service [MODE] Parameter Description MODE Enables or disables spectrum analysis - enable: Enable (default) - disable: Disable [Spectrum Analysis Report Configuration] The command used to enable or disable each spectrum analysis data item is shown below.
WEC8500/8050 Operation Manual Version 5.2 7.6.3 Interference Type Configuration The interference type of 2.4 GHz or 5 GHz that can be detected by the W-EP wireless LAN is shown below. Wireless bandwidth Interference type 2.4 GHz continuous_transmitter, cordless_phone, video_camera 5 GHz...
WEC8500/8050 Operation Manual Version 5.2 Controlling Usage per User A wireless terminal can control traffic usage per user by receiving a QoS profile that specifies traffic usage (bandwidth) from the RADIUS server at the authentication stage. You can configure upward and downward usage per wireless terminal.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <QoS> menu in the sub-menus. To create a QoS profile to apply to a terminal, click the <Add>...
WEC8500/8050 Operation Manual Version 5.2 7.8 Remote Packet Capture APC can capture a packet exchanged between the wireless terminals on a remote PC in real-time by using the remote packet capture protocol. To configure the remote packet capture function, you must go to the pcap mode by...
Page 293
WEC8500/8050 Operation Manual Version 5.2 Starting Service You must start the remote packet capture service to connect to a device using a program that supports the remote packet capture protocol on a remote PC. The related commands are given below.
[Cluster Setting] To use the clustering function, you must configure each APC according to the following procedure. Maximum 12 WEC8500 can be grouped in a cluster. Maximum 2 WEC8050 can be grouped in a cluster. 1) Go to configure mode of CLI.
Page 295
WEC8500/8050 Operation Manual Version 5.2 ENABLE : YES OWN-APC-INDEX ======================================================== [Adding APC to APC List] To add an APC to the cluster, the APC must be added to the APC list first. APC information is automatically added to the APC list.
Page 296
Parameter Description INDEX Index in cluster (range: 1-12) [Retrieving APC information added in cluster] You can check the added APC information using the ‘show cluster list-apc’ command. WEC8500# show cluster list-apc ====================================================================== INDEX APC-NAME IPv4-ADDRESS DB-REF-INT CONNECT-STATUS ====================================================================== APC-1 192.168.87.146 120...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Mobility Management> <Clustering> menu in the sub-menus. The Clustering window is shown below. Figure 142. Clustering window Configure a clustering configuration value in the <Information>...
WEC8500/8050 Operation Manual Version 5.2 7.10 Limiting the Number of Connected Users The W-EP wireless LAN system limits the number of wireless terminals connected to each AP. The limitation is per radio (2.4/5 GHz bandwidth) or WLAN for each AP.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio> <802.11a/n> or <802.11b/g/n> <General> menu in the sub-menus. Figure 144. Configuring connection limitation per radio After configuring MAX CLIENT COUNTS, click the <Apply>...
WEC8500/8050 Operation Manual Version 5.2 4) Enable the WLAN. APC/configure/wlan 1# enable 5) To check the configured connection limitation, use the ‘show wlan detail’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Radio>...
WEC8500/8050 Operation Manual Version 5.2 7.11 Voice Statistics and Communication Failure Detection Because APC provides voice statistics and the WLAN-based communication failure detection function, you can easily know communication failure reason. 7.11.1 Voice Statistics Function It provides the number of successful voice communication and call time.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Monitor> and then select the <Access Points> <Radio> <802.11a/n> or <802.11b/g/n> AP menu in the sub-menus. Figure 146. Voice statistics...
WEC8500/8050 Operation Manual Version 5.2 7.11.2 Detecting WLAN-based Communication Failure You can configure whether to detect WLAN-based communication failure. Configuration using CLI 1) Go to configure mode of CLI. APC# configure terminal APC/configure# 2) Enable or disable communication failure detection.
7.12.1 Checking Voice Related Wireless Information Configuration using CLI Execute the following command to check voice related fault analysis statistics. 1) Check the connection status of a voice wireless terminal. WEC8500# show voice station summary MAC Address IP Address Tel-no...
Page 305
WEC8500/8050 Operation Manual Version 5.2 3) Check the information of a completed call. WEC8500# show voice complete-call summary CONN Start Time SSID MAC Address Tel-no IPv4 Address Port Rat MOS LQ/CQ/PQ Pkt Cnt ==== ==================== ==== ==== =============== === ==============...
Page 306
0 0.0 0 0.0 5 Min 0 0.0 0 0.0 15 Min 0 0.0 0 0.0 1 Hour 0 0.0 0 0.0 1 Day 0 0.0 0 0.0 WEC8500# show voice statistics wlan 1 Samsung Electronics America page 306 of 533...
WEC8500/8050 Operation Manual Version 5.2 2) Check the connection status of an active call. In the menu bar of <WEC Main window>, select <Monitor> and then select the <VoIP Call> <Active Calls>menu in the sub-menus. Figure 149. Active Call Retrieval Screen 3) Check the information of a completed call.
Execute the following command to check the voice related quality analysis (Voice Quality Monitoring) information. 1) Operator can check the voice quality analysis information of a wireless terminal that has an active call. WEC8500# show voice vqm current-stats brief ======================================================== [CONN-740 Start Time=2013/7/19.14:47:27, Duration=47 sec(s) Call-ID[f03c77b50564418855587192e12b889d <-> ca371fce-6e10-401a- 9a4e-dd53678804c6@ug1.scm.com] Session id :0...
Page 310
RTP Flow Quality Metrics: [Flow-2] DIR==Reverse Quality Ratings=Fair [MOS-LQ=3.65, MOS-CQ=3.57, MOS-PQ=3.68] WEC8500# 3) Operator can check the call statistics information. WEC8500# show voice vqm summary-stats ======================================================== VQM Summary Stats for last YEAR:0 MONTH:0 DAY:0 0 HR:26 MN:44 SEC Calls Active Calls Terminated Flows Quality Summary (Total/Good/Fair/Poor) = 6/0/2/4 Listening Call Quality (MOS) min/ave/max = 2.21/3.10/3.73...
