WiNG version 4.0 includes a rich suite of features which are
included with each RF Switch at no additional charge as well as licensed
features which can be purchased and enabled as needed for the customer’s
specific applications and needs.
When an RF Switch is purchased it includes a base license which
provides core switching, routing, mobility, security and management features as
well as support for a specific number of Access Ports and Adaptive Access
Points.
By optionally purchasing and installing licenses, customers can
increase the number of Access Ports and Adaptive Access Points supported by an
RF Switch as well as enable advanced security features and integrated
locationing applications.
WiNG 4.0 includes support for the following optional licenses:
1)
AP Licenses – Determines the number of AP100,
AP300, AP4131 Access Ports and AP5131, AP5181 and AP7131 Adaptive Access Points
each RF Switch can support. The RFS 6000 can support up to 48 AP licenses and
the RFS7000 can support up to 256 AP licenses.
2)
AAP Licenses – Determines the number of AP5131,
AP5181 and AP7131 Adaptive Access Points each RF Switch can support. The RFS
6000 can support up to 256 AAP licenses and the RFS7000 can support up to 1,024
AAP licenses. The AAP licenses are not applicable to the AP100, AP300 or
AP4131.
3)
Advanced Security License – Enables the role based
firewall and increases the number of supported IPSec VPN tunnels from 100 à
1,024 on the RFS6000 and 600 à
2,048 on the RFS 7000. One license is required per RFS6000 and RFS7000.
4)
Locationing Applications License – Enables the
integrated RTLS engine for locationing of wireless clients and active RFID
tags, enables support for external RFID readers and Gen2 tags and allows
locationing using 3rd party applications via the ALE API interface.
This license is not required for client locationing with RFMS 3.x.
Figure 1.1 – WiNG 4.0 Licenses
This document provides an overview of the WiNG 4.0 licensing
options as well as details on how to acquire and install licenses on an RF
Switch.
Access
Port Licenses:
Access Port (AP) licenses can be installed on an RFS6000 and
RFS7000 switch and determines the number of Access Ports (APs) and Adaptive
Access Points (AAPs) each switch can support. The maximum number of APs/AAPs
licenses each RF Switch can support is hardware dependent and cannot exceed 48 for
an RFS6000 and 256 for an RFS7000. The AP licenses can be used to support both
APs and AAPs, however the reverse is not true with the AAP licenses which can
only be used to support AAPs.
Motorola RF Switches can be purchased with a bundled base AP
license to suite the specific customers AP/AAP capacity needs:
·
An RFS6000 can be purchased with a base AP
license of 0, 8, 24 and 48 APs with AP license upgrades available in increments
of 8.
·
An RFS7000 can be purchased with a base AP
license of 0, 64, 128 and 256 APs with AP license upgrades available in
increments of 16.
The AP licensing is flexible and granular allowing customers to
purchase the exact number of AP licenses required to meet their initial
deployment and redundancy needs. By providing small incremental AP license
upgrades as well as zero AP licensed RF Switches, Motorola can provide a
cost-effective switch managed Wireless LAN solution for customers without forcing
customers to purchase excessive AP capacity or duplicate licensing on redundant
switches.
Figure 1.1.1 – AP Licenses
AP licenses can be utilized by individual stand-alone RF Switches
or aggregated and pooled between multiple RF Switches in a resilient cluster.
Each AP license is tied to a specific RF Switches serial number which
determines the AP/AAP capacity of the individual RF Switch. When deployed in a
resilient cluster, the AP licenses for each RF Switch is pooled and shared
between RF Switches in the cluster allowing RF Switches with available AP
capacity to support APs/AAPs in the event of an RF Switch failure.
Table 1.1.1 shows the maximum number of AP licenses that can be
installed per RFS6000 and RFS7000 switch as well each RF switches maximum AP/AAP
capacity when using the AP license:
RF
Switch Model
|
AP
License Increments
|
Maximum
APs + AAPs
|
RFS6000
|
0 – 48 (Increments of 8)
|
48
|
RFS7000
|
0 – 256 (Increments of 16)
|
256
|
Table 1.1.1 – AP Licenses
Adaptive
Access Point Licenses:
AAP licenses can be installed on an RFS6000 or RFS7000 switch to
determine the number of AP5131, AP5181 and AP7131 Adaptive Access Points (AAPs)
each RF Switch can support. Note however that unlike AP licenses, AAP licenses
cannot be used to support Access Ports (APs).
RF
Switch Model
|
AAP
Licenses
|
Maximum
AAPs
|
RFS6000
|
0 – 256
|
256
|
RFS7000
|
0 – 1,024
|
1,024
|
Table 1.1.2.1 – AAP Licenses
AAP licenses may be purchased and installed in increments of
16,128 and 256 for the RFS6000 and 64, 512 and 1,024 for the RFS7000 allowing
for mixed AP and AAP deployments or pure AAP only deployments:
·
Mixed AP/AAP Deployments – In mixed deployments
AAP licenses can be used to increase AAP capacity beyond the limits imposed by
the AP license. Customers can purchase and install a maximum of 48 AP licenses
and 208 AAP licenses on an RFS6000 and 256 AP licenses and 768 AAP licenses on
an RFS7000.
·
Pure AAP Deployments – In pure AAP deployments
AAP licenses can be used to license the RF Switch to support a specific number
of AAPs. Customers can purchase and install a maximum of 256 AAP licenses on an
RFS6000 and 1,024 AAP licenses on an RFS7000.
AAP licenses can be utilized by individual stand-alone RF
Switches or aggregated and pooled between multiple RF Switches in a resilient
cluster. Each AAP license is tied to a specific RF Switches serial number which
determines the AAP capacity of the individual RF Switch. When deployed in a
resilient cluster, the AAP licenses for each RF Switch is pooled and shared
between RF Switches in the cluster allowing RF Switches with available AAP
capacity to support AAPs in the event of an RF Switch failure.
