Zcom WS5G2 Manuale utente

Revision: 3.2.1

Hyperion Series Wireless LAN Controller User Manual

58-150008-IQN_V1.0 Page ii

TABLE OF CONTENTS

Chapter 1. Introduction ..................................................................................................................................................................................1

1.1. Manual Statement .................................................................................................................................................................................1

1.1.1. Syntax Declaration .......................................................................................................................................................................1

1.1.2. Graphical UI Declaration ............................................................................................................................................................2

1.1.3. Sign Declaration ...........................................................................................................................................................................2

1.1.4. Glossary...........................................................................................................................................................................................2

Chapter 2. Hardware Components.............................................................................................................................................................3

2.1. Package Contents ..................................................................................................................................................................................3

2.2. Physical Ports ..........................................................................................................................................................................................3

2.3. LED Indicators.........................................................................................................................................................................................4

Chapter 3. System Foundation.....................................................................................................................................................................5

3.1. System Architecture ..............................................................................................................................................................................5

3.2. Connection and Configuration ..........................................................................................................................................................6

3.3. Entrance of Web Mode Provision .....................................................................................................................................................7

3.4. System Basic............................................................................................................................................................................................8

3.4.1. Information Overview .................................................................................................................................................................8

3.4.2. Quick Setting .................................................................................................................................................................................8

Chapter 4. Network Configuration ..........................................................................................................................................................13

4.1. Port Classification ................................................................................................................................................................................13

4.2. AP Access Port ......................................................................................................................................................................................14

4.3. Management Port................................................................................................................................................................................15

4.4. VLAN Creation ......................................................................................................................................................................................16

4.5. Port VLAN ..............................................................................................................................................................................................18

4.6. VLAN Interface .....................................................................................................................................................................................19

4.7. L2GRE Tunnel ........................................................................................................................................................................................20

4.8. IPSec / VPN............................................................................................................................................................................................22

4.9. DHCP Settings ......................................................................................................................................................................................26

4.10. NAT ........................................................................................................................................................................................................28

4.11. Static Route .........................................................................................................................................................................................29

4.12. Dynamic Route...................................................................................................................................................................................30

Chapter 5. IPv6 Configuration ...................................................................................................................................................................31

5.1. DHCP Server..........................................................................................................................................................................................31

5.2. Route Advertisement..........................................................................................................................................................................32

Chapter 6. Thin AP Configuration Profiles............................................................................................................................................35

6.1. AP Grouping..........................................................................................................................................................................................35

6.2. Common Profile ...................................................................................................................................................................................37

6.3. Wireless Profile .....................................................................................................................................................................................41

6.4. VAP Profile .............................................................................................................................................................................................44

Hyperion Series Wireless LAN Controller User Manual

58-150008-IQN_V1.0 Page iii

6.5. Bandwidth Control ..............................................................................................................................................................................46

6.6. AP License ..............................................................................................................................................................................................47

6.7. AP FW Upgrade....................................................................................................................................................................................48

6.8. Optimization .........................................................................................................................................................................................48

Chapter 7. WLC Configuration ...................................................................................................................................................................53

7.1. TimeZone and Date.............................................................................................................................................................................53

7.2. Graphic Stat Platform .........................................................................................................................................................................54

7.3. Samba .....................................................................................................................................................................................................55

7.4. DPI............................................................................................................................................................................................................55

7.5. Packet Capture......................................................................................................................................................................................56

7.6. Log Server..............................................................................................................................................................................................57

7.7. Change Password.................................................................................................................................................................................57

7.8. WLC FW Upgrade ................................................................................................................................................................................58

7.9. Backup / Restore ..................................................................................................................................................................................59

Chapter 8. Authentication............................................................................................................................................................................60

8.1. OTP SMS Gateway ...............................................................................................................................................................................60

8.2. Portal Server..........................................................................................................................................................................................60

8.3. Radius Server ........................................................................................................................................................................................62

8.4. LDAP Server...........................................................................................................................................................................................64

8.5. MAC Access Control............................................................................................................................................................................66

8.6. Access Time Control............................................................................................................................................................................67

Chapter 9. Statistics ........................................................................................................................................................................................70

9.1. Thin AP List ............................................................................................................................................................................................70

9.2. Station List .............................................................................................................................................................................................70

