Part No. 216395-B Rev 00 April 2005

4655 Great America Parkway Santa Clara, CA 95054

Nortel WLAN — Security Switch (2270) Quick Installation Guide

Version 2.2

*216395-B REV 00*

2 Copyright © Nortel Networks Limited 2005. All rights reserved.

Copyright © Nortel Networks Limited 2005. All rights reserved. The information in this document is subject to change without notice. The statements, configurations, technical data, and recommendations in this document are believed to be accurate and reliable, but are presented without express or implied warranty. Users must take full responsibility for their applications of any products specified in this document. The information in this document is proprietary to Nortel.

Trademarks Nortel Networks, the Nortel Networks logo, the Globemark, and Unified Networks are trademarks of Nortel. Microsoft, Windows, and Windows NT are trademarks of Microsoft Corporation. Adobe and Acrobat Reader are trademarks of Adobe Systems Incorporated. Airespace is a trademark of Airespace, Inc. The asterisk after a name denotes a trademarked item.

Restricted rights legend Use, duplication, or disclosure by the United States Government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and clause at DFARS 252.227-7013. Notwithstanding any other license agreement that may pertain to, or accompany the delivery of, this computer software, the rights of the United States Government regarding its use, reproduction, and disclosure are as set forth in the Commercial Computer Software-Restricted Rights clause at FAR 52.227-19.

Statement of conditions In the interest of improving internal design, operational function, and/or reliability, Nortel Inc. reserves the right to make changes to the products described in this document without notice. Nortel Inc. does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein. Portions of the code in this software product may be Copyright © 1988, Regents of the University of California. All rights reserved. Redistribution and use in source and binary forms of such portions are permitted, provided that the above copyright notice and this paragraph are duplicated in all such forms and that any documentation, advertising materials, and other materials related to such distribution and use acknowledge that such portions of the software were developed by the University of California, Berkeley. The name of the University may not be used to endorse or promote products derived from such portions of the software without specific prior written permission. SUCH PORTIONS OF THE SOFTWARE ARE PROVIDED “AS IS” AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. In addition, the program and information contained herein are licensed only pursuant to a license agreement that contains restrictions on use and disclosure (that may incorporate by reference certain limitations and notices imposed by third parties).

216395-B Rev 00

Nortel Inc. software license agreement 3

USA requirements only

Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy. If it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required to take whatever measures may be necessary to correct the interference at their own expense.

Nortel Inc. software license agreement This Software License Agreement (“License Agreement”) is between you, the end-user (“Customer”) and Nortel Corporation and its subsidiaries and affiliates (“Nortel Networks”). PLEASE READ THE FOLLOWING CAREFULLY. YOU MUST ACCEPT THESE LICENSE TERMS IN ORDER TO DOWNLOAD AND/OR USE THE SOFTWARE. USE OF THE SOFTWARE CONSTITUTES YOUR ACCEPTANCE OF THIS LICENSE AGREEMENT. If you do not accept these terms and conditions, return the Software, unused and in the original shipping container, within 30 days of purchase to obtain a credit for the full purchase price. “Software” is owned or licensed by Nortel, its parent or one of its subsidiaries or affiliates, and is copyrighted and licensed, not sold. Software consists of machine-readable instructions, its components, data, audio-visual content (such as images, text, recordings or pictures) and related licensed materials including all whole or partial copies. Nortel grants you a license to use the Software only in the country where you acquired the Software. You obtain no rights other than those granted to you under this License Agreement. You are responsible for the selection of the Software and for the installation of, use of, and results obtained from the Software. 1.Licensed Use of Software. Nortel Networks grants Customer a nonexclusive license to use a copy of the Software on only one machine at any one time or to the extent of the activation or authorized usage level, whichever is applicable. To the extent Software is furnished for use with designated hardware or Customer furnished equipment (“CFE”), Customer is granted a nonexclusive license to use Software only on such hardware or CFE, as applicable. Software contains trade secrets and Customer agrees to treat Software as confidential information using the same care and discretion Customer uses with its own similar information that it does not wish to disclose, publish or disseminate. Customer will ensure that anyone who uses the Software does so only in compliance with the terms of this Agreement. Customer shall not a) use, copy, modify, transfer or distribute the Software except as expressly authorized; b) reverse assemble, reverse compile, reverse engineer or otherwise translate the Software; c) create derivative works or modifications unless expressly authorized; or d) sublicense, rent or lease the Software. Licensors of intellectual property to Nortel are beneficiaries of this provision. Upon termination or breach of the license by Customer or in the event designated hardware or CFE is no longer in use, Customer will promptly return the Software to Nortel or certify its destruction. Nortel may audit by remote polling or other reasonable means to determine Customer’s Software activation or usage levels. If suppliers of third party software included in Software require Nortel to include additional or different terms, Customer agrees to abide by such terms provided by Nortel with respect to such third party software. 2.Warranty. Except as may be otherwise expressly agreed to in writing between Nortel Networks and Customer, Software is provided “AS IS” without any warranties (conditions) of any kind. NORTEL NETWORKS DISCLAIMS ALL WARRANTIES (CONDITIONS) FOR THE SOFTWARE, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OF NON-INFRINGEMENT. Nortel Networks is not obligated to provide support of any kind for the Software. Some jurisdictions do not allow exclusion of implied warranties, and, in such event, the above exclusions may not apply. 3.Limitation of Remedies. IN NO EVENT SHALL NORTEL OR ITS AGENTS OR SUPPLIERS BE LIABLE FOR ANY OF THE FOLLOWING: a) DAMAGES BASED ON ANY THIRD PARTY CLAIM; b) LOSS OF, OR DAMAGE TO, CUSTOMER’S RECORDS, FILES OR DATA; OR c) DIRECT, INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES (INCLUDING LOST PROFITS OR SAVINGS), WHETHER IN

Nortel WLAN — Security Switch (2270) Quick Installation Guide

4 Nortel Inc. software license agreement

CONTRACT, TORT OR OTHERWISE (INCLUDING NEGLIGENCE) ARISING OUT OF YOUR USE OF THE SOFTWARE, EVEN IF NORTEL NETWORKS, ITS AGENTS OR SUPPLIERS HAVE BEEN ADVISED OF THEIR POSSIBILITY. The forgoing limitations of remedies also apply to any developer and/or supplier of the Software. Such developer and/or supplier is an intended beneficiary of this Section. Some jurisdictions do not allow these limitations or exclusions and, in such event, they may not apply. 4.General a)If Customer is the United States Government, the following paragraph shall apply: All Nortel Software available under this License Agreement is commercial computer software and commercial computer software documentation and, in the event Software is licensed for or on behalf of the United States Government, the respective rights to the software and software documentation are governed by Nortel standard commercial license in accordance with U.S. Federal Regulations at 48 C.F.R. Sections 12.212 (for non-DoD entities) and 48 C.F.R. 227.7202 (for DoD entities). b)Customer may terminate the license at any time. Nortel may terminate the license if Customer fails to comply with the terms and conditions of this license. In either event, upon termination, Customer must either return the Software to Nortel or certify its destruction. c)Customer is responsible for payment of any taxes, including personal property taxes, resulting from Customer’s use of the Software. Customer agrees to comply with all applicable laws including all applicable export and import laws and regulations. d)Neither party may bring an action, regardless of form, more than two years after the cause of the action arose. e)The terms and conditions of this License Agreement form the complete and exclusive agreement between Customer and Nortel. f)This License Agreement is governed by the laws of the country in which Customer acquires the Software. If the Software is acquired in the United States, then this License Agreement is governed by the laws of the state of New York.

