motorola solutions rfs7000gr series rf switch

Motorola Solutions RFS7000GR Series RF SwitchFIPS Installation Guide

M

Contents
1. Introduction .................................................................................................................. 1-1
Package Contents .................................................................................................................... 1-1Document Conventions ............................................................................................................ 1-1Warnings .................................................................................................................................. 1-2Site Preparation ....................................................................................................................... 1-2

2. Specifications .............................................................................................................. 1-4Physical Specifications ............................................................................................................ 1-4Power Cord Specifications ....................................................................................................... 1-4

3. LED Codes ..................................................................................................................... 1-5System Status LEDs ................................................................................................................. 1-5RJ-45 Gigabit Ethernet LEDs ................................................................................................... 1-8SFP Gigabit Ethernet LEDs ....................................................................................................... 1-9Out of Band Management Port LEDs ..................................................................................... 1-10Out of Band Management Port Status LED ........................................................................... 1-10

4. Hardware Setup ........................................................................................................ 1-11Cabling Information ............................................................................................................... 1-11Gigabit Ethernet on the RFS7000 RF Switch ......................................................................... 1-12Rack Mount Instructions ........................................................................................................ 1-16RFS7000 Series RF Switch Console Port Setup ..................................................................... 1-16Supplying Power to the RFS7000 Series RF Switch .............................................................. 1-17Verifying the Installation ....................................................................................................... 1-18

5. Firmware Upgrade .................................................................................................... 1-19

6. Secure Installation Procedure ............................................................................... 1-21Upgrading the Wireless Controller from 4.X FIPS to 5.X FIPS ............................................... 1-21Upgrading the Wireless Controller from 4.X Non-FIPS to 5.X FIPS ....................................... 1-31Command Line Interface Login Procedure for the Wireless Switch ..................................... 1-36Changing Default Wireless Switch Parameters .................................................................... 1-38

7. Basic Configuration .................................................................................................. 1-42Configuring Browser for RFS7000 ......................................................................................... 1-42Configuring the Wireless Controller RFS7000 ....................................................................... 1-43

Contents
Resetting the Wireless Controller RFS7000’s Password ...................................................... 1-45
8. Regulatory Information ............................................................................................ 1-46Waste Electrical and Electronic Equipment (WEEE) .............................................................. 1-48

9. Motorola Solutions’ Enterprise Mobility Support Center .................................. 1-50

10. Motorola Solutions, Inc. End-User License Agreement .................................. 1-51

1 Introduction

The Motorola Solutions RFS7000 Series RF Switch is a high-performance member of Motorola Solutions’ Wireless Switch family. The RFS7000 Series RF Switch provides centralized Wireless LAN (WLAN) configuration and management by coalescing a network “intelligence” previously spread across physically distributed access points. By replacing access points with simpler access ports (or “thin” access points), the RFS7000 Series RF Switch becomes a WLAN’s single point of contact, thus reducing wireless networking complexity by moving management out of the ceiling and into the wiring closet. In addition, through the use of patented Virtual AP architecture, the RFS7000 Series RF Switch lets you create multiple WLANs without changing or adding to the existing wired network infrastructure.

This document is written for the network device installer.

1.1 Package ContentsInspect the package contents and report any missing or damaged items to your sales representative. The package should contain the following:

• RFS7000 RF Switch with rack brackets and tamper evident labels installed• Console Cable• Installation Guide (this document)• China RoHS compliance document

1.2 Document ConventionsThe following graphical alerts are used in this document to indicate notable situations:

NOTE Tips, hints, or special requirements that you should take note of.

CAUTION Care is required. Disregarding a caution can result in data loss or equipment malfunction.!

Motorola Solutions RFS7000GR Series RF Switch Secure Installation Guide 2

1.3 Warnings• Read all installation instructions and site survey reports, and verify correct equipment

installation before connecting the system to its power source.• Remove jewelry and watches before installing this equipment. • Install the equipment in a rack with adequate dimensions and weight allowances. • Verify the rack is anchored and cannot tip over or break away from its mountings.• Verify the unit is grounded before connecting it to the power source. • Verify any device connected to this unit is properly wired and grounded.• Connect all power cords to a properly wired and grounded electrical circuit.• Verify the electrical circuits have appropriate overload protection.• Attach only approved power cords to the device.• Motorola Solutions strongly recommends the use of an Uninterruptible Power Supply (UPS) that

supports the RFS7000 Series RF Switch power rating. Not using a UPS can result in data loss or equipment damage due to a power surge or power failure.

• Verify that the power connector and socket are accessible at all times during the operation of the equipment.

• Do not work with power circuits in dimly lit spaces.• Do not install this equipment or work with its power circuits during thunderstorms or other

weather conditions that could cause a power surge.• Verify there is adequate ventilation around the device, and ambient temperatures meet

equipment operation specifications.

1.4 Site Preparation• Consult your site survey and network analysis reports to determine specific equipment

placement, port capacity, power drops, and so on. • Assign installation responsibility to the appropriate personnel.• Identify where all installed components are located.• Verify appropriate rack mounting requirements.• Provide a sufficient number of power drops for your equipment.• Ensure adequate, dust-free ventilation to all installed equipment.• Identify and prepare Ethernet and console port connections.• Verify that cable lengths are within the maximum allowable distances for optimal signal

transmission.

WARNING! Indicates a condition or procedure that could result in personal injury or equipment damage.

Installation Guide 3

• Verify that the RFS7000 Series RF Switch is powered through an Uninterruptible Power Supply (UPS).


2 Specifications

2.1 Physical Specifications

2.2 Power Cord SpecificationsA power cord is not supplied with the switch. Use only a correctly rated power cord certified (as appropriate) for the country of operation.

2.2.1 Power Protection• If possible, use a circuit dedicated to data processing equipment. Commercial electrical

contractors are familiar with wiring for data processing equipment and can help with the load balancing of these circuits.

• Install surge protection. Be sure to use a surge protection device between the electricity source and the RFS7000 Series RF Switch.

• Install an Uninterruptible Power Supply (UPS). A UPS provides continuous power during a power outage. Some UPS devices have integral surge protection. UPS equipment requires periodic maintenance to ensure reliability. A UPS of the proper capacity for the data processing equipment must be purchased.

Width 440mm (17.32 in)

Height 44.45mm (1.75 in)

Depth 390.8mm (15.38 in)

Weight 6.12 Kg (13.5 lbs)

Operating Temperature 0°C - 40°C

Operating Humidity 5% - 85% RH, non-condensing

Operating Altitude 3 km (10000 ft)


3 LED Codes

The RFS7000 RF Switch has four vertically-stacked LEDs on its front panel. Each of the switch’s Gigabit Ethernet ports have two status LEDs. These LEDs display two colors (green & amber), and three lit states (solid, blinking, and off). The following tables decode the combinations of LED colors and states for the System Status LEDs and the Gigabit Ethernet LEDs.

3.1 System Status LEDs

3.1.1 Start Up / POST (Primary System or Redundant System)

System Status 1 LED System Status 2 LED Event

Off Off Power off

Green Blinking Green Blinking Power On Self Test (POST) running

Green Solid Green Blinking POST succeeded (Operating System Loading)

Green Solid Off POST succeeded (Normal Operation)

Amber Blinking Off POST Failure

Alternating Green Blinking & Amber Blinking

Alternating Green Blinking & Amber Blinking Boot Up Error: Device has an invalid checksum

NOTE During switch start up, the Temperature status LED will be lit Solid Amber. This is normal behavior and does not indicate an error. At the completion of start up the Temperature Status LED will switch to Solid Green.

