Home
HP
Controller
MSM7XX
HP MSM7XX User Manual
4
of 1
of 1 rating
658 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
NOC authentication
How it works
D-3
The following diagram shows the sequen
ce of events for a typic
al user session when using
the NOC-based authen
tication feature.
Unauthenticated user
attempts to browse a
Web site on the
protected network.
Web browser is redirected.
Request is intercepted.
Login application sends
login page.
User logs in.
User login info is
sent for authentication.
Login info is sent
to RADIUS server
.
Login approved.
User configuration
settings are returned.
Login application sends
the Welcome page
with URL of originally
requested web site.
Login application initiates
an SSL connection with
the controller
.
The login application's
SSL certificate is verified.
If valid, approves connection.
Login results message
is returned to the login
application.
.
RADIUS server
User
Web server hosting
remote login page
Controller
632
634
Table of Contents
Table of Contents
5
Chapter 1 : Introduction
24
About this Guide
24
Products Covered
24
Important Terms
25
Conventions
26
Introduction
24
New in this Release
28
Introducing the Msm7Xx Controllers
29
Simplified Configuration, Deployment, and Operation
29
Controller Teaming
30
Seamless Mobility
31
Best-In-Class Public/Guest Network Access Service
33
Safety Information
34
Getting Started
35
HP Support
35
Online Documentation
35
2 Management
37
Chapter 2 : Management
38
Management
38
Management Tool
38
Management Scenarios
38
Management Station
38
Starting the Management Tool
38
Customizing Management Tool Settings
39
Password Security Policies
43
Management Tool Security Features
44
Web Server
44
Auto-Refresh
45
Device Discovery
45
Mobility Controller Discovery
46
Controlled AP Discovery
47
Snmp
49
Configuring the SNMP Agent
49
Soap
52
Configuring the SOAP Server
52
Cli
53
Configuring CLI Support
54
System Time
55
3 Network Configuration
57
Chapter 3 : Network Configuration
59
Port Configuration
59
LAN Port Configuration
60
Internet Port Configuration
61
Pppoe Client
62
DHCP Client
64
Static Addressing
65
Network Profiles
68
About the Default Network Profiles
68
To Define a Network Profile
68
Address Allocation
69
DHCP Server
70
DHCP Relay Agent
72
GRE Tunnels
75
VLAN Support
75
Bandwidth Control
77
Bandwidth Levels
78
Internet Port Data Rate Limits
78
Example
79
Discovery Protocols
80
Cdp
80
LLDP Agents
80
Dns
81
DNS Advanced Settings
82
DNS Servers
82
IP Routes
83
Configuration
84
NAT Security and Static Mappings
86
Network Address Translation (NAT)
86
Rip
89
VPN One-To-One NAT
89
Configuration
90
IP Qos
90
Example
91
IGMP Proxy
93
4 Wireless Configuration
95
Chapter 4 : Wireless Configuration
96
Wireless Configuration
96
Wireless Coverage
96
Factors Limiting Wireless Coverage
96
Configuring Overlapping Wireless Cells
97
Supporting 802.11N and Legacy Wireless Clients
101
Radio Configuration
102
Radio Configuration Parameters
112
Advanced Wireless Settings
123
Wireless Neighborhood
128
Scanning Modes
128
Viewing Wireless Information
129
Viewing All Wireless Clients
129
Viewing Info for a Specific Wireless Client
130
Viewing Wireless Client Data Rates
132
Wireless Access Points
133
5 Working with Vscs
139
Chapter 5 : Working with Vscs
141
Key Concepts
141
The Default VSC
142
Viewing and Editing VSC Profiles
142
VSC Configuration Options
143
About Access Control and Authentication
144
Summary of VSC Configuration Options
146
Access Control
147
Virtual AP
148
VSC Ingress Mapping
154
Bandwidth Control
155
VSC Egress Mapping
155
Default User Data Rates
156
Wireless Mobility
156
Fast Wireless Roaming
158
Wireless Security Filters
158
Wireless Protection
161
802.1X Authentication
164
RADIUS Authentication Realms
164
HTML-Based User Logins
165
MAC-Based Authentication
166
VPN-Based Authentication
166
Location-Aware
167
Wireless MAC Filter
167
DHCP Server
168
Wireless IP Filter
168
DHCP Relay Agent
169
VSC Data Flow
170
Access Control Enabled
170
Access Control Disabled
172
Using Multiple Vscs
174
About the Default VSC
174
Quality of Service (Qos)
175
Priority Mechanisms
176
IP Qos Profiles
178
Upstream Diffserv Tagging
179
Upstream/Downstream Traffic Marking
179
Qos Example
181
Creating a New VSC
182
Assigning a VSC to a Group
182
6 Working with Controlled Aps
183
Chapter 6 : Working with Controlled Aps