Legal Information

This section includes the following legal information: • “Limited Product Warranty” on page 4 • “Software License Agreement” on page 6 • “SSH Source Code Statement” on page 8 • “OpenSSL Project License Statements” on page 9 • “Trademarks and Service Marks” on page 9

Limited Product Warranty The following sections describe the Nortel Networks standard Product Warranty for End Users.

Products 2270 Nortel WLAN — Wireless Security Switch (2270) Family WLAN — Access Ports 223x Family

Limited Warranty Nortel Networks standard warranty for hardware is one (1) year. Nortel Networks warrants software materials to be defect free for 90 Days from time of purchase. Nortel Networks requires purchasing the software subscription if a customer would like to receive new Nortel WLAN — Wireless Security Switch (2270),

216395-B Rev 00

Nortel Inc. software license agreement 5

Nortel 2270 WLAN Controller, or WLAN Management System software. This limited warranty extends only to you the original purchaser of the Product.

Exclusive Remedy Your sole remedy under the limited warranty described above is, at Nortel Networks’s sole option and expense, the repair or replacement of the non-conforming Product or refund of the purchase price of the non-conforming Products. Nortel Networks’s obligation under this limited warranty is subject to compliance with Nortel Networks’s then-current Return Material (“RMA”) procedures. All replaced Products will become the property of Nortel Networks. Exchange Products not returned to Nortel Networks will be invoiced at full Product list prices. Replacement Products may be new, reconditioned or contain refur- bished materials. In connection with any warranty services hereunder, Nortel Networks may in its sole discretion modify the Product at no cost to you to improve its reliability or performance.

Warranty Claim Procedures Should a Product fail to conform to the limited warranty during the applicable warranty period as described above, Nortel Networks must be notified during the applicable warranty period in order to have any obligation under the limited warranty. The End Customer or their designated reseller must obtain a Return Material Authorization number (RMA number) from Nortel Networks for the non-conforming Product and the non-conforming Product must be returned to Nortel Networks according to the then-current RMA procedures. The End Customer or their desig- nated reseller is responsible to ensure that the shipments are insured, with the transportation charges prepaid and that the RMA number is clearly marked on the outside of the package. Nortel Networks will not accept collect shipments or those returned without an RMA number clearly visible on the outside of the package. Exclusions and Restrictions Nortel Networks shall not be responsible for any software, firmware, information or memory data contained in, stored on or integrated with any Product returned to Nortel Networks pursuant to any warranty or repair. Upon return of repaired or replaced Products by Nortel Networks, the warranty with respect to such Products will continue for the remaining unexpired warranty or sixty (60) days, whichever is longer. Nortel Networks may provide out-of-warranty repair for the Products at its then-prevailing repair rates. The limited warranty for the Product does not apply if, in the judgment of Nortel Networks, the Product fails due to damage from shipment, handling, storage, accident, abuse or misuse, or it has been used or maintained in a manner not conforming to Product manual instructions, has been modified in any way, or has had any Serial Number removed or defaced. Repair by anyone other than Nortel Networks or an approved agent will void this warranty. EXCEPT FOR ANY EXPRESS LIMITED WARRANTIES FROM Nortel Networks SET FORTH ABOVE, THE PRODUCT IS PROVIDED “AS IS”, AND Nortel Networks AND ITS SUPPLIERS MAKE NO WARRANTY, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, WITH RESPECT TO PRODUCT OR ANY PART THEREOF, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTY OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR THOSE ARISING FROM COURSE OF PERFORMANCE, DEALING, USAGE OR TRADE. Nortel Networks’S SUPPLIERS MAKE NO DIRECT WARRANTY OF ANY KIND TO END CUSTOMER FOR THE LICENSED MATERIALS. NEITHER Nortel Networks NOR ANY OF ITS SUPPLIERS WARRANT THAT THE LICENSED MATERIALS OR ANY PART THEREOF WILL MEET END CUSTOMER'S REQUIREMENTS OR BE UNINTERRUPTED, OR ERROR-FREE, OR THAT ANY ERRORS IN THE

Nortel WLAN — Security Switch (2270) Quick Installation Guide

6 Nortel Inc. software license agreement

PRODUCT WILL BE CORRECTED. SOME STATES/JURISDICTIONS DO NOT ALLOW THE EXCLU- SION OF IMPLIED WARRANTIES SO THE ABOVE EXCLUSIONS MAY NOT APPLY TO END CUSTOMER. THIS LIMITED WARRANTY GIVES END CUSTOMER SPECIFIC LEGAL RIGHTS. END CUSTOMER MAY ALSO HAVE OTHER RIGHTS, WHICH VARY FROM STATE/JURISDICTION TO STATE/JURISDICTION. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL Nortel Networks OR ITS SUPPLIERS BE LIABLE FOR THE COST OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, LOSS OF PROFITS, OR FOR ANY SPECIAL, CONSEQUENTIAL, INCI- DENTAL, PUNITIVE OR INDIRECT DAMAGES (OR DIRECT DAMAGES IN THE CASE OF Nortel Networks’S SUPPLIERS) ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, TORT (INCLUDING WITHOUT LIMITATION NEGLIGENCE), STRICT LIABILITY OR OTHERWISE ARISING OUT OF OR RELATED TO THE PRODUCT OR ANY USE OR INABILITY TO USE THE PRODUCT. Nortel Networks’S TOTAL LIABILITY ARISING OUT OF OR RELATED TO THE PRODUCT, OR USE OR INABILITY TO USE THE PRODUCT, WHETHER IN CONTRACT, TORT (INCLUDING WITHOUT LIMITATION NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, SHALL NOT EXCEED THE PRICE PAID FOR THE PRODUCT. THE LIMITATIONS SET FORTH IN THIS SECTION SHALL APPLY EVEN IF Nortel Networks AND/OR ITS SUPPLIERS ARE ADVISED OF THE POSSIBILITY OF SUCH DAMAGE, AND NOTWITHSTANDING THE FAILURE OF ESSENTIAL PURPOSE OF ANY LIMITED REMEDY. Nortel Networks NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE OR USE OF ITS PRODUCTS.