Page 311
Upload Fail Count = 0 Requested Count = 1141 WEC8500# 4) Operator can check the alarm information that occurs during call. WEC8500# show voice vqm alarms brief ======================================================== VQM ActiveRfactor/ActivePktLoss/ActivePktDly/ActiveMos = 1/1/1/1 VQM QualityThresh/LossThresh/DelayThresh/MOSThresh = 50/50/195/35 ALARMS REPORTED : Src Call Id = f03c77b50564418855587192e12b889d Dst Call Id = ca371fce-6e10-401a-9a4e-dd53678804c6@ug1.scm.com Session = 0...
WEC8500/8050 Operation Manual Version 5.2 7.13 Multicast Stream Admission Control The multicast stream admission control is provided to protect the currently running multicast streams from new streams that flow into the wireless LAN. When the maximum allowed usage of streams or channels per radio is reached, the APC does not allow any additional streams.
WEC8500/8050 Operation Manual Version 5.2 4) Set the maximum allowed usage of channels. max-chan-util [VALUE] Parameter Description VALUE Maximum allowed usage of channels 5) Configure the number of marginal streams with consideration for handover. reserved-ho-streams [VALUE] Parameter Description...
Page 314
WEC8500/8050 Operation Manual Version 5.2 After configuring the items below in the Multicast Stream Admission Control, click the <Apply> button. ADMISSION CONTROL: Configure the CAC function METHOD: Select the method of admission control MAX STREAMS: Maximum allowed number of streams (range: 1-20) ...
The basic steps for configuring a RADIUS server are as follows: Configuration using CLI 1) Go to configure security radius configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# security WEC8500/configure/wlan 1/security# radius 1 WEC8500/configure/security/radius 1# Samsung Electronics America page 315 of 533...
Page 316
WEC8500/configure/security/radius 1# serverIp [IP_ADDRESS] Parameter Description IP_ADDRESS The IP address of a RADIUS server 3) Configure the key of a RADIUS server. WEC8500/configure/security/radius 1# secret [KEY_TYPE] [KEY_STRING] Parameter Description KEY_TYPE RADIUS server key input format - ASCII: ASCII character string...
The MAC authentication of a RADIUS server is configured as follows: Configuration using CLI 1) Go to configure security radius configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# security WEC8500/configure/wlan 1/security# radius 1 WEC8500/configure/security/radius 1# Samsung Electronics America page 318 of 533...
Page 319
WEC8500/8050 Operation Manual Version 5.2 2) Set the password type that will be used for the MAC authentication of the device. WEC8500/configure/security/radius 1# mac-auth-pw-type [PW_TYPE] Parameter Description PW_TYPE Password type (default value: mac) - mac: MAC address of the device. Note: it must be a string whose...
RADIUS server. To use the internal RADIUS server, operator can add, delete, or edit a user (WEC8500: maximum 2048 users, WEC8050: maximum 512 users). Configuration using CLI To configure a local network user related function, enter into the ‘radiuscm’ of configure mode by executing the following command.
Page 321
WEC8500/8050 Operation Manual Version 5.2 Parameter Description - Korean is not allowed. - Special characters ‘, *, ?, \, ; cannot be used. department Division information - Character varying (1-63) - OPTIONAL - Korean is not allowed. - Special characters ‘, *, ?, \, ; cannot be used.
Page 322
WEC8500/8050 Operation Manual Version 5.2 [Importing User] To import the Local Net Users list file, execute the following command. Import-local-userdb {filename} Parameter Description Filename File to import - CSV file format - Filename (1-512) [Exporting User] To export the Local Net Users list file, execute the following command.
Page 323
WEC8500/8050 Operation Manual Version 5.2 To add a user, click the <Add> button. 1) Enter an item according to each parameter description, and click the <Apply> button. ID: ID of a user to add PASSWORD: User’s initial password ...
WEC8500/8050 Operation Manual Version 5.2 Unauthorized AP/Terminal Detection and Blocking As the security function, the W-EP wireless LAN device provides the detection service for an unauthorized AP using the Wireless Intrusion Detection System (WIDS)/WES function. This function detects any AP that is illegally installed without an administrator’s approval and also any wireless terminals connected to the AP.
WEC8500/8050 Operation Manual Version 5.2 Detection The W-EP wireless LAN system detects all the packets in a wireless LAN network, classifies unauthorized APs and wireless terminals, and creates related alarms and logs. The detected unauthorized APs are classified as follows according to the configured classification policy.
WEC8500/8050 Operation Manual Version 5.2 Parameter Description SSID_NAME SSID that is used when the SSID_TYPE is entered as user-configured-ssid 3) To check the configured information, use the ‘show wids device rule managed’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Wireless Intrusion>...
Page 327
WEC8500/8050 Operation Manual Version 5.2 8.2.1.2 Configuring the unmanaged AP classification policy To configure the unmanaged type unauthorized AP classification policy, execute the command as follows: Configuration using CLI 1) Go to configure wi device configuration mode of CLI.
WEC8500/8050 Operation Manual Version 5.2 3) To check the configured information, use the ‘show wids device rule unmanaged’ command. Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Wireless Intrusion> <Policy> <User Defined Rule> menu in the sub-menus. And then, select <Unmanaged>...
Page 329
WEC8500/8050 Operation Manual Version 5.2 8.2.1.3 Manual configuration (Move) A user can change the classification of an unauthorized AP that is detected by the WI or that is classified according to the rule configured by a user. Configuration using CLI 1) Go to configure ...
WEC8500/8050 Operation Manual Version 5.2 1) In the AP list screen, go to the detail view screen by clicking a MAC address. Figure 158. List Window to Manually Change Classification 2) In the AP detail screen, change the classification and click Apply, then the configuration is changed.
WEC8500/8050 Operation Manual Version 5.2 8.2.1.4 Manual configuration (Remove) A user can manually change the status of an unauthorized AP to ‘Removed’, that is detected by the WIDS or that is classified according to the rule configured by a user.
WEC8500/8050 Operation Manual Version 5.2 2) If you change the setting of REMOVE MANUALLY to ‘On’ in the AP detail screen and click Apply, the AP status is changed to ‘Removed’. Figure 161. Manual Remove Change Window in AP Detail Screen 8.2.1.5...
