manualshive.com logo in svg

3Com OfficeConnect WX4400, Reference Manual


Share
Download
background image

226

C

HAPTER

 6: C

ONFIGURING

 WX S

YSTEM

 P

ARAMETERS

Restricting Layer 2

Traffic Among Clients

in a VLAN

By default, clients within a VLAN are able to communicate with one 
another directly at Layer 2. You can enhance network security by 
restricting Layer 2 forwarding among clients in the same VLAN. When 
you restrict Layer 2 forwarding in a VLAN, MSS allows Layer 2 forwarding 
only between a client and a set of MAC addresses, generally the default 
routers (gateways) of a VLAN. Clients within the VLAN are not permitted 
to communicate among themselves directly. To communicate with 
another client, the client must use one of the specified default routers.

You can specify up to four default router MAC addresses. The addresses 
must be unicast (not multicast or broadcast).

For networks with IP-only clients, you can restrict client-to-client 
forwarding using ACLs. Use the Restrict L3 Traffic option. (See 
“Restricting Layer 3 Traffic Among Clients in a VLAN”.)

1

Access the VLAN table:

a

Select the Configuration tool bar option.

b

In the Organizer panel, click the plus sign next to the WX switch. 

c

Click the plus sign next to System.

d

Select 

VLANs

.

2

In the Content panel, select the VLAN. 

3

In the Task List panel, select Restrict L2 Traffic.

4

Select 

Restrict L2 Traffic

 to enable the feature for the VLAN.

5

Click 

Create

.

6

In a Permitted MAC Address box, edit the address to be the MAC address 
of the default router (gateway) of a VLAN. 

7

Click 

Finish

. 

8

Click 

OK

.

Summary of Contents for OfficeConnect WX4400

Page 1: ...tp www 3Com com Part No 10015905 Published June 2007 Wireless LAN Mobility System Wireless Switch Manager Reference Manual WX4400 3CRWX440095A WX2200 3CRWX220095A WX1200 3CRWX120695A WXR100 3CRWXR1009...

Page 2: ...June 1987 whichever is applicable You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in or delivered to you in conjunction with th...

Page 3: ...ileges 24 Serial Number and License Key 24 Installing 3WXM 25 Installing 3WXM on Windows Systems 25 Installing 3WXM on Linux Systems 27 Installation Log File 28 Installing Web Start Client 29 System R...

Page 4: ...g 3WXM User Accounts 56 Disabling Access Control 56 4 WORKING WITH NETWORK PLANS Creating a Network Plan 58 Managing Network Plans 59 Saving a Network Plan 59 Opening a Network Plan 60 Importing a Net...

Page 5: ...ning Up a Drawing 95 Drawing Floor Objects Manually 99 Specifying the RF Characteristics of a Floor 100 Recommendations 100 Converting Objects into RF Obstacles 101 Drawing RF Obstacles 103 Importing...

Page 6: ...171 Configuring Basic and Advanced Settings 172 Reviewing and Deploying Changes 172 Reviewing Changes 172 Deploying Changes 172 Using the Create Wireless Switch Wizard 173 Setting Up a Switch 175 Modi...

Page 7: ...VLANs 215 Viewing VLANs 216 Creating a VLAN 216 Changing VLAN Membership 218 Changing VLAN Spanning Tree Settings 219 Changing VLAN IGMP Settings 223 Restricting Layer 2 Traffic Among Clients in a VLA...

Page 8: ...tings and Access Rules 269 Viewing and Configuring Radio Profiles 272 Viewing Radio Profile Settings 272 Creating a Radio Profile 273 Moving Radios Back to the Default Radio Profile 273 Configuring Ad...

Page 9: ...To It 302 Creating a MAC User 303 Creating a MAC User Group and Assigning Users To It 304 Authorization Attributes 305 Viewing and Configuring RADIUS Settings 311 Viewing RADIUS Settings Servers and S...

Page 10: ...338 Viewing and Changing Location Policy Rules 339 Viewing Location Policy Rules 339 Creating a Location Policy Rule 340 Viewing and Changing Mobility Profiles 342 Viewing Mobility Profiles 342 Creati...

Page 11: ...Nonmatching Changes 368 Distributing System Images 369 Using the Image Repository 369 Distributing System Images 369 Rebooting WX Switches or MAP Access Points 371 Enabling or Disabling Management of...

Page 12: ...to Switches 389 14 MANAGING ALARMS Setting Up the Fault Management System 391 Classifying and Organizing Alarms 393 Search Capabilities 394 Fault States 396 Managing Faults 397 Alarm Summary 398 Top...

Page 13: ...lient Details Report 424 Generating a Client Errors Report 425 Generating an RF Network Usage Report 426 Generating an RF Summary Report 427 Generating a Radio Details Report 428 Generating a Traffic...

Page 14: ...Monitor 466 On Demand Statistics Monitoring 467 Viewing Performance Data 467 Creating and Viewing Reports 467 18 DETECTING AND COMBATTING ROGUE DEVICES Overview 469 Rogue Detection Requirements 470 M...

Page 15: ...s 493 Changing Certificate Management Options 494 Changing Options for RF Planning 495 Configuring the Transmit Power of a Typical Client 495 Changing Colors 495 Changing 3WXM Logging Options 499 B CH...

Page 16: ...erver to Another 515 Deleting a Plan Backup 515 C OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS Register Your Product to Gain Service Benefits 517 Solve Problems Online 517 Purchase Extended Warranty and P...

Page 17: ...ion in this guide follow the instructions in the release notes Most user guides and release notes are available in Adobe Acrobat Reader Portable Document Format PDF or HTML on the 3Com World Wide Web...

Page 18: ...tions Convention Description Menu Name Command Indicates a menu item that you select For example File New indicates that you select New from the File menu M onos pacet ext Sets off command syntax or s...

Page 19: ...Controller Hardware Installation Guide This guide provides instructions and specifications for installing a WX wireless switch in a Mobility System WLAN Wireless LAN Switch and Controller Configuratio...

Page 20: ...de Part number 730 9502 0071 Revision B Page 25 Please note that we can only respond to comments and questions about 3Com product documentation at this e mail address Questions related to Technical Su...

Page 21: ...3WXM Monitoring Service on Windows and Linux platforms Table 3 Hardware Requirements for Running 3WXM Client Minimum Recommended Processor Intel Pentium 4 2 GHz or equivalent Intel Pentium 4 3 GHz or...

Page 22: ...sessions which requires more RAM and storage Hard drive space available 1 GB 2 GB Monitor resolution 1024x768 pixels 24 bit color 1600x1200 pixels 32 bit color CD ROM drive CD ROM or equivalent CD ROM...

Page 23: ...nager Reference Manual and release notes Web browser for example Microsoft Internet Explorer 5 x or 6 x or Netscape Navigator 6 x or 7 x For displaying 3WXM work orders and inventory reports Preparing...

Page 24: ...with a base license key which is provided on the CD cover To use 3WXM Services you need to enter the base key and an activation key which you obtain from 3Com The base key and activation key enable y...

Page 25: ...n to install the 3WXM Services only 1 Insert the 3WXM CD in the CD ROM drive If Autorun is enabled wait briefly for the install program to start If Autorun is disabled follow these steps a In Windows...

Page 26: ...nstallation the 3Com Wireless Switch Manager installation wizard minimizes 6 When the installation is complete maximize the 3Com Wireless Switch Manager installation wizard screen and then press the C...

Page 27: ...ow type sh install bin The Introduction page of the 3WXM installation wizard appears 8 Click Next to display the Choose Installation Type page of the installation wizard and go to Using the Installati...

Page 28: ...port 443 and the same host also runs Microsoft Internet Information Services IIS on its default HTTPS port 443 there will be a conflict over the port 3WXM clients will not be able to communicate with...

Page 29: ...Start client simply by browsing to the server and clicking an option You do not need to install from the product CD or an installation executable stored on a file server The appearance and options in...

Page 30: ...se key from the License Information dialog box which you access by selecting Help Licensing from the main 3WXM window You can also save a copy of the license information by starting 3WXM and clicking...

Page 31: ...ot delete the serial number unless specifically asked to do so by 3Com Technical Support Your license s to use this software are registered against this serial number If you delete the serial number t...

Page 32: ...rData 4 At the prompt enter Uninstall_3WXM The Uninstall wizard appears 5 Click Uninstall The 3WXM Uninstall Options dialog appears By default all 3WXM removes the following options Network plans Acce...

Page 33: ...pter describes how to use the 3Com Wireless Switch Manager 3WXM interface Overview When you start 3WXM client and log into 3WXM Services the network plan is displayed by the 3WXM Client Toolbar Organi...

Page 34: ...n coverage and capacity needs Alternatively add new or existing switches and access points individually Planning and equipment configuration and network management are described in detail in other cha...

Page 35: ...cies tool bar option The set of device configuration policies included in your network plan Equipment displayed by the Configuration tool bar option The set of devices in your network plan This includ...

Page 36: ...d configure settings for that object For more information about the tool bar options see Tool Bar Options on page 42 Saving or Discarding Configuration Changes When you select the Policies RF Planning...

Page 37: ...iguration changes from the network plan to the actual switches in the network The following options in the Task List panel allow you to review and deploy changes Review Displays a categorized list of...

Page 38: ...the configuration wizard required to perform that task The Task List panel is located to the right of the Content panel Here is an example of the task list for a network plan Configuration Wizards Whe...

Page 39: ...ones that rarely need to be changed select the object in the table and then click Properties Resizing a Display Panel Click and drag the panel border or click the resize icons where applicable to res...

Page 40: ...nizer and Task List panels are maximized and the Content panel is restored to its former size between the other two panels This option applies only to the Content panel Table 6 Resize Icons continued...

Page 41: ...he message then use the Details tab See Displaying the Event Log on page 411 Import Import an WX configuration file into the currently open network plan Export Export an WX configuration file from the...

Page 42: ...d policies in the Organizer panel To display the configuration settings in a policy click on the policy The settings appear in the Content panel To create a new policy click Policy in the Task List pa...

Page 43: ...tribute certificates use the Device tab To review and either allow or disallow local and network changes or to schedule configuration deployment use the Changes tab To manage and distribute MSS softwa...

Page 44: ...See Verifying Configuration Changes on page 377 Local Changes Lists the number of WX switch configuration changes that have occurred in 3WXM in the network plan since the last time the switches in the...

Page 45: ...so can copy and paste objects listed in tables in the Content panel using the copy and paste icons See Copy and Paste in the Content Panel on page 46 To delete an object in a table select the object t...

Page 46: ...zer Panel To replace an object with the Copy and Paste Replace options 1 Select the object you want to copy in the Organizer panel 2 Right click on the object and select Copy 3 Select the object you w...

Page 47: ...board shortcut mnemonics also called action mnemonics in 3WXM underline shortcut characters in action names in toolbars and menus When a character is underlined you can press the corresponding letter...

Page 48: ...4 Clear the box labeled Hide underlined letters for keyboard navigation until I press the Alt key Clearing this option allows programs to show the underlined character for mnemonics in 3WXM 5 Click O...

Page 49: ...ollowing steps describe how to start 3WXM You must install a license key and activation key for the server before you can connect to the server and work with network plans To license a server you must...

Page 50: ...you have not previously activated your licences a license message appears If you have already activated the license s you can do one of the following Edit the currently loaded network plan If this is...

Page 51: ...encrypted and secure 802 1X wireless access For more information see the Wireless LAN Switch and Controller Quick Start Guide StarterKit Contains a simple rectangle as a floor plan but with one WX swi...

Page 52: ...ter your registration information and the license key if you are licensing a purchased copy in order to obtain an activation key 9 Copy the activation key from the web page and paste it onto the Activ...

Page 53: ...dialog box enter the IP address of a host running 3WXM Services leave this as 127 0 0 1 if the services are being run on this host and then click Next 17 After a connection is established to the spec...

Page 54: ...vices Setup dialog box are unavailable Monitor User This account can only monitor the network When users with a monitor account open a network plan they can see configuration changes that have been de...

Page 55: ...administrator account 1 Select Tools 3WXM Services Setup The 3WXM Services Setup dialog box appears 2 Click Access Control in the left column to display the Access Control page 3 Under Add User type a...