System Status 1

Fan status

Temperature status

System Status 2


3.1.2 Switch Status (Primary System)

3.1.3 Switch Status (Redundant System)


Off Off Power off

Green Solid Off No Redundancy Feature Enabled

Green Solid Green Solid Redundancy Feature EnabledActively Adopting Access Ports

Green Solid Amber Blinking

No License to adopt Access PortsorNo Country Code configured on the switchorLicense and Country Code configured, but no APs adopted


Off Off Power off

Green Solid Off No Redundancy Feature Enabled

Green Blinking Green Solid Redundant System failed over and adopting ports

Green Blinking Alternating Green Blinking & Amber Blinking Redundant System not failed over.

Green Solid Amber Blinking

No License to adopt Access PortsorNo Country Code configured on the switchorLicense and Country Code configured, but no APs adopted


3.1.4 Fan LED

3.1.5 Temperature Status LED

Fan LED Event

Off System Off / POST Start

Green Blinking POST in Process

Green Solid All System Fans Normal Operation

Amber Solid Redundant Cooling Failure System Operational

Amber BlinkingSystem Cooling FailureSystem will be held in reset until the issue is resolved

Temperature LED Event

Off System Off

Green Solid Ambient Inlet Temperature is within specified operating limit

Amber Solid

Ambient Inlet Temperature is near the maximum operating temperature

During switch start up this LED will be lit Solid Amber. This is normal behavior and does not indicate an error.

Amber Blinking

Ambient Inlet Temperature is above the maximum specified operating temperatureSystem will be held in reset until the issue is resolved


3.2 RJ-45 Gigabit Ethernet LEDs

3.2.1 RJ-45 Port Speed LED

3.2.2 RJ-45 Port Status LED

Port Speed LED Event

Off 10 Mbps

Green Solid 100 Mbps

Green Blinking 1000 Mbps

Amber Blinking Port Fault

Port Status LED Event

Off No Link or Administratively shut down

Green Solid Link present

Green Blinking Activity: Transmit and Receive

Amber Blinking Link Fault

sym_006

Portspeed

Portstatus

Portspeed

Portstatus


3.3 SFP Gigabit Ethernet LEDs

3.3.1 SFP Port Speed LED

3.3.2 SFP Port Status LED


Green Blinking 1000 Mbps

Amber Blinking Module or Tx/Rx Fault Loss


Off No Link or Administratively shut down

Green Solid Link present / Operational

Amber Blinking Module or Tx/Rx Fault Loss

s

Portspeed

Portstatus


3.4 Out of Band Management Port LEDs

3.4.1 Out of Band Management Port Speed LED

3.5 Out of Band Management Port Status LED


Off 10 Mbps

Green Solid 100 Mbps

Amber Blinking Port Fault


Off No Link

Green Solid Link present

Green Blinking Activity: Transmit and Receive

Amber Blinking Link Fault

sym_

Portspeed

Portstatus


4 Hardware Setup

4.1 Cabling Information

The RFS7000 RF Switch has four RJ-45 Gigabit Ethernet ports, four Gigabit SFP (fiber) ports, one Out-of-band management port and one Console connector. The above diagram shows each of those ports and the cables or devices attached to them. The sections that follow describe detailed connection and cabling information for each port.

NOTE The USB, Compact Flash and 100 MB Ethernet ports are not available for the GR release of this product and are covered with tamper evident labels.

sym_005

Out-of-BandManagement

GigabitSFP

Port 1

GigabitEthernetPort 1

Console

Compact FlashUSB 1USB 2


GigabitSFP

Port 2

GigabitSFP

Port 3

GigabitSFP

Port 4




4.2 Gigabit Ethernet on the RFS7000 RF Switch

The RFS7000 RF Switch has four RJ-45 Gigabit Ethernet ports and four Gigabit SFP (fiber optic) ports. Using the RJ-45 ports requires connecting a Category-6 Ethernet cable to the port. To use the Gigabit SFP ports, first install the SFP Modules (Motorola Solutions Part Number: Fiber-3000-1S-WWR).

sym_013

Gigabit EthernetRJ45s

Gigabit EthernetSFPs


4.2.1 Installing Gigabit Ethernet SFPs1. Open the bail on the transceiver.

2. Insert each of the SFP transceivers into the corresponding ports on the switch.

Open bail to insert or removeSFP transceiver


3. Once the SFP transceivers are properly seated in their ports, close the bails to lock the transceivers in place.

sym_019

Open bail to insert or removeSFP transceiver


4. Insert the fiber optic cables into the installed transceivers.


4.3 Rack Mount Instructions

To install the RFS7000 Series RF Switch in a rack:

1. The rack mounting brackets are installed at the factory. No additional steps are needed. 2. Attach the brackets to the rack using screws appropriate for your rack’s mounting holes.

4.4 RFS7000 Series RF Switch Console Port SetupTo add the RFS7000 Series RF Switch to the network and prepare it for initial configuration:

1. Using the supplied console cable (pictured below), connect the RFS7000 Series RF Switch serial port to an RS-232 (DB-9) serial port on a separate computer (the “configuration computer”).


2. On the configuration computer, configure a terminal emulation application (such as HyperTerminal) as follows:

4.5 Supplying Power to the RFS7000 Series RF Switch

1. Plug an approved AC power cord into the power connector at the back of the RFS7000 Series RF Switch.

2. Plug the cord into a standard AC outlet with a voltage range of 100 to 240 VAC..

Terminal Type VT-100

Port COM port

Terminal Settings

19200bps transfer rate8 data bitsno parity1 stop bitno flow controlno hardware compression

WARNING! An improper shutdown can render the RFS7000 Series RF Switch inoperable such that it could require service by Motorola Solutions Support. Do not remove AC power without first following the shutdown procedure. An abrupt loss of power can corrupt the information stored on the device.

sym_002

Rack mountbracket

AC inlet


4.6 Verifying the InstallationView the LEDs on the front panel of the RFS7000 RF Switch to ensure the device is functioning properly. The normal LED pattern follows this path:

• During the Power On Self Test (POST), the System 1 and System 2 LEDs both blink green.• If the POST test fails, the System 1 LED will blink amber. If the POST test succeeds, the System

1 LED will be lit solid green.• As the software is initialized, the System 2 LED will blink green.• After the software has finished initializing, the System 1 LED will be lit solid green and the

bottom System 2 LED will be off.

Other LED codes indicate the presence (or absence) of different standby states, or errors. A guide to the RFS7000 Series RF Switch LEDs codes is provided in LED Codes on page -5.


5 Firmware Upgrade

The firmware upgrade through GUI has the following steps:

1. Select a target device from the left-hand side of the UI.

2. Click the down arrow next to the device to view a set of operations that can be performed on the selected device.

3. Select the Firmware Upgrade button to upgrade the device’s firmware.

4. SFTP is the default protocol for updating the firmware.

5. Use the spinner control or manually enter the value to define the port used by the protocol for importing the firmware upgrade file.

6. Enter IP address or the host name of the server used to import the firmware file. Use the drop down to select the type of host information. Host can be any Host Name or IP Address.


7. Define the user name used to access SFTP server.

8. Specify the user account password to access SFTP server.

9. Specify the path to the firmware file. Enter the complete relative path to the file on the server.

10. Select Apply to start the firmware update. Select Abort to terminate the firmware update. Select Close to close the upgrade popup. The upgrade continues in the background.

11. Click the down arrow next to the device to view a set of operations that can be performed on the selected device, and click Reload button.

12. Login to the device using the default username ‘admin’ and default password ‘0umP.s45fIOD6 ’.


6 Secure Installation Procedure

This installation procedure explains how to login to the Command Line Interface for initial configuration.

Through this process the wireless switch is configured with a set of default values for specific features. These default values should be changed in order to maintain the security of the wireless users and access to the switch. .

6.1 Upgrading the Wireless Controller from 4.X FIPS to 5.X FIPS

The following procedure explains the upgrade procedure to be followed when upgrading FIPS 4.X version to WiNG 5.X FIPS version:

NOTE All user inputs in this section are highlighted in Bold+Italics


1. Configure the IP address and default gateway (if applicable)

RFS7000#sh version

RFS7000 version 4.1.1.0-003GR

Copyright (c) 2006-2009 Motorola, Inc.

