3com OfficeConnect WX4400 Reference guide

http://www.3Com.com/

Part No. 10015404 Rev. AA

Published August 2006

Wireless LAN Mobility System

Wireless LAN Switch Manager

Reference Manual

WX4400 3CRWX440095A

WX1200 3CRWX120695A

WXR100 3CRWXR10095A

WX2200 3CRWX220095A

3Com Corporation

350 Campus Drive

Marlborough, MA USA

01752-3064

in any form or by any means or used to make any derivative work (such as translation, transformation, or

adaptation) without written permission from 3Com Corporation.

3Com Corporation reserves the right to revise this documentation and to make changes in content from time

to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.

3Com Corporation provides this documentation without warranty, term, or condition of any kind, either

implied or expressed, including, but not limited to, the implied warranties, terms or conditions of

merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or

changes in the product(s) and/or the program(s) described in this documentation at any time.

If there is any software on removable media described in this documentation, it is furnished under a license

agreement included with the product as a separate document, in the hard copy documentation, or on the

removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,

please contact 3Com and a copy will be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software described herein are

provided to you subject to the following:

All technical data and computer software are commercial in nature and developed solely at private expense.

Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or

as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are

provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights

only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable.

You agree not to remove or deface any portion of any legend provided on any licensed program or

documentation contained in, or delivered to you in conjunction with, this User Guide.

Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may

not be registered in other countries.

3Com is a registered trademark of 3Com Corporation. The 3Com logo is a trademark of 3Com Corporation.

Mobility Domain, Mobility Point, Mobility Profile, Mobility System, Mobility System Software, MP, MSS, and

SentrySweep are trademarks of Trapeze Networks, Inc.

Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, Windows XP,

and Windows NT are registered trademarks of Microsoft Corporation.

All other company and product names may be trademarks of the respective companies with which they are

associated.

ENVIRONMENTAL STATEMENT

It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we

are committed to:

Establishing environmental performance standards that comply with national legislation and regulations.

Conserving energy, materials and natural resources in all operations.

Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental

standards. Maximizing the recyclable and reusable content of all products.

Ensuring that all products can be recycled, reused and disposed of safely.

Ensuring that all products are labelled according to recognized environmental standards.

Improving our environmental record on a continual basis.

End of Life Statement

3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.

Regulated Materials Statement

3Com products do not contain any hazardous or ozone-depleting material.

Environmental Statement about the Documentation

The documentation for this product is printed on paper that comes from sustainable, managed forests; it is

fully biodegradable and recyclable, and is completely chlorine-free. The varnish is environmentally-friendly, and

the inks are vegetable-based with a low heavy-metal content.

