Configuration Guide
Page 4
Web Quick Start Parameters 40 Web Quick Start Requirements 41 Accessing the Web Quick Start 41 CLI quickstart Command 44 Quickstart Example 46 Remote WX Configuration 49 Opening the QuickStart Network Plan in 3Com Wireless Switch Manager 49 3 CONFIGURING AAA FOR ADMINISTRATIVE AND LOCAL ACCESS Overview 51 Before You Start 54 About Administrative Access 54 Access Modes 54 Types of Administrative Access 54 First-Time Configuration via the Console 55 Enabling an Administrator 55 Setting the WX Switch Enable Password 56 Authenticating at...
Web Quick Start Parameters 40 Web Quick Start Requirements 41 Accessing the Web Quick Start 41 CLI quickstart Command 44 Quickstart Example 46 Remote WX Configuration 49 Opening the QuickStart Network Plan in 3Com Wireless Switch Manager 49 3 CONFIGURING AAA FOR ADMINISTRATIVE AND LOCAL ACCESS Overview 51 Before You Start 54 About Administrative Access 54 Access Modes 54 Types of Administrative Access 54 First-Time Configuration via the Console 55 Enabling an Administrator 55 Setting the WX Switch Enable Password 56 Authenticating at...
Configuration Guide
Page 25
... Hardware Installation Guide This guide provides instructions and specifications for installing a WX wireless switch in a Mobility System WLAN. Wireless LAN Switch and Controller Configuration Guide This guide provides instructions for configuring and managing the system through the Mobility System Software (MSS) CLI. Wireless LAN Switch and Controller Command Reference This reference provides syntax information for all MSS commands supported on the title page) Page number (if appropriate) Example: Wireless LAN Switch and Controller Configuration Guide Part...
... Hardware Installation Guide This guide provides instructions and specifications for installing a WX wireless switch in a Mobility System WLAN. Wireless LAN Switch and Controller Configuration Guide This guide provides instructions for configuring and managing the system through the Mobility System Software (MSS) CLI. Wireless LAN Switch and Controller Command Reference This reference provides syntax information for all MSS commands supported on the title page) Page number (if appropriate) Example: Wireless LAN Switch and Controller Configuration Guide Part...
Configuration Guide
Page 35
... example, the following command: WX1200# display ip telnet Server Status Port Enabled 3 Using CLI Help 35 rollback save set telnet traceroute Remove changes to the edited ACL table Save the running configuration to persistent storage Set, use 'set help' for which you want more information on which Telnet is running, type the following command displays all the variations, type one of the online help , see all the commands that begin with the letter i: WX1200# display i? ifm igmp interface...
... example, the following command: WX1200# display ip telnet Server Status Port Enabled 3 Using CLI Help 35 rollback save set telnet traceroute Remove changes to the edited ACL table Save the running configuration to persistent storage Set, use 'set help' for which you want more information on which Telnet is running, type the following command displays all the variations, type one of the online help , see all the commands that begin with the letter i: WX1200# display i? ifm igmp interface...
Configuration Guide
Page 40
... will not be provided) Administrator username and password Management IP address and default router (gateway) Time and date (statically configured or provided by an NTP server) Management access You can individually select Telnet, SSH, and Web View. The Web Quick Start application is different from Web Manager. Web Quick Start (WXR100, WX1200 and WX2200 Only) 40 Web Quick Start (WXR100, WX1200 and WX2200 Only) You can configure up to ten network users. You can use the CLI or 3Com Wireless Switch Manager.
... will not be provided) Administrator username and password Management IP address and default router (gateway) Time and date (statically configured or provided by an NTP server) Management access You can individually select Telnet, SSH, and Web View. The Web Quick Start application is different from Web Manager. Web Quick Start (WXR100, WX1200 and WX2200 Only) 40 Web Quick Start (WXR100, WX1200 and WX2200 Only) You can configure up to ten network users. You can use the CLI or 3Com Wireless Switch Manager.
Configuration Guide
Page 60
... administrative users after they have logged in to be done on page 524. Specify local, which causes the processing to the WX switch. (For information about configuring a RADIUS server group, see the Wireless LAN Switch and Controller Command Reference.) The stop-only mode sends only stop records, whereas start-stop sends both start and stop records, effectively doubling the number of activity, the user's status and...
... administrative users after they have logged in to be done on page 524. Specify local, which causes the processing to the WX switch. (For information about configuring a RADIUS server group, see the Wireless LAN Switch and Controller Command Reference.) The stop-only mode sends only stop records, whereas start-stop sends both start and stop records, effectively doubling the number of activity, the user's status and...
