Controller and Service Platform System Reference Guide Version 5.9.7
Published November 2019
Search this document
Print this page
Email this page
View PDF
Previous
Next
Preface
Text Conventions
Platform-Dependent Conventions
Providing Feedback to Us
Getting Help
Documentation and Training
About this Guide
Notational Conventions
Overview
About the WiNG Software
Distributed Intelligence
High Availability Networks
Gap-free Security
Outdoor Wireless and Mesh Networking
Network Services, Routing and Switches
Management, Deployment and Troubleshooting
Web UI Features
Accessing the Web UI
Browser and System Requirements
Connecting to Web UI
Glossary of Icons Used
Global Icons
Dialog Box Icons
Table Icons
Status Icons
Configurable Object Icons
Configuration Object Icons
Configuration Operation Icons
Access Type Icons
Administrative Role Icons
Device Icons
Dashboard
Summary
Device Listing
System Screen
System Health
System Inventory
RF Domain Screen
RF Domain Health
RF Domain Inventory
Controller Screen
Controller Health
Controller Inventory
Access Point Screen
Access Point Health
Access Point Inventory
Network View
Debug Wireless Clients
Debug Captive Portal Clients
Packet Capture
Device Configuration
Device Configuration
Basic Device Configuration
License Configuration
Assigning Certificates
Certificate Management
Import Certificates and Trustpoints
Export Trustpoints
Delete Trutpoints
RSA Key Management
Import an RSA Key
Export an RSA Key
Delete an RSA Key
Certificate Creation
Generating a Certificate Signing Request
Wired 802.1x Configuration
RF Domain Overrides in Device Configuration
RF Domain Basic Configuration
RF Domain Sensor Configuration
RF Domain Client Name Configuration
WLAN Override SSID Configuration
WLAN Override VLAN Configuration
Device Profile Overrides
General Overrides
Power Overrides (APs Only)
Cluster Configuration Overrides (Controllers & Service Platforms Only)
Controller Adoption Overrides (Controllers Only)
Overriding a Profile's Interface Configuration
Ethernet Port Override Configuration
Virtual Interface Override Configuration
Port Channel Override Configuration
Overriding VM Interface Configuration
Radio Override Configuration
Overriding WAN Backhaul Configuration
Overriding PPPoE Configuration
Profile Overrides - Bluetooth
Profile Overrides - Network Overview
Profile Overrides - DNS Configuration
Profile Overrides - ARP Configuration
Profile Overrides - L2TPv3 General Settings
GRE Tunnel Configuration
IGMP Snooping Configuration
MLD Snooping Configuration
QoS Traffic Shaping Basic Configuration
Profile Overrides - IPv4 Routing
Profile Overrides - OSPF Settings
BGP Configuration
Forwarding Database Configuration
Profile Overrides - Bridge VLAN
CDP Configuration
LLDP Configuration
Miscellaneous Network Configurations
Aliases Overview
IPv6 Neighbor Configuration
Spanning Tree Configuration
Overriding a Profile's Security Configuration
Overriding General Security Settings
Overriding a Certificate Revocation List (CRL) Configuration
Overriding RADIUS Trustpoint Configuration
Overriding VPN Configuration
Overriding Auto IPSec Tunnel Settings
Overriding NAT Configuration
Overriding a Bridge NAT Configuration
Overriding Application Visibility Settings
Overriding VRRP Configuration
Profile Overrides - VRRP Version
Overriding a Critical Resource Configuration
Critical Resources - Monitor Interval
Override Services Configuration
Overriding a Management Configuration
Firmware Configuration
Heartbeat Configuration
Mesh Point Configuration
Vehicle Mounted Modem (VMM) Deployment Considerations
Overriding an Environmental Sensor Configuration (AP8132 Only)
Auto-Provisioning Policies
Configuring Auto-Provisioning Policy Rules
Configuring Auto-Provisioning Policy Adoption Criteria
Managing an Event Policy
Managing MINT Policies
Password Encryption
