Configuration Guide
Page 23
... Information that describes important features or instructions Caution Information that are shipped with your product and the information there differs from the information in the release notes. If release notes are used throughout this guide, follow the instructions in this guide. This guide is intended for the 3Com Wireless LAN Switch WXR100, WX1200, or 3Com Wireless LAN Controller WX4400, WX2200.
... Information that describes important features or instructions Caution Information that are shipped with your product and the information there differs from the information in the release notes. If release notes are used throughout this guide, follow the instructions in this guide. This guide is intended for the 3Com Wireless LAN Switch WXR100, WX1200, or 3Com Wireless LAN Controller WX4400, WX2200.
Configuration Guide
Page 24
... Controller Release Notes These notes provide information about the MSS software release, including new features and bug fixes. Wireless LAN Switch and Controller Quick Start Guide This guide provides instructions for performing basic setup of secure (802.1X) and guest (WebAAA™) access, for configuring a Mobility Domain for roaming, and for advanced configuration...
... Controller Release Notes These notes provide information about the MSS software release, including new features and bug fixes. Wireless LAN Switch and Controller Quick Start Guide This guide provides instructions for performing basic setup of secure (802.1X) and guest (WebAAA™) access, for configuring a Mobility Domain for roaming, and for advanced configuration...
Configuration Guide
Page 25
... guide to learn how to plan wireless services, how to configure and deploy 3Com equipment to provide those services, and how to optimize and manage your WLAN. Wireless LAN Switch and Controller Hardware Installation Guide This guide provides instructions and specifications for installing a WX wireless switch in a Mobility System WLAN. Wireless LAN Switch and Controller Configuration Guide This guide...
... guide to learn how to plan wireless services, how to configure and deploy 3Com equipment to provide those services, and how to optimize and manage your WLAN. Wireless LAN Switch and Controller Hardware Installation Guide This guide provides instructions and specifications for installing a WX wireless switch in a Mobility System WLAN. Wireless LAN Switch and Controller Configuration Guide This guide...
Configuration Guide
Page 37
... switch, and refers you to configure a WXR100 switch to provide wireless access to any switch that is accessible only on unconfigured WXR100, WX1200 or WX2200 switches. Overview MSS provides the following management applications to configure a new switch or to continue configuration of using the CLI instructions in...in this chapter instead of a partially configured switch: 3Com Wireless Switch Manager CLI Web Manager Quick Starts The Web Quick Start enables you to easily configure a WXR100, WX1200 or WX2200 switch to provide wireless access to up to 10 users. The...
... switch, and refers you to configure a WXR100 switch to provide wireless access to any switch that is accessible only on unconfigured WXR100, WX1200 or WX2200 switches. Overview MSS provides the following management applications to configure a new switch or to continue configuration of using the CLI instructions in...in this chapter instead of a partially configured switch: 3Com Wireless Switch Manager CLI Web Manager Quick Starts The Web Quick Start enables you to easily configure a WXR100, WX1200 or WX2200 switch to provide wireless access to up to 10 users. The...
Configuration Guide
Page 40
...instructions, see "Accessing the Web Quick Start" on page 41.) The Web Quick Start application is supported only on unconfigured switches. The Web Quick Start application is different from Web Manager. After you finish the Web Quick Start, it will be available again unless you to configure basic wireless access for a small office...Start (WXR100, WX1200 and WX2200 Only) You can use the Web Quick Start to configure the switch to provide wireless access to up to ten users with the Web Quick Start. You also can configure additional SSIDs using the CLI or 3Com Wireless Switch Manager. ...
...instructions, see "Accessing the Web Quick Start" on page 41.) The Web Quick Start application is supported only on unconfigured switches. The Web Quick Start application is different from Web Manager. After you finish the Web Quick Start, it will be available again unless you to configure basic wireless access for a small office...Start (WXR100, WX1200 and WX2200 Only) You can use the Web Quick Start to configure the switch to provide wireless access to up to ten users with the Web Quick Start. You also can configure additional SSIDs using the CLI or 3Com Wireless Switch Manager. ...
Configuration Guide
Page 209
... (WPA) Non-WPA dynamic Wired Equivalent Privacy (WEP) Non-WPA static WEP Dynamic WEP is enabled by default. (For more information, including configuration instructions, see Table 25 on page 567.) dtim-interval 1 Sends the delivery traffic indication map (DTIM) after every beacon.
