Home » Netgear Manuals » Hubs & Switches » Netgear WC7500 » Manual Viewer

Netgear WC7500 User Manual - Page 151

Select an ACL for a Profile in an Advanced Profile Group

Add to My Manuals
Save this manual to your list of manuals

Page 151 highlights

ProSAFE Wireless Controller 4. Click the Login button. The wireless controller's web management interface opens and displays the Summary page. 5. Select Configuration > Profile > Basic > Radio. The Edit Profile (Basic) page displays. 6. Click the tab for the radio on which the profile is configured for which you want to select a MAC ACL. 7. Click the tab for the profile for which you want to select a MAC ACL. 8. On the Edit Profile page for the selected profile, next to MAC ACL, select a local or external MAC ACL: • Local MAC ACL: a. Select the Local radio button. b. From the Local MAC ACL Group menu, select a local MAC ACL. • External MAC ACL: a. Select the External radio button. b. From the External Radius Server menu, select the external RADIUS server on which the external MAC ACL is configured. 9. Click the Apply button. The changes are saved. At initial client authentication, the wireless controller consults the external MAC ACL. While a client roams, the wireless controller uses cached authentication information. After a client disassociates from the access point and then attempts to reassociate, the wireless controller once again consults the external MAC ACL. Select an ACL for a Profile in an Advanced Profile Group MAC authentication either allows or denies network access to clients on access point that are managed through a select profile in the advanced profile group.  To select a local or external MAC ACL for a profile in an advanced profile group: 1. Configure a local MAC ACL or an external MAC ACL on an external RADIUS server. For more information about configuring a local MAC ACL, see Configure Basic Local MAC Authentication Settings on page 145 and Configure a Local MAC Authentication Group on page 148. For more information about configuring an external MAC ACL, see Guidelines for External MAC Authentication on page 145. 2. Open a web browser. In the browser's address field, type the wireless controller's IP address. By default, the IP address is 192.168.0.250. The wireless controller's login window opens. Manage Security Profiles and Profile Groups 151