Wireless Configuration
Wireless LAN Policies
Basic WLAN Configuration
Configuring WLAN Security
802.1x EAP, EAP-PSK and EAP MAC
MAC Authentication
PSK / None
Captive Portal
Passpoint
Registration
External Controller
TKIP-CCMP
WPA2-CCMP
WEP 64
WEP 128
Keyguard
T5 Controller Security
Configuring WLAN Firewall Settings
Configuring WLAN Client Settings
WLAN Client Setting Deployment Considerations
Configuring WLAN Accounting Settings
Accounting Deployment Considerations
Configuring WLAN Service Monitoring Settings
Configuring Client Load Balancing Settings
Configuring Advanced WLAN Settings
Configuring Auto Shutdown Settings
WLAN QoS Policies
Configuring a WLAN's QoS WMM Settings
Configuring a WLAN's QoS Rate Limit Settings
Configuring Multimedia Optimizations
WLAN QoS Deployment Considerations
Radio QoS Policies
Configuring a Radio QoS Policy
Radio QoS Configuration and Deployment Considerations
Association ACL
Association ACL Deployment Considerations
Smart RF Policies
Configuring Smart RF Basic Settings
Configuring Smart RF Channel & Power Settings
Configuring Smart RF Scanning Configuration
Configuring Smart RF Neighbor Recovery Settings
Configuring Smart RF Interference Recovery Settings
Configuring Smart RF Coverage Hole Recovery Settings
Configuring Smart RF Select Shutdown Settings
Smart RF Configuration and Deployment Considerations
MeshConnex Policies
Configuring a MeshConnex Policy
Mesh QoS Policy
Configuring a Mesh QoS Policy
Passpoint Policy
Configuring a Passpoint Policy
Sensor Policy
Configuring a Sensor Policy
Location Policy
Adding Location Policy
Network Configuration
Policy Based Routing (PBR)
L2TP V3 Configuration
Crypto CMP Policy
AAA Policy
AAA TACACS Policy
IPv6 Router Advertisment Policy
Border Gateway Protocol (BGP)
IP Access List
AS Path List
IP Prefix List
Community List
External Community List
Alias
Network Basic Alias Configuration
Network Group Alias Configuration
Adding and Editing Network Group Alias
Network Service Alias Configuration
Adding and Editing Network Service Alias
Application Policy
Application
Application Group
Schedule Policy
URL Filtering
Web Filtering
Configuring EX3500 QoS Class
Configuring EX3500 QoS Policy Map
Network Deployment Considerations
Manage Profiles
General Profile Configuration
General Profile Configuration and Deployment Considerations
Profile Cluster Configuration (Controllers Only)
Controller Cluster Profile Configuration and Deployment Considerations
Profile Adoption Configuration (Access Points Only)
Profile Adoption Configuration (Controllers Only)
Access Point Radio Power Overrides (AP7161 Only)
Profile 802.1x Configuration
Profile Interface Configuration
Ethernet Port Configuration
Editing Ethernet Port Configurations
Basic Ethernet Port Configuration
Configure Ethernet Port Security
Spanning Tree Configuration
Virtual Interface Configuration
General Configuration
IPv4 Configuration
IPv6 Configuration
IPv6 RA Prefixes Configuration
Security Configuration
Dynamic Routing Configuration
Port Channel Configuration
Adding and Editing a Port Channel Configuration
Port Channel Basic Configuration
Port Channel Security
Port Channel Spanning Tree
VM Interface Configuration
VM Basic Configuration
VM Security Settings
Access Point Radio Configuration
Editing Radio Configurations
Radio Settings
WLAN Mapping / Mesh Mapping
Mesh Legacy
Client Bridge Settings
Advanced Settings
WAN Backhaul Configuration
PPPoE Configuration
Overriding Bluetooth Configuration
Profile Interface Deployment Considerations
Profile Network Configuration
Setting a Profile's DNS Configuration
ARP Configuration
L2TPV3 Configuration
General
L2TPV3 Tunnel
Adding and Editing L2TPV3 Tunnels
Manual Session
Adding and Editing Manual Sessions
GRE Tunnel Configuration
Adding and Editing GRE Tunnel
IGMP Snooping
MLD Snooping Configuration