Software License Agreement

PLEASE READ THIS SOFTWARE LICENSE AGREEMENT (“AGREEMENT”) CAREFULLY BEFORE USING THE SOFTWARE AND AS- SOCIATED DOCUMENTATION THAT IS PROVIDED WITH THIS AGREEMENT (“SOFTWARE,” “DOCUMENTATION,” AND COL- LECTIVELY, “LICENSED MATERIALS”). BY USING ANY LICENSED MATERIALS, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD ALL THE TERMS AND CONDITIONS OF THIS AGREEMENT AND YOU WILL BE CONSENTING TO BE BOUND BY THEM. IF YOU DO NOT ACCEPT THESE TERMS AND CONDITIONS, DO NOT USE THE LICENSED MATERIALS AND RETURN THE LICENSED MATERIALS AND ANY EQUIPMENT PROVIDED BY Nortel Networks IN CONNECTION THEREWITH (“EQUIPMENT”) UNUSED IN THE ORIGINAL SHIPPING CONTAINER TO THE PLACE OF PURCHASE FOR A FULL REFUND. Software may be provided by Nortel Networks on a standalone basis (“Standalone Software”) or it may be provided embed- ded in Equipment (“Embedded Software”). 1. License. (a) Subject to the terms and conditions of this Agreement, Nortel Networks (“Nortel Networks”), grants to you (“Lic- ensee”) a limited, non-exclusive, non-transferable license, without the right to sublicense: (i) to install and use the Standa- lone Software, in object code format only, on computer hardware for which all corresponding license fees have been paid; (ii) use one (1) copy of the Embedded Software, in object code format only, solely as embedded in Equipment, each solely in accordance with the Documentation for Licensee’s internal business purposes. (b) The license set forth above does not include any rights to and Licensee shall not (i) reproduce (except as set forth in Section 1(c)), modify, translate or create any derivative work of all or any portion of the Licensed Materials or Equip- ment, (ii) sell, rent, lease, loan, provide, distribute or otherwise transfer all or any portion of the Licensed Materials (except as set forth in Section 1(f)), (iii) reverse engineer, reverse assemble or otherwise attempt to gain access to the source code of all or any portion of the Licensed Materials or Equipment, (iv) use the Licensed Materials for third-party training, com- mercial time-sharing or service bureau use, (v) remove, alter, cover or obfuscate any copyright notices, trademark notices or other proprietary rights notices placed or embedded on or in the Licensed Materials or Equipment, (vi) use any component of the Software or Equipment other than solely in conjunction with operation of the Software and as applicable, Equipment, (vii) unbundle any component of the Software or Equipment, (viii) use any component of the Software for the development of or in conjunction with any software application intended for resale that employs any such component, (ix) use the Li- censed Materials or Equipment in life support systems, human implantation, nuclear facilities or systems or any other ap- plication where failure could lead to a loss of life or catastrophic property damage, or (x) cause or permit any third party to do any of the foregoing. If Licensee is a European Union resident, Licensee acknowledges that information necessary to achieve interoperability of the Software with other programs is available upon request.

216395-B Rev 00

Nortel Inc. software license agreement 7

(c) Licensee may make a single copy of the Standalone Software and Documentation solely for its back-up purposes; provided that any such copy is the exclusive property of Nortel Networks and its suppliers and includes all copyright and other intellectual property right notices that appear on the original. (d) Nortel Networks may provide updates, corrections, enhancements, modifications or bug fixes for the Licensed Materials (“Updates”) to Licensee. Any such Update shall be deemed part of the Licensed Materials and subject to the license and all other terms and conditions hereunder. (e) Nortel Networks shall have the right to inspect and audit Licensee’s use, deployment, and exploitation of the Licensed Materials for compliance with the terms and conditions of this Agreement. (f) Licensee shall have the right to transfer the Embedded Software as embedded in Equipment in connection with a transfer of all of Licensee’s right, title and interest in such Equipment to a third party; provided, that, Licensee transfers the Embedded Software and any copies thereof subject to the terms and conditions of this Agreement and such third party agrees in writing to be bound by all the terms and conditions of this Agreement. (g) Notwithstanding anything to the contrary herein, certain portions of the Software are licensed under and Licens- ee's use of such portions are only subject to the GNU General Public License version 2. If Licensee or any third party sends a request in writing to Nortel Networks at 110 Nortech Parkway, San Jose CA 95134, ATTN: Contracts Administration, Nortel Networks will provide a complete machine-readable copy of the source code of such portions for a nominal cost to cover Nortel Networks's cost in physically providing such code. 2. Ownership. Nortel Networks or its suppliers own and shall retain all right, title and interest (including without limitation all intellectual property rights), in and to the Licensed Materials and any Update, whether or not made by Nortel Networks. Licensee acknowledges that the licenses granted under this Agreement do not provide Licensee with title to or ownership of the Licensed Materials, but only a right of limited use under the terms and conditions of this Agreement. Except as expressly set forth in Section 1, Nortel Networks reserves all rights and grants Licensee no licenses of any kind hereunder. All infor- mation or feedback provided by Licensee to Nortel Networks with respect to the Software or Equipment shall be Nortel Net- works’s property and deemed confidential information of Nortel Networks. 3. Confidentiality. Licensee agrees that the Licensed Materials contain confidential information, including trade secrets, know-how, and information pertaining to the technical structure or performance of the Software, that is the exclusive prop- erty of Nortel Networks as between Licensee and Nortel Networks. In addition, Nortel Networks’s confidential information includes any confidential or trade secret information related to the Licensed Materials. During the period this Agreement is in effect and at all times thereafter, Licensee shall maintain Nortel Networks’s confidential information in confidence and use the same degree of care, but in no event less than reasonable care, to avoid disclosure of Nortel Networks’s confidential information as it uses with respect to its own confidential and proprietary information of similar type and importance. Lic- ensee agrees to only disclose Nortel Networks’s confidential information to its directors, officers and employees who have a bona fide need to know solely to exercise Licensee’s rights under this Agreement and to only use Nortel Networks’s con- fidential information incidentally in the customary operation of the Software and Equipment. Licensee shall not sell, license, sublicense, publish, display, distribute, disclose or otherwise make available Nortel Networks’s confidential information to any third party nor use such information except as authorized by this Agreement. Licensee agrees to immediately notify Nortel Networks of the unauthorized disclosure or use of the Licensed Materials and to assist Nortel Networks in remedying such unauthorized use or disclosure. It is further understood and agreed that any breach of this Section 3 or Section 1(b) is a material breach of this Agreement and any such breach would cause irreparable harm to Nortel Networks and its sup- pliers, entitling Nortel Networks or its suppliers to injunctive relief in addition to all other remedies available at law. 4. Limited Warranty & Disclaimer. Any limited warranty for the Licensed Materials and Nortel Networks’s sole and exclu- sivity liability thereunder is as set forth in Nortel Networks’s standard warranty documentation. In addition, any limited war- ranty for the Software does not apply to any component of the Software but only to the Software as a whole. EXCEPT FOR ANY EXPRESS LIMITED WARRANTIES FROM Nortel Networks IN SUCH DOCUMENTATION, THE LICENSED MATERIALS ARE PROVIDED “AS IS”, AND Nortel Networks AND ITS SUPPLIERS MAKE NO WARRANTY, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, WITH RESPECT TO LICENSED MATERIALS OR ANY PART THEREOF, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTY OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR THOSE ARISING FROM COURSE OF PERFORMANCE, DEALING, USAGE OR TRADE. Nortel Networks’S SUPPLIERS MAKE NO DIRECT WARRANTY OF ANY KIND TO LICENSEE FOR THE LICENSED MATERIALS. NEITHER Nortel Networks NOR ANY OF ITS SUP- PLIERS WARRANT THAT THE LICENSED MATERIALS OR ANY PART THEREOF WILL MEET LICENSEE’S REQUIREMENTS OR BE UNINTERRUPTED, OR ERROR-FREE, OR THAT ANY ERRORS IN THE LICENSED MATERIALS WILL BE CORRECTED. SOME STATES/JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES SO THE ABOVE EXCLUSIONS MAY NOT APPLY TO LICENSEE. THIS LIMITED WARRANTY GIVES LICENSEE SPECIFIC LEGAL RIGHTS. LICENSEE MAY ALSO HAVE OTHER RIGHTS, WHICH VARY FROM STATE/JURISDICTION TO STATE/JURISDICTION. 5. Term and Termination. This Agreement is effective until terminated. License may terminate this Agreement at any time by destroying all copies of the Software. This Agreement and all licenses granted hereunder will terminate immediately without notice from Nortel Networks if Licensee fails to comply with any provision of this Agreement. Upon any termination, Licensee must destroy all copies of the Licensed Materials. Sections 1(b), 2, 3, 4(b), 5, 6, 7, 8, 9 and 10 shall survive any termination of this Agreement. 6. Export. The Software is specifically subject to U.S. Export Administration Regulations. Licensee agrees to strictly com- ply with all export, re-export and import restrictions and regulations of the Department of Commerce or other agency or authority of the United States or other applicable countries, and not to transfer, or authorize the transfer of, directly or in- directly, the Software or any direct product thereof to a prohibited country or otherwise in violation of any such restrictions or regulations. Licensee’s failure to comply with this Section is a material breach of this Agreement. Licensee acknowledges that Licensee is not a national of Cuba, Iran, Iraq, Libya, North Korea, Sudan or Syria or a party listed in the U.S. Table of Denial Orders or U.S. Treasury Department List of Specially Designated Nationals. 7. Government Restricted Rights. As defined in FAR section 2.101, DFAR section 252.227-7014(a)(1) and DFAR section