Page 56: ...Type the administrator password again for verification 7 Click Save Deleting 3WXM User Accounts To delete a 3WXM user account 1 Select Services Setup to access the 3WXM Services Setup page 2 Click Acc...

Page 57: ...de network You also can define a physical representation of the network sites buildings and floors In this case you can import drawings of your floor plans into the network plan or draw plan details m...

Page 58: ...the box next to Open this Plan to open the plan in 3WXM after it is created 6 Click Create to save the network plan on the server The network plan settings appear in the Content panel and the followi...

Page 59: ...ork plan is created in the config db directory of the 3WXM installation directory on the 3WXM Services host Each time you save a configuration change 3WXM saves the changes to the network plan You do...

Page 60: ...connecting to the 3WXM Services host where the plan resides selecting Services Plan Management then specifying the name of the plan in the dialog The network plan is then opened in the 3WXM main windo...

Page 61: ...object object name exists in both plans the copy of the object in the imported plan replaces the object in the open plan If both plans have the same floor name the floor in the plan you are importing...

Page 62: ...uest to close the plan or exit the application Do one of the following Select Apply to save the changes and close the plan Select Discard to close the plan without saving the changes Select Cancel to...

Page 63: ...o override another user s lock 1 Select Services Lock Management to access the 3WXM Lock Information page 2 A list of objects that have been locked appears 3 Select the object whose lock you want to d...

Page 64: ...you can upload the configurations of the switches to 3WXM to have them included in a Mobility Domain Roaming Behavior For a client session to be considered a roaming session and not a new session the...

Page 65: ...has little impact on roaming If the timeout lapses 802 1X processing is performed on the existing association Accounting and roaming history are not affected if the reauthentication is successful bec...

Page 66: ...IP TCP 6 443 SSL management of a WX via Web View Port 443 is also the default port used by 3WXM Clients to communicate with a 3WXM server IP TCP 6 8821 Network Domain and Mobility Domain management T...

Page 67: ...the Mobility Domain 7 Click Next 8 Select the switch to act as the seed switch for the Mobility Domain 9 Click Finish Enabling WX WX Security You can enable secure management communication among the...

Page 68: ...el The Create Third Party AP wizard appears 4 In the Name box type a name for the access point You can use 1 to 32 characters with no punctuation except the following period hyphen or underscore _ 5 O...

Page 69: ...smit power for the radio 17 To enable the radio select Enabled The radio for the access point must be enabled to be considered in channel allocation 18 In the SSID box type the service set identifier...

Page 70: ...Network Plan If RF Auto Tuning is running on MAP radios in the network you can update the radios in the network plan with the channel and power settings currently in effect on the same radios in the n...

Page 71: ...tool bar option 2 In the Task List panel select Upload WX 3 In the IP Address box type the IP address for the WX switch 4 In the Enable Password box type the enable password for the WX switch This pa...

Page 72: ...re listed 4 Select the MAPs you want to convert into statically configured MAPs 5 Click Next 6 Select the temporary connections you want to convert into static connections 7 Click Finish Creating a Ne...

Page 73: ...box type the name for the Network Domain 1 to 60 characters with no spaces or tabs 5 Click Next 6 In the Available Devices list select the WX switches you want to use as the Network Domain seeds 7 Cl...

Page 74: ...74 CHAPTER 4 WORKING WITH NETWORK PLANS...

Page 75: ...nt and generate RF network design information RF Planning Overview The 3WXM planning tools calculate the 3Com equipment you need how to configure it and where to install it all based on the informatio...

Page 76: ...Organizer panel and select Create Building in the Task List panel If you are modifying an existing building click on the plus sign next to the site name to expand it then click on the name of the buil...

Page 77: ...objects Undo last change Redo last change Group selected objects Ungroup selected objects Select all visible objects Assign layers to selected objects Create RF obstacle Edit properties Remove RF obs...

Page 78: ...t panel A series of dialog boxes prompts you for information about the new site If you are modifying an existing site click on the plus sign next to the network plan to expand it then click on the nam...

Page 79: ...nel then in the Change Country Code dialog select the country where the network is to be deployed 3 In the Channel Set 802 11b g list select the set of operating channels for any 802 11b g MAP radios...

Page 80: ...u are modifying an existing building select the building name in the Content panel for the site then click Properties A dialog box allows you to edit the building properties In the Organizer panel cli...

Page 81: ...want to model only certain floors in a building To enter a list of floors use commas to separate the floor numbers example 1 3 7 To enter a range use a hyphen example 8 12 6 Click OK to close the dia...

Page 82: ...of the following If you are creating a new floor click on the building name in the Organizer panel and select Create Floor in the Task List panel A series of dialog boxes prompts you for information...

Page 83: ...ing the floor specify the RF characteristics of the floor by specifying the attenuation of obstacles such as walls doors windows and others The attenuation of an object indicates how much the object a...

Page 84: ...the first format you try does not import easily A GIF or JPG file is a raster graphics file a screenshot or background image which is not made of lines To add RF obstacle information you must manuall...

Page 85: ...mation to the master file by selecting Insert Xref Manager selecting the file then clicking Bind Adding information from referenced files can increase the file size If the information you will need to...

Page 86: ...d drag around all of the visible objects to select them Delete the objects CAUTION Do not use Ctrl A Select All in AutoCAD to select the objects to delete This option selects all of the objects in the...

Page 87: ...r in TurboCAD 9 select Options Layers In AutoCAD select Format Layer To move objects to the new RF layers click drag to select objects select Modify Properties and change the objects layer Save the dr...

Page 88: ...select Import Floor Layout 4 After navigating to the directory containing the drawing select it and click Open The drawing appears After importing a drawing 3WXM remembers the chosen directory If you...

Page 89: ...d space and objects around the floor For example if the drawing includes parking lot information you can easily remove the parking lot by cropping CAUTION All objects that are outside the area you sel...

Page 90: ...cancel the crop request click No If you click Yes all objects and paper space outside the area you selected are removed and the image is resized to fill the removed space Figure 1 on page 89 shows the...

Page 91: ...lculating RF coverage 3WXM needs to understand where MAP access points on adjacent floors are located so that 3WXM can take RF from those MAPs into account when assigning channels If an imported drawi...

Page 92: ...92 CHAPTER 5 PLANNING THE 3COM MOBILITY SYSTEM Origin point...

Page 93: ...RF obstacles Generally only some layers contain details relevant to RF planning 3WXM allows you to hide layers to simplify a drawing 3WXM performs RF calculations only with information in visible laye...

Page 94: ...anup criteria which you can modify See Cleaning Up a Drawing on page 95 You also can select and delete individual objects Hiding Layers With the drawing displayed in the Content panel click Layers in...

Page 95: ...e down arrow to display the list of layers in the drawing and select the layer to which you want to move the object s 4 Click OK Cleaning Up a Drawing 3WXM can simplify an imported CAD drawing by remo...

Page 96: ...from the drawing during cleanup 3WXM removes all these items by default 4 To change the short line length type the new length in the Short Line Length box 3WXM removes all lines that are this length...

Page 97: ...ect the layers you want to clean up You can select individual layers or all layers 3WXM removes the specified objects only from the layers you select By default no layers are selected 8 Click Next The...

Page 98: ...PLANNING THE 3COM MOBILITY SYSTEM 10 Perform one of the following Click Finish to accept the changes Click Previous to change the cleanup constraints Go back to step 2 on page 81 Click Cancel to cance...

Page 99: ...he Free Draw area under Layout click one of the icons and draw the object as described in the following table Object Action circle Diagonally drag the cursor over the area where you want the circle to...

Page 100: ...stacles and assign attenuation values to them This method is available for any floor plan See Drawing RF Obstacles on page 103 Import RF measurements from a site survey This method requires the Ekahau...

Page 101: ...st of the layers in the drawing 2 Right click the list of layers in the Organizer panel 3 Select Create RF Obstacles from the menu that is displayed The Create RF Obstacle dialog box appears 4 Go to T...

Page 102: ...up objects icon on the toolbar The grouped objects now appear as one object group 4 Right click and select Create RF Obstacle The Create RF Obstacle dialog box appears See To use the Create RF Obstacl...

Page 103: ...RF obstacles for grouped objects each grouped object is converted into a single RF obstacle Drawing RF Obstacles 1 Display the floor plan in the Content panel 2 In the Task List panel click Tools 3 In...

Page 104: ...method of adding RF obstacle data requires the following tools 3WXM 4 1 or higher Ekahau Site Survey Tool www ekahau com and a laptop PC on which to run the tool when you take measurements An AP on w...

Page 105: ...ing LOS Points on page 106 You can place the LOS points at the places where you are thinking of installing the permanent MAPs but this is not a requirement 3 In 3WXM generate a site survey order The s...

Page 106: ...MAC address for multiple locations the RF measurement data will be inaccurate While conducting the survey Walk slowly and evenly and click at each turn Walk completely around the area you are surveyi...

Page 107: ...acteristics of a Floor 107 5 Click Yes next to File 6 In the File Format listbox select Ekahau 7 Click Choose to navigate to the csv file that contains the LOS points 8 Click Next The MAC addresses of...

Page 108: ...dio types Select the MAC addresses for the radio types you want to use in the network 10 Click Finish 11 Place the LOS points on the floor plan Click Objects to Place in the Organizer panel to display...

Page 109: ...Organizer Panel To create LOS points in 3WXM 1 Display the floor plan in the Content panel 2 In the Task List panel click Tools 3 Under Site Survey click the icon 4 On the floor plan click on the loca...

Page 110: ...ype or model of AP you plan to use for the portable AP If the model is not listed select AP Dual Radio for a dual radio AP or AP Single Radio for a single radio AP 7 In the Radio Type listbox select t...

Page 111: ...1 In the MAC Address box type the MAC address you want to use for this position of the AP To ensure valid site survey results you must use a unique MAC address for each LOS point 12 If the AP model yo...

Page 112: ...2 Move the cursor to the floor location where you want to place the LOS 3 Click to place the LOS You cannot delete an LOS point directly from the Objects To Place tab To delete an LOS point place the...

Page 113: ...lect the language for the site survey order English German 6 To specify the output directory for the site survey order click the button below Output Directory and navigate to the directory where you w...

Page 114: ...order to set up the survey When you import the floor map into the site survey tool make sure you use the map name specified in the work order The site survey data will not appear when you import RF m...

Page 115: ...me must match the name specified in the site survey work order and must be the same map name used in the site survey tool 8 Click Next The import progress is displayed When the import is done check th...

Page 116: ...they are measurements between MAP radios The Total number of objects that will be corrected line indicates the number of measurements that did experience attenuation For existing RF objects 3WXM corre...

Page 117: ...eas For areas requiring multiple wireless technologies two completely overlapping coverage areas are created one for 802 11a and one for 802 11b g You define coverage by creating the following items W...

Page 118: ...or in the building To create a wiring closet 1 Display the floor plan in the Content panel 2 In the Task List panel click Tools 3 In the Wiring Closer Misc area under Coverage Area click the Insert Wi...

Page 119: ...ically on your floor plan You perform the following tasks to define a coverage area 1 Drawing a Coverage Area on page 121 2 Specifying the Wireless Technology for a Coverage Area on page 123 3 Specify...

Page 120: ...eparate nonshared coverage areas can overlap Figure 6 Unsupported Shared Coverage Area Example Keep the following in mind when planning shared coverage areas Two coverage areas using the same wireless...

Page 121: ...with a less complicated shape When drawing a coverage area make sure it extends just short of external walls If the coverage area includes external walls 3WXM accounts for the external walls when comp...

Page 122: ...sh polygon 1 Click at a vertex then move the cursor to the next vertex 2 Repeat until the polygon takes the shape you want For a polygon with n sides click n 1 additional times at the vertices For exa...

Page 123: ...lect 802 11a and 802 11g if the area requires 802 11a and 802 11g coverage When you specify a coverage area requiring different technologies 3WXM creates two areas that completely overlap each other o...

Page 124: ...ation rate for typical clients in this coverage area 3 For 802 11g to prevent the association of 802 11b clients to any radio in this coverage area select Exclude 802 11b clients To allow 802 11b clie...

Page 125: ...s for the coverage area if they are different from the defaults for the floor 1 To change the ceiling height specify the new height in the Height of the Ceiling box 2 To change the height where MAPs a...