185
Key Concepts
185
Key Controlled-Mode Events
186
Discovery of Controllers by Controlled Aps
188
Discovery Overview
188
Discovery Methods
189
Discovery Order
191
Discovery Recommendations
192
Discovery Priority
193
Discovery Considerations
195
Monitoring the Discovery Process
195
Authentication of Controlled Aps
201
Building the AP Authentication List
202
Configuring Aps
204
Overview
204
Inheritance
205
Configuration Strategy
206
Working with Groups
207
Working with Aps
208
Assigning Country Settings to a Group
212
Assigning Egress Vlans to a Group
212
Provisioning Aps
213
Provisioning Methods
214
Displaying the Provisioning Pages
215
Provisioning Connectivity
216
Provisioning Discovery
219
Provisioning Summary
220
Provisioning Example
221
Aeroscout RTLS
222
Software Retrieval/Update
224
Monitoring
224
7 Working with Vlans
225
Chapter 7 : Working with Vlans
226
Key Concepts
226
VLAN Usage
226
Defining a VLAN
227
Creating a Network Profile
227
Defining a VLAN
228
Defining a VLAN on a Controller Port
228
User-Assigned Vlans
230
Traffic Flow for Wireless Users
230
Traffic Flow Examples
234
Example 1: Overriding the VSC Egress on a Controller with a User-Assigned VLAN
234
Example 2: Overriding the Egress Network in a VSC Binding with a User-Assigned VLAN
236
Working with Vlans
226
8 Controller Teaming
239
Chapter 8 : Controller Teaming
240
Centralized Configuration Management
240
Centralized Monitoring and Operation
240
Controller Teaming
240
Key Concepts
240
Deployment Considerations
241
Redundancy and Failover Support
241
Scalability
241
Creating a Team
243
Configuration Example
244
Limitations
243
Controller Discovery
248
Monitoring the Discovery Process
249
Viewing All Discovered Controllers
252
Viewing All Team Members
254
Team Configuration
255
Accessing the Team Manager
256
Team Configuration Options
256
Removing a Controller from a Team
257
Editing Team Member Settings
258
Discovery of a Controller Team by Controlled Aps
260
Failover
260
Supporting N + N Redundancy
260
Primary Team Manager Failure
262
Mobility Support
264
Single Controller Team Operating Alone
265
Single Controller Team Operating with Non-Teamed Controllers
266
Multiple Teamed and Non-Teamed Controllers
267
9 Mobility Traffic Manager
269
Chapter 9 : Mobility Traffic Manager
272
Key Concepts
272
The Mobility Domain
274
Home Networks
275
Local Networks
276
Configuring Mobility Traffic Manager
277
Defining the Mobility Domain
277
Defining Network Profiles
278
Assigning a Home Network to a User
279
Defining Local Networks on a Controller
280
Assigning Local Networks to an AP
281
Configuring the Mobility Settings for a VSC
282
Binding a VSC to an AP
283
Monitoring the Mobility Domain
284
Controllers
284
Mobility Clients
285
Networks in the Mobility Domain
285
Forwarding Table
286
Mobility Client Event Log
287
Configuration Overview
289
How It Works
289
Scenario 1: Centralizing Traffic on a Controller
289
Configuration Overview
292
How It Works
292
Scenario 2: Centralized Traffic on a Controller with VLAN Egress
292
Configuration Overview
296
How It Works
296
Scenario 3: Centralized Traffic on a Controller with Per-User Traffic Routing
296
How It Works
306
Scenario 4: Assigning Home Networks on a Per-User Basis
306
Configuration Overview
307
How It Works
312
Scenario 5: Traffic Routing Using Vlans
312
Configuration Overview
313
How It Works
320
Scenario 6: Distributing Traffic Using VLAN Ranges
320
Configuration Overview
321
Subnet-Based Mobility
328
10 User Authentication, Accounts, and Addressing
329
Chapter 10 : User Authentication, Accounts, and Addressing
331
Introduction
331
Authentication Support
331
Other Access Control Methods
333
Using more than One Authentication Type at the same Time
334
User Authentication Limits
335
802.1X Authentication
336
Supported 802.1X Protocols
337
Configuring 802.1X Support on a VSC
338
Configuring Global 802.1X Settings for Wired Users
340
Configuring Global 802.1X Settings for Wireless Users
341
Configuring 802.1X Support on an MSM317 Switch Port
342
MAC-Based Authentication
342
Configuring Global MAC-Based Authentication
344
Configuring MAC-Based Authentication on a VSC
345
Configuring MAC-Based Authentication on an MSM317 Switch Port
347
Configuring MAC-Based Filters on a VSC
347
Configuring MAC-Based Filters on an MSM317 Switch Port
348