Booted from primary.

Switch uptime is 0 days, 0 hours 04 minutes

CPU is RMI XLR V0.4

255484 kB of on-board RAM

RFS7000#

RFS7000#conf t

Enter configuration commands, one per line. End with CNTL/Z.

RFS7000(config)#

RFS7000(config)#int ge 1

RFS7000(config-if)#switchport access vlan 20

RFS7000(config-if)#exit

RFS7000(config)#

RFS7000(config)#int vlan 20

Mar 06 06:50:23 2013: %NSM-4-IFUP: Interface vlan20 is up

RFS7000(config-if)#

RFS7000(config-if)#ip address 172.16.1.2/24

RFS7000(config-if)#exit

RFS7000(config)#

RFS7000(config)#ip default-gateway 172.16.1.1

RFS7000(config)#

RFS7000(config)#end

RFS7000#wr mem

[OK]RFS7000#


2. Ping the SFTP server to make sure it is reachable.

RFS7000#ping 172.16.1.200

PING 172.16.1.200 (172.16.1.200): 100 data bytes

128 bytes from 172.16.1.200: icmp_seq=0 ttl=128 time=2.8 ms





--- 172.16.1.200 ping statistics ---

5 packets transmitted, 5 packets received, 0% packet loss

round-trip min/avg/max = 0.4/0.9/2.8 ms

RFS7000#

3. Now export the running configuration to SFTP server using the below mentioned CLI.

RFS7000#copy running-config sftp://[email protected]/4.X_cfg.txt

[email protected]'s password:

Uploading to /Downloads/4.X_cfg.txt

/Downloads/4.X_cfg.txt 100% 0 0.0KB/s 00:00

RFS7000#

4. Copy RFS7000-5.4.10.0-037GB.img on the SFTP server.

5. Now upgrade using the below mentioned CLI.

RFS7000#upgrade sftp://[email protected]/RFS7000-5.4.10.0-037GB.img

Running from partition /dev/mtdblock6, partition to update is /dev/mtdblock7


Validating image file header

Making file system

Extracting files (this can take some time)..........................................................


...............................................................

.....................................

Version of firmware update file is 5.4.10.0-037GB

Removing unneeded files from flash:/crashinfo directory

FPGA firmware version is already at version 3_29, no need to upgrade

Power Supervisor updates are handled via a patch file

Checking if boot sector needs to be upgraded

Boot Sector version 00003, image file bootsector ver 00003, no change required

Writing Kernel to /dev/mtd5

Writing BootOS to /dev/mtd3

Successful

RFS7000#

RFS7000#sh boot

Image Build Date Install Date Version

----- -------------------- ----------------- ----------Primary Nov 23 11:06:50 2011 unknown 4.1.1.0-003GR

Secondary Mar 01 12:21:33 2013 Mar 06 07:03:07 2013 5.4.10.0-037GB

Current Boot : Primary

Next Boot : Secondary

Software Fallback : Enabled

RFS7000#


6. Reload the device.

RFS7000#reload

Wireless switch will be rebooted, do you want to continue? ([y]es/[n]o): y

The system is going down NOW !!

% Connection is closed by administrator!

Please stand by while rebooting the system.

Restarting system.

BootOS (c) 2004-2012 Motorola Solutions, Inc. All rights reserved.

RFS7000 version 5.4.10.0-037GB

Booting from NAND image2

0| ddr2.c:691 configure_ddr2 Clamping DIMM 0 speed at 533MHz

0| ddr2.c:829 configure_ddr2 Using SPD-derived 533MHz DDR parameters

Testing SAE #1:

SHA256 hash...successful.


3DES test...successful.

AES test...successful.

Testing SAE #2:





Testing SAE #3:





Testing SAE #4:






XLR crypto test successful.

Loading runtime image 2 ................................................

Welcome.

restoring /etc2/./ppp

restoring /etc2/./ppp/hsdpa_apn_set

restoring /etc2/./dhclient.conf

restoring /etc2/./system_options

restoring /etc2/./dhclient.conf.template

restoring /var2/./lib/dpd

restoring /var2/./state

restoring /var2/./state/dhcp

restoring /flash/./cache

restoring /flash/./archived_logs

restoring /flash/./floorplans

restoring /flash/./startuplog

This can take some time, please be patient.

4x to 5x configuration conversion in process

4x to 5x configuration conversion complete

FIPS Power-On Self Test started

Wed Mar 06 07:04:49 2013 FIPS self test started this can take some time

Wed Mar 06 07:04:49 2013 Creating integrity check file as a part of the update process

Wed Mar 06 07:06:33 2013 FIPS integrity check of the WIOS image successful

Wed Mar 06 07:06:33 2013 FIPS data integrity check is successful

Wed Mar 06 07:06:33 2013 FIPS power-up tests for openSSL library

FIPS-mode test application

Wed Mar 6 07:06:42 2013 1. Automatic power-up self test includes RNG, HMAC, AES, 3DES, RSA, DSA selftests...Successful


Wed Mar 6 07:06:42 2013 2. AES encryption/decryption...Successful

Wed Mar 6 07:06:43 2013 3. RSA key generation and encryption/decryption...successful

Wed Mar 6 07:06:43 2013 4. 3DES-CBC encryption/decryption...successful

Wed Mar 6 07:06:48 2013 5. DSA key generation and signature validation...successful

Wed Mar 6 07:06:48 2013 6a. SHA-1 hash...successful

Wed Mar 6 07:06:48 2013 6b. SHA-256 hash...successful

Wed Mar 6 07:06:48 2013 6c. SHA-512 hash...successful

Wed Mar 6 07:06:48 2013 6d. HMAC-SHA-1 hash...successful

Wed Mar 6 07:06:48 2013 6e. HMAC-SHA-224 hash...successful

Wed Mar 6 07:06:48 2013 6f. HMAC-SHA-256 hash...successful

Wed Mar 6 07:06:48 2013 6g. HMAC-SHA-384 hash...successful

Wed Mar 6 07:06:48 2013 6h. HMAC-SHA-512 hash...successful

Wed Mar 6 07:06:48 2013 The tests completed without errors

Wed Mar 6 07:06:48 2013 KDF-135 TLS test successful

Wed Mar 06 07:06:48 2013 openSSL power-up self test successful

Wed Mar 06 07:06:48 2013 FIPS power-up tests for kernel space wireless crypto library

Wed Mar 6 07:06:48 2013 Start Kernel space tests...

Wed Mar 6 07:06:48 2013 AES test successful...

Wed Mar 6 07:06:48 2013 SHA1 test successful...

Wed Mar 6 07:06:48 2013 SHA256 test successful...

Wed Mar 6 07:06:48 2013 TDES test successful...

Wed Mar 06 07:06:48 2013 Kernel space wireless crypto self test successful

Wed Mar 6 07:06:48 2013 Start FIPS power-up test for Rijndael AES

Wed Mar 6 07:06:48 2013 Rijndael AES encryption test successful

Starting daemons..........

Running Secondary software, version 5.4.10.0-037GB

Alternate software Primary, version 4.1.1.0-003GR


Software fallback feature is enabled

RFS7000 release 5.4.10.0-037GB

This Device Is Running In FIPS Mode

Attention:

This is a protected and private wireless system. No un-authorized access is allowed.

You must have proper rights to access and manage this system from authorized personnel.

Please press Enter to activate this console.


7. Press enter and login with username/password as admin/0umP.s45fIOD6 and change the password.

rfs7000-380842 login:

rfs7000-380842 login: admin

Password:

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: including NAT-Traversal patch (Version 0.6c)

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: Changing to directory '/var/etc/ipsec.d/crls'

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: listening for IKE messages

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: adding interface vlan20/vlan20 172.16.1.2:500

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: adding interface vlan20/vlan20 172.16.1.2:4500

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: adding interface pkt0/pkt0 127.0.1.1:500

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: adding interface pkt0/pkt0 127.0.1.1:4500

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: adding interface lo/lo 127.0.0.1:500

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: adding interface lo/lo 127.0.0.1:4500

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: adding interface me1/me1 10.1.1.100:500

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: adding interface me1/me1 10.1.1.100:4500

Mar 06 07:09:37 2013: %AUTHPRIV-4-WARNING: pluto[1417]: loading secrets from "/var/etc/ipsec.secrets"

System is currently using the factory default login credentials.

Please change the default password to protect from unauthorized access.

Enter new password:

Confirm new password:

en


Password for user 'admin' changed successfully.

Please write this password change to memory ("write memory") to make the change persistent.

[G]rfs7000-380842>en

[G]rfs7000-380842#wr mem

[OK]

[G]rfs7000-380842#

8. Interface specific configs are retained while upgrading from 4.X to 5.X. Other configurations can be converted with the help of configuration convertor tool. Config converter tool can be download from http://support.symbol.com

9. Install this tool on the SFTP server (Windows) and execute the below mentioned on command prompt.

PS C:\Program Files\configuration converter> ./cfgcv

usage:

cfgcv 'version' '4xconfiguration'

where 'version' is 5.2, 5.3, 5.4, or 5.5

and '4xconfiguration' is the name of the 4x configuration file

PS C:\Program Files\configuration converter>


PS C:\Program Files\configuration converter> ./cfgcv 5.4 4.X_cfg.txt

fivedot4

4x to 5x configuration conversion in process

4x to 5x configuration conversion complete


4.X_cfg.txt.out ? Is the converted 5.X config file.

10.Import this config file on the device using the below mentioned CLI

[G]rfs7000-380842#copy sftp://root:[email protected]/4.X_cfg.txt.out running-config

http://support.symbol.com


6.2 Upgrading the Wireless Controller from 4.X Non-FIPS to 5.X FIPS

For 4.X version Non FIPS to 5.X version FIPS image , user has to first upgrade to 5.X Non FIPS. After this process is complete, upgrade device from 5.X Non-FIPS to 5.X FIPS, using the MD5 signed FIPS image.

6.2.1 To upgrade from 4.X Non-FIPS to 5.X Non-FIPS, execute the following procedure:Login to the wireless controller.

RFS7000#show version

RFS7000 version 4.4.2.0-001R MIB=01a

Copyright (c) 2006-2011 Motorola Solutions, Inc.

Booted from primary.

switch uptime is 0 days, 0 hours 25 minutes

CPU is RMI XLR V0.4

255484 kB of on-board RAM

RFS7000#show boot

Image Build Date Install Date Version

----- -------------------- -------------------- --------------

Primary Nov 15 04:22:16 2012 Jun 14 13:55:59 2013 4.4.2.0-001R

Secondary Sep 15 18:26:08 2012 May 28 15:09:27 2013 5.4.0.0-047R

Current Boot : Primary

Next Boot : Primary

Software Fallback : Enabled


RFS7000#upgrade sftp://root:[email protected]/RFS7000-5.4.0.0-047R.img

Running from partition /dev/mtdblock6, partition to update is /dev/mtdblock7

Validating image file header

Making file system

Extracting files (this can take some time)...................................................................................

...............................................................

.......,

Version of firmware update file is 5.4.0.0-047R

Removing unneeded files from flash:/crashinfo directory

FPGA firmware version is already at version 3_29, no need to upgrade

Power Supervisor updates are handled via a patch file

Checking if boot sector needs to be upgraded

Boot Sector version 00003, image file bootsector ver 00003, no change required

Writing Kernel to /dev/mtd5

Writing BootOS to /dev/mtd3

Successful

RFS7000#reload

NOTE After reloading, the upgraded device will boot with the 5.X Non-FIPS image.


6.2.2 Upgrading the Wireless Controller from 5.X Non-FIPS to 5.X FIPSTo upgrade a RFS7000 wireless controller from the 5.X Non-FIPS version to 5.X FIPS version, use the MD5 signed FIPS image.

Logon to the wireless controller.

rfs7000-1ACEAB#show version

RFS7000 version 5.4.0.0-047RCopyright (c) 2004-2012 Motorola Solutions, Inc. All rights reserved.Booted from secondary

rfs7000-1ACEAB uptime is 0 days, 00 hours 27 minutesCPU is RMI XLR V0.4Base ethernet MAC address is 5C-0E-8B-1A-CE-ABSystem serial number is 12040520400082Model number is RFS-7010-1000-WRFPGA version is 3.41

rfs7000-1ACEAB#upgrade sftp://root:[email protected]/RFS7000-SIGN_MD5-5.4.10.0-041GR.imgJun 14 08:02:39 2013: rfs7000-1ACEAB : %DIAG-6-NEW_LED_STATE: LED state message FIRMWARE_UPGRADE_STARTED from module led_msgRunning from partition /dev/mtdblock7Validating image file headerCan not upgrade Non FIPS-CC image 5.4.0.0-047R with FIPS-CC image 5.4.10.0-041GRMaking file systemExtracting files (this may take some time)............................................................................................................................................................


Control C disabledVersion of firmware update file is 5.4.10.0-041GRCan not upgrade Non FIPS-CC image 5.4.0.0-047R with FIPS-CC image 5.4.10.0-041GRRemoving unneeded files from flash:/crashinfo directoryFPGA firmware version is already at version 3_29, no need to upgradePower Supervisor updates are handled via a patch fileChecking if boot sector needs to be upgradedBoot Sector version 00003, image file bootsector ver 00003, no change requiredWriting Kernel to /dev/mtd4Writing BootOS to /dev/mtd2Jun 14 08:07:11 2013: %FWU-6-FWUDONE: Firmware update successful, new version is 5.4.10.0-041GRSuccessfulJun 14 08:07:11 2013: rfs7000-1ACEAB : %DIAG-6-NEW_LED_STATE: LED state message FIRMWARE_UPGRADE_ENDED from module led_msgrfs7000-1ACEAB#Jrfs7000-1ACEAB#rfs7000-1ACEAB#rfs7000-1ACEAB#rfs7000-1ACEAB#show boot-------------------------------------------------------------------------------- IMAGE BUILD DATE INSTALL DATE VERSION-------------------------------------------------------------------------------- Primary 2013-05-01 00:00:27 2013-06-14 08:07:11 5.4.10.0-041GR Secondary 2012-09-15 18:26:08 2013-05-28 09:41:28 5.4.0.0-047R--------------------------------------------------------------------------------Current Boot : Secondary


Next Boot : PrimarySoftware Fallback : Enabledrfs7000-1ACEAB#rfs7000-1ACEAB#reload

NOTE After reloading, the upgraded device will boot with the 5.X FIPS image.


6.3 Command Line Interface Login Procedure for the Wireless SwitchThe following steps explains the CLI login procedure:

1. Please press “Enter” to activate this console.

login as: admin

RFS7000 release 5.4.10.0-003GD

This Device Is Running In FIPS Mode

Attention:

This is a protected and private wireless system. No un-authorized access is allowed.

You must have proper rights to access and manage this system from authorized personnel.


2. Once Username and Password credentials are validated, the switch will prompt to change the default password to a new value. This prompt is only provided when logging to the switch for the first time. Please change the default password of the admin user.

3. Once Username and Password credentials are validated, the below prompt will be returned. Enter “Enable” to get into execution mode.

[G]rfs7000-37FABE>enable

[G]rfs7000-37FABE#

NOTE All the commands in the FIPS build are appended with [G]


4. Execute show version command to view the firmware version.

[G]rfs7000-37FABE#show version

RFS7000 version 5.4.10.0-003GD

Copyright (c) 2004-2012 Motorola Solutions, Inc. All rights reserved.

Booted from primary

rfs7000-37FABE uptime is 29 days, 18 hours 13 minutes

CPU is RMI XLR V0.4

Base ethernet MAC address is 00-15-70-37-FA-BE

System serial number is 6268529900014

Model number is RFS-7010-1000-WR

FPGA version is 3.41

5. To get into configuration mode, enter “configure terminal” at “exec-mode” prompt above.

[G]rfs7000-37FABE# configure terminal


[G]rfs7000-37FABE(config)#

6. The console session will timeout after 180 seconds by default if no commands are entered. To avoid this set the console inactivity timeout (GUI or CLI) to a higher value as shown below:

[G]rfs7000-37FABE(config-management-policy-default)#idle-session-timeout 1440

[G]rfs7000-37FABE(config-management-policy-default)#

7. Assign IP address to VLAN1 to make RFS access via UI/SSH possible . By default all the gigabit ethernet physical ports will be mapped to VLAN1. To assign static IP address to VLAN1, run the commands:

[G]rfs7000-37FABE(config)#self

[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#interface vlan 1

[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE-if-vlan1)#

ip address <IP>

[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE-if-vlan1)#

exit


6.4 Changing Default Wireless Switch ParametersThe various default parameters which must be changed to operate the wireless switch in a secured operational mode are listed below:

1. Country code must be set to the appropriate country in order to have proper channel of operations.

a. Enter “device self configuration mode” [G]rfs7000-37FABE(config)#self[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#

b. Execute the following in device configuration mode.[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#country-code us

2. Self Signed certificates should be replaced with a private certificate.

a. The device ships with a default trust point using a default self-signed certificate. This certificate is associated with the hotspot and onboard RADIUS server. This certificate should be replaced with a valid certificate from a Certificate Authority.

b. Create a new trust point.[G]rfs7000-37FABE#crypto pki generate self-signed t generate-rsa-key S subject-name motoFIPS US CA SJ Motorola WLAN

Successfully generated self-signed certificate

[G]rfs7000-37FABE#commit

c. The following command displays the trust point information.[G]rfs7000-37FABE#show crypto pki trustpoints

Warning: This will display secure information. Do you want to proceed? (y/n): y TRUSTPOINT KEY NAME VALID UNTIL

t S Sat Jan 28 06:13:41 2023 UTC

default-trustpoint default_rsa_key Sun Dec 11 06:57:20 2022 UTC

CAUTION Select only the country in which you are using the device. Any other selection may make the operation of this device illegal.!


[G]rfs7000-37FABE#

d. Export this certificate request to an external machine/server where the request can be submitted to the Certificate Authority as shown below.[G]rfs7000-37FABE#crypto pki export request generate-rsa-key K subject-name motoFIPS US CA SJ Motorola WLAN sftp://root:[email protected]/K

Successfully generated and exported certificate request

[G]rfs7000-37FABE#

e. Import the CA certificate obtained from the external signing authority using SFTP as shown below.[G]rfs7000-37FABE#crypto pki authenticate W sftp://root:[email protected]/ca.crt

Successfully imported CA certificate

[G]rfs7000-37FABE#

Import the Server certificate obtained from external CA using SFTP.

[G]rfs7000-37FABE#crypto pki import certificate W sftp://root:[email protected]/ca/Signed-cert

Signed certificate for Trustpoint W successfully imported

[G]rfs7000-37FABE#

f. Associate the newly created trustpoint with the hotspot feature using the example below:[G]rfs7000-37FABE#

[G]rfs7000-37FABE#self


[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#trustpoint https W

[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#end

[G]rfs7000-37FABE#

Note: HTTPS is the default connection mode.

g. Associate the newly created trustpoint with the onboard RADIUS server using the example below.[G]rfs7000-37FABE#self



[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)trustpoint radius-server W


[G]rfs7000-37FABE#

h. Restart the RADIUS server.[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#use radius-server-policy TEST

Trustpoints to be used for RADIUS Server can be configured with 'trustpoint' command in device context

[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#

[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#commit write

[OK]

[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#Aug 06 02:06:10 2012: ap7131-39F38A : %RADCONF-6-RADIUSDSTART: Radius Server Started

Aug 06 02:06:10 2012: %DAEMON-6-INFO: radiusd[1903]: Core dumps are enabled.

Aug 06 02:06:11 2012: %DAEMON-6-INFO: radiusd[1903]: Loaded virtual server <default>

[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#Aug 06 02:06:18 2012: %DAEMON-6-INFO: radiusd[1903]: Ready to process requests.

[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#no use radius-server-policy

[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#comm wr

Aug 06 02:06:27 2012: %DAEMON-6-INFO: radiusd[1903]: Signalled to terminate

Aug 06 02:06:27 2012: %DAEMON-6-INFO: radiusd[1903]: Exiting normally.

[OK]


[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#use radius-server-policy TEST

Trustpoints to be used for RADIUS Server can be configured with 'trustpoint' command in device context


[G]rfs7000-37FABE(config-device-00-15-70-37-FA-BE)#comm wr

[OK]



[G]rfs7000-37FABE#

[G]rfs7000-37FABEAug 06 02:06:45 2012: ap7131-39F38A : %RADCONF-6-RADIUSDSTART: Radius Server Started

Aug 06 02:06:45 2012: %DAEMON-6-INFO: radiusd[1954]: Core dumps are enabled.

Aug 06 02:06:46 2012: %DAEMON-6-INFO: radiusd[1954]: Loaded virtual server <default>

Aug 06 02:06:52 2012: %DAEMON-6-INFO: radiusd[1954]: Ready to process requests.

rfs7000-37FABE#

i. Write the changes to the memory.[G]rfs7000-37FABE write memory

[OK]

[G]rfs7000-37FABE#


7 Basic Configuration

7.1 Configuring Browser for RFS7000An RFS7000 model is compliant with the FIPS140-2 standard. The RFS7000 is only accessible using browsers that support the TLS 1.0 protocol. The RFS7000 is not accessible by browsers supporting the SSL 2.0 or SSL 3.0 protocols. Additionally, ensure Flash is installed on the computer accessing the RFS7000 GUI applet. The following sections describe how to change your browser settings using either Internet Explorer or Mozilla Firefox in order to correctly launch and display the RFS7000 GUI applet. Without these browser modifications, you will not be able to access the RFS7000 GUI applet.

7.1.1 Accessing the RFS7000 Using Internet ExplorerTo define the browser settings needed to access the RFS7000 using Windows Internet Explorer

1. Open the Internet Explorer browser and open the Tools > Internet Options menu.

2. Select the Advanced tab.

3. Scroll down to the bottom of the Advanced tab and ensure the Use TLS 1.0 option is selected. Remember, the RFS7000 does not support SSL 2.0 or SSL 3.0.

4. Enter the IP address of the device within Internet Explorer. Select the Continue to this Website (not recommended) option. The default IP address is 192.168.0.1

At this point in the browser configuration, a screen displays stating the Web site’s certificate cannot be verified.

5. Click Yes to continue. The access point’s login screen displays.

6. Log in using admin as the default User ID and 0umP.s45fIOD6 as the default password. If the default login is successful, the Change Admin Password window displays. Immediately change the password to optimize device security. For more information, see Configuring the Wireless Controller RFS7000 on page -43.

7. Click Save to save the password.

CAUTION With both the Internet Explorer and Mozilla Firefox browser configurations, screens may display stating Website certificates cannot be validated or have been certified by an unknown authority. Do not exit the browser configuration, as these messages will occur with only the initial Wireless Controller RFS7000 browser configuration.

!


7.1.2 Accessing the RFS7000 Using Mozilla FirefoxTo define the browser settings needed to access the RFS7000 using Mozilla Firefox:

1. Open the Mozilla Firefox browser and open the Tools > Options menu.

2. Select the Advanced tab, then select either the Encryption or Security tab (they differ depending on the version of Firefox used).

3. Within the Protocols field, ensure the Use TLS 1.0 option is selected. Remember, the RFS7000 does not support SSL 2.0 or SSL 3.0.

A Website Certified by an Unknown Authority screen displays stating Firefox is unable to define a trusted site.

4. Select either the Accept this certificate permanently or Accept this certificate temporarily for this session. Click the OK button to continue.

A Security Error: Domain Name Mismatch screen could display. Click OK to continue. At this point in the browser configuration, a screen displays stating the Web site’s certificate cannot be verified.

5. Click Yes to continue. The access point’s login screen displays.

6. Log in using admin as the default User ID and 0umP.s45fIOD6 as the default password. If the default login is successful, the Change Admin Password window displays. Immediately change the password to optimize device security. For more information, see Configuring the Wireless Controller RFS7000 on page -43.

7. Click Save to save the password.

7.2 Configuring the Wireless Controller RFS7000For the basic setup described in this guide, the Flex based Web UI will be used to configure theWireless Controller. For optimal viewing of the Web UI, the screen resolution should be set to 1024 x 768 pixels or greater.


Remember, Internet Explorer and Mozilla Firefox require unique settings be defined in order for the browser to access the RFS7000 GUI applet. For instructions on configuring these browser settings, see Configuring Browser for RFS7000 on page -42.

1. Start a browser and enter the following IP address in the address field: https://192.168.0.1.

2. The login screen displays.

3. Log in using admin as the default User ID and 0umP.s45fIOD6 as the default password. If the default login is successful, the Change Admin Password screen displays.

4. Change the 8-64 character password to ensure the RFS7000 is using a secure password different from the default password. Enter the current password and a new admin password in fields

NOTE For advanced configuration options beyond the scope of this guide, refer to the RFS7000 Product Reference Guide. The guide is available on the Motorola Web site, at http://supportcentral.motorola.com

NOTE Latest version of Adobe Flex and Flash player is required.

NOTE The computer being used should be configured to use the same IP address and subnet mask as the access point.

http://supportcentral.motorola.com





provided, and click Apply. Once the admin password has been updated, a warning message displays stating the access point could be operating illegally unless set to operate in the correct country. Proceed to Regulatory Information on page -46 to validate the country setting.

7.3 Resetting the Wireless Controller RFS7000’s PasswordThe Wireless Controller RFS7000 has a means of restoring its password to its default value. Doing so also reverts the Wireless Controller’s security, to their default settings. Only an installation professional should reset the Controller’s password and promptly define a new restrictive password. .

NOTE Though the Wireless Controller can have its basic settings defined using a number of different screens, Motorola recommends using the Wireless Controller Initial Setup Wizard screen to define a minimum required configuration from one location.

NOTE To contact Motorola Support in the event of a password reset requirement, go to http://supportcentral.motorola.com.

CAUTION Only a qualified installation professional should set or restore the Wireless Controller in the event of a password reset.!



8 Regulatory Information

This device is approved under the Symbol Technologies brand; Symbol Technologies, Inc., is the Enterprise Mobility business of Motorola Solutions, Inc (“Motorola”).

This regulatory section applies only to the RFS-7000. For more information refer to Motorola Solutions’ Enterprise Mobility Support Center on page -50 .

All Motorola Solutions devices are designed to be compliant with rules and regulations in locations they are sold and will be labeled as required.

Any changes or modifications to Motorola Solutions equipment, not expressly approved by Motorola Solutions, could void the user’s authority to operate the equipment.

Local language translations are available at the following website: http://supportcentral.motorolasolutions.com/

EN60825-1:1994+ A1:2002 +A2:2001

IEC60825-1:1993+A1:1997+A2:2001

The laser classification is marked on the device.

Class 1 Laser devices are not considered to be hazardous when used for their intended purpose. The following statement is required to comply with US and international regulations:

Country SelectionSelect only the country in which you are using the device. Any other selection will make the operation of this device illegal.

CAUTION Laser Devices - Gigabit Ethernet SFP OptionComplies with 21CFR1040.10 and 1040.11 except for deviations pursuant to Laser Notice No. 50, dated July 26, 2001.

CAUTION This is a class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures.

!

!

http://supportcentral.motorola.com/


http://supportcentral.motorolasolutions.com/


Radio Frequency Interference Requirements - FCC

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.

Radio Frequency Interference Requirements - Canada

This Class A digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.

Statement of Compliance

Motorola Solutions, Inc., hereby declares that this device is in compliance with all the applicable Directives, 89/336/EEC, 73/23/EEC. A Declaration of Conformity may be obtained fromhttp://www.motorolasolutions.com

Marking and European Economic Area (EEA)

http://www.motorolasolutions.com


8.1 Waste Electrical and Electronic Equipment (WEEE)

English: For EU Customers: All products at the end of their life must be returned to Symbol for recycling. For information on how to return product, please go to: http://www.motorolasolutions.com/recycling/weee.Bulgarish: За клиенти от ЕС: След края на полезния им живот всички продукти трябва да се връщат на Motorola Solutions за рециклиране. За информация относно връщането на продукти, моля отидете на адрес: http://www.motorolasolutions.com/recycling/weee.Ceština: Pro zákazníky z EU: Všechny produkty je nutné po skonèení jejich životnosti vrátit spoleènosti Motorola Solutions k recyklaci. Informace o zpùsobu vrácení produktu najdete na webové stránce: http://www.motorolasolutions.com/recycling/weee..Dansk: Til kunder i EU: Alle produkter skal returneres til Symbol til recirkulering, når de er udtjent. Læs oplysningerne om returnering af produkter på: http://www.motorolasolutions.com/recycling/weee.Deutsch: Für Kunden innerhalb der EU: Alle Produkte müssen am Ende ihrer Lebensdauer zum Recycling an Symbol zurückgesandt werden. Informationen zur Rücksendung von Produkten finden Sie unter http://www.motorolasolutions.com/recycling/weee.Eesti: EL klientidele: kõik tooted tuleb nende eluea lõppedes tagastada taaskasutamise eesmärgil Symbol'ile. Lisainformatsiooni saamiseks toote tagastamise kohta külastage palun aadressi:http://www.motorolasolutions.com/recycling/weee.Español: Para clientes en la Unión Europea: todos los productos deberán entregarse a Symbol al final de su ciclo de vida para que sean reciclados. Si desea más información sobre cómo devolver un producto, visite: http://www.motorolasolutions.com/recycling/weee. Ελληνικά: Για πελάτες στην Ε.Ε.: Όλα τα προϊόντα, στο τέλος της διάρκειας ζωής τους, πρέπει να επιστρέφονται στην Motorola Solutions για ανακύκλωση. Για περισσότερες πληροφορίες σχετικά με την επιστροφή ενός προϊόντος, επισκεφθείτε τη διεύθυνσηhttp://www.motorolasolutions.com/recycling/weee. στο Διαδίκτυο..Français : Clients de l'Union Européenne : Tous les produits en fin de cycle de vie doivent être retournés à Symbol pour recyclage. Pour de plus amples informations sur le retour de produits, consultez :http://www.motorolasolutions.com/recycling/weee.

http://www.motorola.com/doc.


Italiano: per i clienti dell'UE: tutti i prodotti che sono giunti al termine del rispettivo ciclo di vita devono essere restituiti a Symbol al fine di consentirne il riciclaggio. Per informazioni sulle modalità di restituzione, visitare il seguente sito Web: http://www.motorolasolutions.com/recycling/weee.Lietuvių: ES vartotojams: visi gaminiai, pasibaigus jų eksploatacijos laikui, turi būti grąžinti utilizuoti į kompaniją „Motorola Solutions“. Daugiau informacijos, kaip grąžinti gaminį, rasite: http://www.motorolasolutions.com/recycling/weee.Latviešu: ES klientiem: visi produkti pēc to kalpošanas mūža beigām ir jānogādā atpakaļ Motorola Solutions otrreizējai pārstrādei. Lai iegūtu informāciju par produktu nogādāšanu Motorola, lūdzu, skatiet: http://www.motorolasolutions.com/recycling/weee.Magyar: Az EU-ban vásárlóknak: Minden tönkrement terméket a Symbol vállalathoz kell eljuttatni újrahasznosítás céljából. A termék visszajuttatásának módjával kapcsolatos tudnivalókért látogasson el a http://www.motorolasolutions.com/recycling/weee.weboldalra.Malti: Għal klijenti fl-UE: il-prodotti kollha li jkunu waslu fl-aħħar tal-ħajja ta' l-użu tagħhom, iridu jiġu rritornati għand Motorola Solutions għar-riċiklaġġ. Għal aktar tagħrif dwar kif għandek tirritorna l-prodott, jekk jogħġbok żur: http://www.motorolasolutions.com/recycling/weee. Nederlands: Voor klanten in de EU: alle producten dienen aan het einde van hun levensduur naar Symbol te worden teruggezonden voor recycling. Raadpleeg http://www.motorolasolutions.com/recycling/weee. voor meer informatie over het terugzenden van producten.Português: Para clientes da UE: todos os produtos no fim de vida devem ser devolvidos à Symbol para reciclagem. Para obter informações sobre como devolver o produto, visite: http://www.motorolasolutions.com/recycling/weee.Polski: Klienci z obszaru Unii Europejskiej: Produkty wycofane z eksploatacji nale¿y zwróciæ do firmy Motorola Solutions w celu ich utylizacji. Informacje na temat zwrotu produktów znajduj¹ siê na stronie internetowej http://www.motorolasolutions.com/recycling/weee.Slovenski: Za kupce v EU: vsi izdelki se morajo po poteku življenjske dobe vrniti podjetju Symbol za reciklažo. Za informacije o vraèilu izdelka obišèite: http://www.motorolasolutions.com/recycling/weee.Svenska: För kunder inom EU: Alla produkter som uppnått sin livslängd måste returneras till Motorola Solutions för återvinning. Information om hur du returnerar produkten finns på http://www.motorolasolutions.com/recycling/weee.Suomi: Asiakkaat Euroopan unionin alueella: Kaikki tuotteet on palautettava kierrätettäväksi Symbol-yhtiöön, kun tuotetta ei enää käytetä. Lisätietoja tuotteen palauttamisesta on osoitteessa http://www.motorolasolutions.com/recycling/weee.Slovenčina: Pre zákazníkov z krajín EU: Všetky výrobky musia byť po uplynutí doby ich životnosti vrátené spoločnosti Motorola Solutions na recykláciu. Bližšie informácie o vrátení výrobkov nájdete na: http://www.motorolasolutions.com/recycling/weee.


9 Motorola Solutions’ Enterprise Mobility Support Center

If you have a problem with your equipment, contact Enterprise Mobility support for your region. Contact information is available by visiting http://supportcentral.motorolasolutions.com/

When contacting Enterprise Mobility support, please provide the following information:

• Serial number of the unit• Model number or product name• Software type and version number

Motorola Solutions responds to calls by email, telephone or fax within the time limits set forth in support agreements. If you purchased your Enterprise Mobility business product from a Motorola Solutions business partner, contact that business partner for support.

Customer Support Web SiteMotorola's Support Central Web site, located athttp://supportcentral.motorolasolutions.com/support/provides information and online assistance including developer tools, software downloads, productmanuals and online repair requests.

Manualshttp://supportcentral.motorolasolutions.com/support/product/manuals.do

General InformationObtain additional information by contacting Motorola at:

Telephone (North America): 1-800-722-6234

Telephone (International): +1-631-738-5200

Website:http://www.motorolasolutions.com

http://supportcentral.motorola/com

http://supportcentral.motorola/com


http://supportcentral.motorolasolutions.com/support/

http://supportcentral.motorola.com/support/

http://supportcentral.motorola.com/support/

http://www.motorolasolutions.com

http://supportcentral.motorolasolutions.com/


10 Motorola Solutions, Inc. End-User License Agreement

BY DOWNLOADING, INSTALLING, OR USING THE SOFTWARE DESCRIBED IN THIS DOCUMENT, YOU OR THE ENTITY OR COMPANY THAT YOU REPRESENT ("LICENSEE") ARE UNCONDITIONALLY CONSENTING TO BE BOUND BY AND ARE BECOMING A PARTY TO THIS LICENSE AGREEMENT ("AGREEMENT"). LICENSEE'S USE OR CONTINUED USE OF THE DOWNLOADED OR INSTALLED MATERIALS SHALL ALSO CONSTITUTE ASSENT TO THE TERMS OF THIS AGREEMENT. IF LICENSEE DOES NOT UNCONDITIONALLY AGREE TO ALL OF THE TERMS OF THIS AGREEMENT, DO NOT CONTINUTE THE INSTALLATION PROCESS. IF THESE TERMS ARE CONSIDERED AN OFFER, ACCEPTANCE IS EXPRESSLY LIMITED TO AND EXPRESSLY CONTINGENT UPON THESE TERMS. IF YOU ARE ACCEPTING THESE TERMS ON BEHALF OF A COMPANY, ANOTHER PERSON OR ANY OTHER LEGAL ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO BIND THAT COMPANY, PERSON OR ENTITY.

1 LICENSE GRANT. Subject to the terms of this Agreement, Motorola Solutions, Inc. and/or its subsidiaries ("Licensor") hereby grants Licensee a limited, personal, non-sublicensable, non-transferable, nonexclusive license to use the software that Licensee is about to download or install and the documentation that accompanies it (collectively, the "Software") for Licensee's personal use in connection with hardware produced by Licensor and only in accordance with the accompanying documentation. Licensee may download, install and use the Software only on a single computer. Licensee may make one copy of the Software (excluding any documentation) for backup purposes, provided that copyright and other restricted rights notices of Licensor and its suppliers are reproduced exactly.

2 LICENSE RESTRICTIONS. Except as expressly permitted by this Agreement, Licensee shall not, nor permit anyone else to, directly or indirectly: (i) copy (except for one backup copy), modify, distribute or create derivative works based upon the Software; (ii) reverse engineer, disassemble, decompile or otherwise attempt to discover the source code or structure, sequence and organization of the Software; or (iii) rent, lease, or use the Software for timesharing or service bureau purposes, or otherwise use the Software for any commercial purpose/on behalf of any third party. Licensee shall maintain and not remove or obscure any proprietary notices on the Software, and shall reproduce such notices exactly on all permitted copies of the Software. All title, ownership rights, and intellectual property rights in and to the Software, and any copies or portions thereof, shall remain in Licensor and its suppliers or licensors. Licensee understands that Licensor may modify or discontinue offering the Software at any time. The Software is protected by the copyright laws of the United States and international copyright treaties. The Software is licensed, not sold. This Agreement does not give Licensee any rights not expressly granted herein.

3 INTELLECTUAL PROPERTY; CONTENT. All title and intellectual property rights in and to the Software (including but not limited to any images, photographs, animations, video, audio, music, text and "applets" incorporated into the Software), and any copies you are permitted to make herein are owned by Licensor or its suppliers. All title and intellectual property rights in and to the content which may be accessed through use of the Software is the property of the respective content owner and may be protected by applicable copyright or other intellectual property laws and treaties. This EULA grants you no rights to use such content. As a condition to Licensee's use of the Software, Licensee represents, warrants and covenants that Licensee will not use the Software: (i) to infringe the intellectual property rights or proprietary rights, or rights of publicity or privacy, of any third party; (ii) to violate any applicable law, statute, ordinance or regulation; (iii) to disseminate information or materials in any form or format ("Content") that are harmful, threatening, abusive, harassing, tortuous, defamatory, vulgar, obscene, libelous, or otherwise objectionable; or (iv) to disseminate any software viruses or any other computer code, files or programs that may interrupt, destroy or limit the functionality of any computer software or hardware or telecommunications equipment. Licensee, not Licensor, remains solely responsible for all Content that Licensee uploads, posts, e-mails, transmits, or otherwise disseminates using, or in connection with, the Software.


4 FEES; SUPPORT AND UPGRADES. Licensor may, at Licensor's sole option, provide support services related to the Software ("Support Services"). Nothing in this Agreement grants Licensee any right to receive any Support Services. Use of any Support Services provided is governed by the Licensor policies and programs described in the user manual, in "online" documentation, and/or in other Licensor-provided materials or support agreements. Any supplemental software code provided to you as part of any Support Services shall be considered part of the Software and subject to the terms and conditions of this EULA. With respect to technical information you provide to Licensor as part of any Support Services, Licensor may use such information for its business purposes, including for product support and development. Licensor will not utilize such technical information in a form that personally identifies Licensee.

5 TERMINATION. Either party may terminate this Agreement at any time, with or without cause, upon written notice. Any termination of this Agreement shall also terminate the licenses granted hereunder. Upon termination of this Agreement for any reason, Licensee shall return all copies of the Software to Licensor, or destroy and remove from all computers, hard drives, networks, and other storage media all copies of the Software, and shall so certify to Licensor that such actions have occurred. Sections 2-13 shall survive termination of this Agreement.

6 DISCLAIMER OF WARRANTIES. To the maximum extent permitted by applicable law, Licensor and its suppliers provide the Software and any (if any) Support Services AS IS AND WITH ALL FAULTS, and hereby disclaim all warranties and conditions, either express, implied or statutory, including, but not limited to, any (if any) implied warranties or conditions of merchantability, of fitness for a particular purpose, of lack of viruses, of accuracy or completeness of responses, of results, and of lack of negligence or lack of workmanlike effort, all with regard to the Software, and the provision of or failure to provide Support Services. ALSO, THERE IS NO WARRANTY OR CONDITION OF TITLE, QUIET ENJOYMENT, QUIET POSSESSION, CORRESPONDENCE TO DESCRIPTION, OR NON-INFRINGEMENT WITH REGARD TO THE SOFTWARE. THE ENTIRE RISK AS TO THE QUALITY OF OR ARISING OUT OF USE OR PERFORMANCE OF THE SOFTWARE AND SUPPORT SERVICES, IF ANY, REMAINS WITH LICENSEE.

7 EXCLUSION OF INCIDENTAL, CONSEQUENTIAL AND CERTAIN OTHER DAMAGES. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL LICENSOR OR ITS SUPPLIERS BE LIABLE FOR ANY GENERAL, SPECIAL, INCIDENTAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR LOSS OF PROFITS OR CONFIDENTIAL OR OTHER INFORMATION, FOR BUSINESS INTERRUPTION, FOR PERSONAL INJURY, FOR LOSS OF PRIVACY, FOR FAILURE TO MEET ANY DUTY INCLUDING OF GOOD FAITH OR OF REASONABLE CARE, FOR NEGLIGENCE, AND FOR ANY OTHER PECUNIARY OR OTHER LOSS WHATSOEVER) ARISING OUT OF OR IN ANY WAY RELATED TO THE USE OF OR INABILITY TO USE THE SOFTWARE, THE PROVISION OF OR FAILURE TO PROVIDE SUPPORT SERVICES, OR OTHERWISE UNDER OR IN CONNECTION WITH ANY PROVISION OF THIS AGREEMENT, EVEN IN THE EVENT OF THE FAULT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, BREACH OF CONTRACT OR BREACH OF WARRANTY OF LICENSOR OR ANY SUPPLIER, AND EVEN IF LICENSOR OR ANY SUPPLIER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

8 LIMITATION OF LIABILITY AND REMEDIES. Notwithstanding any damages that Licensee might incur for any reason whatsoever (including, without limitation, all damages referenced above and all direct or general damages), the entire liability of Licensor and any of its suppliers under any provision of this Agreement and Licensee's exclusive remedy for all of the foregoing shall be limited to the greater of the amount actually paid by Licensee for the Software or U.S.$5.00. The foregoing limitations, exclusions and disclaimers shall apply to the maximum extent permitted by applicable law, even if any remedy fails its essential purpose.

9 INDEMNITY. Licensee agrees that Licensor shall have no liability whatsoever for any use Licensee makes of the Software. Licensee shall indemnify and hold harmless Licensor from any claims, damages, liabilities, costs and fees


(including reasonable attorney fees) arising from Licensee's use of the Software as well as from Licensee's failure to comply with any term of this Agreement.

10 FAULT TOLERANCE. The Software is not fault-tolerant and is not designed, manufactured or intended for use or resale in on-line control equipment in hazardous environments requiring fail-safe performance, such as, but not limited to, the operation of nuclear facilities, aircraft navigation or communication systems, air traffic control, life support machines, or weapons systems, in which the failure of the Software could lead directly or indirectly to death, personal injury, or physical or environmental damage ("High Risk Activities"). Licensor and its suppliers specifically disclaim any express or implied warranty of fitness for High Risk Activities.

11 U.S. GOVERNMENT LICENSE RIGHTS. Software provided to the U.S. Government pursuant to solicitations issued on or after December 1, 1995 is provided with the commercial license rights and restrictions described elsewhere herein. Software provided to the U.S. Government pursuant to solicitations issued prior to December 1, 1995 is provided with "Restricted Rights" as provided for in FAR, 48 CFR 52.227-14 (JUNE 1987) or DFAR, 48 CFR 252.227-7013 (OCT 1988), as applicable. The "Manufacturer" for purposes of these regulations is Motorola Solutions, Inc., One Symbol Plaza, Holtsville, NY 11742.

12 EXPORT RESTRICTIONS. Licensee shall comply with all export laws and restrictions and regulations of the Department of Commerce, the United States Department of Treasury Office of Foreign Assets Control ("OFAC"), or other United States or foreign agency or authority, and Licensee shall not export, or allow the export or re-export of the Software in violation of any such restrictions, laws or regulations. By downloading or using the Software, Licensee agrees to the foregoing and represents and warrants that Licensee is not located in, under the control of, or a national or resident of any restricted country.

13 MISCELLANEOUS. Licensee may not sublicense, assign, or transfer this Agreement, or its rights or obligations hereunder, without the prior written consent of Licensor. Any attempt to otherwise sublicense, assign, or transfer any of the rights, duties, or obligations hereunder is null and void. Licensor may assign this Agreement in its sole discretion. In the event that any of the provisions of this Agreement shall be held by a court or other tribunal of competent jurisdiction to be illegal, invalid or unenforceable, such provisions shall be limited or eliminated to the minimum extent necessary so that this Agreement shall otherwise remain in full force and effect. No waiver or modification of this Agreement will be binding upon a party unless made in writing and signed by a duly authorized representative of such party and no failure or delay in enforcing any right will be deemed a waiver. This Agreement shall be governed by the laws of the State of New York without regard to the conflicts of law provisions thereof. The application the United Nations Convention of Contracts for the International Sale of Goods is expressly excluded. Unless waived by Licensor for a particular instance, any action or proceeding arising out of this Agreement must be brought exclusively in the state or federal courts of New York and Licensee hereby consents to the jurisdiction of such courts for any such action or proceeding. This Agreement supersedes all prior discussions and writings and constitutes the entire agreement between the parties with respect to the subject matter hereof. The prevailing party in any action arising out of this Agreement shall be entitled to costs and attorneys' fees.

MOTOROLA Solutions INC.1301 E. ALGONQUIN ROADSCHAUMBURG, IL 60196-1078, U.S.A.http://www.motorolasolutions.com

MN000262A01 Revision A October 2013

MOTOROLA, MOTO, MOTOROLA Solutions and the Stylized M logo are trademarks or registered trademarks of Motorola Trademark Holdings, LLC and are used under license. All other trademarks are a properties of their owners.©2013 Motorola Solutions, Inc. All rights reserved.

motorola solutions rfs7000gr series rf switch

Documents