Configuration Guide
Page 61
... rebooted before you have saved the configuration, all configuration changes since the last time you rebooted the WX switch or saved the configuration. You must type the save config command to the last saved configuration or loads a particular configuration filename. (For more information, see the Wireless LAN Switch and Controller Command Reference.) Saving the Configuration You must save the configuration for all commands that you enter the administrator's AAA configuration, type the following command to maintain these commands in the output, see "Managing Configuration Files...
... rebooted before you have saved the configuration, all configuration changes since the last time you rebooted the WX switch or saved the configuration. You must type the save config command to the last saved configuration or loads a particular configuration filename. (For more information, see the Wireless LAN Switch and Controller Command Reference.) Saving the Configuration You must save the configuration for all commands that you enter the administrator's AAA configuration, type the following command to maintain these commands in the output, see "Managing Configuration Files...
Configuration Guide
Page 72
... example, the MAP column lists default settings that must explicitly add the port to a VLAN. MSS automatically assigns MAP access ports to ap (MAP). Not applicable Not applicable None IGMP snooping Enabled as users Enabled as the port is in. You cannot assign a MAP access port to the desired VLAN(s). The numbers are authenticated and join authenticated VLANs. Removed from all VLANs. 72 CHAPTER 5: CONFIGURING AND MANAGING PORTS AND VLANS All WX switch ports are network ports by Port Type Change Port Type Parameter VLAN membership Spanning Tree...
... example, the MAP column lists default settings that must explicitly add the port to a VLAN. MSS automatically assigns MAP access ports to ap (MAP). Not applicable Not applicable None IGMP snooping Enabled as users Enabled as the port is in. You cannot assign a MAP access port to the desired VLAN(s). The numbers are authenticated and join authenticated VLANs. Removed from all VLANs. 72 CHAPTER 5: CONFIGURING AND MANAGING PORTS AND VLANS All WX switch ports are network ports by Port Type Change Port Type Parameter VLAN membership Spanning Tree...
Configuration Guide
Page 81
... its link state and PoE state. Ports 1 and 6 are available. Configuring and Managing Ports 81 Resetting a Port You can configure MSS to display and regularly update port statistics in the output, see the Wireless LAN Switch and Controller Command Reference.) To reset a port, use the following command: reset port port-list Displaying Port Information You can use the following command: display port status [port-list] To display information for at least one second, then reenables them. Port 5 is connected to two WX switches to reboot using the port connected...
... its link state and PoE state. Ports 1 and 6 are available. Configuring and Managing Ports 81 Resetting a Port You can configure MSS to display and regularly update port statistics in the output, see the Wireless LAN Switch and Controller Command Reference.) To reset a port, use the following command: reset port port-list Displaying Port Information You can use the following command: display port status [port-list] To display information for at least one second, then reenables them. Port 5 is connected to two WX switches to reboot using the port connected...
Configuration Guide
Page 84
... the Spacebar. Port Status Rx Octets Tx Octets 1 Up 27965420 34886544 ... Clears the statistics counters for Monitor Port Counters Display Key Spacebar Esc c Effect on monitor display Advances to the next set of the window. In this example, packet statistics are displayed first. Table 8 Key Controls for the currently displayed statistics type. 84 CHAPTER 5: CONFIGURING AND MANAGING PORTS AND VLANS Use the keys listed in the output, see the Wireless LAN Switch and Controller Command Reference.) MSS stops...
... the Spacebar. Port Status Rx Octets Tx Octets 1 Up 27965420 34886544 ... Clears the statistics counters for Monitor Port Counters Display Key Spacebar Esc c Effect on monitor display Advances to the next set of the window. In this example, packet statistics are displayed first. Table 8 Key Controls for the currently displayed statistics type. 84 CHAPTER 5: CONFIGURING AND MANAGING PORTS AND VLANS Use the keys listed in the output, see the Wireless LAN Switch and Controller Command Reference.) MSS stops...
Configuration Guide
Page 95
...clients. To reset the statistics counters, use the following command: clear security l2-restrict counters [vlan vlan-id | all] Displaying VLAN To display VLAN configuration information, use the following command: Information display vlan config [vlan-id] To display information for VLAN burgundy, type the following commands restrict Layer 2 forwarding of client data in the output, see the Wireless LAN Switch and Controller Command Reference.) Configuring and Managing VLANs 95 The following command: WX1200# display vlan config burgundy Admin VLAN Tunl Port VLAN Name Status State Affin...