WEC8500/8050 Operation Manual Version 5.2 The description of OPTION parameter is as follows: Parameter Description ap-blacklist-check Allocates Rogue ID = 101 by checking a rogue included in the black list. managed_ssid_invalid_security Allocates Rogue ID = 102 for an AP that uses a managed SSID and its managed client is in the association status.
Page 334
WEC8500/8050 Operation Manual Version 5.2 8.2.1.6 Unauthorized client detection option Operator can enable or disable the client detection option pre-defined in the system. Configuration using CLI 1) Go to configure wi device client configuration mode. WEC8500# configure terminal...
WEC8500/8050 Operation Manual Version 5.2 3) To check the changed configuration, use the following command. show wi device client current-config Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Wireless Intrusion> <Policy> <Static Rule> menu in the sub-menus. And then, operator can change the setting by selecting <Station>...
WEC8500/8050 Operation Manual Version 5.2 Parameter Description CHANNEL Authorized channel number (e.g. add 2, 3, 4) 4) To check the changed configuration, execute the following command. show wi current-config Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Wireless Intrusion>...
Page 337
WEC8500/8050 Operation Manual Version 5.2 2) Configure the AP black-list. ap-blacklist [MAC] Parameter Description MAC address that will be used as AP black-list 3) Configure the station black-list. client-black-list [MAC] Parameter Description MAC address that will be used as a black-list of the station 4) Configure the Managed Organizationally Unique Identifier (OUI).
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Wireless Intrusion> <Classification> menu in the sub-menus. And then, operator can configure and search by using the upper tab in the screen.
WEC8500/8050 Operation Manual Version 5.2 3) In the [Station Blacklist] tab, operator can add a station blacklist by entering a MAC and click Add. Operator can also delete it by using Delete. Figure 167. Station blacklist Search/Configuration Window 4) In the [Managed Station] tab, operator can search Managed Station.
WEC8500/8050 Operation Manual Version 5.2 5) In the [Managed OUI] tab, operator can add a Managed OUI by entering an OUI and click Add. Operator can also delete it by using Delete. 6) In the [Managed SSID] tab, you can check the SSID that the WLAN is using.
WEC8500/8050 Operation Manual Version 5.2 7) If you click Add in the [Managed/Neighbor AP] tab, operator can go to the Managed/ Neighbor AP list addition screen and can add a Managed/Neighbor AP list. Operator can also delete it by using Delete.
WEC8500/8050 Operation Manual Version 5.2 2) Configure a threshold. allowed-limit [OPTION] [COUNT] Parameter Description OPTION - 80211-auth-req: Authentication requests threshold per second - 80211-probe-req: Probe requests threshold per second - 80211-deauth-req: De-authentication requests threshold per second - 80211-assoc-fail: Association failures threshold per second - 80211-auth-fail: Authentication failures threshold per second - 8021x-auth-fail: 802.1x authentication failures threshold per WIDS interval...
1) Go to configure wlan configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# wlan 1 2) Disable the WLAN. WEC8500/configure/wlan 1# no enable 3) Configure the WEB policy (default: disabled). WEC8500/configure/wlan 1/security/layer3# web-policy 4) Enable the WEB authentication (default: disabled) WEC8500/configure/wlan 1/security/layer3# web-policy authentication 5) Configure a guest flag (default: disabled).
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. In the WLANs screen, select WLAN ID and enable the <GUEST SERVICE> option.
Page 345
WEC8500/8050 Operation Manual Version 5.2 [Deleting User] To add a guest user, execute the command as follows: security captive-portal guest delete [ID] Parameter Description User ID [Auth Type Configuration] To select the authentication method for a guest service, execute the command as follows: ...
Page 346
WEC8500/8050 Operation Manual Version 5.2 [Web Authentication Method Configuration] To configure the web authentication method used for guest authentication, execute the command as follows: security captive-portal web-auth web-type [FLAG] security captive-portal web-auth external-url [URL] Parameter Description FLAG Web Authentication Method - internal: Uses the internal authentication page.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security> <CaptivePortal> <Guest Users> menu in the sub-menus. Figure 175. Guest User Configuration Window Operator can check and delete a guest created in the <Guest Users> menu.
WEC8500/8050 Operation Manual Version 5.2 In the <CaptivePortal> <Web Authentication> menu, operator can select web authentication method. Operator can also configure Redirect as the operation after authentication. Figure 178. Web Auth Configuration Window Samsung Electronics America page 348 of 533...
1) Go to configure wlan configuration mode of CLI. WEC8500# configure terminal WEC8500/configure# wlan 1 2) Disable the WLAN. WEC8500/configure/wlan 1# no enable 3) Configure the WEB policy (default: disabled). WEC8500/configure/wlan 1/security/layer3# web-policy 4) Configure the Pass through function (default: disabled).
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <WLANs> menu in the sub-menus. Select a WLAN ID in the WLANs screen and go to the <L3> of <Security> tab. Enable <WEB POLICY> and select Web PassThrough.
1) Go to configure mode of CLI. WEC8500# configure terminal 2) Create an access-list. WEC8500/configure# access-list fw fw4 deny tcp any any eq 23 3) Configure a firewall to the interface using an access-list. WEC8500/configure# interface vlan1.10 WEC8500/configure/interface vlan1.10# ip access-group fw forward fw4 WEC8500/configure/interface vlan1.10# exit...
WEC8500/8050 Operation Manual Version 5.2 In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security> <Firewall> <Interface> menu in the sub-menus. You can configure an interface for which a firewall will be applied by clicking the <Add>...
WEC8500/configure/interface vlan1.30# ip nat inside WEC8500/configure/interface vlan1.30#exit 5) Add the NAT rule by using access-list and pool. WEC8500/configure# ip nat outside source list fw1 pool pool1 [SNAT Configuration using Static IP] To add SNAT using a static IP, execute the command as follows: 1) Go to configure mode of CLI.
Page 355
WEC8500/configure/interface vlan1.30#ip nat outside WEC8500/configure/interface vlan1.30#exit 4) Add the NAT rule by using access-list and pool. WEC8500/configure# ip nat outside destination list fw6 pool pool2 [DNAT Configuration using Static IP] To add DNAT using a static IP, execute the command as follows: 1) Go to configure mode of CLI.