QoS Traffic Shaping Basic Configuration
QoS Traffic Shaping Advanced Configuration
QoS Priority Mapping Configuration
IPv4 Routing Configuration
IPv6 Routing Configuration
OSPF
OSPF Settings
Area Settings
OSPF Interface Settings
Forwarding Database
Bridge VLAN Configuration
Bridge VLAN General Configuration
Bridge VLAN IGMP Snooping
Bridge VLAN MLD Snooping
Cisco Discovery Protocol Configuration
Link Layer Discovery Protocol Configuration
Miscellaneous Network Configuration
Alias Configuration
Basic Alias
Network Group Alias
Adding and Editing Network Group Alias
Network Service Alias
Adding and Editing Network Service Alias
IPv6 Neighbor Configuration
Profile Network Configuration and Deployment Considerations
Profile Security Configuration
Defining Security Settings
Setting the Certificate Revocation List (CRL) Configuration
Setting the Profile's VPN Configuration
IKE Policy
Peer Configuration
Adding and Editing an IKE V1 Policy
Adding and Editing an IKE V2 Policy
Transform Set
Adding and Editing a Transform Set
Crypto Map
Adding and Editing a Crypto Map
Remote VPN Server
Remote VPN Client
Global Settings
Auto IPSec Tunnel
Setting the Profile's NAT Configuration
NAT Pool
Add
Static NAT
Source
Destination
Dynamic NAT
Adding and Editing Dynamic NAT
Bridge NAT Configuration
Adding and Editing Bridge NAT Configurations
Profile Security Configuration and Deployment Considerations
VRRP Configuration
VRRP
Adding and Editing VRRP Configurations
Version
Critical Resources Configuration
List of Critical Resources
Adding and Editing Critical Resources
Monitor Interval
Profile Services Configuration
Profile Services Configuration and Deployment Considerations
Profile Management Configuration
Management Settings
Firmware
Overriding Management Heartbeat
Profile Management Configuration and Deployment Considerations
Profile Mesh Point Configuration
MeshConnex Policy Settings
Auto Channel Selection
Dynamic Root Selection
Path Method SNR
Path Method Root Path Metric
Environmental Sensor Configuration (AP8132 Only)
Advanced Profile Configuration
Client Load Balancing
Configuring MINT
Settings
IP
VLAN
Advanced Profile Miscellaneous Configuration
RF Domains
Managing RF Domains
RF Domain Basic Configuration
RF Domain Sensor Configuration
RF Domain Client Name Configuration
Overriding RF Domain SSID and other Configurations
RF Domain Network Alias
RF Domain Basic Alias
RF Domain Network Group Alias
RF Domain Network Service Alias
RF Domain Deployment Considerations
Security Configuration
Wireless Firewall
Configuring a Firewall Policy
Firewall Policy Denial of Service
Firewall Policy Storm Control
Firewall Policy Advanced Settings
Configuring MAC Firewall Rules
Firewall Deployment Considerations
Configuring IP Firewall Rules
Setting an IPv4 or IPv6 Firewall Policy
Setting an IP SNMP ACL Policy
Setting a Network Group Alias
Setting a Network Service Alias
EX3500 ACL Standard
EX3500 ACL Extended
Wireless Client Roles
Configuring a Client's Role Policy
Device Fingerprinting
Intrusion Prevention
Configuring a WIPS Policy
Configuring a Device Categorization Policy
Intrusion Detection Deployment Considerations
EX3500 Time Range
Services Configuration
Captive Portal Policies
Captive Portal Policy Basic Configuration
Captive Portal Policy Web Page Configuration
Configuring DNS Whitelists
Captive Portal Deployment Considerations
Setting the Guest Management Configuration
Email
SMS
SMS SMTP
DB Export
Setting the DHCP Configuration
Defining DHCP Pools
Defining DHCP Server Global Settings
DHCP Class Policy Configuration
DHCP Deployment Considerations
Setting the Bonjour Gateway Configuration
Configuring a Bonjour Discovery Policy
Configuring a Bonjour Forwarding Policy
Setting the DHCPv6 Server Policy
Defining DHCPv6 Options
DHCPv6 Pool Configuration