...clients. To reset the statistics counters, use the following command: clear security l2-restrict counters [vlan vlan-id | all] Displaying VLAN To display VLAN configuration information, use the following command: Information display vlan config [vlan-id] To display information for VLAN burgundy, type the following commands restrict Layer 2 forwarding of client data in the output, see the Wireless LAN Switch and Controller Command Reference.) Configuring and Managing VLANs 95 The following command: WX1200# display vlan config burgundy Admin VLAN Tunl Port VLAN Name Status State Affin...
Configuration Guide
Page 228
Disabling or Reenabling Automatic Firmware Upgrades A MAP can automatically upgrade its boot firmware by default. Automatic firmware upgrades are enabled by loading the upgrade version of the firmware from the WX switch instead, use the following command: set {ap port-list | dap dap-num} force-image-download {enable | disable} A change to low, type the following command: WX# set ap 1 bias low success: change accepted. As part of its operational image locally, in its internal flash memory. By default, a MAP model that allows...
Disabling or Reenabling Automatic Firmware Upgrades A MAP can automatically upgrade its boot firmware by default. Automatic firmware upgrades are enabled by loading the upgrade version of the firmware from the WX switch instead, use the following command: set {ap port-list | dap dap-num} force-image-download {enable | disable} A change to low, type the following command: WX# set ap 1 bias low success: change accepted. As part of its operational image locally, in its internal flash memory. By default, a MAP model that allows...
Configuration Guide
Page 342
... qos-mode {svp | wmm} For example, the following QoS options: QoS mode U-APSD support CAC state and maximum number of sessions Broadcast control Static CoS state and CoS value DSCP-CoS mappings Using client DSCP value to classify QoS level of the following command changes the QoS mode for SpectraLink Phones" on a global switch basis. DSCP-CoS mapping is configurable on a service...
... qos-mode {svp | wmm} For example, the following QoS options: QoS mode U-APSD support CAC state and maximum number of sessions Broadcast control Static CoS state and CoS value DSCP-CoS mappings Using client DSCP value to classify QoS level of the following command changes the QoS mode for SpectraLink Phones" on a global switch basis. DSCP-CoS mapping is configurable on a service...
Configuration Guide
Page 345
WX1200# set service-profile sp1 dhcp-restrict enable success: change accepted. WX1200# set service-profile sp1 no DTIM Interval: Max Rx Lifetime: Frag Threshold: Tune Channel: Tune Channel Interval: 1 2000 2346 yes 3600 Displaying QoS Information 345 Enabling Broadcast Control To enable broadcast control features on a service-profile basis, using the following commands: set service-profile name proxy-arp {enable | disable} set service-profile name dhcp-restrict {enable | disable} set service-profile name no-broadcast {enable | disable} For example, to IP ToS and...
WX1200# set service-profile sp1 dhcp-restrict enable success: change accepted. WX1200# set service-profile sp1 no DTIM Interval: Max Rx Lifetime: Frag Threshold: Tune Channel: Tune Channel Interval: 1 2000 2346 yes 3600 Displaying QoS Information 345 Enabling Broadcast Control To enable broadcast control features on a service-profile basis, using the following commands: set service-profile name proxy-arp {enable | disable} set service-profile name dhcp-restrict {enable | disable} set service-profile name no-broadcast {enable | disable} For example, to IP ToS and...
Configuration Guide
Page 403
... Version 3.x to MSS Version 4.x, and the switch uses ACLs to map VoIP traffic to CoS 4 or 5, and you plan to leave WMM enabled, 3Com recommends that assigns IP traffic from deny to the outbound traffic direction on a VLAN, port group, port list, virtual port list, Distributed MAP, or user glob. You must map the ACL to permit. An ACL can enable legacy VoIP support on a MAP port, Distributed MAP, or user VLAN. You can set a packet...
... Version 3.x to MSS Version 4.x, and the switch uses ACLs to map VoIP traffic to CoS 4 or 5, and you plan to leave WMM enabled, 3Com recommends that assigns IP traffic from deny to the outbound traffic direction on a VLAN, port group, port list, virtual port list, Distributed MAP, or user glob. You must map the ACL to permit. An ACL can enable legacy VoIP support on a MAP port, Distributed MAP, or user VLAN. You can set a packet...
Configuration Guide
Page 438
... access the SSID without entering a username or password. 438 CHAPTER 21: CONFIGURING AAA FOR NETWORK USERS For a user to be successfully authenticated based on the MAC address of the user device, the MAC address must contain a user named last-resort-wired. By default, MSS assumes that the MAC address for a password. For example, you can apply inbound and outbound access control lists (ACLs) to the user traffic, and so on a wired authentication port, the RADIUS servers...