CONTENTS

ABOUT THIS GUIDE

Conventions 17

Documentation 18

Documentation Comments 19

1 INSTALLING 3WXM

Hardware Requirements 21

Hardware Requirements for 3WXM Client 21

Hardware Requirements for 3WXM Monitoring Service 22

Software Requirements 23

Preparing for Installation 23

User Privileges 23

Serial Number and License Key 24

Installing 3WXM 24

Installing 3WXM on Windows Systems 24

Installing 3WXM on Linux Systems 26

Installation Log File 27

Upgrading 3WXM 28

Uninstalling 3WXM on Windows Systems 28

Uninstalling 3WXM on Linux Systems 30

2 WORKING WITH THE 3WXM USER INTERFACE

Overview 31

Display Panels 32

Organizer Panel 32

Alerts Panel 34

Content Panel 35

Task List Panel 37

Resizing a Display Panel 39

Menu Bar Options 40

Tool Bar Options 41

Copying, Pasting, and Deleting Objects 44

Copy and Paste in the Organizer Panel 44

Copy and Paste Replace in the Organizer Panel 45

Copy and Paste in the Content Panel 45

Enabling Keyboard Shortcut Mnemonics (Windows XP Only) 46

3 GETTING STARTED

Starting 3WXM 49

Restricting Access to 3WXM 52

Creating an Administrator Account 53

Creating Provision or Monitor Accounts 54

Deleting 3WXM User Accounts 54

Disabling Access Control 54

4 WORKING WITH NETWORK PLANS

Creating a Network Plan 56

Managing Network Plans 57

Saving a Network Plan 57

Opening a Network Plan 58

Importing a Network Plan 59

Closing a Network Plan 60

Deleting a Network Plan 60

Sharing a Network Plan 61

Defining a Mobility Domain 62

Roaming Behavior 62

Traffic Ports Used by a Mobility Domain 64

Creating a Mobility Domain 64

Creating a WX Switch 65

Creating a Third-Party AP 65

Changing the Country Code 67

Applying the Network’s RF Auto-Tuning Settings to the Network Plan 67

Uploading a WX Switch into the Network Plan 68

Converting Auto DAPs into Statically Configured APs 69

Creating a Network Domain 69

5 PLANNING THE 3COM MOBILITY SYSTEM

RF Planning Overview 71

Accessing the RF Planning Tools 72

Creating or Modifying a Site 74

Creating or Modifying Buildings in a Site 76

Creating or Modifying Floors 79

Importing or Drawing Floor Details 80

Importing a Drawing of a Floor 80

File Recommendations 81

Preparing a Drawing Before Importing It 81

Cropping the Paper Space 86

Adjusting the Scale of a Drawing 87

Adjusting the Origin Point 88

Working with Layers 89

Cleaning Up a Drawing 91

Drawing Floor Objects Manually 95

Specifying the RF Characteristics of a Floor 96

Recommendations 96

Converting Objects into RF Obstacles 97

Drawing RF Obstacles 99

Importing RF Obstacle Data from a Site Survey 100

Defining Wireless Coverage Areas 112

Creating a Wiring Closet 113

Defining a Coverage Area 115

Editing Coverage Areas 127

Placing Third-Party Access Points 132

Moving a Third-Party AP Icon to its Floor Location 133

Creating and Placing an Icon for a Third-Party Access Point 133

Placing Installed and Auto-Configured MAPs 137

Computing MAP Placement 138

Computing and Placing MAP Access Points for a Coverage Area 138

Assigning MAP Channels 146

Computing Optimal Power 149

Verifying the Wireless Network 152

Showing RF Coverage 152

Placing RF Measurement Points 153

Using RF Interactive Measurement Mode 155

Reading the RF Measurement Table 155

Generating RF Network Design Information 157

6 CONFIGURING WX SYSTEM PARAMETERS

WX Switch Configuration Objects 159

Adding a WX Switch to the Network Plan 163

Creating a WX Switch as Part of RF Planning 163

Creating a WX Switch Using the Create Wireless Switch Wizard 163

Creating a New WX Switch Based on a Configured Switch in the Network

Plan 164

Adding a Switch by Uploading its Configuration from the Network 165

Adding a Switch by Importing a Configuration File 165

Configuring Basic and Advanced Settings 166

Reviewing and Deploying Changes 166

Reviewing Changes 166

Deploying Changes 167

Using the Create Wireless Switch Wizard 167

Setting Up a Switch 169

Modifying Basic Switch Parameters 172

Changing the WX Software Version 174

Changing the WX Model 174