Section	Page
ProSAFE Wireless Controller	1
Contents	3
1. Introduction	10
Models, Key Features, and Capabilities	11
Model WC7500	11
Model WC7600	11
Model WC7600v2	11
Model WC9500	12
Model Scalability and Feature Differences	12
Model Common Features and Capabilities	13
What Can You Do With a Wireless Controller?	14
Licenses	16
Maintenance and Support	16
2. Hardware Descriptions	17
Package Contents	18
Hardware Models WC7500 and WC7600v2	18
WC7500 and WC7600v2 Front Panel Ports and Slots	18
WC7500 and WC7600v2 Back Panel Components	20
WC7500 and WC7600v2 Product Labels	20
Hardware Models WC7600 and WC9500	21
WC7600 and WC9500 Front Panel Ports and Slots	21
WC7600 and WC9500 Back Panel Components	22
WC7600 and WC9500 Product Labels	23
LED Functions (All Models)	24
Wireless Controller System Components	25
Supported NETGEAR Access Points	26
Supported NETGEAR Antennas	30
3. System Planning and Deployment Scenarios	31
Basic and Advanced Setting Concepts	32
Profile Group Concepts	33
Basic Profile	33
Advanced Profile	33
System Planning Concepts	35
Preinstallation Planning	35
Before You Configure a Wireless Controller	35
High-Level Configuration Examples	38
Single Controller Configuration With Basic Profile Group	38
Single Controller Configuration With Advanced Profile Groups	39
Stacked Controller Configuration	40
Management VLAN and Data VLAN Strategies	41
High-Level Deployment Scenarios	43
Scenario Example 1: Network With Single VLAN	43
Scenario Example 2: Advanced Network With VLANs and SSIDs	45
Scenario Example 3: Advanced Network With Redundancy	47
4. RF Planning and Deployment	51
Application, Browser, and Port Requirements for RF Planning	52
RF Planning Overview	52
Planning Requirements	53
Recommended RF Planning Procedure for a Building	55
Manage a Building and Floors for an RF Plan	55
Add a Building and Floors	56
Add a Single Floor to a Building	58
Scale a Floor	59
Add a WiFi Coverage or WiFi Noncoverage Zone to a Floor	60
Remove a WiFi Coverage or Noncoverage Zone From a Floor	61
Add a WiFi Building Obstacle to a Floor	61
Remove a Building Obstacle From a Floor	63
Add a WiFi Obstruction Area	64
Remove a WiFi Obstruction Area	65
Change the Name, Map, or Dimensions of a Floor	65
Change the Name of a Building	66
Duplicate an Entire Building With All Floors	67
Duplicate a Single Floor	67
Remove a Single Floor	68
Remove an Entire Building With All Its Floors	69
Use the WiFi Auto Planning Advisor to Generate an RF Plan for a Floor	69
Manually Add and Manage Access Points on a Floor Map for an RF Plan	75
Manually Add and Manage Antennas on a Floor Map for an RF Plan	78
Display and Recalculate the WiFi Coverage for a Heat Map	82
Display or Change the WiFi Inventory for an RF Plan	83
Download a Report for an RF Plan	86
View the Heat Map for a Deployed Floor Plan	87
5. Installation and Configuration Overview	90
Connect Your Computer to the Wireless Controller	91
Log In to the Wireless Controller	91
Roadmap for Initial Configuration	93
Roadmap for Configuring Management of Your WiFi Network	95
Choose a Location for the Wireless Controller	97
Deploy the Wireless Controller	97
6. Configure the System and Network Settings and Register the Licenses	98
Configure the General Settings	99
Manage the Time Settings	100
Manage the IP, VLAN, and Link Aggregation Settings	101
Management VLAN Concepts	101
Untagged VLAN Concepts	102
Link Aggregation Concepts	102
Configure the IP, VLAN, and Link Aggregation Settings	103
Manage the DHCP Server	105
Add a DHCP Server	105
Change the Settings for a DHCP Server	107
Remove a DHCP Server	108
Register Your Licenses	109
Configure the License Server Settings	109
Register Your Licenses With the License Server	110
Manage Certificates	112
Configure Log, Syslog, Alarm Notification, and Email Settings	113
Configure the Event Tracing Log Settings	113
Configure the Syslog Settings	115
Configure Alarm Notification Settings	116
Configure the Email Notification Server	117
7. Manage Security Profiles and Profile Groups	119
WiFi Security Profile Concepts	120
Small WLAN Networks	120
Large WLAN Networks	121
Profile Naming Conventions	121
Considerations Before You Configure Profiles	121
Basic and Advanced Security Configuration Concepts	122
Manage Security Profiles for the Basic Profile Group	123
Configure a Profile in the Basic Profile Group	123
Change the Settings for a Profile in the Basic Profile Group	127
Remove a Profile From the Basic Profile Group	128
Manage Security Profiles for Advanced Profile Groups	128
Add an Advanced Profile Group	128
Remove an Advanced Profile Group	130
Configure a Profile in an Advanced Profile Group	130
Change the Settings for a Profile in an Advanced Profile Group	134
Remove a Profile From an Advanced Profile Group	135
Network Authentication and Data Encryption Options	136
Manage Authentication Servers and Authentication Server Groups	139
Authentication Server Concepts	139
Configure Basic Authentication Server Settings	141
Configure a RADIUS Authentication Server Group	143
Remove a RADIUS Authentication Server Group	144
Manage MAC Authentication and MAC Authentication Groups	145
Guidelines for External MAC Authentication	145
Configure Basic Local MAC Authentication Settings	145
Remove a MAC Address From a Wireless Client List	147
Import a MAC List From a File	147
Configure a Local MAC Authentication Group	148
Remove a Local MAC Authentication Group	150
Select an ACL for a Profile in the Basic Profile Group	150
Select an ACL for a Profile in an Advanced Profile Group	151
8. Discover and Manage Access Points	153
Access Point Discovery Guidelines	154
General Discovery Guidelines	154
Layer 3 Discovery Guidelines	154
Remote Access Point Discovery Guidelines	156
Discover Access Points With the Discovery Wizard	158
Discover Access Points in Factory Default State and Access Points in a Layer 2 Subnet	158
Discover Access Points Installed and Working in Standalone Mode in Different Layer 3 Networks	162
Manage the Managed AP List	166
View the Managed AP List	166
Change Access Point Information on the Managed AP List	168
Remove Access Points From the Managed AP List	171