WEC8500/8050 Operation Manual Version 5.2 3) Configure a NAT rule using a static IP (A port can be also specified for DNAT). WEC8500/configure# ip nat outside destination static tcp 10.10.10.1 4300 30.30.30.2 23 [Checking NAT Configuration] To check the created NAT, use the following command.
2) Creates a MAC filter list. WEC8500/configure/security# mac-filter [ID] Parameter Description MAC filter list table ID (range: 1-20) 3) Configure the filtering policy. WEC8500/configure/security/mac-filter 1# policy [POLICY] Parameter Description POLICY Table policy of MAC filtering list 4) Configure a MAC entry.
MAC FILTER ID (range: 1-20) 6) You can check the configured information below. show security mac-filter summary WEC8500# show security mac-filter detail Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <Security>...
WEC8500/8050 Operation Manual Version 5.2 2) Configure the policy in the Edit configuration screen by selecting the index of MAC filter list. Figure 187. MAC entry configuration(2) 3) Select a WLAN for which the MAC filter will be applied. Check a MAC FILTER ID to apply in the Security >...
WEC8500# configure terminal WEC8500/configure# security WEC8500/configure/security# tacacs 1 WEC8500/configure/security/tacacs 1# 2) Configure the IP address of the TACACS+ server. WEC8500/configure/security/tacacs 1# server-ip [IP_ADDRESS] Parameter Description IP_ADDRESS IP address of the TACACS+ server 3) Set the public key of the TACACS+ server.
Page 361
(range: 1-65,535, default value: 49) 5) Configure the items related to retransmissions in TACACS+ communications. You can use default values without changing configuration. WEC8500/configure/security/tacacs 1# retransmit-interval [RETRY_INTERVAL] WEC8500/configure/security/tacacs 1# retransmit-count [FO_RETRY_COUNT] Parameter Description RETRY_INTERVAL Retransmission interval for a TACACS+ message...
WEC8500/8050 Operation Manual Version 5.2 9) You can view configuration information by using the ‘show security tacacs server config’ and ‘show security tacacs server detail [SERVER ID]’ commands. Configuration using Web UI In the menu bar of <WEC Main Window>, select <Configuration>, and then select <Security>...
Configuration using CLI 1) Go to configure mode of CLI. WEC8500# configure terminal WEC8500/configure# 2) Configure the type of operator account authentication. WEC8500/configure# mgmt-user auth-type [AUTH_TYPE] Parameter Description AUTH_TYPE Authentication type of the operator account (default value: local) - local: Authentication is performed using the database stored inside.
WEC8500/8050 Operation Manual Version 5.2 CHAPTER 9. IP Application In this chapter, the IP application functions available in the APC and each configuration method are described. 9.1 DNS The DNS is a network service that interprets a domain or host name into an IP address.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <DNS> menu in the sub-menus. Figure 191. DNS client You can enable or disable a DNS client using the QUERY of a DNS SERVER item.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <DNS> menu in the sub-menus. Figure 192. DNS proxy The DNS Relay item supports DNS Proxy configuration. In the SERVICE, you can enable or disable a DNS proxy and configure the cache size of the DNS proxy in the CACHING SIZE.
Page 367
WEC8500/8050 Operation Manual Version 5.2 9.2 NTP The Network Time Protocol (NTP) is a protocol used to receive time from a configured server and synchronize the local time. The APC can operate as a NTP server and a client. If you configure the APC as a NTP client, it receives the Coordinated Universal Time (UTC) information from the configured NTP server and synchronizes the local time.
Page 368
WEC8500/8050 Operation Manual Version 5.2 Parameter Description INDEX Server index (range: 1-5) Configure the version of a server that a NTP client will refer to. (Use a default value 1 if it is not configured.) ntp client server-addr hostname <WORD> version [1-4]: Enable ...
WEC8500/8050 Operation Manual Version 5.2 [NTP Server Configuration] The NTP server configuration is as follows: 1) Go to configure mode of CLI. WEC8500# configure terminal 2) Configure a NTP server. ntp server enable: Configures a NTP server. no ntp server enable: Disables a NTP server.
WEC8500/8050 Operation Manual Version 5.2 9.3 FTP/sFTP The FTP is a network service for file transmission. The APC support the client and server function for FTP and sFTP (Secure FTP). Configuration using CLI [SFTP Server Configuration] The secure FTP server configuration is as follows: 1) Go to configure mode of CLI.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI To configure the FTP/SFTP server configuration, in the menu bar of <WEC Main window>, select <Administrator> and then select the <FTP-SFTP> menu in the sub-menus. Figure 194. FTP/SFTP server configuration The FTP and SFTP can be configured using the Enable/Disable radio box.
WEC8500/8050 Operation Manual Version 5.2 9.4 Telnet/SSH The telnet or Secure Shell (SSH) is an Internet protocol that helps login to another computer in a network or connects to a virtual remote system. Using telnet or SSH, you can connect to another computer while staying at a current computer.
WEC8500/8050 Operation Manual Version 5.2 [Checking Server Configuration Status] To check the status of telnet or ssh server, enter the following command. You can retrieve the configured port number as well as server status. show ssh-server: Retrieves the status of SSH server ...
WEC8500/8050 Operation Manual Version 5.2 9.5 Utilities The APC provides the functions such as ping, traceroute, or tcpdump to check a network and its problems. [ping] Used to check network connection status. ping [IP_ADDRESS] [traceroute] Used to check a route path.
WEC8500/8050 Operation Manual Version 5.2 CHAPTER 10. System Management In this chapter, the various functions used by an operator to manage the system and troubleshooting method are described. In addition, the configurations required for system operation such as system configuration management, resource management, alarm management, and package management, etc.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Administrator> and then select the <SNMP> <Community> menu in the sub-menus. When you click the <Add> button in the Community window, the community creation window is displayed. When you enter a configuration value and click the <Apply>...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Administrator> and then select the <SNMP> <Trap Receiver> menu in the sub-menus. When you click the <Add> button in the Trap Receiver window, the trap creation window is displayed.