Changing Timezone Properties 174

Changing System Information 175

Converting Auto DAPs into Statically Configured DAPs 176

Deleting Auto DAPs 177

Launching a Telnet Management Session with the Switch 177

Launching a Web Management Session with the Switch 178

Viewing and Changing Port Settings 178

Viewing Port Settings 178

Changing Port Settings 178

Configuring a Port for a Directly Connected AP 180

Configure a Port for Wired Authentication 181

Viewing and Changing Port Groups 186

Viewing Port Groups 186

Creating a Port Group 187

Changing a Port Group 187

Viewing and Changing Management Settings 188

Viewing Management Service Settings 188

Changing Management Service Settings 188

Configuring SNMP 189

Viewing and Setting Log and Trace Settings 200

Viewing Log Settings 200

Changing Log Settings 200

Viewing and Configuring IP Services Settings 203

Viewing IP Services Setting 203

Creating a Static Route 204

Create an IP Alias 205

Configuring DNS 205

Configuring NTP 206

Configuring ARP 207

Viewing and Configuring VLANs 208

Viewing VLANs 209

Creating a VLAN 209

Changing VLAN Membership 211

Changing VLAN Spanning Tree Settings 212

Changing VLAN IGMP Settings 216

Restricting Layer 2 Traffic Among Clients in a VLAN 219

Restricting Layer 3 Traffic Among Clients in a VLAN 220

Changing a VLAN’s Tunnel Affinity 220

Configuring the MSS DHCP Server 221

Changing the Aging Time for FDB Entries 222

Viewing and Configuring ACLs 222

Viewing ACLs 223

Creating an ACL 223

Configuring Advanced ACL Settings 228

Adding a New ACE to a Configured ACL 230

Mapping an ACL 230

Deleting an ACL 232

Deleting an Individual ACE from an ACL 232

Viewing and Changing CoS Mappings 233

Viewing CoS Mappings 233

Changing a DSCP-to-CoS Mapping 234

Changing a CoS-to-DSCP Mapping 234

Setting a Range of DSCP Values to a Single CoS Value 235

Resetting CoS Mapping to their Default Values 235

7 CONFIGURING WIRELESS PARAMETERS

Viewing and Configuring Wireless Services 237

Wireless Service Parameters 238

Viewing Wireless Services 243

Configuring an 802.1X Wireless Service 244

Configuring a Voice over Wireless Service 246

Configuring a Web-Portal (WebAAA) Service 249

Configuring an Open Access Service 252

Configuring a Custom Service 254

Modifying Service Profile Settings 255

Viewing SSID Encryption Settings and Access Rules 260

Modifying SSID Encryption Settings and Access Rules 262

Viewing and Configuring Radio Profiles 265

Viewing Radio Profile Settings 265

Creating a Radio Profile 266

Moving Radios Back to the Default Radio Profile 266

Configuring Advanced Radio Profile Settings 267

Viewing and Changing the Auto-DAP Profile 271

Viewing Auto-DAP Profile Settings 271

Changing Auto-DAP Profile Settings 272

Converting Auto DAPs into Statically Configured DAPs 274

Deleting Auto DAPs 274

Viewing and Configuring MAPs 274

Viewing the Configured MAPs 275

Creating a Distributed MAP 275

Configuring a Directly Connected MAP 277

Changing the MAP-WX Security Mode 279

Configuring Advanced MAP Settings 279

Viewing and Changing Radio Settings 283

Viewing Radio Settings 283

Changing Radio Settings 283

Viewing and Changing RF Detection Settings 284

Viewing RF Detection Settings 284

Adding an Entry to the Permitted Vendor OUI List 284

Adding an Entry to the Permitted SSID List 285

Adding an Entry to the Ignore List 285

Adding an Entry to the Rogue List 286

Adding an Entry to the Client Black List 286

Enabling Countermeasures 286

Enabling MAP Signatures 287

8 CONFIGURING AUTHENTICATION, AUTHORIZATION, AND

A

CCOUNTING PARAMETERS

Creating and Managing Users in the Local User Database 289

Viewing Users and Groups in the Local Database 290

Creating a Named User 291

Creating a User Group and Assigning Users To It 292

Creating a MAC User 293

Creating a MAC User Group and Assigning Users To It 294

Authorization Attributes 295

Viewing and Configuring RADIUS Settings 300

Viewing RADIUS Settings, Servers, and Server Groups 301

Creating a RADIUS Server 301

Creating a RADIUS Server Group 302