Configuring HTML-Based Authentication on a VSC
350
HTML-Based Authentication
350
Configuring VPN-Based Authentication on a VSC
352
VPN-Based Authentication
352
Features
354
Locally-Defined User Accounts
354
No Authentication
354
Defining a User Account
358
Defining Account Profiles
360
Defining Subscription Plans
363
Accounting Persistence
364
User Addressing and Related Features
364
11 Authentication Services
367
Chapter 11 : Authentication Services
368
Introduction
368
Using the Integrated RADIUS Server
368
Server Configuration
369
Using the Integrated RADIUS Server
369
User Account Configuration
371
Using a Third-Party RADIUS Server
371
Configuring a RADIUS Server Profile on the Controller
372
Using an Active Directory Server
376
Active Directory Configuration
377
Configuring an Active Directory Group
379
Configuring a VSC to Use Active Directory
382
12 Security
383
Chapter 12 : Security
384
Firewall
384
Firewall Presets
384
Customizing the Firewall
386
Firewall Configuration
386
Trusted CA Certificate Store
387
Working with Certificates
387
Certificate and Private Key Store
389
Certificate Usage
391
About Certificate Warnings
392
Ipsec Certificates
393
MAC Lockout
395
Security
384
13 Local Mesh
397
Chapter 13 : Local Mesh
398
Key Concepts
398
Simultaneous AP and Local Mesh Support
398
Quality of Service
399
Using 802.11A/N for Local Mesh
399
Maximum Range (Ack Timeout)
400
Local Mesh Terminology
401
Local Mesh Operational Modes
402
Node Discovery
402
Operating Channel
402
Local Mesh Profiles
403
Configuration Guidelines
404
Configuring a Local Mesh Profile
405
Provisioning Local Mesh Links
408
Building-To-Building Connection
411
RF Extension
411
Sample Local Mesh Deployments
411
Dynamic Network
412
Local Mesh
398
14 Public/Guest Network Access
413
Chapter 14 : Public/Guest Network Access
415
Introduction
415
Key Concepts
416
Access Control
416
Access Lists
417
The Public Access Interface
417
Location-Aware
419
Configuring Global Access Control Options
420
User Authentication
421
Client Polling
422
User Agent Filtering
422
Zero Configuration
423
Display Advertisements
424
Location Configuration
424
Public Access Interface Control Flow
425
Customizing the Public Access Interface
426
Common Configuration Tasks
427
Sample Public Access Pages
427
Setting Site Configuration Options
431
Allow Subscription Plan Purchases
432
Display the Free Access Option
432
Support a Local Welcome Page
433
Use Frames When Presenting Ads
434
Allow Sslv2 Authentication
435
Redirect Users to the Login Page Via
435
Customizing the Public Access Web Pages
436
FTP Server
436
Site File Archive
436
Current Site Files
437
Configuring the Public Access Web Server
444
MIME Types
445
Options
445
Ports
445
Security
446
Managing Payment Services
447
Payment Services Configuration
447
Service Settings
447
Billing Record Logging
454
Settings
454
Persistence
455
External Billing Records Server Profiles
456
Billing Records Log
459
Location-Aware Authentication
460
How It Works
460
Example
462
Security
462
15 Working with Radius Attributes
463
Chapter 15 : Working with RADIUS Attributes
465
Introduction
465
Controller Attributes Overview
466
Defining and Retrieving Site Attributes
467
Controller Attribute Definitions
470
User Attributes
475
Customizing User Accounts with the User Attribute
475
Defining and Retrieving User Attributes
476
User Attribute Definitions
482
Administrator Attributes
493
Access List
495
Access List
496
Configuration File
506
Custom SSL Certificate
506
Custom Public Access Interface Web Pages
507
Default User Bandwidth Level
513
Default User Interim Accounting Update Interval
513
Default User Idle Timeout
514
Default User Quotas
514
Default User Data Rates
515
Default User One-To-One NAT
515
Default User Public IP Address
516
Default User Session Timeout
516
Default User SMTP Server
516
Default User Urls
517
HTTP Proxy Upstream
517
Global MAC-Based Authentication
518
Ipass Login URL
518
Multiple Login Servers
519
Redirect URL
521
HP Wispr Support
524
NOC Authentication
524
Traffic Forwarding (Dnat-Server)
525
Multiple DNAT Servers
526
Access List
529
Colubris AV-Pair - User Attribute Values
529
Advertising
530
Bandwidth Level
530
Data Rate
531
One-To-One NAT
531
Public IP Address
532
Quotas
532
Redirect URL
533
SMTP Redirection
533
Custom Public Access Interface Web Pages
534
