Locationing – Brocade Mobility RFS7000-GR Controller System Reference Guide (Supporting software release 4.1.0.0-040GR and later) User Manual
Page 311

Brocade Mobility RFS7000-GR Controller System Reference Guide
297
53-1001944-01
Locationing
5
Once removed, the located device cannot be selected and its Web UI displayed.
5. Select a discovered device from amongst those located and displayed within the Recently
Found Devices screen and click the Launch button to display the Web UI for that switch.
NOTE
When launching the Web UI of a discovered device, take care not to make configuration changes
rendering the device ineffective in respect to its current configuration.
Locationing
The WiNG Geofencing Architecture provides a very comprehensive and elegant solution for physical
security to wireless without impacting the mobility. The Brocade WiNG Wireless ACLs allow
protection based on the MAC address and location of clients within user defined boundaries. This
solution provides protection within user defined boundaries, allowing access to clients located
within the zone and denying and mitigating access to clients outside the zone.
The Brocade Geofencing architecture provides a dynamic solution by locating all clients and
enforcing ACLs for each client based on it’s current location. This capability is no easy feat and is
only made possible with the following three core components of the WiNG architecture which
closely interact to provide physical security without compromising mobility.
The core components of the WiNG Geofencing solution are:
•
Industry’s only Native RTLS Engine
•
Wireless ACLs
•
Switch Management (CLI, SNMP and Applet)
RTLS Engine
The native RTLS engine is a software module on the WiNG architecture based wireless switches.
The RTLS engine locates thousands of clients in real time and provides the current location for
each client
Wireless ACLs
The Wireless ACL in WiNG uses location as a credential and as such is designed to enforce
admission policies based on the current location of the client. By default all clients are allowed
admission in all zones and the Wireless ACLs can be configured to deny admission to a single MAC
address (client) or a group of clients for each defined zone.
Switch Management (CLI, SNMP or Applet)
Switch Management plays a key role in defining and configuring the multiple Geofencing zones.
This includes configuration of site parameters including site dimensions, zones and Access Point
locations.
Each zones perimeter must include a minimum of 3 points and must not exceed 16 points.
Additionally the zones perimeter must not overlap another defined zone. Each Zone is assigned a
ZoneID which is in turn used in creating the ACLs which will deny admission within that specific
zone. The following figure shows some sample zones