Nortel WLAN — Security Switch (2270) Quick Installation Guide

8 Nortel Inc. software license agreement

252.227-7014(a)(5) or otherwise, the Software provided in connection with this Agreement are “commercial items,” “com- mercial computer software” and/or “commercial computer software documentation.” Consistent with DFAR section 227.7202, FAR section 12.212 and other sections, any use, modification, reproduction, release, performance, display, dis- closure or distribution thereof by or for the U.S. Government shall be governed solely by the terms of this Agreement and shall be prohibited except to the extent expressly permitted by the terms of this Agreement. Any technical data provided that is not covered by the above provisions shall be deemed “technical data-commercial items” pursuant to DFAR section 227.7015(a). Any use, modification, reproduction, release, performance, display or disclosure of such technical data shall be governed by the terms of DFAR section 227.7015(b). 8. Limitation of Liability. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL Nortel Net- works OR ITS SUPPLIERS BE LIABLE FOR THE COST OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, LOSS OF PROFITS, OR FOR ANY SPECIAL, CONSEQUENTIAL, INCIDENTAL, PUNITIVE OR INDIRECT DAMAGES (OR DIRECT DAMAGES IN THE CASE OF Nortel Networks’S SUPPLIERS) ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, TORT (INCLUDING WITHOUT LIMITATION NEGLIGENCE), STRICT LIABILITY OR OTHERWISE ARISING OUT OF OR UNDER THIS AGREEMENT OR ANY USE OR INABILITY TO USE THE LICENSED MATERIALS OR EQUIPMENT, OR FOR BREACH OF THIS AGREEMENT. Nortel Networks’S TOTAL LIABILITY ARISING OUT OF OR UNDER THIS AGREEMENT, OR USE OR INABILITY TO USE THE LICENSED MATERIALS OR EQUIPMENT, OR FOR BREACH OF THIS AGREEMENT, WHETHER IN CONTRACT, TORT (INCLUD- ING WITHOUT LIMITATION NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, SHALL NOT EXCEED THE PRICE PAID FOR THE SOFTWARE (FOR THE STANDALONE SOFTWARE) AND THE PRICE PAID FOR THE EQUIPMENT (FOR THE EMBEDDED SOFTWARE AND EQUIPMENT). THE LIMITATIONS SET FORTH IN THIS SECTION SHALL APPLY EVEN IF Nortel Networks AND/ OR ITS SUPPLIERS ARE ADVISED OF THE POSSIBILITY OF SUCH DAMAGE, AND NOTWITHSTANDING THE FAILURE OF ES- SENTIAL PURPOSE OF ANY LIMITED REMEDY. 9. Third Party Beneficiaries. Nortel Networks’s suppliers are intended third party beneficiaries of this Agreement. The terms and conditions herein are made expressly for the benefit of and are enforceable by Nortel Networks’s suppliers; pro- vided, however, that Nortel Networks’s suppliers are not in any contractual relationship with Licensee. Nortel Networks’s suppliers include without limitation: (a) Hifn, Inc., a Delaware corporation with principal offices at 750 University Avenue, Los Gatos, California; and (b) Wind River Systems, Inc. and its suppliers. 10. General. This Agreement is governed and interpreted in accordance with the laws of the State of California, U.S.A. without reference to conflicts of laws principles and excluding the United Nations Convention on Contracts for the Sale of Goods. The parties consent to the exclusive jurisdiction of, and venue in, Santa Clara County, California, U.S.A. Licensee shall not transfer, assign or delegate this Agreement or any rights or obligations hereunder, whether voluntarily, by opera- tion of law or otherwise, without the prior written consent of Nortel Networks (except as expressly set forth in Section 1(f)). Subject to the foregoing, the terms and conditions of this Agreement shall be binding upon and inure to the benefit of the parties to it and their respective heirs, successors, assigns and legal representatives. This Agreement constitutes the entire agreement between Nortel Networks and Licensee with respect to the subject matter hereof, and merges all prior negotia- tions and drafts of the parties with regard thereto. No modification of or amendment to this Agreement, nor any waiver of any rights under this Agreement, by Nortel Networks shall be effective unless in writing. If any of the provisions of this Agreement is held by a court of competent jurisdiction to be invalid or unenforceable under any applicable statute or rule of law, such provision shall, to that extent, be deemed omitted.

SSH Source Code Statement

C 1995 - 2004 SAFENET, Inc. This software is protected by international copyright laws. All rights reserved. SafeNet is a registered trademark of SAFENET, Inc., in the United States and in certain other jurisdictions. SAFENET and the SAFENET logo are trademarks of SAFENET, Inc., and may be registered in certain jurisdictions. All other names and marks are prop- erty of their respective owners. Copyright (c) 1983, 1990, 1992, 1993, 1995 The Regents of the University of California. All rights reserved. THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRAN- TIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTIC- ULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PRO- CUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POS- SIBILITY OF SUCH DAMAGE. Components of the software are provided under a standard 2-term BSD licence with the following names as copyright hold- ers: o Markus Friedl o Theo de Raadt o Niels Provos o Dug Song oAaron Campbell o Damien Miller

216395-B Rev 00

Nortel Inc. software license agreement 9

o Kevin Steves o Daniel Kouril o Per Allansson THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DIS- CLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVIC- ES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIA- BILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

OpenSSL Project License Statements

Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved. THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, IN- CLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PUR- POSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PRO- CUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POS- SIBILITY OF SUCH DAMAGE. Copyright (C) 1995-1998 Eric Young ([email protected]). All rights reserved. THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DIS- CLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Trademarks and Service Marks Nortel Networks, and the Nortel Networks logo are registered trademarks, and management software is a trademark of Nortel Networks All other trademarks belong to their respective holders.

Nortel WLAN — Security Switch (2270) Quick Installation Guide

10 FCC Statements for WLAN — Security Switches (2270)

FCC Statements for WLAN — Security Switches (2270) This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.

216395-B Rev 00

FCC Statements for Nortel WLAN — Controllers (2270) 11

FCC Statements for Nortel WLAN — Controllers (2270) This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interfer- ence that may cause unwanted operation This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following safety measures. • Reorient or relocate the receiving antenna. • Increase the separation between the equipment and the receiver. • Consult the dealer or an experienced radio/modem technician for help.

Nortel WLAN — Security Switch (2270) Quick Installation Guide

12 FCC Statements for WLAN — Access Ports 223x

FCC Statements for WLAN — Access Ports 223x This section includes the following FCC statements for WLAN — Access Ports 223x: • “Class A Statement” on page 12 • “RF Radiation Hazard Warning” on page 12 • “Non-Modification Statement” on page 12 • “Deployment Statement” on page 12

Class A Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equip- ment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio com- munications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.