Adding or Editing DHCPv6 Server Configuration
Setting the RADIUS Configuration
Creating RADIUS Groups
Defining User Pools
RADIUS Server Policies
Configuring RADIUS Clients
Configuring a RADIUS Proxy
Configuring an LDAP Server Configuration
RADIUS Deployment Considerations
Setting the URL List
Setting the Imagotag Policy
Adding/Editing Imagotag Policy Settings
Management Access
Viewing Management Access Policies
Adding or Editing a Management Access Policy
Creating an Administrator Configuration
Setting an Allowed Location Configuration
Setting the Access Control Configuration
Setting the Authentication Configuration
Setting the SNMP Configuration
Setting SNMP Trap Configuration
Setting T5 PowerBroadband SNMP Configuration
EX3500 Management Policies
EX3500 User Groups
EX3500 Authentication
EX3500 Exec Password Management
EX3500 System Settings
EX3500 SNMP Management
EX3500 SNMP Users
Configuring a Hierarchical Tree
Management Access Deployment Considerations
Diagnostics
Fault Management
Filter Events
View Events
Event History
Crash Files
Advanced
UI Debugging
Viewing UI Logs
View Sessions
Operations
Device Operations
Operations Summary
Upgrading Device Firmware
Adopted Device Upgrades
Device Upgrade List
Device Image File
Upgrade Status
Device Upgrade History
Using the File Management Browser
Managing File Transfers
Restarting Adopted Devices
Captive Portal Configuration
AP Upload List
CP Page Image File
Status
Crypto CMP Certificate
RAID
RF Domain - Device Upgrade Operation
Re-elect Controller
Certificates
Certificate Management
Import Certificates and Trustpoints
Export Trustpoints
RSA Key Management
Import an RSA Key
Export an RSA Key
Delete an RSA Key
Certificate Creation
Generating a Certificate Signing Request
Smart RF
Managing Smart RF for an RF Domain
Statistics
System Statistics
Health
Inventory
Adopted Devices
Pending Adoptions
Offline Devices
Device Upgrade
Licenses
Native/Guest Summary Screen
Native/Guest Details Screen
WIPS Summary
RF Domain Statistics
Health
Inventory
Devices
AP Detection
Device Upgrade
Wireless Clients
Wireless LANs
Radios
Radios Status
Radio RF Statistics
Radio Traffic Statistics
Bluetooth
Mesh
Mesh Point
MCX Geographical View
MCX Logical View
Device Type
Device Brief Info
Device Data Transmit
SMART RF - Overview
SMART RF - Summary
SMART RF - Select Shutdown
SMART RF - Details - Details
SMART RF - Details - Energy Graph
SMART RF - History
WIPS
WIPS Client Blacklist
WIPS Events
Captive Portal
Application Visibility
Coverage Hole Detection
Coverage Hole Summary
Coverage Hole Detail
Controller Statistics
Controller Health
Controller Device
Cluster Peers
Controller Web Filtering
Controller Application Visibility (AVC)
Controller Application Policy
Device Upgrade
Adoption
Adopted Devices
AP Adoption History
Pending Adoptions
AP Detection
Guest User - Clients
Wireless LANs
Policy Based Routing
Radios
Radio Status
Radio RF Statistics
Radio Traffic Statistics
Mesh
Interfaces
Controller General Interface Details
IPv6 Address
Multicast Groups Joined
Network Graph
RAID Statistics
Power Status
PPPoE
OSPF
OSPF Summary
OSPF Neighbors
OSPF Area Details
Controller OSPF Route Statistics
Border Routes
External Routes
Network Routes
Router Routes
OSPF Interface
OSPF State
BGP
BGP Summary
BGP Neighbor
BGP Route Filters
BGP State
L2TPv3 Tunnels
VRRP
Critical Resource
LDAP Agent Status
MiNT Links
Guest Users
GRE Tunnel
Dot1x
Network
ARP Entries
Route Entries
Default Routes
Bridge
IGMP
MLD
LACP
Traffic Shaping
Traffic Shaping - Status
Traffic Shaping - Statistics
DHCP Options
Cisco Discovery Protocol
Link Layer Discovery Protocol
IPv6 Neighbor Discovery
Fabric Attach
MSTP
DHCPv6 Relay & Client
DHCP Server
Viewing General DHCP Information
Viewing DHCP Binding Information
Viewing DHCP Server Networks Information
Firewall
Viewing Packet Flow Statistics