Page 126: ...e listed 3 To change the MAP connection type select the type from the AP Connection Type list Direct MAPs are directly attached to dedicated WX switch ports Distributed MAPs can be indirectly attached...

Page 127: ...ecifying Redundancy Computation for MAPs in the Coverage Area on page 127 If you selected Distributed Auto in the AP Connection Type list the Capacity Planning for Data page appears Go to Configuring...

Page 128: ...ibuted from the MAP Connection Type list WX4400 switches support indirect MAP connections only 3 To change the number of redundant connections for the distributed connection type type the number in th...

Page 129: ...ions 2 In the Per Station Throughput list specify the throughput combined transmit and receive in kilobits per second Kbps for a station The throughput value cannot exceed the value you selected for t...

Page 130: ...calculations and selects the calculation that results in more MAPs 1 To calculate MAP placement and configuration based on both coverage and on capacity for voice over IP enable Use Capacity Calculati...

Page 131: ...o be in the coverage area 5 In the Handset Oversubscription Ratio list select the ratio for the average transmit behavior of the voice over IP phones The handset oversubscription ratio is the ratio of...

Page 132: ...loset that contains the WX switch or switches to be connected to the shared MAP access points If the MAPs will be directly connected to WX switches a wiring closet is required A wiring closet is not r...

Page 133: ...lick Properties The Coverage Area Properties dialog for the selected coverage area appears You can also display this dialog by displaying the floor plan selecting Coverage Areas in the Organizer panel...

Page 134: ...Under the Capacity tab you can do the following To calculate MAP placement and configuration based on coverage and on capacity for data enable Use Capacity Calculation for Data In the Per Station Thr...

Page 135: ...listed If you select default the default radio profile settings are applied to the coverage area For information about policies see Configuring and Applying Policies on page 387 In the Shared Area lis...

Page 136: ...that assigns a Distributed MAP number and name to the MAP from among the unused valid MAP numbers available on the switch The profile also configures the MAP with the MAP and radio parameter settings...

Page 137: ...ox This assumes that the network plan already has a WX switch defined If you are planning a new installation you do not need to specify a WX switch to use 11 When you have finished editing the propert...

Page 138: ...AP 4 On the floor plan click on the location where you want to place the AP You must click in a coverage area 3WXM removes the AP from the Objects to Place list and places an icon for it on the floor...

Page 139: ...1 to 30 characters with no spaces 7 In the Product ID box type the product identification for the access point 1 to 30 characters with no spaces 8 In the IP Address box type the IP address for the acc...

Page 140: ...of the following AP Dual Radio 802 11a and 802 11b or 802 11b g AP Single Radio 802 11a 802 11b or 802 11g 13 In the Radio Type drop down list select one of the following 11a 11b 11g The choices avai...

Page 141: ...dio 18 To enable the radio select Enabled For channel allocation to be considered enable the radio of the access point 19 In the SSID box type the service set identifier SSID for the radio 20 In the M...

Page 142: ...r click the Network Verification tab and upload the MAP configuration into 3WXM See Verifying Configuration Changes on page 377 2 Select the RF Planning option in the main 3WXM tool bar and display th...

Page 143: ...rage area 3WXM shows the expected simulated coverage of the completed design and allows you to see how the coverage changes when you make adjustments to MAP location or power levels Computing and Plac...

Page 144: ...pute and place MAPs 1 Specify design constraints See To specify design constraints 2 Compute and place MAPs See To compute and place MAPs on page 147 3 Review coverage area computation progress See To...

Page 145: ...er required select Allow Deletion of Locked MAPs A locked MAP is a MAP that is already associated with the coverage area For example if you computed and placed MAPs in this coverage area on a previous...

Page 146: ...efault behavior preserves any constraint changes you make to individual areas when you configure them 14 Select the coverage areas for which you want to apply constraints To select a coverage area cli...

Page 147: ...iring closet for directly attached MAP access points Specifying the primary wiring closet for distributed MAPs is optional 6 To specify the redundant wiring closet for a coverage area click in the Red...

Page 148: ...rage area computation To review coverage area computation 1 Review the number of MAPs required for each coverage area and the overriding criterion used coverage or capacity 2 Click Finish to apply the...

Page 149: ...logy you chose for the coverage area The following graphic shows an example of the 802 11b coverage for an area 3 To see the RF coverage area for a specific MAP or radio right click the MAP or radio a...

Page 150: ...age area 3WXM automatically locks the area Unlock the coverage area if you need to move or resize it To unlock a coverage area 1 Select the coverage area on the floor or from the Coverage Areas list i...

Page 151: ...ock You can no longer move the MAP Assigning MAP Channels If you do not plan to use the RF Auto Tuning feature to automatically set the channels on the MAPs after deployment and installation use the A...

Page 152: ...must be lower than or equal to the starting floor number 5 To change the radio type for which to assign channels select the radio type from the Technology list By default 3WXM assigns channels for all...

Page 153: ...oyed and managed by 3WXM the channel number is changed to match the results of channel assignment However the channel is not changed for MAPs that are running in the live network and are being managed...

Page 154: ...Computing Optimal Power If you do not plan to use the RF Auto Tuning feature to automatically set the power levels on the MAPs after deployment and installation use the Compute Optimal Power option t...

Page 155: ...overage not capacity Unless you disabled the option to place MAPs based on capacity do not select the Optimize AP Count option 4 Select Compute Power for the areas for which you want to compute power...

Page 156: ...t each of the data transmit rates supported by the radio These rates are standard for each radio type RSSI Coverage is shown based on the received signal strength indication RSSI heard by other radios...

Page 157: ...do the following 3 In the Coverage Areas section of the Organizer panel navigate to the floor 4 Expand the floor to display its coverage areas 5 Right click on a coverage area and select DIsplay RF C...

Page 158: ...the floor 3 Modify the coverage area so that the capacity requirements are higher If you manually add MAPs to a coverage area they might be moved or removed when you next perform Compute and Place If...

Page 159: ...ers 6 In the RSSI Options box select display options for the dialog box To list access points that cannot be detected from this RF measurement point select Show Unreachable MAPs To list disabled acces...

Page 160: ...l strengths for any location on the floor To use the RF interactive measurement mode 1 Click the icon in the toolbar 2 Click any location on the floor Received signal strength indication RSSI measurem...

Page 161: ...anel Show Unreachable APs Show MAPs that are too far away to accurately measure signal strength Show Disabled APs Show all disabled MAPs Show APs on Other Floors Show the MAPs located on other floors...

Page 162: ...rk order shows where the MAPs should be installed WX initial setup configuration information and projected RSSI information that is useful when verifying the installation After deployment you can gene...

Page 163: ...click Choose The Select dialog box appears 7 Navigate to the directory you want and click Select 3WXM uses this directory when generating subsequent reports 8 Click Generate Work Order The work order...

Page 164: ...164 CHAPTER 5 PLANNING THE 3COM MOBILITY SYSTEM...

Page 165: ...you are planning to use 3WXM to configure switches in a remote office see Configuring WX Switches Remotely on page 345 WX Switch Configuration Objects Configuration objects for WX switches are organiz...

Page 166: ...es Telnet Controls Telnet management access to the WX switches SSH Controls Secure Shell SSH management access to the WX switches Web Portal Controls web based login of network users clients SNMP Conf...

Page 167: ...Wireless Services Settings for SSIDs to provide network services Wizards are provided for configuring the following types of services 802 1X voice Web Portal open access and custom See Viewing and Co...

Page 168: ...ings on page 317 802 1X Access Rules Access rules for 802 1X clients See Viewing and Configuring 802 1X Network Access Rules on page 320 MAC Access Rules Access rules for MAC clients See Viewing and C...

Page 169: ...stem on page 75 Creating a WX Switch Using the Create Wireless Switch Wizard 1 Select the Configuration tool bar option 2 In the Organizer panel select the network plan name 3 In the Task List panel s...

Page 170: ...nes the interface or source IP address MSS uses for system tasks including the following Mobility Domain operations Topology reporting for dual homed MAP access points Default source IP address used i...

Page 171: ...es and close the wizard 15 Edit other parameters as required See the rest of this chapter and the following two chapters Adding a Switch by Uploading its Configuration from the Network If you have alr...

Page 172: ...he port state in the dialog and then close the dialog The changes take effect on of all the selected ports Reviewing and Deploying Changes 3WXM does not automatically deploy switch configuration chang...

Page 173: ...5 In the Enable Password box type the enable password for the WX This password must match the enable password that was defined on the switch using the CLI command set enablepass For more information s...

Page 174: ...ility Domain finish creating the switch then create the Mobility Domain Select the switch in the Organizer panel to display its basic settings in the Content panel and select the Mobility Domain from...

Page 175: ...option 2 In the Organizer panel select the WX switch 3 In the Task List panel select System Setup The System Setup wizard appears 4 Read the first page then click Next 5 Optionally create a static rou...

Page 176: ...ribed in SNMPv3 RFCs AuthRequest UnsecuredNotify SNMP message exchanges are authenticated but are not encrypted and notifications are neither authenticated nor encrypted The only security level suppor...

Page 177: ...tions read write notify An SNMP management application using the string can get and set object values on the switch The switch can use the string to send notifications i Click Next 8 Configure VLANs V...

Page 178: ...Profile Provides wireless access to clients without requiring them to log in Custom Service Profile Provides wireless access based on the combination of options you choose Use this option only if non...

Page 179: ...eporting for dual homed MAP access points Default source IP address used in unsolicited communications such as AAA accounting reports and SNMP notifications 6 To enable the switch to be managed by 3WX...

Page 180: ...To change the wiring closet membership for the switch select the closet from the Wiring Closet drop down list To leave the switch out of all wiring closets select Not Assigned 11 Click Save Changing...

Page 181: ...ct the number of hours between 23 and 23 to subtract from or add to UTC 6 Optionally in the Offset Minutes box select the number of minutes between 59 to 59 to subtract from or add to UTC 7 In the DST...

Page 182: ...System Information wizard appears 4 In the Contact box type the contact name for the WX 5 In the Location box type the location of the WX 6 In the Prompt box type the CLI prompt for the WX If you do...

Page 183: ...ool bar option 2 In the Organizer panel select the WX switch 3 In the Task List panel select Convert Auto APs The Convert Auto APs wizard appears The MAPs that were configured using a Distributed MAP...

Page 184: ...gh the network by 3WXM Services This option also requires the Managed option for the switch to be enabled See step 6 in Modifying Basic Switch Parameters on page 179 1 Select the Configuration tool ba...

Page 185: ...ettings appear in the Content panel The 10 100 Ethernet ports and the gigabit Ethernet ports if the switch has them are listed separately Changing Port Settings To change settings for a port edit the...

Page 186: ...interface RJ45 Enables the copper interface and disables the fiber interface The port supports only the physical interface you select The other interface is disabled The port cannot dynamically switc...

Page 187: ...lect AP 2 To change the name edit the string in the Name field The name can contain up to 16 alphanumeric characters with no spaces or tabs 3 Click Next 4 To change the model select the model from the...

Page 188: ...rohibits a client from sending traffic directly to the MAC address of an authenticator until the client is authenticated Instead of sending traffic to the MAC address of an authenticator the client se...

Page 189: ...ly if the switch does not have an 802 1X or MAC authentication rule for wired access that matches the username or MAC address of the client and the client is not denied by either method Web Portal req...

Page 190: ...dd i Click Finish j Click Next 6 To use MAC authentication to control access to the port create or select a MAC authentication rule Otherwise go to step 7 If a MAC access rule for this port has alread...

Page 191: ...ser is authenticated the ACEs are not used If you need to add ACEs continue with this step Otherwise go to step 9 To add an ACE click Add Rule 3WXM adds an ACE to the end of the list The ACE matches o...

Page 192: ...en Access in step 2 select the VLAN to which you want the switch to assign users Otherwise go to step 12 Click Finish to close the wizard and save the changes You are finished with this procedure 12 C...

Page 193: ...before it failed continues to be assigned to other ports Layer 2 configuration changes apply collectively to a port group as a whole but not to individual ports within the group For example Spanning...

Page 194: ...ck Finish Changing a Port Group To change a port group 1 In the Content panel select the row for the port group 2 Click Properties The Port Group Properties wizard appears 3 To add a port to the port...