By using the ‘show system info’ command, you can check the system configuration information of the APC system such as version information, memory information, disk information, temperature sensor and fan status, etc. The execution results of the command in WEC8500 are as follows: WEC8500/configure# show system info -----------------------------------------------------...
Page 380
WEC8500/8050 Operation Manual Version 5.2 The execution results of the command in WEC8050 are as follows: WEC8050# show system info ----------------------------------------------------- Item System Info ----------------------------------------------------- System Info : model type WEC8050 system description Samsung AP Controller board version cpld version...
Page 381
For WEC8050: Parameter Description Fan [0]~[1] Fan operation status (OK, NOK) [Power Supply Status] The WEC8500 has dual detachable power module as shown below. Parameter Description Power Supply [0]~[1] Whether a power module is equipped (Equipped, Not Equipped) Status Power module operation status (OK, NOK) The WEC8050 has only one power module as shown below.
In the menu bar of <WEC Main window>, select <Monitor> and then select the <Summary> menu in the sub-menus. It provides a wide range of information, status retrieving event and alarm retrieving function of the WEC8500 system. Figure 198. System information...
Page 383
WEC8500/8050 Operation Manual Version 5.2 It provides various information, status retrieving event and alarm retrieving function of the WEC8050 system. Samsung Electronics America page 383 of 533...
Use the ‘reboot in HH:MM:SS’ command to reserve system reboot. Once the reservation is completed, the system is rebooted after a specified time (HH:MM:SS). WEC8500# reboot in 12:00:00 Do you want to save the configuration? (y/n): y Do you want to restart the system? (y/n): y Notice: The system WILL reboot in 12:00:00.
Retrieves system temperature (°C). The result of system status retrieval using each command is as follows: [CPU Load] The retrieving CLI execution result of WEC8500 is as follows: WEC8500# show system cpu Average CPU usage (%) control plane : 3.84...
Page 387
: 13520032 KBytes Used Disk 4338296 KBytes Free Disk 9181736 KBytes [Fan RPM Level] The retrieving CLI execution result of WEC8500 is as follows: WEC8500# show system fan FAN ID rpm Level(0-3) ------- -------------- FAN[0] 1 level FAN[1] 1 level...
Page 388
WEC8500/8050 Operation Manual Version 5.2 [System Temperature (°C)] The retrieving CLI execution result of WEC8500 is as follows: WEC8500# show system temp Sensor Location Temperature --------------- ----------- CPU sensor 1 CPU sensor 2 Board The retrieving CLI execution result of WEC8050 is as follows:...
WEC8500/8050 Operation Manual Version 5.2 10.3.2 Retrieving and Configuring Threshold If each resource of the system exceeds its configured threshold, there occurs an alarm. The APC helps an operator check and configure each threshold. Configuration using CLI To check each threshold, use the below command.
WEC8500/8050 Operation Manual Version 5.2 10.4 Managing Alarm and Event The system alarms and events are saved into a system log and transmitted to an external server according to the filtering policy. An alarm is managed in terms of occurrence and release and an event is managed in the report format.
2012-12-17 09:56:13 MAJ APC xe2 1301 NET Link dn AdminStatus[up] OperStatus[down] … To selectively retrieve a group or level, execute the command as follows: WEC8500# show alarm list group network 1 network 2012-12-17 09:56:13 MAJ APC ge8 1301 NET Link dn AdminStatus[up] OperStatus[down]...
[Event History] You can retrieve event information using the following command. WEC8500# show event 1 system 2012-08-31 13:59:46 NOT APC MGMT User Login ID=samsung, IP=192.168.0.91 2 system 2012-08-31 13:48:33 NOT SWM:system Boot Complete - … An event is managed per group and you can retrieve it selectively using the following command.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Monitor> and then select the <Summary> menu in the sub-menus. It provides status retrieving event and alarm retrieving function. Figure 203. History...
1) Go to configure mode of CLI. WEC8500# configure terminal 2) Configure group information. WEC8500/configure# alarm group system 3) Configure level information. WEC8500/configure# alarm level major 4) To check the configured alarm filter information, use the ‘show alarm conf’ command.
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Administrator> and then select the <SNMP> <Trap Control> <Alarm Information> menu in the sub-menus. You can retrieve the configuration related to alarm filter and alarm level.
‘show stats-report conf’ command. 5) Configure so that the performance information is uploaded to the FTP server. But, because the default is the ‘start’ status, this step may be skipped. WEC8500/configure# stats-report upload start Samsung Electronics America page 396 of 533...
[INTERFACE_NAME] If the real-time information collection is suspended or initialized, you cannot check the real-time information of the interface. WEC8500/configure# show stats-report current-stats ge3 Error: This interface was not configured to gather statistics. Samsung Electronics America page 397 of 533...
WEC8500/8050 Operation Manual Version 5.2 10.6 Managing License Key The Samsung Electronics Common License Method (SLM) is applied to Version 1.5 or newer of the APC system. Therefore, SLM licensing is applied to new websites that are installed using Version 1.5 or later.
Page 399
WEC8500/8050 Operation Manual Version 5.2 Installation Only two activation keys can be installed/registered in an APC system. If two unexpired activation keys co-exist, available services are offered as shown in the following example: (Example) - Activation Key 1: AP (100 units), VQM (Disable), Firewall (Disable)
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <License> menu in the sub-menus. In the figure below, the ‘SLM License Key Status’ shows the installation and application statuses of SLM activation keys.
WEC8500/8050 Operation Manual Version 5.2 10.6.2 Managing Old License Key An old license key can differ in regard to the number of manageable APs, whether to support the VQM function, whether to support the firewall function, and the period of use of a function.
Page 402
WEC8500/8050 Operation Manual Version 5.2 Parameter Description LICENSE_KEY Issued license key IP_ADDRESS IP address PORT_NUMBER Port number login ID PASSWORD Password PATH Server path [Deleting License Key] You can delete a license key directly. no install-key [LICENSE_KEY] Parameter Description...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Configuration> and then select the <License> menu in the sub-menus. From the APC Version 1.5 and later, in respect of old license keys, the web UI does not provide input/deletion functions and shows only whether they are installed properly.