9.3. DPI............................................................................................................................................................................................................71

9.4. IoT List.....................................................................................................................................................................................................72

9.5. Realtime Log .........................................................................................................................................................................................72

Chapter 10. Technical Specifications .......................................................................................................................................................73

Chapter 11. Appendix....................................................................................................................................................................................74

11.1. Warranty...............................................................................................................................................................................................74

11.1.1. General Warranty.....................................................................................................................................................................74

11.1.2. Warranty Conditions...............................................................................................................................................................74

11.1.3. Disclaimer...................................................................................................................................................................................74

11.2. Certifications and Compliance ......................................................................................................................................................75

11.2.1. CE Marking ................................................................................................................................................................................75

11.2.2. RoHS Compliance Statement ...............................................................................................................................................75

11.3. Declaration of Conformity ..............................................................................................................................................................75

11.4. List of Compatibility..........................................................................................................................................................................75

Hyperion Series Wireless LAN Controller User Manual

58-150008-IQN_V1.0 Page 1

Chapter 1. INTRODUCTION

Hyperion is a Wireless LAN Controller (WLC) product series which includes three models of WS5G2, WS7G2 and

WS10G2, particularly suitable for the SMB and IoT applications. This series of products is designed based on Intel Atom

platform, providing 1G and 10G Ethernet ports in the form of RJ45 and SFP+ to meet with the requirements in every

kind of applications. The Hyperion series WLC mainly faces the small scale Wi-Fi network where the deployed access

points are not exceeding 1000. In this scenario, the wireless clients could be regular user endpoints and also the IoT

sensors, such as mobile phone, notebook computer, IP-CAM, and industrial sensors and controllers. In the era of

industry 4.0, the artificial intelligence and internet of everything depending on wireless network communication will

grow up explosively, so that the Wi-Fi coverage infrastructure and even the long range Wi-Fi bridge could be possibly

expanding in a large scale. This means that the Hyperion series WLC will have much more application opportunities in

the new era.

WLC is such a product which helps customer to centralized manage and provision wireless access points in a way of

migrating the management function originally resided in each access point to WLC while the AP only remains its

fundamental wireless access and security capabilities. Hence, the WLC focuses on AP’s configuration, user

authentication, traffic forwarding, radio resource management, access control, QoS and load balancing; while the thin

AP focuses on the underlying functions defined by IEEE802.11 specifications. For a complicated Wi-Fi system, this

architecture is an ideal model that is controllable and manageable. In the Wi-Fi system with WLC, thin AP has zero

configurations initially; it is configured by downloading profiles from WLC. Thin AP and WLC are connected through

CAPWAP tunnel which is established by thin AP during its DHCP discovery process with option43 response.

In SMB and IoT applications, the capacity of the access point is usually less than 1000, and the total traffic throughput is

less than 20Gbps. Therefore, a small-sized WLC is required as the centralized controller. Hyperion series WLC based on

Intel Atom platform (such as WS5G2, WS7G2 and WS10G2) was born for these deployments.

1.1. MANUAL STATEMENT

1.1.1. SYNTAX DECLARATION

Syntax conventions in the command line:

Format Meaning

Bold Command names are represented by bold characters.

Italics Command arguments (the values following the command name) are represented

by italic characters.

[ ] Represents the optional parts in the command line.

// Represents comments without action.

| Represent the OR logic for multiple parameter options.

Hyperion Series Wireless LAN Controller User Manual

58-150008-IQN_V1.0 Page 2

1.1.2. GRAPHICAL UI DECLARATION

Buttons and interfaces involved in the web page configuration are as follows.

Format Meaning

/ The multiple level menu delimiter.

1.1.3. SIGN DECLARATION

This manual uses a variety of eye-catching signs to emphasize the importance in the configuration process.

Warning: Careful attention must be paid to the warning message next to this sign. Not heeding to this

advice could lead to improper operation and may cause injury.

Note: Attention can be paid to the message next to this sign. The information included is usually important,

very helpful, or a quick summary.

1.1.4. GLOSSARY

Term Meaning

STA (Station or Terminal) WLAN (Wireless LAN) stations such as the handsets, PCs, notebooks, or other CPE

equipment are referred to as STAs.

UE (User Endpoint) Small mobile devices such as the handsets, PCs, notebooks, or other CPE equipment

with Wi-Fi capabilities are referred to as UEs.