Page 195: ...to the WX switch 3 Click the plus sign next to System 4 Select Management Services The management services and their settings appear in the Content panel Changing Management Service Settings To chang...

Page 196: ...d 3WXM Services as an SNMP notification target to the switch For simple configuration of 3WXM Services as an SNMP notification target see Setting Up a Switch on page 175 1 Click the checkbox next to S...

Page 197: ...If you enable SNMP service on the WX 3Com recommends that you do not use the well known strings public for READ or private for WRITE These strings are commonly used and can easily be guessed 3 Select...

Page 198: ...et them The switch can use the string to send notifications notify only The switch can use the string to send notifications read write An SNMP management application using the string can get and set o...

Page 199: ...format type a 16 byte hexadecimal string for MD5 or a 20 byte hexadecimal string for SHA If you selected Pass Phrase as the format type a string at least 8 characters long 7 Select the encryption typ...

Page 200: ...To enable all notification types click the Enable checkbox at the top of the list 4 Click Finish Configuring a Notification Target A notification target is a remote device to which MSS sends SNMP noti...

Page 201: ...ion profile The name can be 1 to 32 alphanumeric characters with no spaces or tabs c Click Next d Click the checkbox next to each notification type you want to enable To enable all notification types...

Page 202: ...ice on the WX 3Com recommends that you do not use the well known strings public for READ or private for WRITE These strings are commonly used and can easily be guessed c Select the access type read no...

Page 203: ...S calculates the engine ID based on the address LocalID Uses the value computed from the system IP address for the switch To send informs you must specify the engine ID of the inform receiver To send...

Page 204: ...get on page 200 Configuring 3WXM Services as a Notification Target 1 Access the Setup 3WXM Notification Target wizard a Select the Configuration tool bar option b In the Organizer panel click the plus...

Page 205: ...community string a If a list of community string is displayed select Create new Community and click Next b In the Community String box type the name of the community The name can be 1 to 32 alphanumer...

Page 206: ...nly The switch can use the string to send notifications notify read write An SNMP management application using the string can get and set object values on the switch The switch can use the string to s...

Page 207: ...keyword such as authentication or sm to trace activity for a particular feature such as authentication or the session manager CAUTION Setting traces can have adverse effects on system performance 3Com...

Page 208: ...b In the Severity Filter list select the lowest level of severity of the event or condition to be logged see the list in step 2 The default severity level is Error 4 Configure logging to the current...

Page 209: ...rity of the event or condition to be logged see the list in step 2 on page 207 The default severity level is Error 4 To map all the facilities to a standard local facility select Facility Mapping Some...

Page 210: ...ess to trace Specify a MAC address using colons to separate the octets for example 00 11 22 aa bb cc 6 Optionally in the Port Name box type the port number to trace 7 Click Finish Viewing and Configur...

Page 211: ...herwise MSS uses a default route For more information about static routes see the Configuring and Managing IP Routes section in the Configuring and Managing IP Interfaces and Services chapter of the W...

Page 212: ...Host IP Address box type the IP address that the IP alias is mapped to 4 Click Finish Configuring DNS You can configure the WX switch to resolve hostnames to their IP addresses by querying a Domain N...

Page 213: ...NTP polls network time servers at regular intervals and synchronizes the system date and time with the servers By default NTP is not enabled You can specify up to three NTP servers If NTP is configure...

Page 214: ...age out and remain in the table even after the WX is rebooted In addition to adding permanent ARP entries you can set the amount of time unused dynamic entries remain in the table before they are remo...

Page 215: ...Users who require authentication connect through WX ports that are configured for MAPs or wired authentication access Users are assigned to VLANs automatically through authentication and authorizatio...

Page 216: ...the user is assigned to the switch can tunnel traffic for the user through another switch that is a member of the VLAN For more information about Mobility Domains see Defining a Mobility Domain on pag...

Page 217: ...ber of a VLAN the VLAN name is listed in the VLAN s column To select multiple VLANs press Shift while clicking to select contiguous items or press Control while clicking to select noncontiguous items...

Page 218: ...ports the IEEE 802 1Q tag type described in the IEEE 802 1Q specification The tagging capabilities of the WX are flexible You can assign 802 1Q tag values on a per VLAN per port basis The same VLAN ca...

Page 219: ...Tag Value field By default the tag value of a port or port group the same as the VLAN ID 8 Click OK Changing VLAN Spanning Tree Settings The purpose of the Spanning Tree Protocol STP is to maintain a...

Page 220: ...P features for an individual VLAN but does not configure fast convergence features which are global See Enabling STP Fast Convergence Features on page 222 4 To enable STP click Enabled 5 In the Bridge...

Page 221: ...f STP is enabled on the VLAN spanning tree packets are dropped at the port If STP is disabled on the VLAN spanning tree packets are forwarded transparently through the VLAN to and from that port 6 In...

Page 222: ...t is not directly connected to the link does not detect the link change until the maximum age timer expires Backbone fast convergence enables the WX switch to listen for bridge protocol data units BPD...

Page 223: ...f the group IGMP is especially useful for WLANs because bandwidth is relatively constrained The WX listens for multicast packets and maintains a table of multicast groups as well as their sources and...

Page 224: ...response to a group query after receiving a leave message for that group before removing the group The default value is 10 tenths of a second 1 second 11 In the Robustness Value box specify the robus...

Page 225: ...t traffic To add or remove static multicast router and receiver ports 1 Access the VLAN table a Select the Configuration tool bar option b In the Organizer panel click the plus sign next to the WX swi...

Page 226: ...specified default routers You can specify up to four default router MAC addresses The addresses must be unicast not multicast or broadcast For networks with IP only clients you can restrict client to...

Page 227: ...VLAN WX switches configured to comprise a Mobility Domain allow users to roam seamlessly across MAP access points and across WX switches Although a WX that is not a member of a user s VLAN cannot dire...

Page 228: ...uick Start Optionally you can configure the DHCP server to also provide IP addresses to Distributed MAPs and to clients Use of the MSS DHCP server to allocate client addresses is intended for temporar...

Page 229: ...ho receive IP addresses from this VLAN enter the domain name in the DNS Name box 9 To specify the default router gateway for hosts who receive IP addresses from this VLAN enter the address in the Defa...

Page 230: ...ts access in an ACL no traffic will be allowed The implicit deny all rule is always the last ACE of an ACL You can choose to count the number of times an ACE is matched This hit count is useful for tr...

Page 231: ...ettings on page 235 The ACL table might contain an ACL named portalacl This ACL is created automatically if you enable Web Portal be changing the fallthru authentication type on a service profile or w...

Page 232: ...nning at the top Because the action in the first ACE that matches a packet is used the order the ACEs appear in is important You can reorder them See step 13 4 Specify the source IP address by clickin...

Page 233: ...t Number box IP Protocol Number Protocol 1 Internet Control Message Protocol ICMP 2 Internet Group Management Protocol IGMP 6 Transmission Control Protocol TCP 9 Any private interior gateway used by C...

Page 234: ...e 0 Packets with routine precedence are filtered Priority 1 Packets with priority precedence are filtered Immediate 2 Packets with immediate precedence are filtered Flash 3 Packets with flash preceden...

Page 235: ...CoS box By default the CoS value is 1 any 12 Repeat step 3 to step 11 for each ACE 13 To reorder the ACEs select an ACE and click the up or down arrow to move it 14 Click OK to save the ACL The ACL a...

Page 236: ...ype the number of seconds between updates in the Hit Sample Rate box 3 Click OK To enable the hit counter for an ACE You can enable the hit counter on an individual ACE basis 1 Select the ACE in the A...

Page 237: ...this rule unless you are certain you need to do so If the rule does not have the capture option the Web Portal user never receives a login page Table 17 ICMP Messages and Codes ICMP Message Type Numb...

Page 238: ...n ACL to a MAP port or a wired authentication port You also can map ACLs to user by configuring the filter in and filter out user attributes User based ACLs are more specific than ACLs applied to inte...

Page 239: ...st select the port to which you want to map the ACL You cannot map an ACL to a MAP port or a wired authentication port c In the Direction list select In to filter incoming packets or Out to filter out...

Page 240: ...Individual ACE from an ACL To delete an individual ACE from an ACL 1 Access the ACL table a Select the Configuration tool bar option b In the Organizer panel click the plus sign next to the WX switch...

Page 241: ...hen forward the traffic based on the priority MSS performs classification on ingress to determine the CoS value This CoS value is used to mark the packet at the egress interface The classification and...

Page 242: ...In the CoS column of the DSCP to CoS table use the arrows to select the new value or type the new value 3 Click Save Changing a CoS to DSCP Mapping To change the mapping between an internal CoS value...

Page 243: ...SCP list select the lower DSCP value in the range 4 In the Last DSCP list select the upper DSCP value in the range 5 In the CoS value list select the internal CoS value to which you want MSS to map al...

Page 244: ...244 CHAPTER 6 CONFIGURING WX SYSTEM PARAMETERS...

Page 245: ...izards to configure the following types of wireless services 802 1X Service Profile Provides wireless access to 802 1X clients Voice Service Profile Provides wireless access to Voice over IP VoIP devi...

Page 246: ...Based on service profile type Secure 802 1x Voice Web Portal Open Custom service profiles do not have a default name SSID name SSID name with wireless clients will associate Blank no default value SS...

Page 247: ...tandard AES with Counter Mode with Cipher Block Chaining Message Authentication Code Protocol CCMP Temporal Key Integrity Protocol TKIP WEP with 104 bit keys WEP with 40 bit keys TKIP Authentication m...

Page 248: ...e You can restrict access by specifying part of the username or MAC address along with a wildcard In this case only the usernames or MAC addresses that match the partial username or address are allowe...

Page 249: ...amples of using wildcards in MAC addresses all MAC addresses 00 00 01 00 01 02 00 01 02 03 00 01 02 03 04 00 01 02 03 04 0 To view the access rules of a service profile see Viewing SSID Encryption Set...

Page 250: ...fic to a RADIUS server for EAP processing If you select PEAP the EAP Sub Protocol is MS CHAPV2 For other protocols the EAP Sub Protocol is None Other access types do not use EAP AAA Methods RADIUS Ser...

Page 251: ...Wireless Services The service profiles appear in the Content panel Each row in the table shows settings for an individual service profile To display all settings for a service profile select the serv...

Page 252: ...CCMP Usually used with RSN WPA2 TKIP Usually used with WPA WEP 104 Used with dynamic WEP WEP 40 Used with dynamic WEP 9 Click Next 10 Select the EAP type EAP MD5 Offload PEAP Offload Local EAP TLS Ext...

Page 253: ...s you want to manage with the radio profile and click Move to move them to the Current Members list If you have not planned RF coverage or configured any MAPs in the network plan yet no radios are lis...

Page 254: ...VP or Avaya phones 7 Click Next The next step depends on the encryption type you selected in step 5 If you selected Encrypted go to step 8 If you selected Clear go to step 18 8 Select the access type...

Page 255: ...ither type of packet select the key number in the WEP Unicast Key Index or WEP Multicast Key Index box 17 Click Next 18 Select or type the name of the VLAN into which you want the switch to place voic...

Page 256: ...radio profile and go to step 23 To create a new radio profile a Select Create new Radio Profile and click Next b Type the radio profile name in the Name box and click Next c Select the radios you want...

Page 257: ...5 configure the encryption settings Go to step 7 If you selected Clear in step 5 go to step 15 7 Select the security modes you want the SSID to support You can select one or more of the following RSN...

Page 258: ...r the Web Portal service are listed The ACEs are required to allow DHCP traffic while blocking all other traffic while a user is being authenticated These ACEs are used only during authentication Afte...

Page 259: ...page 299 20 Select or create the radio profile to map to this service profile By default the default radio profile is selected To map the service profile to the default radio profile leave default sel...

Page 260: ...g on the switch 4 Type the SSID name in the SSID box 5 Select the SSID type from the SSID Type drop down list Encrypted Traffic on the SSID is encrypted Clear Traffic on the SSID is unencrypted 6 Clic...

Page 261: ...ing the access rules you can leave the VLAN Name box blank 16 Select or create the radio profile to map to this service profile By default the default radio profile is selected To map the service prof...