... (WPA) Non-WPA dynamic Wired Equivalent Privacy (WEP) Non-WPA static WEP Dynamic WEP is enabled by default. (For more information, including configuration instructions, see Table 25 on page 567.) dtim-interval 1 Sends the delivery traffic indication map (DTIM) after every beacon.
Configuration Guide
Page 227
... tag 100: WX1200# set ap apnumber name name Changing Bias The CLI commands described in a VLAN, you must add the port to the VLAN. (For instructions, see "Adding Ports to it when you to the MAP. clear port type port-list This command resets the port as a network port and removes... display commands and in the default VLAN (VLAN 1). The clear port type command does not place the cleared port in any VLAN, not even in 3Com Wireless Switch Manager. For example, the default name for a MAP on the number you assign to a VLAN" on page 92.) To clear a MAP, use the following command...
... tag 100: WX1200# set ap apnumber name name Changing Bias The CLI commands described in a VLAN, you must add the port to the VLAN. (For instructions, see "Adding Ports to it when you to the MAP. clear port type port-list This command resets the port as a network port and removes... display commands and in the default VLAN (VLAN 1). The clear port type command does not place the cleared port in any VLAN, not even in 3Com Wireless Switch Manager. For example, the default name for a MAP on the number you assign to a VLAN" on page 92.) To clear a MAP, use the following command...
Configuration Guide
Page 390
... the named ACL automatically to delete all security ACLs. User-based security ACLs are more often received by Filter-Id instructs the WX switch to a user or an interface. Security ACLs can specify that one of the authorization attributes returned during the AAA process. Mapping User-Based Security ACLs ...
... the named ACL automatically to delete all security ACLs. User-based security ACLs are more often received by Filter-Id instructs the WX switch to a user or an interface. Security ACLs can specify that one of the authorization attributes returned during the AAA process. Mapping User-Based Security ACLs ...
Configuration Guide
Page 391
...Group" on page 441. You can also map a security ACL to a user session, follow these steps: 1 Create the security ACL. For instructions, see "Assigning a Security ACL to the running configuration. For more information about authenticating and authorizing users, see "About Administrative Access" on page 54... and "AAA Tools for your RADIUS server. Specify .in the WX switch's local database. For details, see the documentation for Network Users" on page 494. Mapping Security ACLs 391 To map a security ACL...
...Group" on page 441. You can also map a security ACL to a user session, follow these steps: 1 Create the security ACL. For instructions, see "Assigning a Security ACL to the running configuration. For more information about authenticating and authorizing users, see "About Administrative Access" on page 54... and "AAA Tools for your RADIUS server. Specify .in the WX switch's local database. For details, see the documentation for Network Users" on page 494. Mapping Security ACLs 391 To map a security ACL...
Configuration Guide
Page 411
Type the following commands: WX1200# set authentication dot1x Natasha local success: change accepted. For instructions, see the documentation for authentication, configure Natasha in RADIUS. Security ACL Configuration Scenario 411 4 To map acl-99 to port 6 to filter incoming packets, type ... the RADIUS server shorebirds, type the following command: WX1200# set user natasha attr filter-id acl-99.in success: change accepted. 6 Alternatively, you are using a remote RADIUS server for authentication.
Type the following commands: WX1200# set authentication dot1x Natasha local success: change accepted. For instructions, see the documentation for authentication, configure Natasha in RADIUS. Security ACL Configuration Scenario 411 4 To map acl-99 to port 6 to filter incoming packets, type ... the RADIUS server shorebirds, type the following command: WX1200# set user natasha attr filter-id acl-99.in success: change accepted. 6 Alternatively, you are using a remote RADIUS server for authentication.
Configuration Guide
Page 420
...certificate Steps Required Instructions 1 Generate a public-private key pair "Creating on the WX switch. 420 CHAPTER 20: MANAGING KEYS AND CERTIFICATES Choosing the Appropriate Certificate Installation Method for Your Network Depending on your network environment, you can use 3Com Wireless Switch Manager, Web... Manager, or the CLI to distribute this certificate. Key Pairs" on page 421 "Generating Self-Signed Certificates" on the WX switch. The simplest method is also the least secure...