Assign Access Points to Buildings, Floors, and Advanced Profile Groups	172
9. Configure WiFi and QoS Settings	175
Basic and Advanced WiFi and QoS Configuration Concepts	176
Configure the Radio	176
Configure the Radio for the Basic Profile Group	176
Configure the Radio for an Advanced Profile Group	177
Configure WiFi Settings	179
Configure WiFi Settings for the Basic Profile Group	179
Override Channel and Transmission Power in the Basic Profile Group	183
Configure WiFi Settings for an Advanced Profile Group	185
Override Channel and Transmission Power in an Advanced Profile Group	189
Configure Channels	191
Specify Radio Frequency Management	194
Radio Frequency Concepts	194
WLAN Healing Concepts	195
Configure Radio Frequency Management for the Basic Profile Group	195
Configure Radio Frequency Management for an Advanced Profile Group	197
Manage the Preferred Bands	199
Configure the Preferred Band for WNDAP620 Access Points in the Basic Profile Group	200
Configure the Preferred Band for WNDAP620 Access Points in an Advanced Profile Group	201
Manage Quality of Service for an Advanced Profile Group	202
Quality of Service Concepts	202
Configure Quality of Service for a Profile Group	203
Manage Load Balancing	205
Load Balancing Concepts	205
Configure Load Balancing	206
Manage Rate Limiting	207
Rate Limiting Concepts	207
Configure Rate Limiting for the Basic Profile Group	208
Configure Rate Limiting for an Advanced Profile Group	209
Manage the LED Behavior	210
Manage the LED Behavior for the Basic Profile Group	210
Manage the Behavior for an Advanced Profile Group	211
10. Manage Rogue Access Points, Guest Network Access, and Users	213
Manage Rogue Access Points	214
Rogue Access Point Concepts	214
Configure Basic Rogue Detection Settings	214
Classify Rogue Access Points	215
Import a List of Known Access Points From a File	217
Manage Guest Network Access Through Guest Portals and Captive Portals	218
Portal Concepts	218
Configure a Basic Guest Portal or Captive Portal	219
Configure an Advanced Guest Portal or Captive Portal	224
Remove a Portal	230
Manage Users, Accounts, and Passwords	230
User and Account Concepts	230
Add a Management User	231
Add a WiFi User	233
Add a Captive Portal Account	234
Add a Logo and Message on Captive Portal User Information	236
Add a Captive Portal User	238
Add Multiple Captive Portal Users Simultaneously	240
Change the Settings for a User or Account	242
Remove Users or Accounts	243
Export a List of Users or Accounts	244
11. Maintain the Wireless Controller and Access Points	245
Manage the Configuration File or Upgrade the Firmware	246
Back Up the Configuration File	246
Restore the Configuration File	247
Upgrade the Firmware	248
Reboot the Wireless Controller	251
Reset the Wireless Controller	251
Manage External Storage	252
Manage Remote Access	254
Specify Session Time-Outs	255
Save the Logs	256
Save the System Logs	256
Save and Clear the Logs for an Access Point	257
View Alerts and Events	259
View System Alerts	259
View Radio Frequency Events	260
View Load-Balancing Events	261
View Rate-Limit Events	263
View Redundancy Events	264
View Stacking Events	265
Manage Licenses	266
View Your Licenses	266
Retrieve Your Licenses	268
Reboot Access Points	269
Configure Multicast Firmware Upgrade for Access Points	270
Change the Multicast Firmware Upgrade Settings	270
Disable Multicast Firmware Upgrade	271
12. Manage Stacking and Redundancy	272
Stacking Concepts	273
Configure a Stack of Wireless Controllers	275
Remove a Wireless Controller From a Stack	279
Select Which Wireless Controller in a Stack to Configure	280
Manage Redundancy for a Single Controller	283
VRRP Redundancy Concepts	283
Configure a Single Controller With Redundancy	285
Manage a Redundancy Group With N:1 Redundancy	289
VRRP N:1 Redundancy Concepts	289
Configure a Redundancy Group With N:1 Redundancy	292
Replace a Redundant Controller	297
Remove a Redundancy Group	298
13. Monitor the WiFi Network and Its Components	300
Monitor the Network	301
View the Network Summary Page	301
View the Wireless Controllers in the Network	303
View the Access Points in the Network	305
View the Clients in the Network	310
View the Profiles in the Network	314
Monitor the Wireless Controller	316
View the Wireless Controller Summary Page	316
View Wireless Controller Usage	319
View Access Points That the Wireless Controller Manages	320
View Clients on Access Points That the Wireless Controller Manages	325
View Neighboring Clients That the Wireless Controller Detects	329
View Neighboring Access Points That the Wireless Controller Does Not Manage	331
View Security Profiles That the Wireless Controller Manages	332
View DHCP Leases That Are Provided by the Wireless Controller	334
View Captive Portal Users on Access Points That the Wireless Controller Manages	335
View the Guest Email Address Database for Access Points That the Wireless Controller Manages	337
Monitor the SSIDs on the Wireless Controller	338
Monitor Local Clients in the Network	343
Monitor Accepted Clients	343
Monitor Blacklisted Clients	347
14. Troubleshooting and Diagnostics	350
Troubleshoot Basic Functioning	351
Power LED Is Not Lit	351
Status LED Never Turns Off	351
Ethernet Port LEDs Are Not Lit	351
Troubleshoot the Web Management Interface	352
Check the Ethernet Cabling	352
Check the IP Address Configuration	352
Check the Internet Browser	353
Troubleshoot a TCP/IP Network Using the Ping Utility	353
Use the Reset Button to Restore Default Settings	354
Resolve Problems With Date and Time	354
Resolve Network Problems	355
Resolve Problems With Access Points	355
Resolve Discovery Problems	355
Resolve Connection Problems	356
Network Performance and Rogue Access Point Detection	356
Use the Diagnostic Tools on the Wireless Controller	356
Ping an Access Point	356
Trace a Route to an Access Point	357
A. Factory Default Settings, Technical Specifications, and Passwords Requirements	359
Factory Default Settings	360
Technical Specifications Models WC7500 and WC7600v2	360
Technical Specifications Models WC7600 and WC9500	361
Password Requirements	362