Station Polling
534
Administrative Role
536
Colubris AV-Pair - Administrator Attribute Values
536
Javascript Syntax
537
Public Access Interface ASP Functions and Variables
537
Forms
538
Form Errors
540
Radius
541
Page Urls
543
Session Status and Properties
544
Ipass Support
547
Client Information
549
Web
549
Subscription Plan Information
552
Other
553
Session Information
555
Colubris AV-Pair - Site Attribute Values
495
16 Working with Vpns
559
Chapter 16 : Working with Vpns
560
Overview
560
Securing Wireless Client Sessions with Vpns
561
Configure an Ipsec Profile for Wireless Client VPN
562
Configure L2TP Server for Wireless Client VPN
563
Configure PPTP Server for Wireless Client VPN
563
VPN Address Pool
563
Securing Controller Communications to Remote VPN Servers
564
Configure an Ipsec Policy for a Remote VPN Server
565
Configure PPTP Client for a Remote VPN Server
566
Keeping User Traffic out of the VPN Tunnel
568
Additional Ipsec Configuration
569
Ipsec Security Policy Database
569
Ipsec VLAN Mapping
569
Local Group List
569
Working with Vpns
560
17 Lldp
571
Chapter 17 : LLDP
572
Overview
572
Lldp-Med
572
Local Mesh
573
SNMP Support
573
Configuring LLDP on the Controller
574
TLV Settings
576
Configuring LLDP on an AP
578
LLDP Agent
578
Media Endpoint Discovery (MED) Features
579
LLDP Settings
580
Application Type Profiles
581
18 Sflow
583
Chapter 18 : Sflow
584
Overview
584
Sflow Proxy
584
Configuring and Activating Sflow
585
MIB Support
585
Advanced Sflow Configuration
587
19 Working with Autonomous Aps
591
Chapter 19 : Working with Autonomous Aps
592
Key Concepts
592
Autonomous AP Detection
593
Viewing Autonomous AP Information
593
Switching a Controlled AP to Autonomous Mode
594
Configuring Autonomous Aps
595
VSC Definitions
595
VSC Selection
596
Working with Third-Party Autonomous Aps
596
Maintenance
599
Chapter 20 : Maintenance
600
Config File Management
600
Manual Configuration File Management
600
Scheduled Operations
601
Software Updates
602
Performing a Scheduled Software Update
603
Performing an Immediate Software Update
603
Licenses
604
Factory Reset Considerations
605
Generating and Installing a Feature License
605
Appendix A: Safety and EMC Regulatory Statements
610
Safety Information
610
Informations Concernant la Sécurité
610
Hinweise zur Sicherheit
611
Considerazioni Sulla Sicurezza
612
Consideraciones sobre Seguridad
613
Safety Information (Japan
614
Safety Information (China
615
EMC Regulatory Statements
616
Japan
616
U.s.a
616
Recycle Statements
618
Waste Electrical and Electronic Equipment (WEEE) Statements
618
Safety and EMC Regulatory Statements
610
Console Ports
623
Overview
623
MSM710 Console Port
624
MSM730 Console Port
624
Overview
624
MSM750 Console Port
625
Using the Console Port
625
Resetting to Factory Defaults
627
How It Works
628
Using the Management Tool
628
Using the Reset Button
628
Using the Console (Serial) Port
629
How It Works
630
D Noc Authentication
631
Appendix D: NOC Authentication
632
How It Works
632
Activating a Remote Login Page with NOC Authentication
634
Addressing Security Concerns
635
Securing the Remote Login Page
635
Authenticating the Controller
636
Authenticating with the Login Application
636
NOC Authentication List
636
Setting up the Certificates
636
Define Attributes
637
Install a Certificate on Controller
637
Install Certificates on the Web Server
637
Authenticating Users
638
Returned Values
639
Main Benefits
632
Authenticating Users
639
Examples of Returned HTML Code
641
Simple NOC Authentication Example
642
Forcing User Logouts
643
DHCP Servers and Colubris Vendor Classes
645
Overview
645
Overview
646
Windows Server 2003 Configuration
646
ISC DHCP Server Configuration
651
Other manuals for HP MSM7XX
Reference Guide
206 pages
4
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the HP MSM7XX and is the answer not in the manual?
Ask a question
HP MSM7XX Specifications
General
Brand
HP
Model
MSM7XX
Category
Controller
Language
English
Related product manuals
HP MSM720
6 pages
HP E-MSM720
55 pages
HP HPE MR Gen11
59 pages
HP MR Gen10 Plus
179 pages
HP StorageWorks P2000
10 pages
HP P420
15 pages
HP B120i
11 pages
HP Smart Array P800
44 pages
HP 4400
77 pages
HP Smart Array P830
44 pages
HP 9000 300 Series
157 pages
To Next PageTo Next PageTo Previous PageTo Previous Page
Loading...
Need help?
General