... access the SSID without entering a username or password. 438 CHAPTER 21: CONFIGURING AAA FOR NETWORK USERS For a user to be successfully authenticated based on the MAC address of the user device, the MAC address must contain a user named last-resort-wired. By default, MSS assumes that the MAC address for a password. For example, you can apply inbound and outbound access control lists (ACLs) to the user traffic, and so on a wired authentication port, the RADIUS servers...
Configuration Guide
Page 472
... following commands: set service-profile name ssid-name ssid-name set service-profile name ssid-type clear set service-profile name auth-fallthru web-portal set radio-profile name service-profile name set ap apnumber radio {1 | 2} radio-profile name mode enable Use the first two commands to be removed from the profile. 2 From your PC, attempt to use in your network. To configure the SSID, use is already in service, you intend to access...
... following commands: set service-profile name ssid-name ssid-name set service-profile name ssid-type clear set service-profile name auth-fallthru web-portal set radio-profile name service-profile name set ap apnumber radio {1 | 2} radio-profile name mode enable Use the first two commands to be removed from the profile. 2 From your PC, attempt to use in your network. To configure the SSID, use is already in service, you intend to access...
Configuration Guide
Page 493
... an authorization attribute to a service profile and specify its value: set of default AAA authorization attributes that user will have a total of two attributes set to a Service Profile You can display the configured SSID defaults by entering the display sessions network verbose command. For example, a service profile might be configured with the service-type attribute set : service-type and vlan-name. These authorization attributes are used when the normal AAA...
... an authorization attribute to a service profile and specify its value: set of default AAA authorization attributes that user will have a total of two attributes set to a Service Profile You can display the configured SSID defaults by entering the display sessions network verbose command. For example, a service profile might be configured with the service-type attribute set : service-type and vlan-name. These authorization attributes are used when the normal AAA...
Configuration Guide
Page 620
... the switch, use the set system countrycode command to configure the correct country code. (See "Specifying the Country of Operation" on page 213.) 620 CHAPTER A: TROUBLESHOOTING A WX SWITCH Table 51 WX Setup Problems and Remedies Symptom Diagnosis 3Com Wireless Switch Manager or a web browser (if you are using Web Manager) warns that time zone. (See "Statically Configuring the System Time and Date" on page 127.) 3 Reconfigure the administrative certificate(s). (See Chapter 20, "Managing Keys and...
... the switch, use the set system countrycode command to configure the correct country code. (See "Specifying the Country of Operation" on page 213.) 620 CHAPTER A: TROUBLESHOOTING A WX SWITCH Table 51 WX Setup Problems and Remedies Symptom Diagnosis 3Com Wireless Switch Manager or a web browser (if you are using Web Manager) warns that time zone. (See "Statically Configuring the System Time and Date" on page 127.) 3 Reconfigure the administrative certificate(s). (See Chapter 20, "Managing Keys and...
Configuration Guide
Page 622
... the configuration. CAUTION: Use an enable password that you will delete your configuration file To recover a WX switch, use a pin to access IP address 192.168.100.1. You also can recover any key. 2 When you see "First-Time Configuration via the Console" on the console, press q, then press Enter. 3 Type the following procedures. This operation erases the switch's configuration. 2 Use a web browser to press the factory reset switch for at the boot> prompt: boot> boot OPT+=default If...
... the configuration. CAUTION: Use an enable password that you will delete your configuration file To recover a WX switch, use a pin to access IP address 192.168.100.1. You also can recover any key. 2 When you see "First-Time Configuration via the Console" on the console, press q, then press Enter. 3 Type the following procedures. This operation erases the switch's configuration. 2 Use a web browser to press the factory reset switch for at the boot> prompt: boot> boot OPT+=default If...
Configuration Guide
Page 725
... monitor port counters 83 P ping 132, 521 R reset ap 251 reset system 617 restore system 613, 616 rmdir 608 S save 630 save config 61, 411, 610 save trace 630 set {ap | dap} radio auto-tune max-power 318 set accounting admin 59 set accounting dot1X 504 set ap 74, 224 set ap auto 220 set ap auto persistent 223 set ap bias 227 set ap blink 229 set ap boot-ip 225 set ap boot-switch 226 set ap boot-vlan...
... monitor port counters 83 P ping 132, 521 R reset ap 251 reset system 617 restore system 613, 616 rmdir 608 S save 630 save config 61, 411, 610 save trace 630 set {ap | dap} radio auto-tune max-power 318 set accounting admin 59 set accounting dot1X 504 set ap 74, 224 set ap auto 220 set ap auto persistent 223 set ap bias 227 set ap blink 229 set ap boot-ip 225 set ap boot-switch 226 set ap boot-vlan...