Page 262: ...dify the following service profile settings in the Wireless Service Profiles table itself SSID name SSID type encrypted or clear Beacon state advertisement of the SSID Radio profile maps MAP radios to...

Page 263: ...ler Configuration Guide WPA RSN Tab Most of the settings on the WPA RSN tab are explained in the sections on the service profile wizards The TKIP Countermeasures Time specifies how many ms the switch...

Page 264: ...ARP requests for their IP addresses DHCP Restrict WX captures and does not forward any traffic except DHCP traffic for a wireless client who is still being authenticated and authorized No Broadcast Se...

Page 265: ...y selected for Vocera voice service profiles Max Sessions When the CAC mode is Sessions it specifies the maximum number of active sessions radios can have for the SSID The default is 12 Short Retry Co...

Page 266: ...e at which the radio sends beacon SSID advertisement frames and probe response frames The valid rates depend on the radio type and are the same as the mandatory rates However you cannot set the beacon...

Page 267: ...ure SODA is an endpoint security solution that allows enterprises to enforce security policies on client devices without having to install any special software on the client machines WX switches can b...

Page 268: ...ption settings and access rules of an SSID from the Service Profile table 1 Display the Wireless Service Profiles table a In the Organizer panel click on the plus sign next to the WX switch on which t...

Page 269: ...lick Properties A Network Access Properties wizard containing the configuration settings for the access rule appears Modifying SSID Encryption Settings and Access Rules You can create access rules for...

Page 270: ...box and click Generate 4 Click Next 5 Select the encryption algorithms to use AES CCMP Usually used with RSN WPA2 TKIP Usually used with WPA WEP 104 Used with dynamic WEP WEP 40 Used with dynamic WEP...

Page 271: ...ant to modify and edit or select the new value For information about ACE settings see Viewing and Configuring ACLs on page 230 Do not change the deny rule at the bottom of the ACL This rule must be pr...

Page 272: ...o profile as part of a domain policy and apply it to MAPs on different WX switches 3Com recommends that you create a new radio profile and leave the default radio profile unchanged as a backup The def...

Page 273: ...adio Profile 2 In the Name box type the name of the radio profile 1 to 16 characters with no spaces or tabs 3 Click Next 4 To add radios to the profile a Select the radios in the Available Members lis...

Page 274: ...abs Radio Profile 802 11 Attributes Auto Tune Service Profile Selection Radio Selection Voice Configuration Radio Profile Tab The Radio Profile tab lists settings for the following options Name Radio...

Page 275: ...olicit probe responses from other access points Radios also passively scan by listening for beacons and probe responses When active scan is disabled radios perform passive scanning only Enable RFID En...

Page 276: ...adios Auto Tune Tab The Auto Tune tab lists settings for RF Auto Tuning Tune Channel Automatically configures and tunes the channel This feature is enabled by default RF Auto Tuning of channels on 802...

Page 277: ...pecify from 0 to 65535 seconds The default channel interval is 900 seconds Tx Power Backoff Timer Interval at which radios reduce power after temporarily increasing the power to maintain the minimum d...

Page 278: ...ing a Directly Connected MAP on page 284 and Creating a Distributed MAP on page 282 After configuring the MAPs return to this wizard page to apply the radio profile to radios Voice Configuration Tab T...

Page 279: ...ol SSIDs encryption parameters or any other parameters managed by service profiles You still need to configure a service profile separately for each SSID A WX switch can have one Auto DAP profile View...

Page 280: ...MAP selects the switch that has only 50 active MAPs Bias applies only to WX switches that are indirectly attached to the MAP through an intermediate Layer 2 or Layer 3 network A MAP always attempts to...

Page 281: ...rt The WX 10 100 port provides PoE to the MAP The WX also forwards data only to and from the configured MAP on that port The port numbers on the WX configured for directly attached MAPs reference a pa...

Page 282: ...n to a WX or indirectly through other Layer 2 or Layer 3 wired networking devices Configure a Distributed MAP for each indirectly connected MAP Table 20 lists how many MAPs you can configure on a WX s...

Page 283: ...of the encryption fingerprint for the MAP Use either of the following formats 11 22 33 44 55 66 77 88 99 aa bb cc dd ee ff 00 1122 3344 5566 7788 99aa bbcc ddee ff00 The fingerprint for a MAP is the h...

Page 284: ...lick Finish Configuring a Directly Connected MAP MAPs contain radios that provide networking between your wired network and IEEE 802 11 wireless users A MAP can connect to the wired network through a...

Page 285: ...ct Directly Connect AP 3 Select the WX port the MAP will be connected to from the Available Ports drop down list Configuring a directly connected MAP in a port converts the port to a MAP access port I...

Page 286: ...his step for the other radio Otherwise go to step 11 11 Click Finish Setting Up AP Redundancy You can configure redundant WX connections for MAPs in the network Only AP models that have two Ethernet p...

Page 287: ...elect the WX switch the MAP will use for a redundant connection and click OK 3 To remove all redundant connections for an MAP select the MAP and click Clear Connections 4 To create a direct redundant...

Page 288: ...the Task List panel select AP model 2 Select the new MAP model number from the drop down list 3 Click OK Changing the Radio Type for an MAP To change the radio type for an MAP 1 Access the Change AP M...

Page 289: ...the switch A change to this setting affects only new management sessions established after deploying the change to the switch The change does not affect existing sessions Configuring Advanced MAP Set...

Page 290: ...te Layer 2 or Layer 3 network A MAP always attempts to boot on MAP port 1 first and if the MAP is directly attached to a WX switch on MAP port 1 it boots from that switch regardless of the bias settin...

Page 291: ...icated by an arrow To show the RF coverage for the antenna select the MAP right click and select Display RF Coverage and the radio type from the drop down list To adjust the coverage select the MAP ri...

Page 292: ...can view or change radio settings after the MAPs are configured Viewing Radio Settings To view radio settings 1 Select the Configuration tool bar option 2 In the Organizer panel click the plus sign n...

Page 293: ...ermit lists the ignore list and the black list However you must enter the SSID Organizationally Unique Identifier OUI or MAC address you are adding to a list To add a value to a list by selecting it u...

Page 294: ...panel Go to step 6 6 Edit the OUI in the Vendor OUI box 7 Select the device type from the Type drop down list Client AP or All both client and AP 8 Click OK 9 Click Add to move the OUIs to the Permit...

Page 295: ...the RF detection settings a Select the Configuration tool bar option b In the Organizer panel click the plus sign next to the WX switch c Click the plus sign next to Wireless d Select RF Detection 2 I...

Page 296: ...ce if no client connected to the device has been detected communicating with any network entity listed in the forwarding database FDB of any WX switch in the Mobility Domain Although the interfering d...

Page 297: ...at MAP to MSS If someone attempts to spoof management packets from a 3Com MAP MSS can detect the spoof attempt 1 Access the RF detection settings a Select the Configuration tool bar option b In the Or...

Page 298: ...298 CHAPTER 7 CONFIGURING WIRELESS PARAMETERS...

Page 299: ...for clients of third party APs Location policies for overriding authorization parameters assigned by AAA to network clients Mobility profiles for controlling network client access to specific MAP por...

Page 300: ...u can configure authorization attributes for users Authorization attributes specify the network resources the user can access The most commonly used attribute is VLAN Name which specifies the VLAN to...

Page 301: ...group If you do select a user group you only need to specify a password for the user All other attributes are obtained from the user group 5 To set authorization attributes for the user click Next and...

Page 302: ...ttributes in another way such as configuring default AAA attribute values for the SSID the user will access click Finish 3 In the VLAN Name box select or type the VLAN that the user group belongs to 1...

Page 303: ...gured 4 To set authorization attributes for the user click Next and go to step 5 Otherwise if you plan to set authorization attributes in another way such as adding the user to a group or configuring...

Page 304: ...zation attributes in another way such as configuring default AAA attribute values for the SSID the user will access click Finish 4 In the VLAN Name box select or type the VLAN that the group belongs t...

Page 305: ...access by the client Clients who attempt to use an unauthorized encryption method are rejected Encryption Type is a 3Com vendor specific attribute VSA The vendor ID is 43 and the vendor type is 3 One...

Page 306: ...filter id can specify up to two ACLs Any of the following are valid filter id Profile acl1 filter id OutboundACL acl2 filter id Profile acl1 OutboundACL acl2 Each example goes on a single line on the...

Page 307: ...2 Framed for network user access 6 Administrative for administrative access with authorization to access the enabled configuration mode The user must enter the enable command and the correct enable p...

Page 308: ...and the service profile must be used by a radio profile assigned to 3Com radios in the Mobility Domain start date Date and time at which the user becomes eligible to access the network MSS does not au...

Page 309: ...tions required and a time range in hhmm hhmm 4 digit 24 hour format optional mo Monday tu Tuesday we Wednesday th Thursday fr Friday sa Saturday su Sunday wk Any day between Monday and Friday Separate...

Page 310: ...Name Name of a VLAN that you want the user to use The VLAN must be configured on a WX switch within the Mobility Domain to which this WX switch belongs acct interim interval lnterval in seconds betwe...

Page 311: ...base on the WX switch to authenticate users 3Com recommends using RADIUS to accommodate the large number of users in an enterprise network For information about the RADIUS attributes supported by MSS...

Page 312: ...port is 1813 8 In the Timeout box specify how long 1 to 65 535 seconds the WX switch must wait for a RADIUS server to respond before retransmitting The default is 5 seconds 9 In the Retry Count box sp...

Page 313: ...itting The default is 5 seconds 5 In the Authentication Port box specify the UDP destination port to which the WX switch listens for authentication and authorization The default port is 1812 6 In the...

Page 314: ...rd a Select the Configuration tool bar option b In the Organizer panel click the plus sign next to the WX switch c Click the plus sign next to AAA d Select RADIUS e In the Task List panel select RADIU...

Page 315: ...et default values for certain RADIUS parameters that apply to RADIUS servers and server groups you create for an individual WX The following RADIUS parameters except system IP address are defined with...

Page 316: ...y box type the password also known as a shared secret key used to authenticate to the RADIUS server You must provide the same password that is defined on the RADIUS server The password can be 1 to 64...

Page 317: ...ties a Select the Configuration tool bar option b In the Organizer panel click the plus sign next to the WX switch c Click the plus sign next to AAA d Select RADIUS e In the Task List panel select Sys...

Page 318: ...timeout value 0 to 65 535 seconds in the Quiet Period Timeout box The default is 60 seconds 4 To specify the number of seconds the WX switch waits before retransmitting an Extensible Authentication P...

Page 319: ...the Reauthentication Attempts box The default is 2 attempts If the number of reauthentications for a wired authentication client is greater than the maximum number of reauthentications allowed MSS se...

Page 320: ...ng and Configuring MAC Network Access Rules on page 324 Viewing and Configuring WebAAA Network Access Rules on page 327 Viewing and Configuring Last Resort Network Access Rules on page 330 To configur...

Page 321: ...pe the name in the SSID box If the rule is for access through a wired authentication port select Wired CAUTION The default SSID name any matches on all SSID names If the SSID box contains any and you...

Page 322: ...he EAP MD5 option does not work with Microsoft wired authentication clients PEAP Protected EAP with Microsoft Challenge Handshake Authentication Protocol Version 2 MS CHAP V2 Select this protocol for...

Page 323: ...n are attempted with the other methods specified in the list If you specify LOCAL as the first method and a user is not in the local user database on the WX authentication and authorization are attemp...

Page 324: ...h can be Web Open Access last resort or none This section assumes that you are familiar with the AAA options in MSS For detailed information see the Configuring AAA for Network Users chapter of the Wi...

Page 325: ...access any SSID 3 In the User Glob box type a full or partial username to be matched during authentication MAC addresses must be specified with colons as the delimiters for example 00 11 22 33 44 55...

Page 326: ...attempted with a RADIUS server group if one is defined in the method list The authentication methods you select are also used for authorization 7 Click Next 8 To enable this accounting rule for the S...

Page 327: ...or MAC address glob in an 802 1X or MAC access rule and the rule also matches on the SSID or wired authentication port through which the user is trying to access the network In this case the 802 1X o...