Changing Default RADIUS Settings 303

Viewing and Configuring Global 802.1X Settings 305

Viewing Global 802.1X Settings 305

Changing Global 802.1X Settings 305

Viewing and Configuring 802.1X Network Access Rules 308

Viewing 802.1X Network Access Rules 308

Creating an 802.1X Network Access Rule 308

Viewing and Configuring MAC Network Access Rules 312

Viewing MAC Network Access Rules 312

Creating a MAC Network Access Rule 312

Viewing and Configuring WebAAA Network Access Rules 315

Viewing Web AAA Network Access Rules 315

Creating a Web AAA Network Access Rule 316

Viewing and Configuring Last-Resort Network Access Rules 318

Viewing Last-Resort Network Access Rules 318

Creating a Last-Resort Network Access Rule 318

Viewing and Configuring WX Administrator Access Rules 320

Viewing WX Administrator Access Rules 320

Creating an Access Rule for Console Access 321

Creating an Access Rule for Telnet or SSH Access 322

Viewing and Configuring AAA Support for Third-Party AP Users 324

Viewing Settings for Third-Party AP AAA Support 324

Creating a Proxy Access Rule 324

Configuring a RADIUS Proxy for a Client 326

Specifying the WX Port Connected to the Third-Party AP 326

Viewing and Changing Location Policy Rules 327

Viewing Location Policy Rules 327

Creating a Location Policy Rule 328

Viewing and Changing Mobility Profiles 330

Viewing Mobility Profiles 330

Creating a Mobility Profile 330

9 CONFIGURING WX SWITCHES REMOTELY

How Remote WX Configuration Works 334

Drop Ship (WXR100 Only) 334

Staged WX 336

3WXM Requirements 337

Staging a WX Switch for Configuration by 3WXM 338

Example 1: Deployment Site Has DHCP and Local DNS 338

Example 2: Deployment Site Has No DHCP and No DNS 339

Example 3: Deployment Site Has DNS But No DHCP 340

Example 4: Deployment Site Has DHCP But Local DNS Domain Differs

From Corporate DNS Domain 341

Preconfiguring a Switch in 3WXM 342

Uploading a Partially Configured Switch and Completing its

Configuration with 3WXM 343

Replacing a Switch and Reusing its Configuration 344

Requirements 344

How Switch Replacement Works 344

Enabling Replacement of Remote Switches 345

Replacing a Switch 346

10 MANAGING WX SYSTEM IMAGES AND CONFIGURATIONS

WX File Management Options 347

Devices Tab 348

Task List Options 349

Toolbar Options 352

Synchronizing Local and Network Changes 352

Reviewing Switch Configuration Changes 352

Accepting Network Changes 353

Undoing Local or Network Changes 353

Deploying Switch Configuration Changes 354

Synchronizing When the Network and 3WXM Have Nonmatching

Changes 355

Distributing System Images 356

Using the Image Repository 356

Distributing System Images 357

Rebooting WX Switches or MAP Access Points 358

Enabling or Disabling Management of a Switch by 3WXM 359

Viewing the Operation Log 360

Canceling a Scheduled Operation 360

Importing and Exporting Switch Configuration Files 361

Modifying Configuration Change Polling Options 363

11 VERIFYING CONFIGURATION CHANGES

Verification Tabs 365

Toolbar Options 366

Filtering the Message List 366

Resolving an Error or Warning 366

Disabling a Rule from the Message List 367

Changing Verification Options 368

Disabling and Reenabling Rules 369

12 MANAGING CERTIFICATES

Overview 371

Processing Certificates 372

Managing Certificates 373

Reviewing Certificate Details 373

Deleting Certificates 373

Distributing Certificates to WX Switches 374

13 CONFIGURING AND APPLYING POLICIES

How Changes Are Managed 375

Policies Created When You Migrate a 3.x Network Plan to 4.1 375

Viewing Policies 376

Creating a Policy 376

Configuring Feature Settings in a Policy 377

Applying Policy Changes to Switches 377

14 USING THE EVENT LOG

Displaying the Event Log 379

Toolbar Options 379

Refreshing Event Data 380

Reviewing Event Details 380

Filtering Event Messages 380

Using Predefined Event Filters 380

Filtering Events by Content 381

Filtering Events by Severity 383

Filtering Events by Facility 383

Creating and Saving Filters 384

Deleting Filters 384