Viewing Denial of Service Statistics
IP Firewall Rules
IPv6 Firewall Rules
MAC Firewall Rules
NAT Translations
DHCP Snooping Statistics
IPv6 Neighbor Snooping
VPN
IKESA
IPSec
Certificate Statistics
Trustpoints
RSA Key Details
WIPS Statistics
Client Blacklist
WIPS Event Statistics
Sensor Server
Bonjour Services
Captive Portal Statistics
Network Time
NTP Status
NTP Association
Setting T5 PowerBroadband SNMP Configuration
T5 Device
T5 Wireless Client
T5 WLAN QoS
T5 WLAN Rates
T5 WLAN Sizes
T5 MAC Table
T5 CPE System
T5 Radio Statistics
T5 Radio Summary
T5 Radio WLAN Map
T5 Interface Ethernet Counter
T5 Interface Ethernet Description
T5 Interface Ethernet Status
T5 Interface Ethernet Utilization
T5 Radio DSL Counter
T5 Radio DSL Custom
T5 Radio DSL Description
T5 Radio DSL Status
T5 Radio DSL Errors
T5 Radio DSL Utilization
T5 Fast Ethernet Counter
T5 Fast Ethernet Description
T5 Fast Ethernet Status
T5 Fast Ethernet Utilization
T5 CPE Address
T5 CPE Boot
T5 CPE Reset
T5 CPE LED
T5 CPE Reset
T5 CPE System
T5 CPE Uptime
T5 CPE Version
T5 CPE Port Status
EX3500 Statistics
EX3500 System
EX3500 Version
EX3500 Directory Information
EX3500 Interface
EX3500 Ether
EX3500 Interface Extended IF
EX3500 Interface IF
EX3500 Interface Port Utility
EX3500
EX3500 Interface Extended IF
Access Point Statistics
AP Health
AP Device
AP Web Filtering
AP Application Visibility (AVC)
AP Application Policy
AP Device Upgrade
AP Adoption
Adopted APs
AP Adoption History
AP Self Adoption History
Pending Adoptions
AP Detection
AP Wireless Clients
AP Wireless LANs
AP Policy Based Routing
AP Radios
AP Radio Status
AP Radio RF Statistics
AP Radio Traffic Statistics
AP Mesh
AP Interfaces
AP Interface General Statistics
AP Interface IPv6 Address
AP Interface Multicast Groups Joined
AP Interface Network Graph
AP RTLS
AP PPPoE
AP OSPF
AP OSPF Summary
AP OSPF Neighbors
AP OSPF Area Details
AP OSPF Route Statistics
AP OSPF Border Routers
AP OSPF External Routes
AP OSPF Network Routes
AP OSPF Router Routes
AP OSPF Interface
AP OSPF State
AP Bluetooth
AP L2TPv3 Tunnels
AP VRRP
AP Critical Resources
AP LDAP Agent Status
AP MiNT Links
AP Guest Users
AP GRE Tunnel
AP Dot 1X
AP Network
AP Network ARP Entries
AP Network Route Entries
AP Network Default Routes
AP Network Bridge
AP Network IGMP
AP Network MLD
AP Network Traffic Shaping
Traffic Shaping - Status
Traffic Shaping - Statistics
AP Network DHCP Options
AP Network Cisco Discovery Protocol
AP Network Link Layer Discovery Protocol
AP Network IPv6 Neighbor
AP Network MSTP
AP DHCPv6 Relay & Client
AP DHCP Server
AP DHCP - General
AP DHCP - Bindings
AP DHCP - Networks
AP Firewall
AP Firewall Packet Flows
AP Denial of Service
AP IPv4 Firewall Rules
AP IPv6 Firewall Rules
AP MAC Firewall Rules
AP NAT Translations
AP DHCP Snooping
AP IPv6 Neighbor Snooping
AP VPN
AP VPN IKESA
AP VPN IPSec
AP Certificates
AP Certificates Trustpoints
AP Certificates RSA Keys
AP WIPS
AP WIPS Client Blacklist
AP WIPS Events
AP Sensor Servers
AP Bonjour Services
AP Captive Portal
AP Network Time
AP NTP Status
AP NTP Association
AP Load Balancing
AP Environment Statistics
AP Light Sensor
AP Temperature Sensor
AP Motion Sensor
AP Humidity Sensor
AP IOT Imagotag
Wireless Client Statistics
Client Health
Client Details
Client Traffic
Client WMM TSPEC
Client Association History
Client Graph
Guest Access Statistics
Guest Access Cumulative Statistics
Guest Access Social Media Statistics
Guest Access Reports
Guest Access Notifications
Guest Access Database
WiNG Events
WiNG Event Messages
Overview
This guide describes the installation and use of the WiNG software designed specifically for the following controllers and service platfprms: RFS4010, NX5500, NX7500, NX9500, NX9600 and VX9000.
Note
For information on using an access point in a managed network, go to
www.extremenetworks.com/support
.