3) Configure the IP address and UDP port of a target syslog server (The default of the UDP port is ‘514’.). WEC8500/configure# syslog add 192.168.0.91 WEC8500/configure# syslog add 192.168.0.99 udpport 510 4) Configure a log level to filter. WEC8500/configure# syslog level information 5) To check the configured syslog information, use the ‘show syslog conf’...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Administrator> and then select the <Logs> <SysLog Configuration> menu in the sub-menus. It provides syslog related configuration and retrieving function. Figure 207. Syslog window...
WEC8500/8050 Operation Manual Version 5.2 10.8 Upgrade The APC provides the upgrade function and version checking function that applies a new version of package when it is distributed. 10.8.1 Checking Package Version You can check the version of a current system by using the following command.
Page 407
2) Execute the ‘show system cpu detail’ an internal error command to check the CPU status. 3) Transmit the logs above to the Samsung Technical Support. 1) Execute the ‘show process status’ command Upgrade saving the configuration-...
WEC8500/8050 Operation Manual Version 5.2 4) After system rebooting, check if the new package is applied to the system. WEC8500# show reboot cause Reboot Cause: Block: Upgrade/ Code: Package Upgrade WEC8500# show version Samsung package version information Primary (currently running) : 0.7.1.R...
WEC8500/8050 Operation Manual Version 5.2 10.9 Configuration Management The APC supports the following functions for configuration management. Saves the current configuration information. Exports/imports the current configuration information (import/export). Initializes system Configuration using CLI To save the current configuration information in the system, execute the command as...
WEC8500/8050 Operation Manual Version 5.2 Configuration using Web UI In the menu bar of <WEC Main window>, select <Administrator> and then select the <DB backup/restore> menu in the sub-menus. Figure 209. DB Backup/Restore In the DB backup/restore window, enter FILE NAME and click the <Apply> button to create the configuration information as a file or apply an external configuration information file.
WEC8500/8050 Operation Manual Version 5.2 10.10 Debug and Diagnosis 10.10.1 Process The APC can retrieve the status of an active process in the system and an error associated with each process. Retrieving the Process Status WEC8500# show processes Processes Info.
Page 412
2522. 2012-12-21 15:59:50 guestService 2294 SIGTERM(15) In addition, you can check the detail information corresponding to the ‘id’ of each error log by using the following command. WEC8500# show processes log id 15 id date name signal backtrace...
[Retrieving Summarized CDR History Information] To retrieve the entire history information for all the rebooting including rebooting due to a crash, enter the ‘show debug reboot summary’ command. show debug reboot summary WEC8500# show debug reboot summary ====================================================================== ==================================== EVENT_NAME EVENT_DESCRIPTION...
Page 414
WEC8500/8050 Operation Manual Version 5.2 If no parameter is entered, the most recent reboot information is retrieved. WEC8500# show debug reboot info ###################################################################### [REBOOT_SUMMARY]====================================================== : 0001 EVENT NAME : DIE EVENT DESC : DIE_VAL[1] - Unhandled kernel unaligned access REBOOT TIME...
Page 415
WEC8500/8050 Operation Manual Version 5.2 10.10.2.2 Retrieving Core Dump Information Use the ‘show debug coredump summary’ command to retrieve the status of core dump. WEC8500# show debug coredump summary CORE_DUMP enable DUMP_QUOTA 1024 (MB) CORE_SIZE 204800 (KB) POLL_PERIOD 60 (sec)
WEC8500/8050 Operation Manual Version 5.2 10.11 File Management The APC provides the file management functions of copying, moving, or retrieving a file and also file download and upload. In addition, it checks the integrity of a package file and provides version retrieving method.
WEC8500/8050 Operation Manual Version 5.2 To change a directory, use the ‘cd [TARGET_DIR]’ command. WEC8500/file# cd etc WEC8500/file# pwd disk:/etc Parameter Description TARGET_DIR Name of a directory to change 10.11.2 Retrieving Directory List To retrieve a file or directory in a specific directory, use the ‘ls’ command. If you enter only ‘ls’, all the contents in the current directory are displayed.
To copy a file, use the ‘copy [SRC_FILENAME] [DES_FILENAME]’ command. The below command copies the ‘test’ file into ‘disk:/test2’. WEC8500/file# copy test disk:/test2 To delete a file, use the ‘remove [FILENAME]’ command. If you enter the below command and enter ‘y’, the ‘test2’ file is deleted.
To download a file, use the ‘download’ command. An example of downloading the ‘test’ file from ‘192.168.1.1’ to ‘disk:/test’ is shown below. WEC8500/file# download guest guest 192.168.1.1 test disk:/test To upload a file, use the ‘upload’ command. An example of uploading the ‘disk:/uploadtest’ file to ‘192.168.1.1’ is shown below.
Page 420
WEC8500/8050 Operation Manual Version 5.2 Retrieving the information of a package file A package file includes the information such as version information, model information, package build information, etc. To check the content of a package file, use the ‘version’ command.
Version 5.2 10.11.7 Retrieving Storage Media The WEC8500 supports a disk and USB memory as a storage media. And the WEC8050 supports only a disk as a storage media. Both current directory-based relative path and absolute path are all supported during command execution and the path of each device is shown in the below table.
WEC8500/8050 Operation Manual Version 5.2 10.11.8 Managing File in Web UI In the menu bar of <WEC Main window>, select < Administration > and then select the <File Management> <APC-Local PC> menu in the sub-menus. Path selection menu Figure 210. File management window...
Page 423
WEC8500/8050 Operation Manual Version 5.2 Deleting a file After selecting the checkbox of a file to delete, click the <Delete> button. Changing a filename After selecting the checkbox of a file to change its name, click the <Rename> button. Then a popup window is displayed. In the popup window, enter a file name to change.
Page 446
|-- in |-- out |-- host |-- area |-- max-concurrent-dd |-- maximum-area |-- neighbor |-- cost |-- poll-interval |-- priority |-- network |-- area |-- ospf |-- abr-type |-- router-id |-- overflow |-- database Samsung Electronics America page 446 of 533...
Page 447
|-- stationtracking |-- station |-- on |-- off |-- fqm-mode |-- access-list |-- class-map |-- match |-- access-group |-- class |-- cos |-- dst |-- ip |-- dscp |-- precedence |-- tos |-- protocol Samsung Electronics America page 447 of 533...