Page 328: ...is for access through a wired authentication port select Wired CAUTION The default SSID name any matches on all SSID names If the SSID box contains any and you do not change the SSID name the authenti...

Page 329: ...or both MSS tries the methods in the order they appear in the Current RADIUS Server Groups list To reorder the methods select a method and click Up or Down If you specify a RADIUS server group as the...

Page 330: ...chapter of the Wireless LAN Switch and Controller Configuration Guide Viewing Last Resort Network Access Rules To view last resort network access rules 1 Select the Configuration tool bar option 2 In...

Page 331: ...dd it to the switch s configuration 5 Select the authentication method s in the Available RADIUS Server Groups list and click Add An authentication method specifies where the switch will look for user...

Page 332: ...he same as those for authentication methods See step 5 10 Click Finish Viewing and Configuring WX Administrator Access Rules MSS supports administrative access to a WX switch through the serial consol...

Page 333: ...ble RADIUS Server Groups list and click Add An authentication method specifies where the switch will look for user information to authenticate users You can select a RADIUS server group LOCAL the loca...

Page 334: ...Click Finish Creating an Access Rule for Telnet or SSH Access To create an access rule for Telnet or SSH access 1 Access the Create Admin User wizard a Select the Configuration tool bar option b In t...

Page 335: ...with a RADIUS server group if one is defined in the method list The authentication methods you select are also used for authorization 6 Click Next 7 To enable this accounting rule for the SSID select...

Page 336: ...rd party AP For information about configuration requirements on the third party AP see the Configuring AAA for Users of Third Party APs section in the Configuring AAA for Network Users chapter of the...

Page 337: ...3 Optionally edit the name in the SSID box CAUTION The default SSID name any matches on all SSID names If the SSID box contains any and you do not change the SSID name the rule allows clients who matc...

Page 338: ...he Authentication Port box 4 To change the UDP port number on which the WX switch will listen for RADIUS stop accounting records from the AP edit the number in the Accounting Port box 5 Type the key w...

Page 339: ...or change the Filter Id and VLAN Name authorization attributes obtained from AAA Conditions within a rule are ANDed All conditions in the rule must match in order for MSS to take the specified action...

Page 340: ...user glob In the User Glob box type the user glob for the users to which the location policy does not apply Type the user glob in the box When specifying a user glob enter a username a double asteris...

Page 341: ...ule are matched If you select Deny go to step 14 12 In the In ACL Name box type the name of the input ACL that applies if the location policy rules are matched The ACL name can be 1 to 32 alphanumeric...

Page 342: ...US server You assign the name of the Mobility Profile by using the Mobility Profile RADIUS attribute which is a 3Com vendor specific attribute VSA Viewing Mobility Profiles To view mobility profiles 1...

Page 343: ...elect Selected select the individual ports in the Available Physical Ports list and click Add 5 Click Next 6 In the Distributed MAPs drop down list select the Distributed MAPs to include in the Mobili...

Page 344: ...344 CHAPTER 8 CONFIGURING AUTHENTICATION AUTHORIZATION AND ACCOUNTING PARAMETERS...

Page 345: ...uto config then sending the switch to the remote office The switch contacts 3WXM Services in the corporate network to complete its configuration The drop ship option is supported only for the WXR100 T...

Page 346: ...t the remote office where the switch is delivered physically installs the switch by connecting port 1 to the network If the switch will manage a directly connected MAP the MAP needs to be physically i...

Page 347: ...installed The WXR100 sends a configuration request to 3WXM Services 8 3WXM receives the configuration request and looks in the currently selected network plan for a WXR100 configuration with the same...

Page 348: ...is recommended if DNS is available If DNS is available an entry must be added to the DNS server that maps the IP address of the host where 3WXM Service are installed to the well known hostname wlan c...

Page 349: ...the Network Verification tab The warning lists the serial number and IP address The network administrator can upload the switch into the network plan configure switch parameters and deploy the config...

Page 350: ...ou can statically configure the information The IP address and DNS information are configured independently You can configure the combination of settings that work with the network resources available...

Page 351: ...n hostname wlan config srv 1 Configure a VLAN W X1200 set vlan 1 port 7 s ucces s changeaccept ed 2 Configure an IP interface on the VLAN W X1200 set interface 1 ip 192 168 1 252 255 255 255 0 s ucces...

Page 352: ...252 255 255 255 0 s ucces s changeaccept ed 3 Configure a default route through the local default router W X1200 set ip route default 192 168 1 1 0 s ucces s changeaccept ed 4 Configure the default D...

Page 353: ...des the DNS configuration from the DHCP server 1 Configure a VLAN W X4400 set vlan 1 port 7 s ucces s changeaccept ed 2 Enable the DHCP client on VLAN 1 W X4400 set interface 1 ip dhcp client enable s...

Page 354: ...List panel select Create Wireless Switch 8 Enter a name for the switch in the WX Name box 9 Select the switch model 10 Enter the serial number in the Serial Number box 11 Configure other deployment pa...

Page 355: ...already filled in 5 Type the Enable password if one is configured on the switch If an Enable password has not been configured yet leave the Enable Password box blank 6 Click Finish 3WXM uploads the c...

Page 356: ...lacement works only under the following conditions The new switch must be the same model as the one being replaced The new switch must run the same major MSS version for example 4 1 x as the one being...

Page 357: ...on that matches the model and MSS version and has a management interface in the same subnet as the new switch 3WXM also notices that the serial number of the new switch does not match the serial numbe...

Page 358: ...dicate the switch port numbers to which they are connected you might want to label them before unplugging them 3 Plug the network cables into the new switch 4 Plug the power cord into the new switch 5...

Page 359: ...File Management Options in 3WXM Option Description Upload configuration Creates a new WX switch in a network plan by copying the configuration file from the live switch in the network See Adding a Swi...

Page 360: ...e differences and either deploy the new changes to synchronize the configurations or undo the changes See Synchronizing Local and Network Changes on page 365 Save image in repository Adds a WX system...

Page 361: ...guration changes that have occurred in 3WXM for the selected switch See Reviewing Switch Configuration Changes on page 365 Deploy Send the configuration changes to the same switch in the network See D...

Page 362: ...Undo Remove the changes from the switch in the network See Undoing Local or Network Changes on page 366 Other Upload WX Add a WX switch to the network plan by copying its configuration from a live sw...

Page 363: ...t Actions Reboot WXs Reboot a WX switch and the MAPs it is managing See Rebooting WX Switches or MAP Access Points on page 371 Reboot APs Reboot MAPs See Rebooting WX Switches or MAP Access Points on...

Page 364: ...b See Viewing the Operation Log on page 373 Cancel Scheduled Operation Cancels a scheduled task such as an image deployment See Canceling a Scheduled Operation on page 373 Table 24 Devices Tasks conti...

Page 365: ...tch that was changed A row of information is displayed for each switch The Local Status and Network Status columns indicate where changes have occurred Reviewing Switch Configuration Changes To review...

Page 366: ...switches or Control for noncontiguous switches while clicking 4 In the Local Changes or Network Changes group in the Task List panel select Undo Selecting Undo in Local Changes reverses changes made...

Page 367: ...is shown in the History window at the bottom left of the dialog box 3WXM performs verification of the changes If errors occur they are listed in the Selected Errors at the bottom right of the dialog b...

Page 368: ...ferent you still can synchronize the changes The Devices tab indicates that both the network and the network plan have nonmatching changes in the following ways When you select the WX switch the links...

Page 369: ...ry dialog box appears 5 Navigate to the directory containing the system image 6 Select the system image 7 Click Add to Repository The image is added to the image repository and appears in the Image Li...

Page 370: ...Image Install 5 Click on Select an Image to display the list of images in the repository 6 Select the image and click Install To schedule installation of an image on WX switches 1 Select the Devices t...

Page 371: ...to select noncontiguous items 4 In the Task List panel select Reboot WXs Information about the rebooting process is shown in the Status column 5 Click Close To reboot MAPs without rebooting the switch...

Page 372: ...select Device Operations 3 In the Managed Devices list select the WX switches you want to manage To select more than one WX click Shift while clicking to select contiguous items or click Ctrl while cl...

Page 373: ...ist select the WX switches with scheduled tasks you want to cancel To select more than one WX click Shift while clicking to select contiguous items or click Ctrl while clicking to select noncontiguous...

Page 374: ...he switch to the network To enable 3WXM management of a switch see Modifying Basic Switch Parameters on page 179 To import a configuration 1 In the main 3WXM window select Tools Import The Import Conf...

Page 375: ...gate to the directory you want to use as the output directory and click Select 4 To overwrite previously exported configuration files select Overwrite Existing Files If you do not select this option y...

Page 376: ...e detection of configuration changes in the network make sure Enabled is selected next to Poll for configuration changes 4 To specify how often network checks occur specify the interval between checks...

Page 377: ...ration or Network in the Alerts panel to display the Verification tabs in the Content panel The upper section of the panel lists error descriptions in red and lists warning descriptions in orange Erro...

Page 378: ...it link 3WXM opens the configuration wizard for the configuration item For example if you create a new WX switch called dang wxr100 but you do not specify the system IP address of the switch the error...

Page 379: ...r that error or warning You can disable rules on a per instance basis or globally for all instances If you disable a rule for a specific instance 3WXM stops alerting you about that particular instance...

Page 380: ...rt configuration changes that cause error messages by default To change verification options 1 On the toolbar of the Verification panel click the Edit Verification Options icon The Verification Option...

Page 381: ...or Rule headers to sort alphabetically by rule class or by rule name You also can filter the display to show only the rules in a specific class To filter the rule list based on class a Click Filter B...

Page 382: ...you want to reenable Alternatively if you want to reenable all of the disabled instances click on the checkbox in the Enabled column 7 Go to step 10 8 Click on the checkbox in the Enabled column The...

Page 383: ...ate the administrator s certificate Certificate authority certificate to validate user and the EAP server certificates When 3WXM connects to 3WXM Services or a WX switch the administrative certificate...

Page 384: ...deal with the certificate required for secure communication The options you select in this dialog box apply to all HTTPS connections with the 3WXM Client For example the 3WXM Client also checks the va...

Page 385: ...e certificate is valid and who issued the certificate To review certificate details 1 Select Tools Certificates from the menu bar in the main 3WXM window 2 Select a certificate from the list and click...

Page 386: ...to select noncontiguous items 4 In the Task List panel select Distribute Certificates 5 Click Select PKCS12 File 6 Navigate to the PKCS 12 file and click Select PKCS12 File 7 In the PKCS12 Password b...

Page 387: ...y with a switch all new switches that match the WX model and version number of the policy automatically receive the parameter settings in the policy New switches are switches created using the WX Swit...

Page 388: ...g select the version from the WX Version Filter drop down list 5 Click Next 6 Select the feature areas you want to set in the policy When you apply the policy to a switch all parameter settings from a...

Page 389: ...which the policy change will apply 6 Only the settings you change from their default values are listed 7 After reviewing the changes click Close 8 Correct any changes if needed then go to Applying Pol...

Page 390: ...etection Settings on page 293 Viewing and Configuring Radio Profiles on page 272 RF Detection Detecting and Combatting Rogue Devices on page 469 AAA Features RADIUS Viewing and Configuring RADIUS Sett...

Page 391: ...have different roles in setting up the Fault Management system These user types include users service administrators provisioning users and monitoring users These users can perform the following task...

Page 392: ...Maintenance tab allows you to specify how many faults to store in the database and the number of days to keep uncleared faults In addition use this tab to specify the number of days to keep active Cr...

Page 393: ...t table that allows you to view all fault related information including the fault s functional area and severity a description of the fault the source of the fault WX its current state and tasks inclu...

Page 394: ...sterday Last Week or Last Month 3WXM can also sort faults based on Category Source Severity and Time Other standard commonly used filters are also available such as Current Hour Current Day and text s...

Page 395: ...Classifying and Organizing Alarms 395 Menu items include the following options All Severities Critical Major Minor Info All Categories System Performance Client Security...

Page 396: ...s allow you to see a variety of specific alarms for each device in the network Fault States Each fault has an associated state such as Active Acknowledged or Cleared Whenever the state of a fault is c...

Page 397: ...n select those multiple faults and then perform the same appropriate fault management operation simultaneously If you have cleared or acknowledged a fault and a new event occurs that correlates to the...