AP (Access Point) Base station equipment for STAs, to access the wired network, or other STAs from

the wireless network are referred to as APs.

TAP (Thin Access Point) The Access Point managed by the WLC.

WLC (Wireless LAN Controller) Edge gateway equipment between Wi-Fi APs and the core network are referred to

as WLCs. The WLC is used for access control, security, management, centralized

data forwarding, and switching.

SSID (Service Set Identifier) The SSID is used to identify a group of STAs and its associated AP. Only those STAs

and their AP, in the same SSID, can communicate with each other, something like

the concept of VLANs (Virtual LANs) in wired networks.

Captive Portal A server that pushes a web page to user endpoint for entering the user name and

password for authentication.

Radius A server that authenticates the user legitimacy with secure methods.

OTP One time password which is delivered in short message service for user

authentication.

LDAP A server that uses the Light Directory Access Protocol for user authentication.

SMS Short message service provided by mobile communication operator.

Hyperion Series Wireless LAN Controller User Manual

58-150008-IQN_V1.0 Page 3

Chapter 2. HARDWARE COMPONENTS

2.1. PACKAGE CONTENTS

Carefully remove all the items from the packing of Hyperion series WLC. The following items should be included in the

packaging:

Package Content WS5G2 WS7G2 WS10G2

Power Adapter (DC)

Power Cord (AC)

Mounting Screws (For Disk Drive)

Yes

SATA Cables (Data Cable & Power Cable)

Yes

Plastic Stand (For Stack-up)

Yes

10G SPF+ Optical Transceiver Module

LC-LC Multi-Mode Optical Fiber

Note: If any of the items, mentioned above, is not included in the packaging or are damaged in any way,

contact your reseller immediately.

2.2. PHYSICAL PORTS

The following physical ports and LED indicators are available on the WS5/7/10G2.

Front Panels

WS5G2

WS7G2

WS10G2

Rear Panels

WS5G2

WS7G2

WS10G2

The following table describes the hardware components available on the rear panel of the WLC.

WS5G2 WS7G2 WS10G2

Power Switch

1 1

DC Power Port

1 1

Hyperion Series Wireless LAN Controller User Manual

58-150008-IQN_V1.0 Page 4

WS5G2 WS7G2 WS10G2

Reset Switch

1 1

Default Switch

1 1

SFP+ Ports (10 Gbps)

- 2

RJ45 LAN Ports (1 Gbps)

Console Port (RJ45)

USB 2.0 Ports

2 2

Hardware Component Description

Power WS5/7G2: One 12V/5A DC adapter

WS10G2: One 12V/7A DC adapter

Reset Switch One

Default Switch One

SFP+ Ports The default IP address of the WLC through the VIF SFP+ ports is 192.168.3.228.

Note: All 10G SFP+ Ports in WLC support mono mode optic fiber.

RJ45 Ports

•The management port must be the first RJ45 1GbE port. The default IP address

of the WLC through the Mgmt port is 192.168.2.228.

•The WLAN port is for thin AP accessing and wireless clients’ data tunnel, which

could be a RJ45 port other than the Management Port.

Console Port The Console Port is for debug or troubleshooting by IT staff.

USB 2.0 Ports Two USB 2.0 ports, which are reserved for further applications.

2.3. LED INDICATORS

The following table describes the LED indicators available on the front panel of the WS5/7/10G2.

LED Indicator Color Behavior Description

Power Green

Solid On

The system is powered on.

Off

The system is powered off.

HDD Green

Blinking

Data transfer activity is taking place.

Off

No data transfer activity is taking place.

SFP+ LEDs

Orange

Solid On (Right)

Connection active at 1 Gbps

Blinking (Left)

Sending and receiving data

Off

No connection active or port is disabled.

RJ45 LAN LEDs

Green Solid On (Right)

Connection active at 10/100 Mbps

Orange Blinking (Left)

Sending and receiving data

Off

No connection active or port is disabled.

Hyperion Series Wireless LAN Controller User Manual

58-150008-IQN_V1.0 Page 5

Chapter 3. SYSTEM FOUNDATION

3.1. SYSTEM ARCHITECTURE

The Wi-Fi system architecture using Hyperion series WLC and Thin APs is illustrated below.