Exporting Filtered Data 384

15 GENERATING REPORTS

Overview 386

Generating an Inventory Report 387

Generating a Mobility Domain Configuration Report 388

Generating a WX Configuration Report 389

Generating a Client Summary Report 390

Generating a Client Details Report 391

Generating a Client Errors Report 393

Generating a Watch List Client Report 394

Generating a Network Usage Report 395

Generating an RF Summary Report 396

Generating a Radio Details Report 397

Generating a Rogue Details Report 398

Generating a Rogue Summary Report 399

Generating a Site Survey Order 400

Generating a Work Order 401

16 MONITORING THE NETWORK

Overview 403

Requirements for Monitoring 404

Accessing Monitored Data 404

Using the Explore Window 405

Toolbar Options 407

Threshold Flags 409

Displaying Object Details 412

Displaying 802.11 Coverage 412

Taking RF Measurements 414

Using the Status Summary View 416

Using the Client Monitor View 417

Toolbar Options 417

Refreshing Client Data 418

Displaying Client Activity Information 418

Displaying Client Session Information 429

Managing the Client Watch List 436

Displaying a Client’s Geographical Location 441

Terminating a Client’s Session 443

Using the RF Monitor View 444

Displaying RF Neighborhood Information 445

Displaying the SSID-to-BSSID Mapping 446

Displaying the Activity Log 447

Displaying RF Environment Statistics 448

Using the RF Trends View 449

Refreshing RF Trend Data 451

Accessing Realtime Performance Statistics 451

Viewing Performance Data 453

17 DETECTING AND COMBATTING ROGUE DEVICES

Overview 459

Rogue Detection Requirements 460

Mobility Domain Requirement 461

Rogue Detection Lists 462

Using the Rogue Detection Screen 464

Toolbar Options 465

Filtering the Rogue List 466

Displaying Rogue Details 467

Displaying a Rogue’s Geographical Location 470

Ignoring Friendly Third-Party Devices 472

Adding a Device to the Attack List 473

Converting a Rogue into a Third Party AP 473

To convert a rogue into a third-party AP 473

Adding a Rogue’s Clients to the Black List 475

Configuring RF Detection Options from the Organizer Panel 475

18 OPTIMIZING A NETWORK PLAN

Importing RF Measurements 477

Importing the Measurements 477

Applying the RF Measurements to the Floor Plan 479

Locating and Fixing Coverage Holes 480

Locating a Coverage Hole 480

Fixing a Coverage Hole 482

Computing and Placing New MAPs 482

Adding New MAPs that Are Already Installed to the Network Plan 482

A CHANGING 3WXM PREFERENCES

Overview 483

Resetting Preferences Values 483

Changing Network Synchronization Options 484

Changing User Interface Options 484

Changing Persistence Options 485

Changing Tools Options 486

Changing Certificate Management Options 486

Changing Options for RF Planning 487

Configuring the Typical Client’s Transmit Power 487

Changing Colors 487

Changing 3WXM Logging Options 491

B CHANGING 3WXM SERVICES PREFERENCES

Overview 493

Starting or Stopping the 3WXM Services 494

Starting or Stopping 3WXM Services on Windows Systems 495

Starting or Stopping 3WXM Services on Linux Systems 496

Connecting to 3WXM Services 497

Certificate Check 498

Verifying that the 3WXM Client is Receiving Service Data 499

Changing Service Settings 500

Changing WX Connection Settings 501

Changing Monitoring Settings 503

To change monitoring settings 504

Accessing the 3WXM Services Log 505

Managing Network Plans 506

Backing Up a Plan 506

Changing Backup Settings 507

Restoring a Plan from a Backup 507

Copying a Plan Backup from One Server to Another 507

Deleting a Plan Backup 508

C OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS

Register Your Product to Gain Service Benefits 509

Solve Problems Online 509

Purchase Extended Warranty and Professional Services 510

Access Software Downloads 510

Contact Us 510

Telephone Technical Support and Repair 511

INDEX

ABOUT THIS GUIDE

This manual shows you how to plan, configure, deploy, and manage a

Mobility System wireless LAN (WLAN) using the 3Com Wireless LAN

Switch Manager (3WXM).