Page 398: ...icon or the graph icon as mentioned in Monitoring the Network on page 437 Alarm Summary Details The 3WXM displays Fault Management data in the Content panel when you click on the Alarms tool bar optio...

Page 399: ...e chart and table views Viewing Alarm Summary Information in Table Format 1 To view a summary of alarm information in table format click the tabular icon By default the table displays statistics of fa...

Page 400: ...list at the bottom left of the Alarm Summary screen select the Show Chart icon and then click Alarms by Category A pie chart displays a summary of alarms by category shown as follows 2 To view a summa...

Page 401: ...ific WX switch in the network plan depicted in the following screen 2 Click the table icon to view the top 5 sources of alarms in table format 3WXM will display a table similar to the one shown in ste...

Page 402: ...res chapter of the Wireless LAN Switch and Controller Configuration Guide CounterMeasureStart Indicates that MSS has begun countermeasures against a rogue AP CounterMeasureStop Indicates that MSS has...

Page 403: ...table view that displays shown as follows hypertext numbers link to filtered lists that contain only the alarms for that row and column that contain the hypertext 3 To view a table of all alarms in 3W...

Page 404: ...on of the 3WXM screen Performing this action produces the same effect as clicking the show table icon Storing Faults and Retrieving Fault History 3WXM stores fault information on the server database a...

Page 405: ...rm in the tabular view 4 After clicking on a row 3WXM will display more information for the specific alarm in the lower pane Click a row in the lower pane to view all of the details for the alarm or c...

Page 406: ...source severity or state Alarm History The Fault History report provides a list of all faults in the system that were active within a specified time period Users can sort the faults by source severity...

Page 407: ...ilding Floor 3 Select the desired Report Scope Instance in the list 4 If necessary browse to the desired output directory by clicking in the Output Directory box Navigate to the desired location and c...

Page 408: ...d on the right side of the Fault Management panel under Reports The following Alarm History Report dialog box will display 2 Select the desired Report Scope type from the list You can select one of th...

Page 409: ...necessary browse to the desired output directory in the Output Directory box Navigate to the desired location and click Select 9 Click Generate in the bottom right corner 10 After generating the repor...

Page 410: ...410 CHAPTER 14 MANAGING ALARMS...

Page 411: ...n 3WXM window Event messages are displayed on top The bottom section allows you to filter the display By default only the messages generated by the 3WXM Client are displayed Messages are displayed for...

Page 412: ...ab by using predefined filters in 3WXM or by specifying filter criteria based on content facility or severity You can save specified filter criteria as a stored filter Using Predefined Event Filters T...

Page 413: ...elect this option if you enter more than one string and want to see messages that contain all of the strings contains at least one of the strings The filter looks for messages that contain one or more...

Page 414: ...h and year Specify the starting time In the End box click the arrow to use the calendar to specify the day month and year Specify the end time 5 In the Show list select one of the following All To see...

Page 415: ...blem exists Notice Events that potentially can cause system problems have occurred These are logged for diagnostic purposes Info Informational messages only No problems exist Debug Output from debuggi...

Page 416: ...Stored Filters group box select the filter to be deleted 2 Click Delete The filter is deleted Exporting Filtered Data You can export the filtered data shown in Event Viewer to a comma delimited text c...

Page 417: ...Errors Network Usage Radio Traffic RF Summary Radio Details Network Usage Port Traffic Rogue Details Rogue Summary Site Survey Work Order Alarm Summary Alarm History Security Client OUI When you gener...

Page 418: ...n WX Configuration Client monitoring Client Summary Enable Client Session Collection Client Details Client Errors RF Network Usage Radio Traffic Enable Traffic RF Trending RF Summary Radio Details Net...

Page 419: ...iguration Client monitoring reports Client Summary Client Details Client Errors Watch List Client RF reports Network Usage RF Summary Radio Details Rogue reports Rogue Details Rogue Summary RF Plannin...

Page 420: ...To select or change the output directory for the report click Choose navigate to the new directory and click Select 6 To prevent 3WXM from replacing an existing report of the same type with this new r...

Page 421: ...prevent 3WXM from replacing an existing report of the same type with this new report click next to Overwrite Existing Files to deselect this option 6 Click Generate 7 When the report is generated cli...

Page 422: ...es to deselect this option 6 Click Generate 7 When the report is generated click the report link to view it Table 33 lists the sections in the report Table 33 WX Configuration Report Sections Section...

Page 423: ...WXM from replacing an existing report of the same type with this new report click next to Overwrite Existing Files to deselect this option APs Directly connected MAPs configured on the WX switch Distr...

Page 424: ...option 2 In the Reports list select Client Details 3 Click Add to add a report filter The filter configuration fields are activated 4 Click on the Select field and select one of the following from th...

Page 425: ...ics Generating a Client Errors Report The client errors report lists error statistics for current client sessions 1 Select the Reports tool bar option 2 In the Reports list select Client Errors 3 Sele...

Page 426: ...an RF Network Usage Report This network usage report shows radio traffic statistics 1 Select the Reports tool bar option 2 In the Reports list select Network Usage Radio Traffic 3 Select the scope typ...

Page 427: ...switches Generating an RF Summary Report The RF summary report lists summary RF statistics 1 Select the Reports tool bar option 2 In the Reports list select RF Summary 3 Select the scope type of the r...

Page 428: ...e radio details report lists details about an individual radio 1 Select the Reports tool bar option 2 In the Reports list select Radio Details 3 Select the radio for which you want the report The scop...

Page 429: ...lect the instance for which you want the report For example if the scope is Mobility Domain select the Mobility Domain 5 Select the time period for the report 1 Hour 24 Hours 7 Days 30 Days 6 To selec...

Page 430: ...r 8 To select or change the output directory for the report click Choose navigate to the new directory and click Select 9 To prevent 3WXM from replacing an existing report of the same type with this n...

Page 431: ...lt is Rogue 7 To select or change the output directory for the report click on the button next to output directory navigate to the new directory and click Select 8 To prevent 3WXM from replacing an ex...

Page 432: ...elect the language English German 5 To change the output directory for the report click on the button next to output directory navigate to the new directory and click Select 6 Click Generate 7 When th...

Page 433: ...can select the network plan a site a building or an individual floor 4 Select the options you want to use for the report RF Coverage RSSI Projections Display Disabled MAPs only available if RSSI Proj...

Page 434: ...4 Select the instance for which you want the report For example if the scope is Building select the building 5 To select or change the output directory for the report click Choose navigate to the new...

Page 435: ...erwrite Existing Files to deselect this option 8 Click Generate 9 When the report is generated click the report link to view it Generating a Security Alarm Report The security alarm report provides in...

Page 436: ...n the Reports list select Client OUI 3 To select or change the output directory for the report click Choose navigate to the new directory and click Select 4 To prevent 3WXM from replacing an existing...

Page 437: ...connected to the service Optionally the service also receives SNMP traps generated by the WX switches and shows information based on those traps The Monitor tab displays information retrieved from th...

Page 438: ...page 510 To enable SNMP traps on WX switches see Configuring SNMP on page 196 Network Types There are different types of networks and the requirements and expectations for network monitoring change de...

Page 439: ...some fault and status information but can control what is collected and how often 3WXM polls the network With 3WXM the administrator of a distributed network can monitor and diagnose a single site or...

Page 440: ...o examine data that 3WXM captures The monitor dashboard includes the following views Status Summary Alarm Summary Client Summary Traffic Summary Each view provides answers to specific questions for ex...

Page 441: ...it collects data from the previously selected view In other words 3WXM will load selected data in the background so that you can view corresponding data in another section Refresh 3WXM data by clickin...

Page 442: ...ing status modes for each of the previous alarms Information Minor Major Critical Client Summary The Client Summary view is located in the lower left corner of the Content panel and shows different gr...

Page 443: ...and property details of equipment such as WX switches MAP access points and MAP radios For example an WX can show a list of APs or radios and the information for APs and radios can include the status...

Page 444: ...inks to open the Status Monitor panel You can also click the Details button to switch the view from Status Summary to the Status Monitor panel The following screen shows the Status Monitor panel after...

Page 445: ...Unlocked Operational State Up enabled Down disabled Usage State Active Idle Busy Availability Status Failed Degraded Powered Off Offline Not installed Alarm Status Critical Major Minor Combined the st...

Page 446: ...view is the graphical representation of alarms Click the tabular icon or the graph icon to switch between the chart and table views The following screen shows the default Alarm Summary view Notice th...

Page 447: ...ew to the Alarm Monitor panel or select Alarms from the navigation bar All three selections transfer the view from the Monitor dashboard to the Alarms dashboard In the Alarms dashboard you can navigat...

Page 448: ...ORK By clicking the Details button the display will show the Alarms dashboard and your results will be unfiltered 3WXM will display all of the alarms in tabular format The results will be similar to t...

Page 449: ...Using the Alarm Summary View 449 Click on a row to view the details of a specific alarm in the tabular view shown in the following screen...

Page 450: ...ll display a window similar to the one shown in the following screen The Alarms dashboard contains a filter row which has four drop down lists and an entry field The drop down lists and entry field al...

Page 451: ...lan name s These options allow you to see a variety of specific alarms for each device in the network Additional Alarm Options Additional alarm options are available from the Alarms dashboard These op...

Page 452: ...List Create Third Party AP The options are either active or inactive for each alarm Click on an active option to see more information Inactive options will be gray The following screen provides a sam...

Page 453: ...s by Radio Clients by SSID Clients by access type Clients by time Top clients Click the tabular icon or the graph icon to switch between the chart and table views The following screens provide samples...

Page 454: ...the graphical or tabular representation to the Client Monitor dashboard In the Client Monitor dashboard you can examine current and trending data for client sessions and launch various actions on a se...

Page 455: ...in the Task panel on the right side of the screen shown below and include the following View Client Session Session Details Top Clients Clients by WX Clients by SSID Clients by access type Clients by...

Page 456: ...ta might not be available depending on the scope and the server setup options but you can retrieve and view details of current sessions Click on an active option to see more information Inactive optio...

Page 457: ...Using the Client Summary View 457 The following screen provides a sample of the Top Clients option...

Page 458: ...onitor one or more clients 1 From the Client Monitor choose Manage Find Client in the Task panel to display the Find Client search dialog shown below 2 Enter the desired search criteria select the sea...

Page 459: ...age 3WXM retrieves information about the client s location 2 If three or more MAPs have not detected the client within 15 seconds of each other the Listeners Selection dialog box appears displaying a...

Page 460: ...st of MAPs that detect the client click the Refresh Listeners button 5 To change the MAPs used for calculating the client s location click the Listeners tab and Select or deselect MAPs from the list t...

Page 461: ...clients within the selected scope Performing an RF Link Test Running an RF Link Test can provide a quick simple summary and breakdown of basic RF statistics for troubleshooting wireless performance pr...

Page 462: ...ata Using the Traffic Summary View The Traffic Summary view displays network usage and RF summary data 3WXM shows both traffic and RF statistics for Radio AP Floor Building and Site options but only t...

Page 463: ...Radio 24 Hour Radio 7 Days Radio 30 Days Radio 1 Hour Traffic 24 Hour Traffic 7 Days Traffic 30 Days Traffic The following screens provide samples of the same information Traffic 1 Hour The first scr...

Page 464: ...ETWORK Traffic Details Click the Details button to switch the view from the Traffic Monitor dashboard to the Traffic Details view The following screen is a sample of the data available for Traffic 1 H...

Page 465: ...side of the screen and include the following Trends Bytes Packets In Out Packets Details Reports Traffic Other options may be available depending on the item selected in the Organizer panel Options ar...

Page 466: ...of operational statistics such as RSSI re transmits SNR and signal level to determine problem areas To find an AP on the floor 1 Click on the Monitor option in the main 3WXM tool bar 2 Expand the Sit...

Page 467: ...wing Performance Data 3WXM opens a separate window for the statistics panel and you can open multiple statistics panels You can keep the windows separate or group multiple statistic windows together b...

Page 468: ...History Security Client OUI RF Planning reports Site Survey Order Work Order For each report use the wizard to configure the report scope type report scope instance and time period settings Some repor...

Page 469: ...RF spectrum for other devices transmitting in the same spectrum The RF scans discover third party transmitters in addition to other 3Com radios MSS considers the third party transmitters to be device...