RF Radiation Hazard Warning To ensure compliance with FCC RF exposure requirements, this device must be installed in a location such that the antenna of the device will be greater than 20 cm (8 in.) from all persons. Using higher gain antennas and types of antennas not covered under the FCC certification of this product is not allowed. Installers of the radio and end users of the Nortel 2200 Series must adhere to the installation instructions provided in this manual.

Non-Modification Statement Use only the supplied internal antenna, or external antennas supplied by the manufacturer. Unauthorized antennas, modi- fications, or attachments could damage the badge and could violate FCC regulations and void the user’s authority to operate the equipment.

Note: Refer to the Nortel 2200 Series Release Notes Part # 216400-B for 802.11a external antenna information. Contact Nortel Networks for a list of FCC-approved 802.11a and 802.11b/g external antennas.

Deployment Statement This product is certified for indoor deployment only. Do not install or use this product outdoors.

216395-B Rev 00

Industry Canada Required User Information for WLAN — Access Ports 223x 13

Industry Canada Required User Information for WLAN — Access Ports 223x This device has been designed to operate with antennae having maximum gains of 7.8 dBi (2.4 GHz) and 7.4 dBi (5 GHz). Antennae having higher gains is strictly prohibited per regulations of Industry Canada. The required antenna impedance is 50 ohms. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equiva- lent isotropically radiated power (EIRP) is not more than that required for successful communication. This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. To ensure compliance with EMC standards applied to the Nortel WLAN — Wireless Security Switches (2270), shielded twisted pair (STP) 10/100Base-T cabling must be used.

Nortel WLAN — Security Switch (2270) Quick Installation Guide

14 Nortel WLAN — Security Switch (2270) Quick Installation Guide Nortel WLAN — Security Switch (2270) Quick Installation Guide

WLAN — Security Switch (2270) Quick Installation Guide

This Guide contains the following sections that enable you to install Nortel 2200 WLAN Switches and Nortel 2200 WLAN Controllers: • “Overview” on page 15 • “Step 1: Collecting Required Tools and Information” on page 18 • “Step 2: Determining a Location” on page 20 • “Step 3: Installing the Chassis” on page 21 • “Step 4: Connecting and Using the CLI Console” on page 22 • “Step 5: Performing Power On Self Test” on page 23 • “Step 6: Using the Startup Wizard” on page 26 • “Step 7: Logging In” on page 28 • “Step 8: Connecting the Network (Distribution System)” on page 29 • “Step 9: Connecting the Service Port Interfaces” on page 31 • “Step 10: Connecting Access Ports” on page 33 • “Step 11: WLAN — Security Switch (2270) Software Upgrades” on page 34 • “Step 13: Where to Go from Here” on page 36

FCC Statements for WLAN Security Switches (2270)FCC Statements for WLAN Security Switches (2270) This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.

Safety ConsiderationsSafety Considerations • Verify that the ambient temperature remains between 0 to 40° C (32 to 104° F), taking into account the elevated temperatures when installed in a rack or an enclosed space. • When multiple Nortel WLAN — Wireless Security Switches (2270) are mounted in an equipment rack, be sure that the power source is sufficiently rated to safety run all of the equipment in the rack. • Verify the integrity of the electrical ground before installing WLAN — Security Switches (2270).

216395-B Rev 00

Overview 15

OverviewOverview This guide is designed to provide you with the information needed to install Nortel WLAN — Wireless Security Switches (2270). Nortel Networks WLAN — Wireless Security Switches (2270) are part of the innovative Nortel 2200 Series. This document assumes that the 802.11 topology has been determined as described in the, Appliance Mode section in the Nortel Product Guide 320298-A. Because the management software feature automatically detects and configures the Nortel WLAN — Access Ports (223x) as they appear on the network, it is not necessary to have any WLAN — Access Ports (223x) on the network to install and configure WLAN Security Switches (2270). The WLAN — Security Switch (2270) is a slim 9 x 5.5 x 1.5 in. (22.9 x 14.0 x 3.8 cm) chassis that can be rack, desktop, or shelf mounted. As shown in the following figures, the WLAN — Security Switch (2270) is shipped with 19 inch (48.26 cm) EIA rack-mount ears and four rubber desktop/shelf mounting feet. The following figure shows the 2270 Nortel WLAN — Wireless Security Switch (2270), which has two front-panel 1000Base-SX connectors. The Nortel WLAN — Wireless Security Switch (2270) is similar, except that it has one front-panel 1000Base-SX connectors instead of two. Note that the 1000Base-SX Network Adapters provides 100/ 1000 Mbps wired connections to a network through 850nM (SX) fiber-optic links using LC physical connectors.

Figure - 1. 2270 Nortel WLAN — Wireless Security Switch (2270)

Nortel WLAN — Security Switch (2270) Quick Installation Guide

16 Overview

The following figure shows typical WLAN — Security Switch (2270) network topology and network connections:

Figure - 2. Typical WLAN — Security Switch (2270) Topology and Network Connections

All Nortel WLAN — Wireless Security Switches (2270) are operated in Appliance Mode only. In Appliance Mode, the WLAN — Security Switch (2270) communicates indirectly with up to 36 Nortel WLAN — Wireless Security Switches (2270), up to 24 or up to 12 associated WLAN — Access Ports (223x) (and/or Third-Party APs for Nortel WLAN — Wireless Security Switches (2270)) through the network. The following figure shows a Nortel Networks WLAN — Wireless Security Switch (2270) in Appliance Mode.

216395-B Rev 00

Overview 17

Figure - 3. WLAN — Security Switch (2270) Deployed in Appliance Mode

Continue with the following steps to install, configure, and use the WLAN — Security Switch (2270): • “Step 1: Collecting Required Tools and Information” on page 18 • “Step 2: Determining a Location” on page 20 • “Step 3: Installing the Chassis” on page 21 • “Step 4: Connecting and Using the CLI Console” on page 22 • “Step 5: Performing Power On Self Test” on page 23 • “Step 6: Using the Startup Wizard” on page 26 • “Step 7: Logging In” on page 28 • “Step 8: Connecting the Network (Distribution System)” on page 29 • “Step 9: Connecting the Service Port Interfaces” on page 31 • “Step 10: Connecting Access Ports” on page 33 • “Step 13: Where to Go from Here” on page 36

Nortel WLAN — Security Switch (2270) Quick Installation Guide

18 Step 1: Collecting Required Tools and Information

Step 1: Collecting Required Tools and InformationStep 1: Collecting Required Tools and Information

WLAN — Security Switch (2270) HardwareWLAN — Security Switch (2270) Hardware • WLAN — Security Switch (2270) (ships with factory-supplied power cord and mounting hardware). • Network, Service network, and Access Port cables, as required.

CLI ConsoleCLI Console • VT-100 terminal emulator on CLI Console or palmtop. • Null modem serial cable to connect CLI Console and WLAN — Security Switch (2270) DB-9 Console port.

Local TFTP ServerLocal TFTP Server • Required for error-free Operating System software updates. (Contact Technical Support for software updates.)

Note: The WLAN Management System Software uses an integral TFTP server. This means that third-party TFTP servers cannot run on the same workstation as the WLAN Management System Software, because the WLAN Management System Software and the third-party TFTP servers use the same communication port.

Initial System Configuration InformationInitial System Configuration Information • Obtain the following initial configuration parameters from the wireless LAN/network planner: - System (WLAN — Security Switch (2270)) name. - Administrative user name and password. (Default Administrative user name and password are admin and admin, respectively.)

Note: The Service-Port Interface and Management Interface MUST be on different subnets.

- Service-Port Interface IP Address configuration protocol (none or DHCP). (Refer to Figure - 1. in the “Overview” on page 15 for the Service port location.) - If Service port configuration protocol = none, Service Port (front-panel Service port) IP Address and Service Port netmask. - Management Interface (DS Port, or Network Interface Port) IP Address. (Refer to Figure - 1. in the “Overview” on page 15 for the Distribution System port locations.) - Management Interface netmask. - Management Interface default router IP address. - VLAN identifier, if the Management Interface is assigned to a VLAN, or ‘0’ for an untagged VLAN. - Distribution System Physical Port number: * 1 - 12 for front panel or 13 for GigE port * 1 -24 for front panel or 25 for GigE port * 1 for the front panel GigE port * 2270: 1 for either front panel GigE port

216395-B Rev 00

Initial System Configuration Information 19

- IP address of the default DHCP Server that will supply IP Addresses to clients, the WLAN — Secu- rity Switch (2270) Management Interface, and optionally to the Service Port Interface. - LWAPP Transport Mode, LAYER2 or LAYER3 (refer to Layer 2 and Layer 3 Operation in the Nortel Product Guide 320298-A). - Virtual Gateway IP Address: one fictitious, unassigned IP address (such as 1.1.1.1) to be used by all Nortel 2200 Series Layer 3 Security and Mobility managers. - Nortel Mobility Group (RF Group) Name, if required. - 802.11 Network Name (SSID) for WLAN 1. This is the default SSID that the WLAN — Access Ports (223x), or Nortel WLAN — Access Port (223x), broadcast when they associate with the WLAN — Security Switch (2270). - Whether or not to allow Static IP Addresses for clients. * Yes = more convenient, but lower security (session can be hijacked), clients can supply their own IP Address, better for devices that cannot use DHCP. * No = less convenient, higher security, clients must use DHCP for an IP Address, works well for Windows XP devices. - When you are configuring a RADIUS server, the server IP address, communication port, and Secret. - Country Code for this installation. Refer to Configuring the WLAN — Security Switch (2270) and Nortel 2200 Series Supported Regulatory Domains in the Nortel Product Guide 320298-A. - 802.11b network enabled or disabled? - 802.11a network enabled or disabled? - 802.11g network enabled or disabled? - management software (Auto-RF) enabled or disabled? Continue with “Step 2: Determining a Location” on page 20.

Nortel WLAN — Security Switch (2270) Quick Installation Guide

20 Step 2: Determining a Location

Step 2: Determining a LocationStep 2: Determining a Location The compact WLAN — Security Switch (2270) can be installed almost anywhere, but security and reliability concerns can be addressed by installing the WLAN — Security Switch (2270) in a secure equipment room or wiring closet. For maximum reliability, mount the WLAN — Security Switch (2270) using the following constraints: • Ensure you can reach the WLAN — Security Switch (2270) and all cables. • Ensure that water or excessive moisture cannot get into the WLAN — Security Switch (2270). • Ensure that airflow through the WLAN — Security Switch (2270) is not obstructed. Leave at least 4 inches clear on both sides of the WLAN — Security Switch (2270) chassis. • Verify that the ambient temperature remains between 0 to 40° C (32 to 104° F). • When the WLAN — Security Switch (2270) is used in Appliance Mode, ensure it is within 100 m (328 ft.) to any equipment connected to the 10/100Base-T ports. • When a switch is in Appliance Mode, ensure it is within 100 m (328 ft.) of equipment connected to the optional 1000Base-T port. • When a WLAN — Security Switch (2270) is in Appliance Mode, ensure it is within one of the following distances of equipment connected to the optional 1000Base-SX port: - 220 m (722 ft.) when using 160 MHz-km rated 62.5/125 µm multimode fiber. - 275 m (902 ft.) when using 200 MHz-km rated 62.5/125 µm multimode fiber. - 400 m (1312 ft.) when using 400 MHz-km rated 50/125 µm multimode fiber. - 500 m (1641 ft.) when using 500 MHz-km rated 50/125 µm multimode fiber. Note that the 1000Base-SX 1GE ports provide 100/1000 Mbps wired connections to a network through 850nM (SX) fiber-optic links using LC physical connectors.

CAUTION: DO NOT look at the Fiber Optic connector or cable ends when the transmit laser is activated. You can permanently damage your eyes by looking at the fiber-optic laser beam.

• Ensure that the power cord can reach a 110 or 220 VAC grounded electrical outlet. Continue with “Step 3: Installing the Chassis” on page 21.

216395-B Rev 00

Step 3: Installing the Chassis 21

Step 3: Installing the ChassisStep 3: Installing the Chassis The WLAN — Security Switch (2270) is shipped with rack-mounting ears attached, and the desktop/shelf mounting rubber feet in a separate bag. Mount the WLAN — Security Switch (2270) as follows: • When you are mounting the WLAN — Security Switch (2270) on a desktop or shelf, adhere the rubber feet to the bottom of the chassis, and place the chassis on any secure horizontal surface. Note that you may also remove the rack mounting ears from the WLAN — Security Switch (2270), if desired. • When you are mounting the WLAN — Security Switch (2270) in an EIA-standard rack, attach the ears to the equipment rack using the factory-supplied screws as shown in the following figure. Note that you can remove the rubber feet from the bottom of the WLAN — Security Switch (2270), if desired.

Figure - 4. Mounted in an Equipment Rack

You have installed the WLAN — Security Switch (2270) chassis. Continue with “Step 4: Connecting and Using the CLI Console” on page 22.

Nortel WLAN — Security Switch (2270) Quick Installation Guide

22 Step 4: Connecting and Using the CLI Console

Step 4: Connecting and Using the CLI ConsoleStep 4: Connecting and Using the CLI Console For initial system configuration, Nortel recommends that you use the Command Line Interface Console. As shown in the following figure, the CLI Console connects to the WLAN — Security Switch (2270) front-panel Console port.

Figure - 5. CLI Console Connection to an WLAN — Security Switch (2270)

Note: You can also use Nortel WLAN — Management System Software to configure the WLAN — Security Switch (2270), but the WLAN Management System Software computer may not be as portable as the CLI Console.

Do the following to connect the CLI Console to the WLAN — Security Switch (2270): • Use a null-modem serial cable to connect the CLI Console to the WLAN — Security Switch (2270) Console port. Note that the WLAN — Security Switch (2270) end of the cable is female DB-9. The other end should be whatever plugs into your VT-100 terminal emulator (usually a laptop or palmtop computer). • Ensure the VT-100 terminal emulator (HyperTerminal, ProComm, minicom, tip, or other) is configured for the following parameters: - 9600 baud - 8 data bits - no flow control - 1 stop bit - no parity • Continue with “Step 5: Performing Power On Self Test” on page 23.

216395-B Rev 00

Step 5: Performing Power On Self Test 23

Step 5: Performing Power On Self TestStep 5: Performing Power On Self Test When you plug a WLAN Security Switch (2270) into an AC power source, the bootup script initializes the system, verifies the hardware configuration, loads its microcode into memory, verifies its Operating System software load, and initializes itself with its stored configurations. Do the following to perform POST and Operating System software initialization:

Note: This procedure assumes that you have connected the CLI Console to the WLAN — Security Switch (2270) as described in “Step 4: Connecting and Using the CLI Console” on page 22.

• Plug an AC power cord into the rear of the WLAN — Security Switch (2270), and connect the other end to a grounded 95 to 260 VAC 50/60 Hz electrical outlet. Note that Nortel supplies a North-American standard power cord; if you need a different country-specific cord, ensure the WLAN — Security Switch (2270) end of the cord conforms with the IEC 320 standard.

Note: If you wish to run a previous version of the WLAN — Security Switch (2270) code, press the key immediately after the Model and S/N line. This will take you to the Bootloader Boot Options Menu.

• Monitor the WLAN — Security Switch (2270) bootup using the CLI Screen: - The Bootup script displays Operating System software initialization (code download and POST ver- ification) and basic configuration as shown in the following sample Bootup display:

Model Nortel - S/N: 01012403-10037905-01007

Press now for additional boot options... (If desired, press now to display the Bootloader Boot Options Menu.) Boot Options Please choose an option from below: 1. Run active image (version 2.2.148.2) 2. Run backup image (version 2.0.150.50) 3. Manually perform system upgrade 4. Clear Configuration Please enter your choice: Enter 1 to run the current WLAN — Security Switch (2270) Code, Enter 2 to run the previous WLAN — Security Switch (2270) Code, Enter 4 to run the current WLAN — Security Switch (2270) Code and clear the WLAN — Security Switch (2270) configuration to factory defaults. (Do not enter 3 unless directed to do so by Nortel Technical Support.)

Nortel WLAN — Security Switch (2270) Quick Installation Guide

24 Step 5: Performing Power On Self Test

BOOT Uncompressing RTOS Image ... OK Loading Code at f0100000 ... Relocating Code to 0785e000, end 07fa649e ... OK Detecting hardware .... (This may take a long time. Do not reboot the WLAN — Security Switch (2270) at this time.) (The rest of this process takes two to three minutes. Do not reboot the WLAN — Security Switch (2270) until you receive the user login prompt.) Software Copyright 2005 All rights reserved. Operating System Version 2.2.148.2 Checking for new bootloader: Upgrading... ok Initializing OS Services: ok Initializing Serial Services: ok Initializing Network Services: ok Starting ARP Services: ok Starting System Services: ok Starting Fast Path Hardware Acceleration: ok Starting Switching Services: ok Starting QOS Services: ok Starting Network Interfaces: ok Starting Access Control List Services: ok Starting System Interfaces: ok Starting LWAPP: ok Starting Crypto Accelerator: ok Starting Certificate Database: ok Starting VPN Services: ok Starting Security Services: ok Starting Policy Manager: ok Starting Virtual AP Services: ok Starting Mobility Management: ok Starting Authentication Engine: ok Starting Broadcast Services: ok Starting Power Over Ethernet Services: ok Starting Logging Services: ok Starting Management Services: Web Server: ok CLI: ok Secure Web: Web Authentication Certificate not found (error). (Nortel switch) • If this is the first time an WLAN — Security Switch (2270) has been powered up, or if you enter ‘Recover-Config’ in the User: prompt, the bootup script runs the Startup Wizard, which prompts you for basic configuration inputs. • If this is the second or later time you have powered up an WLAN — Security Switch (2270), the bootup script prompts you for a login and password. Enter the login and password as described in “Step 7: Logging In” on page 28, or enter Recover-Config to reset the WLAN — Security Switch (2270) configuration to factory defaults.

216395-B Rev 00

Step 5: Performing Power On Self Test 25

In either of the last two cases, the WLAN — Security Switch (2270) has passed the POST test. When required, continue with “Step 6: Using the Startup Wizard” on page 26.

Nortel WLAN — Security Switch (2270) Quick Installation Guide

26 Step 6: Using the Startup Wizard

Step 6: Using the Startup WizardStep 6: Using the Startup Wizard • The first time you power up the WLAN — Security Switch (2270) with a new factory Operating System configuration, use the Startup Wizard to do the following:

Note: Use the information you collected in “Step 1: Collecting Required Tools and Information” on page 18 for this Step.

- Enter the System (WLAN — Security Switch (2270)) Name, up to 32 printable ASCII characters. - Enter the Administrative User Name and Password, each up to 24 printable ASCII characters. The default Administrative User login and password are admin and admin, respectively.

Note: The Service-Port Interface and Management Interface must be on different subnets.

- Enter the Service-Port Interface IP configuration protocol (none, or DHCP). If you do not want to use the Service port or if you want to assign a static IP Address to the Service port, enter none. If you entered none, enter Service-Port Interface IP Address and netmask on the next two lines. If you do not want to use the Service port, enter 0.0.0.0 for the IP Address and netmask. - Enter the Management Interface (refer to Management Interface in the Nortel Product Guide) IP Address, netmask, default router IP address, and optional VLAN identifier (a valid VLAN identifier, or ‘0’ for untagged). - Network Interface (Distribution System) Physical Port number: * : 1 - 12 for front panel or 13 for GigE port * : 1 - 24 for front panel or 25 for GigE port * : 1 for the front panel GigE port * 2270: 1 for either front panel GigE port - Enter the IP address of the default DHCP Server that will supply IP Addresses to clients, the WLAN — Security Switch (2270) Management Interface, and optionally to the Service Port Interface. - Enter the LWAPP Transport Mode, LAYER2 or LAYER3 (refer to Layer 2 and Layer 3 Operation in the Nortel Product Guide). - Enter the Virtual Gateway IP Address; one fictitious, unassigned IP address (such as 1.1.1.1) to be used by all Nortel 2200 Series Layer 3 Security and Mobility managers. - Enter the Nortel Mobility Group (RF Group) Name. - Enter the WLAN 1 SSID, or Network Name. This is the default SSID that the WLAN — Access Ports (223x) broadcast when they associate with the WLAN — Security Switch (2270). - Allow or disallow Static IP Addresses for clients. (Yes = clients can supply their own IP Address. No = clients must request an IP Address from a DHCP server.) - If you are configuring a RADIUS Server now, enter YES, and the RADIUS Server IP Address, com- munication port, and Secret. Otherwise, enter NO. - Enter the Country Code for this installation. Type ‘help’ to list the supported countries, and refer to Configuring the WLAN — Security Switch (2270) and Nortel 2200 Series Supported Regulatory Domains in the Nortel Product Guide 320298-A. - Independently enable and/or disable the 802.11b, 802.11a, and 802.11g WLAN — Access Port (223x) networks.

216395-B Rev 00

Step 6: Using the Startup Wizard 27

- Enable or disable the management software (Auto RF). The WLAN — Security Switch (2270) saves your configuration, reboots with your changes, and prompts you to log in or enter ‘Recover-Config’ to repeat this Step.

Nortel WLAN — Security Switch (2270) Quick Installation Guide

28 Step 7: Logging In

Step 7: Logging InStep 7: Logging In • Enter a valid login and password to enter the CLI.

Note: The login and password functions are case sensitive. The default Administrative User login and password are admin and admin, respectively.

User: Password: • The CLI displays the root level system prompt: (system prompt)> The system prompt can be any alphanumeric string, up to 31 characters. You can change it using the config prompt command. Because this is a user-defined variable, it is omitted from the rest of this documentation. • The CLI automatically logs you out without saving any changes after five minutes of inactivity. This automatic logout can be set from 0 (never log out) to 160 minutes using the config serial timeout command. • Refer to the Navigating the CLI and Logging Out of the CLI sections in the Nortel Product Guide 320298-A for more information. You have logged into the WLAN — Security Switch (2270). Continue with “Step 8: Connecting the Network (Distribu- tion System)” on page 29.