Figure 3-1 Wi-Fi System Architecture using WLC

The WLC has a southbound interface named the WLAN port. This port is the accessing port for all Thin APs connecting

to WLC；while the northbound ports based on WLC internal VLAN Interfaces (VIF) connect to the Portal / Radius for user

authentication and Internet for user services.

Two types of tunnel are established from Thin AP to WLC and will take charge of all communications:

The CAPWAP tunnel, an access stratum management tunnel, focuses on provisioning AP and all statistics

reports.

The WLTP data tunnel focuses on UE (User Endpoint) non-access stratum data transmission, including service

traffic and authentication messages.

Hyperion Series Wireless LAN Controller User Manual

58-150008-IQN_V1.0 Page 6

Both tunnels start at the thin AP.

The Thin AP has zero configurations in its initial state. During its power-on stage, it firstly discovers the WLC by DHCP

protocol and obtains up to 4 WLC IP addresses settled in DHCP Option 43, and then uses the first WLC IP address to

establish the primary CAPWAP tunnel, and the others as the redundant WLC purpose. Then, thin AP downloads the

profiles from the WLC through the CAPWAP tunnel to complete its configuration; while user clients associate to thin AP

and start authentication and data services through WLTP tunnel.

The 1’st internet service initiated by user client through WLTP data tunnel will be intercepted by WLC to check whether

it is an legal user, if not, this accessing will be redirected to the Captive Portal where the user name and password input

and then authenticated by Radius server.

3.2. CONNECTION AND CONFIGURATION

There are two configuration modes for WLC management: one is the CLI (Command Line Interface) mode which is

entered by SSH, Telnet and RS232 serial console accessing; another is the web mode which is entered by using browser

to access the management web page for provisioning.

The Web provisioning mode (HTTP/HTTPS) is a user-friendly management method and can be accessed by using any

standard Web browsing software, like Internet Explorer or Chrome. The Web interface simplifies system management

and configuration, even if the administrator is a junior engineer. The CLI mode, however, is for the advanced customer

and can be entered by SSH, Telnet, and the RS-232 console accessing. More knowledge about network communication

protocols and command instructions are required to effectively configure and manage the WLC through the CLI mode.

The following section will briefly explain how to connect WLC for its configuration and management:

•Ethernet Connection

：

Configuration host connects to the WLC Mgmt port over Ethernet cable.

•RS232 Serial Connection

：

Configuration host connects to the WLC console port over RJ45-RS232 serial cable. The

console port serial baud rate is 38400.

Ethernet

192.168.2.228/192.168.3.228

192.168.2.100/192.168.3.100

RJ45-RS232

Configuration

Host

WLC

Figure 3-2 Configuration host Connects to the WLC for Management

The following default IP addresses are preset in the WLC:

•The default management IP address of the WLC through the Mgmt port is 192.168.2.228. The host PC or

notebook must be assigned with an IP address in the same subnet, for example, 192.168.2.100.

•The default service IP address of the WLC through the VIF port is 192.168.3.228. The host PC or notebook must be

assigned with an IP address in the same subnet, for example, 192.168.3.100.

Software tools which support SSH, Telnet and Serial communications, such as SecureCRT, XShell, or PuTTY, can be

Hyperion Series Wireless LAN Controller User Manual

58-150008-IQN_V1.0 Page 7

used to configure and manage WLC in CLI mode.

The default login credentials for WLC management is as the following:

•Username: admin

•Password: password

3.3. ENTRANCE OF WEB MODE PROVISION

Compared with the CLI mode configuration, the WLC provides a more user-friendly management interface called the

Web mode provisioning that can be accessed by any standard Web browser software like Internet Explorer or Chrome

using the HTTP/HTTPS protocol.

To access the Web provisioning, entering the default IP address (192.168.2.228 accessing in the management port or

192.168.3.228 accessing in the WLAN port) in the address bar of the web browser and press the Enter key to get into

the login page, as shown below.

Figure 3-3 Web Interface (Login Page)

Enter the Username, Password and verification code, select the appropriate language in the pull-down menu, and click

the Login button to enter the Web provisioning page of the WLC.

Note: The default Username is admin and Password is password.

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Zcom Router di rete

Zcom

Zcom ZMAX-8210-E Manuale utente

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza