Summary of the content on the page No. 1
Software Release 11.0
Release Notes and User Guide
Supplement
PMP 100 and PTP 100 (FSK)
PMP 400 and PTP 200 (OFDM)
March 2011
Issue 1
Summary of the content on the page No. 2
Notices See important regulatory and legal notices in Section 11 on Page 43. Trademarks, Product Names, and Service Names MOTOROLA, the stylized M Logo, Canopy, and all other trademarks indicated as such herein are registered trademarks of Motorola Solutions, Inc. ® Reg. US Pat & Tm. Office. All other product or service names are the property of their respective owners. © 2011 Motorola Solutions, Inc. All rights reserved http://motorola.wirelessbroadbandsupport.com
Summary of the content on the page No. 3
Release 11.0 Release Notes and User Guide Supplement Table of Contents 1 Introduction .......................................................................................................... 6 1.1 Release 11.0 Overview ................................................................................. 6 1.2 Document Change History ............................................................................ 6 1.3 Abbreviations ........................................................
Summary of the content on the page No. 4
Release 11.0 Release Notes and User Guide Supplement 8.6 PMP 400/430 and PTP 200 DFS Operation Based on Region Code........... 37 9 Canopy MIB......................................................................................................... 38 10 Performance Benchmarking Process............................................................... 39 10.1 Definitions................................................................................................... 39 10.2 System Pe
Summary of the content on the page No. 5
Release 11.0 Release Notes and User Guide Supplement List of Figures Figure 1: Applicable products ........................................................................................9 Figure 2: AP's Configuration > Security tab .................................................................15 Figure 3: SM's Configuration > Security tab ................................................................16 Figure 4: Certificate Management on SM's Configuration > Security tab ..
Summary of the content on the page No. 6
Release 11.0 Release Notes and User Guide Supplement 1 Introduction 1.1 RELEASE 11.0 OVERVIEW Release 11.0 is a general release for all Canopy FSK and OFDM radios, including PMP 100, PMP 400/430, PTP 100, and PTP 200 Series modules. The primary Release 11.0 feature is SM and AP support for the RADIUS (Remote Authentication Dial In User Service) protocol so that RADIUS can be used for o SM Authentication o SM Configuration o Centralized AP and SM user name and password managemen
Summary of the content on the page No. 7
Release 11.0 Release Notes and User Guide Supplement CEPT Conference of European Post and MSCHAPMicrosoft CHAP Telecommunications MSK Master Session Key CHAP Challenge Handshake Authentication MVID Management VID Protocol NAI Network Access Identier CIR Committed Information Rate NAS Network Access Server (the AP, in this CMM Cluster Management Module system) CNUT Canopy Network Updater Tool NAT Network Address Translation CSM Subscriber Module OFDM Orthogonal Frequency
Summary of the content on the page No. 8
Release 11.0 Release Notes and User Guide Supplement 3. Consider checking the Support Home Page at http://motorola.wirelessbroadbandsupport.com/support/technical.php 4. Escalate the problem to your supplier or reseller. 5. Escalate the problem to Technical Support or other designated Tier 3 technical support: Email: EMS-EICC-RM@motorolasolutions.com Phone: All other countries +420 533 336 946 Asia and Pacific U.S. and Canada 1-866-961-9288 Australia 1 800 457 439 Eu
Summary of the content on the page No. 9
Release 11.0 Release Notes and User Guide Supplement 2 Applicability Release 11.0 is a general release recommended for all the products shown in Figure 1. Modulation and PMP Radio Series PTP Radio Series Module Type (Point-to-MultiPoint) (P oint-To-Point) PMP 100 Series PTP 100 Series Frequencies: 900MHz, Frequencies: FSK 2.4, 5.1, 5.2, 5.4, 5.7, 2.4, 5.2, 5.4, 5.7-GHz AP/SM/BH 5.9, 6.050-GHz Note: P7 and P8 APs Note: P7 and P8 BHs
Summary of the content on the page No. 10
Release 11.0 Release Notes and User Guide Supplement 3 Upgrading to Release 11.0 Upgrade first to R11.0 then enable RADIUS settings if desired (or not). In most cases operators will want to upgrade to R11.0, then trial a friendly sector with RADIUS, then deploy RADIUS to their entire network. R11.0 does not require using RADIUS. If upgrading a network from an old release, upgrading to R11.0 is recommended, even if not using RADIUS, so as to take advantage of features and fixes th
Summary of the content on the page No. 11
Release 11.0 Release Notes and User Guide Supplement 4 Features Release 11.0 adds the features listed in Table 1. Table 1: Release 11.0 Features Regions Products Feature Description See for Affected Affected Details All Regions AP and SM Support for the RADIUS can be used for SM authentication, Section 5 RADIUS protocol. SM configuration, and centralized AP and SM user name and password management. All Regions AP and SM From AP GUI or From the AP’s Tools > Sessions tab, - SNM
Summary of the content on the page No. 12
Release 11.0 Release Notes and User Guide Supplement Regions Products Feature Description See for Affected Affected Details - All Regions AP and SM Display AP’s site On the SM’s Home > General Status tab, name on SM the Registered AP field now displays the SNMP Site Name of the AP as well as the AP’s MAC address. (SNMP Site Names are configured on a radio’s Configuration > SNMP tab in the Site Name field.) Issue 1, March 2011 Page 12
Summary of the content on the page No. 13
Release 11.0 Release Notes and User Guide Supplement 5 RADIUS for PMP Release 11.0 adds support for the RADIUS (Remote Authentication Dial In User Service) protocol supporting Authentication, Authorization, and Accounting (AAA). The following topics are covered in this document: o An overview of the Canopy RADIUS implementation o Description of the operation of RADIUS with Canopy and the various configurable parameters and their settings o Procedures for specific tasks associate
Summary of the content on the page No. 14
Release 11.0 Release Notes and User Guide Supplement 5.1.2 Tested RADIUS Servers The Canopy RADIUS implementation has been tested and is supported on o FreeRADIUS, Version 2.1.8 o Aradial RADIUS, Version 5.1.12 Note, Aradial 5.3 has a bug that prevents “remote device login”, so doesn’t support the user name and password management feature. 5.2 CONFIGURING AP AND SM FOR RADIUS SM AUTHENTICATION Configuring Canopy for RADIUS authentication requires configuring both the AP and the
Summary of the content on the page No. 15
Release 11.0 Release Notes and User Guide Supplement When RADIUS AAA is selected, up to 3 Authentication Server (RADIUS Server) IP addresses and Shared Secrets can be configured. The IP address(es) configured here must match the IP address(es) of the RADIUS server(s). The shared secret(s) configured here must match the shared secret(s) configured in the RADIUS server(s). Servers 2 and 3 are meant for backup and reliability, not splitting the database. If Server 1 doesn’t respond, S
Summary of the content on the page No. 16
Release 11.0 Release Notes and User Guide Supplement Figure 3: SM's Configuration > Security tab 5.2.3 SM - Phase 1 (Outside Identity) parameters and settings Refer to Figure 3: SM's Configuration > Security tab to see the GUI options. The only protocol supported for the Phase 1 (Outside Identity) phase of authentication is EAPTTLS (Extensible Authentication Protocol Tunneled Transport Layer Security). Configure an outer Identity in the Username field. This must match the Phase
Summary of the content on the page No. 17
Release 11.0 Release Notes and User Guide Supplement Select the desired Phase 2 (Inside Identity) authentication protocol from the Phase 2 options of PAP (Password Authentication Protocol), CHAP (Challenge Handshake Authentication Protocol), and MSCHAP (Microsoft’s version of CHAP, version 2 is used). The protocol must be consistent with the authentication protocol configured on the RADIUS server. Enter a Username for the SM. This must match the username configured for the SM on th
Summary of the content on the page No. 18
Release 11.0 Release Notes and User Guide Supplement Figure 4: Certificate Management on SM's Configuration > Security tab 5.3.2 Using CNUT to distribute certificates to SMs CNUT Release 3.20.16 supports distribution of certificates to SMs. Please see the CNUT documentation for additional information. 5.4 CONFIGURING YOUR RADIUS SERVER FOR SM AUTHENTICATION Your RADIUS server will need to be configured to use the following: o EAPTTLS as the Phase 1/Outer Identity protocol. o
Summary of the content on the page No. 19
Release 11.0 Release Notes and User Guide Supplement o The username and password for each SM configured on each SM’s Configuration > Security tab. o An IP address and NAS shared secret that is the same as the IP address and Shared Secret configured on the AP’s Configuration > Security tab for that RADIUS server. o A server private certificate, server key, and CA certificate that complement the public certificates distributed to the SMs, as well as the Canopy dictionary file that
Summary of the content on the page No. 20
Release 11.0 Release Notes and User Guide Supplement Req’d Name Number Type Value SM GUI Page > Tab > Parameter Default Size Motorola-Canopy-ULBL 26.161.7 integer N 0-50000+ kbps Configuration > Quality of Service > Uplink Burst Allocation dependent on radio 32 bits feature set Motorola-Canopy-DLBR 26.161.8 integer N 0-50000+ kbps Configuration > Quality of Service > Sustained Downlink Data Rate dependent on radio 32 bits feature set Motorola-Canopy-DLBL 26.161.9 integer N 0