216395-B Rev 00

Step 8: Connecting the Network (Distribution System) 29

Step 8: Connecting the Network (Distribution System)Step 8: Connecting the Network (Distribution System) See the following figure for up to three possible connections from the network (Distribution System) to the WLAN — Security Switch (2270). • The three connections are: - 1000Base-T (GigE, rear panel, RJ-45 physical port, unshielded twisted pair UTP cable). - 10/100Base-T (Ethernet, front panel, RJ-45 physical port, UTP cable). - 1000Base-SX (GigE, rear panel, LC physical port, multi-mode fiber optic cable). For the 2270 Nortel WLAN — Wireless Security Switch (2270), the connections are: • One or two (2270) 1000Base-SX (GigE, front panel, LC physical port, multi-mode fiber optic cable). Note that the 1000Base-SX 1GE ports provide 100/1000 Mbps wired connections to a network through 850nM (SX) fiber-optic links using LC physical connectors. Depending on the Distribution System physical port to be assigned in Configuring WLAN — Security Switch (2270) Interfaces in the Nortel Product Guide 320298-A, use Ethernet CAT-5 or higher Ethernet cables or LC compatible fiber optic cable to connect the network equipment to the WLAN — Security Switch (2270).

Figure - 6. External Equipment Connections to the Nortel WLAN — Wireless Security Switches (2270)

Nortel WLAN — Security Switch (2270) Quick Installation Guide

30 Step 8: Connecting the Network (Distribution System)

Figure - 7. Physical Network Connections to the 2270 Nortel WLAN — Wireless Security Switch (2270)

Continue with “Step 9: Connecting the Service Port Interfaces” on page 31.

216395-B Rev 00

Step 9: Connecting the Service Port Interfaces 31

Step 9: Connecting the Service Port InterfacesStep 9: Connecting the Service Port Interfaces After connecting the network (Distribution System) to the WLAN — Security Switch (2270) as described in “Step 8: Connecting the Network (Distribution System)” on page 29, you can make Nortel WLAN — Management System Software, Web Browser, or CLI Console (management interface) connections to the WLAN — Security Switch (2270) in one of two ways. • You can connect any of the Nortel WLAN — Management System Software, Web Browser, or CLI Console directly to the secure front-panel Service Port. • You can connect any or all of the Nortel WLAN — Management System Software, Web Browser, or CLI Console through a dedicated Management Network directly to the front-panel Service port. Use the following figures to connect the Nortel WLAN — Management System Software, Web Browser, and/or CLI Console to the WLAN — Security Switch (2270). • For a front-panel Nortel WLAN — Management System Software, Web Browser, or CLI Console connection, use Ethernet CAT-5 or higher Ethernet cables to connect the Nortel WLAN — Management System Software (WLAN Management System Software) Server, WLAN Security Switch Web Interface, or another CLI Console to the dedicated front-panel Service port.

Figure - 8. CLI Console Connection to an WLAN — Security Switch (2270) through a Null-Modem Serial Cable

• For a front-panel Nortel WLAN — Management System Software, Web Browser, or CLI Console connection, use Ethernet CAT-5 or higher Ethernet cables to connect the Management Network to the front-panel Service Port. Use the appropriate cables to connect the Nortel WLAN — Management System Software, Web Browser, or CLI Console to the management network.

Nortel WLAN — Security Switch (2270) Quick Installation Guide

32 Step 9: Connecting the Service Port Interfaces

Figure - 9. CLI Console Connection to an WLAN — Security Switch (2270) through a Management Network

Continue with “Step 10: Connecting Access Ports” on page 33.

216395-B Rev 00

Step 10: Connecting Access Ports 33

Step 10: Connecting Access PortsStep 10: Connecting Access Points After you have installed and configured the WLAN — Security Switch (2270), use Ethernet CAT-5 or higher Ethernet cables to connect the WLAN — Access Ports (223x) either to the BayStack 460 front panel 10/100Base-T Ethernet ports or to the network (Distribution System) as shown in the following figures.

Note: As soon as the WLAN — Security Switch (2270) is activated, it starts listening for WLAN — Access Ports (223x) on all connected ports. As it detects APs, it records their MAC addresses in its database. The management software function then automatically configures the WLAN — Access Ports (223x) to start transmitting and start allowing clients to connect through the Nortel 2200 Series.

Figure - 10. WLAN — Access Ports (223x) Connected to a WLAN — Security Switch (2270) through the Network (Appliance Mode)

Continue with “Step 13: Where to Go from Here” on page 36.

Nortel WLAN — Security Switch (2270) Quick Installation Guide

34 Step 11: WLAN — Security Switch (2270) Software Upgrades

Step 11: WLAN — Security Switch (2270) Software Upgrades The three models of the WLAN — Security Switch (2270) currently shipping are hard coded not to exceed 12, 24, and 36 APs. This cannot be changed by the user or Nortel.

Software Upgrades All Software Upgrades now support “keying” such that when installed on the product, a key is required to activate the additional Access Ports purchased. All Software upgrades will require that version 2.2 be installed on the WLAN — Security Switch (2270) before an upgrade can be installed. There are three different upgrade choices. DR4011002-2.2.0 Nortel WLAN — Security Switch (2270) - Software License for 12 to 24 Access Port Upgrade. DR4011004-2.2.0 Nortel WLAN — Security Switch (2270) - Software License for 12 to 36 Access Port Upgrade. DR4011003-2.2.0 Nortel WLAN — Security Switch (2270) - Software License for 24 to 36 Access Port Upgrade.

216395-B Rev 00

Step 12: WLAN — Security Switch (2270) Keying 35

Step 12: WLAN — Security Switch (2270) Keying KRS keying is implemented so that upgrades exist for users who have purchased the WLAN — Security Switch (2270) and need to add additional Access Ports to the switch. The keying is implemented in such a way so as to achieve several different objectives. Software version 2.2 and any software version after 2.2 will have the keying capability incorporated. Version 2.2 and later will have the ability to load on any WLAN — Security Switch (2270) whether it be 12, 24, or 36 Access Port that has been hard coded or contains a version of software that supports keying. If the WLAN — Security Switch (2270) is a hard coded unit the software must load, run, and be able to read the maximum number of allowed Access Ports for the unit that it has been hard coded for, and not exceed that number. If a software upgrade is purchased after that point, version 2.2 and later versions are allowed to upgrade using the keying system, whether it’s hard coded, has a software version with keying, or has an already installed software upgrade. Once keying is in place the intent is for Nortel to carry only one hardware version of the WLAN — Security Switch (2270) and then include the software upgrade license depending on the number of APs that have been purchased. Refer to KRS Keying on page 283 of the Nortel 2200 Series Product Guide Part # 320298-A for further detail on installing license keys.

Nortel WLAN — Security Switch (2270) Quick Installation Guide

36 Step 13: Where to Go from Here

Step 13: Where to Go from Here You have completely installed the WLAN — Security Switch (2270) hardware. • Register your WLAN — Security Switch (2270). • Refer to the Configuring the WLAN — Security Switch (2270) in the Nortel Product Guide 320298-A for more information on configuring the WLAN — Security Switch (2270). • Refer to the Nortel Product Guide 320298-A for more information on configuring, operating, maintaining and troubleshooting the Nortel 2200 Series.

216395-B Rev 00