Read this manual if you are a network administrator or a person

responsible for managing a WLAN.

If release notes are shipped with your product and the information there

differs from the information in this guide, follow the instructions in the

release notes.

Most user guides and release notes are available in Adobe Acrobat

Reader Portable Document Format (PDF) or HTML on the 3Com

World Wide Web site:

http://www.3com.com/

Conventions Table 1 and Table 2 list conventions that are used throughout this guide.

Table 1 Notice Icons

Icon Notice Type Description

Information note Information that describes important features or

instructions

Caution Information that alerts you to potential loss of data or

potential damage to an application, system, or device

18 ABOUT THIS GUIDE

This manual uses the following text and syntax conventions:

Documentation The 3WXM documentation set includes the following documents.

 Wireless LAN Switch Manager (3WXM) Release Notes

These notes provide information about the 3WXM software release,

including new features and bug fixes.

 Wireless LAN Switch and Controller Release Notes

These notes provide information about the MSS software release,

including new features and bug fixes.

 Wireless LAN Switch and Controller Quick Start Guide

This guide provides instructions for performing basic setup of secure

(802.1X) and guest (WebAAA™) access, for configuring a Mobility

Domain for roaming, and for accessing a sample network plan in

3WXM for advanced configuration and management.

Table 2 Text Conventions

Convention Description

Menu Name >

Command

Indicates a menu item that you select. For example,

File > New indicates that you select New from the File

menu.

Monospace text Sets off command syntax or sample commands and system

responses.

Bold text Highlights commands that you enter or items you select.

Italic text Designates command variables that you replace with

appropriate values, or highlights publication titles or words

requiring special emphasis.

[ ] (square brackets) Enclose optional parameters in command syntax.

{ } (curly brackets) Enclose mandatory parameters in command syntax.

| (vertical bar) Separates mutually exclusive options in command syntax.

Keyboard key names If you must press two or more keys simultaneously, the key

names are linked with a plus sign (+). Example:

Press Ctrl+Alt+Del

Words in italics Italics are used to:

 Emphasize a point.

 Denote a new term at the place where it is defined in the

text.

 Highlight an example string, such as a username or SSID.

Documentation Comments 19

 Wireless LAN Switch Manager Reference Manual

This manual shows you how to plan, configure, deploy, and manage a

Mobility System wireless LAN (WLAN) using the 3Com Wireless LAN

Switch Manager (3WXM).

 Wireless LAN Switch Manager User’s Guide

This guide shows you how to plan, configure, deploy, and manage a

Mobility System wireless LAN (WLAN) using the 3Com Wireless LAN

Switch Manager (3WXM). It contains information about

recommended system requirements you should meet for optimum

3WXM performance, installing 3WXM client and 3WXM Services

software, and an introduction to using the 3WXM interface.

 Wireless LAN Switch and Controller Hardware Installation Guide

This guide provides instructions and specifications for installing a WX

wireless switch in a Mobility System WLAN.

 Wireless LAN Switch and Controller Configuration Guide

This guide provides instructions for configuring and managing the

system through the Mobility System Software (MSS) CLI.

 Wireless LAN Switch and Controller Command Reference

This reference provides syntax information for all MSS commands

supported on WX switches.

Documentation

Comments

Your suggestions are very important to us. They will help make our

documentation more useful to you. Please e-mail comments about this

document to 3Com at:

[email protected]

Please include the following information when contacting us:

 Document title

 Document part number and revision (on the title page)

 Page number (if appropriate)

20 ABOUT THIS GUIDE

Example:

 Wireless LAN Switch and Controller Configuration Guide

 Part number 730-9502-0071, Revision B

 Page 25

Please note that we can only respond to comments and questions about

3Com product documentation at this e-mail address. Questions related to

Technical Support or sales should be directed in the first instance to your

network supplier.

Page is loading ...

3com OfficeConnect WX4400 Reference guide

This manual is also suitable for

3com OfficeConnect WX4400 Reference guide

Related papers

Other documents