Table 1.1.2 shows the maximum number of AP/AAP licenses that can
be installed per RFS6000 and RFS7000 switch as well each RF switches maximum
AP/AAP capacity when using the AP and AAP licenses:
RF
Switch Model
|
AP
Licenses
|
AAP
Licenses
|
Maximum APs + AAPs
|
RFS6000
|
0 – 48
|
0 – 256
|
256
|
RFS7000
|
0 – 256
|
0 – 1,024
|
1,024
|
Table 1.1.2.2 – Mixed AP and AAP Licenses
Advanced
Security Licenses:
The advanced security license which can be installed on an RFS6000
or RFS7000 switch to enable the following advanced security features:
·
Role Based Firewall – Allows firewall rules to
be dynamically applied to users based on a wireless clients AP association,
group membership, associated ESSID and authentication or encryption used.
·
Increased IPSec VPN Tunnels – Increases the
number of IPSec VPN tunnels from 100 à 1,024 for the RFS6000 and 600 à
2,048 for the RFS7000. This scaling is intended for AAP deployments when IPSec is
required to encrypt traffic between AAPs and the RF Switch. The advanced
security license ensures that adequate IPSec tunnels are available on the RF
Switch to support the increased number of AAPs supported with the AAP licenses.
The advanced security license is only required to enable the role
based firewall or to scale the number of IPSec VPN tunnels on an RF Switch. The
advanced security license is not required to enable existing security features
such as the integrated stateful inspection firewall, VPN, NAT or WIDS etc.
One advanced security license is required per RF Switch to
enabled the role based firewall or provide IPSec VPN Tunnel scaling. When clustering
is deployed an advanced security license will be required for each RF Switch in
the cluster supporting role based firewall rules or requiring VPN tunnel
scaling. The advanced security license cannot be pooled or shared between RF
Switches in the cluster.
If no advanced security license is present on an RF Switch, the
role based firewall will not function and IPSec VPN scaling will not be
provided. While administrators can still configure the role based firewall
rules, a warning message will be displayed stating an advance security license
is required.
When no advanced security license is installed, all wireless
clients associating with the RF Switch will be placed into a default role which
allows all traffic to pass. The wireless client’s traffic will not be subject
to any configured role based firewall rules; however the client’s traffic will
still be subject to any applicable L2, L3 and Wireless filtering rules applied
to the RF Switch.
Locationing
Applications License:
The locationing applications license advanced can be installed on
an RFS6000 or RFS7000 switch to enable the following locationing features when
working with 3rd party location applications:
·
Integrated RTLS Engine – Allows the RF Switch to
locate wireless clients and active Wi-Fi tags.
·
RFID Support – Provides RFID reader support
including reader management and Gen2 tag updates.
·
ALE Support – Enables Application Level Event
(ALE) support for sending location updates to third-party applications.
One locationing applications license is required per RF Switch to
support locationing with 3rd party applications. When clustering is
deployed a locationing applications license will be required for each RF Switch
in the cluster supporting locationing services. The locationing applications
license cannot be pooled or shared between RF Switches in the cluster.
If no locationing applications license is present on an RF Switch,
the advanced RTLS features will not function with 3rd party applications.
The RF Switch will still however provide client locationing information to RFMS
as well as support Geofensing and external RTLS engines from AeroScout, Ekahau
and Newbury. Additionally administrators will be able to configure the advanced
RTLS services for third party applications but a warning message will be
displayed stating that a locationing applications license is required.
The MU to MU disallow feature allows the RF Switch to block communications exchanged between clients associated to a WLAN.With the Motorola ...
Pre-Requisites: Requirements: The following requirements must be met prior to attempting this configuration: One (or more) RF Switc...
RADIUS Authentication Attributes: The RADIUS protocol follows client-server architecture and uses the User Datagram Protocol (UDP) as de...
LDAP Server can be used as the database with WS5100 radius server. This document provides the details of configuration need to done for WS5...
WS5100 login: cli User Access Verification Username: restore Password: restoreDefaultPassword WARNING:This will wipe out the con...
IPSec VPN offers the security and encryption features necessary to protect enterprise data, voice, and video traffic as it traverses public...
Components Used: The information in this document is based on the following hardware and software versions: · 1 x RFS4000 Swit...
The following section outlines the configuration steps required to configure 802.11i with 802.1X and pre-shared keys on a RF Switch: 1) ...
Snipe-IT is a free and open source, cross-platform, feature-rich IT asset management system built using a PHP framework called Laravel ...
RADIUS Authentication Attributes: The RADIUS protocol follows client-server architecture and uses the User Datagram Protocol (UDP) as de...
Use of ARP Cache in a network device Most of the network devices will have anARP cache; the content of the same will be a collection of IP...
Components Used: The information in this document is based on the following Motorola hardware and software versions: 1 x RFS6000 or ...
WS5100 login: cli User Access Verification Username: restore Password: restoreDefaultPassword WARNING:This will wipe out the con...
L3 Mobility Implementation With WS5100 version 3.0 · Implementation Overview · Key Concept · Mobility Excha...
Requirements: The following requirements must be met prior to attempting this configuration: One RFS4000 or RFS6000 WLAN Switch Contr...
Overview WiNG version 4.0 includes a rich suite of features which are included with each RF Switch at no additional charge as well as...
Components Used: The information in this document is based on the following hardware and software versions: · 1 x RFS4000 Swit...
Wireless filters can be applied to specific WLANs to grant or deny access to MUs based on individual or ranges of MAC addresses. Wireless f...