...certificate Steps Required Instructions 1 Generate a public-private key pair "Creating on the WX switch. 420 CHAPTER 20: MANAGING KEYS AND CERTIFICATES Choosing the Appropriate Certificate Installation Method for Your Network Depending on your network environment, you can use 3Com Wireless Switch Manager, Web... Manager, or the CLI to distribute this certificate. Key Pairs" on page 421 "Generating Self-Signed Certificates" on the WX switch. The simplest method is also the least secure...
Configuration Guide
Page 421
... Validating Certificates (continued) File Type Steps Required Instructions PKCS #12 object file certificate 1 Copy a PKCS #12 object file (public-private key pair, server certificate, and CA certificate) from a PKCS #12 Object File" on your need for WX switch authentication, you must paste the entire block,...to unlock the file. "Installing a Key Pair and Certificate from a CA onto the WX switch. 2 Enter the one-time password to store the certificate on the WX switch. Public-Private certificate 2 Generate a CSR on page 425 Creating To use the following command ...
... Validating Certificates (continued) File Type Steps Required Instructions PKCS #12 object file certificate 1 Copy a PKCS #12 object file (public-private key pair, server certificate, and CA certificate) from a PKCS #12 Object File" on your need for WX switch authentication, you must paste the entire block,...to unlock the file. "Installing a Key Pair and Certificate from a CA onto the WX switch. 2 Enter the one-time password to store the certificate on the WX switch. Public-Private certificate 2 Generate a CSR on page 425 Creating To use the following command ...
Configuration Guide
Page 424
... The encoded object is a way of authenticity from a CA by generating a Certificate Signing Request (CSR) from the WX switch. Follow the instructions in ASCII characters. Many certificate authorities have their own unique requirements. You must paste the entire block, from the beginning -----BEGIN... certificate (a PEM-encoded PKCS #7 object file). 1 To install a certificate from a PKCS #7 file, use the following command to prepare the switch to properly format the fields you generate a CSR. Use a fully qualified name if such names are supported on your network. The other information ...
... The encoded object is a way of authenticity from a CA by generating a Certificate Signing Request (CSR) from the WX switch. Follow the instructions in ASCII characters. Many certificate authorities have their own unique requirements. You must paste the entire block, from the beginning -----BEGIN... certificate (a PEM-encoded PKCS #7 object file). 1 To install a certificate from a PKCS #7 file, use the following command to prepare the switch to properly format the fields you generate a CSR. Use a fully qualified name if such names are supported on your network. The other information ...
Configuration Guide
Page 585
... address, within one -second period. A symptom of an RF jamming attack is 100 frames of wireless frame within a one second, MSS generates a log message. The threshold for other wireless devices by continuously injecting management frames into the air. If a MAP detects a packet with a ... channel, and RF Auto-Tuning is to disconnect all stations attached to an AP. Disassociation frames-A disassociation frame from an AP instructs the client to a different channel. Deauthenticate frames-Spoofed deauthenticate frames form the basis for most DoS attacks, and are the basis...
... address, within one -second period. A symptom of an RF jamming attack is 100 frames of wireless frame within a one second, MSS generates a log message. The threshold for other wireless devices by continuously injecting management frames into the air. If a MAP detects a packet with a ... channel, and RF Auto-Tuning is to disconnect all stations attached to an AP. Disassociation frames-A disassociation frame from an AP instructs the client to a different channel. Deauthenticate frames-Spoofed deauthenticate frames form the basis for most DoS attacks, and are the basis...
Configuration Guide
Page 696
... of a public-key infrastructure (PKI), which include passwords and authorization attributes. Registration authorities are described in RFC 2869. Remote See RADIUS. During a scheduled sweep, each included Managed Access Point (MAP) radio sweeps all channels in a Mobility Domain... either a scheduled sweep or a continuous SentrySweep™ search. RF detection sweep A comprehensive search for a digital certificate and instructs the certificate authority (CA) to locate rogue clients, rogue access points, and ad hoc users. strength indication registration authority ...
... of a public-key infrastructure (PKI), which include passwords and authorization attributes. Registration authorities are described in RFC 2869. Remote See RADIUS. During a scheduled sweep, each included Managed Access Point (MAP) radio sweeps all channels in a Mobility Domain... either a scheduled sweep or a continuous SentrySweep™ search. RF detection sweep A comprehensive search for a digital certificate and instructs the certificate authority (CA) to locate rogue clients, rogue access points, and ad hoc users. strength indication registration authority ...