Page 451
|-- station-mac |-- enable-station-mac |-- ap-mac |-- enable-ap-mac |-- wlan-radio-service |-- sta-idle-timeout |-- wmm-mode |-- dtim |-- preferred-calls |-- add |-- del |-- locationtrack |-- autotrace |-- algorithm |-- enable |-- ap |-- station Samsung Electronics America page 451 of 533...
Page 452
|-- threshold |-- upload |-- enable |-- server |-- interval |-- mode |-- user-login |-- target-directory |-- file-size |-- immediate-upload |-- filter |-- prefix |-- router-id |-- route-map |-- match |-- interface |-- ip Samsung Electronics America page 452 of 533...
Page 453
ANNEX A. CLI Command Structure |-- metric |-- route-type |-- tag |-- set |-- dampening |-- ip |-- metric |-- metric-type |-- tag Samsung Electronics America page 453 of 533...
ANNEX B. Open Source Announcement (WEC8500/WEC8050) ANNEX B. Open Source Announcement (WEC8500/WEC8050) Some software components of this product incorporate source code covered under the GNU General Public License (GPL), the GNU Lesser General Public License (LGPL) and BSD License etc.
Page 476
ANNEX B. Open Source Announcement (WEC8500/WEC8050) Open Source Software License libssh2 BSD License Net SNMP-net-snmp BSD License OpenSSH BSD License Pure-FTPd BSD License Telnet BSD License ISC DHCP DHCP License Free Radius GPL 2.0 Dproxy-Caching DNS Proxy GPL 2.0 IP Utils GPL 2.0...
Page 477
ANNEX B. Open Source Announcement (WEC8500/WEC8050) Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. “License” shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document.
Page 478
ANNEX B. Open Source Announcement (WEC8500/WEC8050) For the purposes of this definition, “submitted” means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue...
Page 479
ANNEX B. Open Source Announcement (WEC8500/WEC8050) (d) If the Work includes a “NOTICE” text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works;...
Page 480
ANNEX B. Open Source Announcement (WEC8500/WEC8050) 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any...
Page 481
ANNEX B. Open Source Announcement (WEC8500/WEC8050) BSD 2.0 License Copyright(c) <YEAR>, <OWNER> All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
Page 482
ANNEX B. Open Source Announcement (WEC8500/WEC8050) DHCP License Copyright(c) 2004 by Internet Systems Consortium, Inc. (“ISC”) Copyright(c) 1996-2003 by Internet Software Consortium Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
Page 483
ANNEX B. Open Source Announcement (WEC8500/WEC8050) To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it.
Page 484
ANNEX B. Open Source Announcement (WEC8500/WEC8050) 1) You may copy and distribute verbatim copies of the Program’s source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty;...
Page 485
ANNEX B. Open Source Announcement (WEC8500/WEC8050) b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange;...
Page 486
ANNEX B. Open Source Announcement (WEC8500/WEC8050) 7) If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License.
Page 487
ANNEX B. Open Source Announcement (WEC8500/WEC8050) NO WARRANTY 11) BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM “AS IS”...
Page 488
ANNEX B. Open Source Announcement (WEC8500/WEC8050) You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110- 1301 USA.
Page 489
ANNEX B. Open Source Announcement (WEC8500/WEC8050) GNU LESSER GENERAL PUBLIC LICENSE Version 2.1, February 1999 Copyright(c) 1991, 1999 Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.
Page 490
ANNEX B. Open Source Announcement (WEC8500/WEC8050) Also, if the library is modified by someone else and passed on, the recipients should know that what they have is not the original version, so that the original author’s reputation will not be affected by problems that might be introduced by others.
Page 491
ANNEX B. Open Source Announcement (WEC8500/WEC8050) TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0) This License Agreement applies to any software library or other program which contains a notice placed by the copyright holder or other authorized party saying it may be distributed under the terms of this Lesser General Public License (also called “this License”).
Page 492
ANNEX B. Open Source Announcement (WEC8500/WEC8050) d) If a facility in the modified Library refers to a function or a table of data to be supplied by an application program that uses the facility, other than as an argument passed when the facility is invoked, then you must make a good faith...
Page 493
ANNEX B. Open Source Announcement (WEC8500/WEC8050) 5) A program that contains no derivative of any portion of the Library, but is designed to work with the Library by being compiled or linked with it, is called a “work that uses the Library”.
Page 494
ANNEX B. Open Source Announcement (WEC8500/WEC8050) b) Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (1) uses at run time a copy of the library already present on the user’s computer system, rather than copying library functions into...
Page 495
ANNEX B. Open Source Announcement (WEC8500/WEC8050) 9) You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Library or its derivative works. These actions are prohibited by law if you do not accept this License.
Page 496
ANNEX B. Open Source Announcement (WEC8500/WEC8050) 13) The Free Software Foundation may publish revised and/or new versions of the Lesser General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.
Page 497
ANNEX B. Open Source Announcement (WEC8500/WEC8050) How to Apply These Terms to Your New Libraries If you develop a new library, and you want it to be of the greatest possible use to the public, we recommend making it free software that everyone can redistribute and change. You can do so by permitting redistribution under these terms (or, alternatively, under the terms of the ordinary General Public License).
Page 498
ANNEX B. Open Source Announcement (WEC8500/WEC8050) libsmi license Copyright(c) 1999-2002 Frank Strauss, Technical University of Braunschweig. This software is copyrighted by Frank Strauss, the Technical University of Braunschweig, and other parties. The following terms apply to all files associated with the software unless explicitly disclaimed in individual files.
Page 499
ANNEX B. Open Source Announcement (WEC8500/WEC8050) libxml2 License Except where otherwise noted in the source code (e.g. the files hash.c, list.c and the trio files, which are covered by a similar licence but with different Copyright notices) all the files are: Copyright(c) 1998-2003 Daniel Veillard.
Page 500
ANNEX B. Open Source Announcement (WEC8500/WEC8050) MIT v2 with Ad Clause License Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge,...
Page 501
ANNEX B. Open Source Announcement (WEC8500/WEC8050) LICENSE ISSUES The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org.
Page 502
ANNEX B. Open Source Announcement (WEC8500/WEC8050) Original SSLeay License Copyright(c) 1995-1998 Eric Young (eay@cryptsoft.com) All rights reserved. This package is an SSL implementation written by Eric Young (eay@cryptsoft.com). The implementation was written so as to conform with Netscapes SSL. This library is free for commercial and non-commercial use as long as the following conditions are adheared to.
Page 503
ANNEX B. Open Source Announcement (WEC8500/WEC8050) The license and distribution terms for any publically available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public Licence.] The zlib/libpng License Copyright(c) <year>...
Page 504
Below is the list of components covered under GNU General Public License, the GNU Lesser General Public License and BSD License etc. Open Source Software License hostap-ct BSD License wpa_supplicant BSD License hostapd BSD License The tcpdump project BSD License Samsung Electronics America page 504 of 533...
Page 505
Sys V Init GPL 2.0 GNU Term Cap GPL 2.0 Util Linux GPL 2.0 wireless-tools GPL 2.0 dhcpd GPL 2.0 Linux Kernel GPL 2.0 GNU Wget GPL 2.0 wput GPL 2.0 Dnsmasq GPL 2.0 Samsung Electronics America page 505 of 533...
Page 506
GNU sed GPL 2.0 Iperf Iperf License Atheros-based WiFi Hardware Abstraction Layer Kaffe ISC License libnl LGPL 2.1 LZMA SDK LGPL 2.1 OpenSSL OpenSSL Combined License Vim Charityware License v 5.3 zlib zlib License Samsung Electronics America page 506 of 533...
Page 507
ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. Samsung Electronics America page 507 of 533...
Page 508
(3) of the GNU General Public License. This exception does not invalidate any other reasons why a work based on this file might be covered by the GNU General Public License. Samsung Electronics America page 508 of 533...
Page 509
We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone’s free use or not licensed at all. Samsung Electronics America page 509 of 533...
Page 510
Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Samsung Electronics America page 510 of 533...
Page 511
Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. Samsung Electronics America page 511 of 533...
Page 512
Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. Samsung Electronics America page 512 of 533...
Page 513
LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS Samsung Electronics America page 513 of 533...
Page 514
Gnomovision version 69, Copyright(c) year name of author Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type ‘show w’. This is free software, and you are welcome to redistribute it under certain conditions; type ‘show c’ for details. Samsung Electronics America page 514 of 533...
Page 515
CONTIBUTORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Samsung Electronics America page 515 of 533...
Page 516
Also, if the library is modified by someone else and passed on, the recipients should know that what they have is not the original version, so that the original author’s reputation will not be affected by problems that might be introduced by others. Samsung Electronics America page 516 of 533...
Page 517
Pay close attention to the difference between a “work based on the library” and a “work that uses the library”. The former contains code derived from the library, whereas the latter must be combined with the library in order to run. Samsung Electronics America page 517 of 533...
Page 518
You must cause the whole of the work to be licensed at no charge to all third parties under the terms of this License. Samsung Electronics America page 518 of 533...
Page 519
Samsung Electronics America page 519 of 533...
Page 520
Library. (It is understood that the user who changes the contents of definitions files in the Library will not necessarily be able to recompile the application to use the modified definitions.) Samsung Electronics America page 520 of 533...
Page 521
License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. Samsung Electronics America page 521 of 533...
Page 522
Free Software Foundation. If the Library does not specify a license version number, you may choose any version ever published by the Free Software Foundation. Samsung Electronics America page 522 of 533...
Page 523
LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS Samsung Electronics America page 523 of 533...
Page 524
Yoyodyne, Inc., hereby disclaims all copyright interest in the library ‘Frob’ (a library for tweaking knobs) written by James Random Hacker. Signature of Ty Coon, 1 April 1990 Ty Coon, President of Vice That’s all there is to it! Samsung Electronics America page 524 of 533...
Page 525
OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com). Samsung Electronics America page 525 of 533...
Page 526
PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; Samsung Electronics America page 526 of 533...
Page 527
Vim. When you have a modified Vim which includes changes as mentioned under c), you can distribute it without the source code for the changes if the following three conditions are met: Samsung Electronics America page 527 of 533...
Page 528
2. Altered source versions must be plainly marked as such, and must not be misrepresented as being the original software. 3. This notice may not be removed or altered from any source distribution. Samsung Electronics America page 528 of 533...
Page 529
WEC8500/8050 Operation Manual Version 5.2 ABBREVIATION Access Control List Advanced Encryption Standard Application Layer Gateway Access Point Access Point Controller BPDU Bridge Protocol Data Unit Call Admission Control CAPWAP Control And Provisioning Wireless Access Point Counter mode encryption with CBC-MAC...
Page 530
WEC8500/8050 Operation Manual Version 5.2 Extensible Authentication Protocol EAPOL EAP over LANs EDCA Enhanced Distributed Channel Access Fast Fourier Transform FIFO First-In-First-Out File Transfer Protocol GARP Gratuitous Address Resolution Protocol Giga Bit Ethernet Guard Interval Handover IGMP Internet Group Management Protocol...
Page 531
WEC8500/8050 Operation Manual Version 5.2 Opportunistic Key Caching OSPF Open Shortest Path First Organizationally Unique Identifier Physical layer PIM-SM Protocol Independent Multicast-Sparse Mode Power over Ethernet Pairwise Master Key Pre-Shared Key Quality of Service RADIUS Remote Authentication Dial-In User Service...
Page 532
WEC8500/8050 Operation Manual Version 5.2 Virtual Access Point VATS Voice-Aware Traffic Scheduling VLAN Virtual Local Area Network VoIP Voice over IP Virtual Private Network Voice Quality Monitoring VRRP Virtual Router Redundancy Protocol Wide Area Network Wireless Distribution Service Wireless Enterprise WLAN Manager...
Page 533
WEC8500/WEC8050 (APC) Operation Manual Copyright 2015 Samsung Electronics America All rights reserved. No part of this manual may be reproduced in any form or by any means-graphic, electronic or mechanical, including recording, taping, photocopying or information retrieval systems – without express written permission of the publisher of...