Match case Limit results 1 per page

Manage Security Profiles and Profile Groups

151

ProSAFE Wireless Controller

Click the

button.

The wireless controller’s web management interface opens and displays the Summary

page.

Select

Configuration > Profile > Basic > Radio

The Edit Profile (Basic) page displays.

Click the tab for the radio on which the profile is configured for which you want to select a

MAC ACL.

Click the tab for the profile for which you want to select a MAC ACL.

On the Edit Profile page for the selected profile, next to MAC ACL, select a local or external

MAC ACL:

•

Local MAC ACL

Select the

Local

radio button.

From the

Local MAC ACL Group

menu, select a local MAC ACL.

•

External MAC ACL

Select the

External

radio button.

From the

External Radius Server

menu, select the external RADIUS server on

which the external MAC ACL is configured.

Click the

Apply

button.

The changes are saved.

At initial client authentication, the wireless controller consults the external MAC ACL. While a

client roams, the wireless controller uses cached authentication information. After a client

disassociates from the access point and then attempts to reassociate, the wireless controller

once again consults the external MAC ACL.

Select an ACL for a Profile in an Advanced Profile Group

MAC authentication either allows or denies network access to clients on access point that are

managed through a select profile in the advanced profile group.



To select a local or external MAC ACL for a profile in an advanced profile group:

Configure a local MAC ACL or an external MAC ACL on an external RADIUS server.

For more information about configuring a local MAC ACL, see

Configure Basic Local

MAC Authentication Settings

on page 145 and

Configure a Local MAC Authentication

Group

on page 148.

For more information about configuring an external MAC ACL, see

Guidelines for

External MAC Authentication

on page 145.

Open a web browser. In the browser’s address field, type the wireless controller’s IP

address.

By default, the IP address is 192.168.0.250.

The wireless controller’s login window opens.