Page 470: ...notifications RogueDetect Indicates that MSS has detected a rogue AP RFDetectRougeDisappear Indicates that MSS is no longer detecting a previously detected rogue AP RFDetectInterferingRogueAP Indicate...

Page 471: ...switch from the member list on the seed CounterMeasureStop Indicates that MSS has stopped countermeasures against a rogue access point RFDetetSpoofedMacAP Indicates that MSS has detected a wireless p...

Page 472: ...list from accessing the network through a WX switch If the client is placed on the black list dynamically by MSS due to an association reassociation or disassociation flood MSS generates a log message...

Page 473: ...n SSID in Permitted Ignore List Device is not a threat SSID List Yes OUI in Permitted Vendor List No Source MAC in Attack List No Generate an alarm Classify device as a rogue No Yes Issue countermeasu...

Page 474: ...the rogue appear in the Events Log For example if a rogue is detected during three polling intervals separate entries for each polling interval appear in the Events Log You can adjust the selection c...

Page 475: ...essarily malicious but they do steal bandwidth from your infrastructure users Ad hoc clients are further categorized into rogues and interfering devices The word Rogue or Interfering appears in parent...

Page 476: ...By The device that generated the alarm Alarm Object The device where the rogue alarm was detected Transmitter MAC address The MAC address used by the rogue to transmit data SSID SSID of the rogue Numb...

Page 477: ...he rogue or noted its absence This column has data only if the radio that detected the rogue or its disappearance is modeled in a floor plan Floor Floor on which the rogue was detected or disappeared...

Page 478: ...cal location of a rogue 3WXM displays the floor plan for the floor where the rogue is believed to be located and displays the areas where the rogue is probably located This option displays the likely...

Page 479: ...and select or deselect MAPs from the list then click the Locate button To display the location of a client associated with the rogue 1 Select the rogue client in the alarm list 2 In the Task Panel und...

Page 480: ...ND COMBATTING ROGUE DEVICES 3 To change the MAPs used for calculating the location of a client click the Listeners tab and select or deselect MAPs from the list then click the Locate button Rogue Clie...

Page 481: ...of one or multiple switches To add a device to the ignore list 1 In the list of rogues on the Alarm screen select the devices you want to add to the ignore list 2 Click Add to Ignore List in the Task...

Page 482: ...tack the devices on the list Converting a Rogue into a Third Party AP If a device in the alarm list belongs to a third party AP in your network you can convert the rogue into a third party AP When you...

Page 483: ...the Organizer panel The third party APs are listed in the Content panel To remove a third party AP 1 Select the Configuration option in the main 3WXM tool bar and click on Third Party APs in the Organ...

Page 484: ...Select Devices dialog is displayed 4 If the switch es on which you are configuring the black list are in a Mobility Domain select the Mobility Domain Otherwise select None 5 Click next to select all o...

Page 485: ...timizing your network plan improves the accuracy of the model and provides more precise results when you visualize wireless coverage locate users and rogue devices and so on You also can use optimizat...

Page 486: ...Choose to navigate to the csv file that contains the RF measurement data 5 In the Map Name field specify the map name The map name must match the name specified in the site survey work order and must...

Page 487: ...WXM the description is auto generated and the obstacle type is Other You can edit these values by selecting the obstacle clicking the Edit properties icon to open the Modify RF Obstacle wizard and mod...

Page 488: ...ant to display the coverage Baseline Association Rate Coverage is shown based on the MAP radio baseline association rate The baseline association rate is the typical data rate the radio is expected to...

Page 489: ...ng Display RF Coverage Coverage for the selected scope s is displayed This example shows 802 11a coverage by transmit data rate for the coverage area CoverA To hide coverage again right click on the s...

Page 490: ...Ps that Are Already Installed to the Network Plan If you installed a new MAP in the network and you want to add it to the network plan do the following 1 Select the Verification option in the main 3WX...

Page 491: ...nstalled The preferences you set are valid only for that user on that system This chapter describes how to change 3WXM Client preferences To change monitoring service preferences see Changing 3WXM Ser...

Page 492: ...ng to connect again specify the timeout 1 to 30 seconds in the Connect Timeout box The default is 5 seconds 4 To set the number of times 0 to 5 3WXM tries to reconnect to the WX after the original att...

Page 493: ...e of the following 16x16 Change all icons to 16x16 pixels This is the default setting 20x20 Change all icons to 20x20 pixels 24x24 Change all icons to 24x24 pixels 6 Within Show Wizard Index select on...

Page 494: ...e making changes Changing Certificate Management Options By default 3WXM does not accept self signed certificates from WX switches or from the monitoring service You can change this option in the Pref...

Page 495: ...m which is a common client transmit power If you want to choose the color for an RF technology or obstacle see Changing Colors Changing Colors You can change the color schemes for showing the followin...

Page 496: ...alette on page 496 For more information about using HSB see Defining a Color by Changing HSB Properties on page 497 For more information about using RGB see Defining a Color by Changing RGB Properties...

Page 497: ...percentages with 0 percent indicating black and 100 percent indicating white To define a color by changing HSB 1 To specify a color by changing HSB click HSB in the Choose Color dialog box 2 To change...

Page 498: ...Properties You can define a color by changing red blue and green RGB color properties 1 To specify a color by changing RGB click RGB in the Choose Color dialog box 2 Use the Red Green and Blue sliders...

Page 499: ...t one of the following event levels Critical A critical condition has occurred that requires immediate resolution Warning An event that might require attention has occurred Info Informational messages...

Page 500: ...500 CHAPTER A CHANGING 3WXM PREFERENCES...

Page 501: ...bes how to change monitoring service preferences To change 3WXM Client preferences see Changing 3WXM Preferences on page 491 To configure access control for the 3WXM Client see Restricting Access to 3...

Page 502: ...Windows systems 3WXM Services are started automatically when you complete installation and starts automatically whenever you restart your system Linux systems You can start and stop the service manual...

Page 503: ...from within 3WXM or from Windows Services 1 Display the Services window Here is an example of the Services window in Windows XP The window might look differently on your system 2 Scroll down and sele...

Page 504: ...suse ln s opt 3wxm bin 3wxm services 3wxm services suse insserv 3wxm services Linux Example Red Hat WS 3 The recommended way to add services to a Red Hat WS 3 system is with the chkconfig command Ente...

Page 505: ...nfigured on the Service Settings tab See Changing Service Settings on page 508 5 To configure 3WXM Client to remember the username and password for 3WXM Services access select Remember user name and p...

Page 506: ...Changing Service Settings on page 508 By default the 3WXM Client does not accept self signed certificates even from 3WXM Services Instead when 3WXM Services or another device presents a self signed c...

Page 507: ...g that the 3WXM Client is Receiving Service Data If you are using a network plan that already contains equipment use the following procedure to verify that the 3WXM Client is receiving data for the eq...

Page 508: ...on the new port number The HTTPS port number is automatically updated for the 3WXM Client you are using and your connection is automatically restored Other clients will need to use the Monitor Servic...

Page 509: ...econds 3WXM Services waits for a TCP connection with a WX switch to reach the Connect stage type or select the value in the Connect Timeout box You can specify from 1 to 30 seconds The default is 15 s...

Page 510: ...cepts a certificate from a WX switch only if the public key information for that certificate is in the key store file 8 Click Save to save the changes or Cancel to cancel the changes Changing Monitori...

Page 511: ...ngs for monitoring of the log buffers on WX switches a Select Enable Log Monitoring This option is enabled by default b To change the number of minutes between queries of the WX switches log buffers c...

Page 512: ...olling interval box You can specify 5 10 or 15 minutes The default is 5 minutes c To change the RF Threshold Settings enter new settings for the following statistics default settings are indicated in...

Page 513: ...er window select Plan Management then select Backup Restore The backups that already exist for the network plan are listed Backups that are automatically created by 3WXM do not have names and their ty...

Page 514: ...rvices Backup Restore If 3WXM Services is already open in the browser window select Plan Management then select Backup Restore 2 To change how often 3WXM automatically backs up network plans select Ho...

Page 515: ...e the other instance of 3WXM Services is installed 3WXM Services must be running on the host to which you want to transfer the backup 5 If the port on which the other instance of 3WXM Services listens...

Page 516: ...516 CHAPTER B CHANGING 3WXM SERVICES PREFERENCES...

Page 517: ...ake advantage of warranty and other service benefits you must first register your product at http eSupport 3com com 3Com eSupport services are based on accounts that are created or that you are author...

Page 518: ...access numbers later in this appendix Access Software Downloads You are entitled to bug fix maintenance releases for the version of software that you initially purchased with your 3Com product To obt...

Page 519: ...serial number A list of system hardware and software including revision level Diagnostic error messages Details about recent configuration changes if applicable To send a product directly to 3Com for...

Page 520: ...ation number RMA by FAX using this number 61 2 9937 5048 or send an email at this email address ap_rma_request 3com com Europe Middle East and Africa Telephone Technical Support and Repair From anywhe...

Page 521: ...ezuela Virgin Islands AT T 800 998 2112 57 1 657 0888 AT T 800 998 2112 1 800 998 2112 571 657 0888 01 800 849CARE AT T 800 998 2112 AT T 800 998 2112 54 11 4894 1888 AT T 800 998 2112 1 800 998 2112...

Page 522: ...522 APPENDIX C OBTAINING SUPPORT FOR YOUR 3COM PRODUCTS...

Page 523: ...rms classifying and organizing 393 ARP Address Resolution Protocol configuring 214 assigning MAP channels 151 attributes reassigning with the location policy 339 authorization attributes 305 local dat...

Page 524: ...ence 222 uplink fast convergence 222 fault management classifying alarms 393 managing faults 397 organizing alarms 393 setting up a system 391 Fault Management system 391 faults managing 397 reporting...

Page 525: ...olors 507 monitor accounts creating 56 monitoring accessing monitored data 439 alarm options 451 alarm summary view 446 client summary view 453 creating an viewing reports 467 finding a client 458 fin...

Page 526: ...ches 371 registering your product 517 518 519 repair authorization number by FAX Asia and Pacific Rim 520 repair services 519 repair support for Latin America 521 repair support for US and Canada 521...

Page 527: ...ific Rim 520 telephone technical support Europe Middle East and Africa 520 Telnet management port 66 Telnet configuring 195 time zone configuring 181 traces caution about levels 207 running 207 tracin...

Page 528: ...528 INDEX WX WX security enabling 67 X X 509 certificate types 383...

Reviews:

No comments

Related manuals for OfficeConnect WX4400

D-Link DGS-1024D - Switch Quick Installation Manual preview
DGS-1024D - Switch
Brand: D-Link Pages: 16
D-Link DGS-1016D - Switch User Manual preview
DGS-1016D - Switch
Brand: D-Link Pages: 44
D-Link DES-6000 Series Firmware Update Manual preview
DES-6000 Series
Brand: D-Link Pages: 3
D-Link DES-5024 - Switch Application Notes preview
DES-5024 - Switch
Brand: D-Link Pages: 2
D-Link DES-3828 - xStack Switch - Stackable Datasheet preview
DES-3828 - xStack Switch - Stackable
Brand: D-Link Pages: 3
D-Link DES-3550 User Manual preview
DES-3550
Brand: D-Link Pages: 192
D-Link DES-3326 Configuration Manual preview
DES-3326
Brand: D-Link Pages: 9
D-Link DES-3226L User Manual preview
DES-3226L
Brand: D-Link Pages: 110
D-Link DES-1026G User Manual preview
DES-1026G
Brand: D-Link Pages: 10
D-Link DES-1008D Manual preview
DES-1008D
Brand: D-Link Pages: 17
D-Link DES-1005P Quick Install Manual preview
DES-1005P
Brand: D-Link Pages: 4
D-Link DGS-1210-28P Manual preview
DGS-1210-28P
Brand: D-Link Pages: 9
D-Link DES-1024D Brochure preview
DES-1024D
Brand: D-Link Pages: 4
D-Link DGS-105 - Switch Datasheet preview
DGS-105 - Switch
Brand: D-Link Pages: 4
D-Link DES-1024D Quick Install Manual preview
DES-1024D
Brand: D-Link Pages: 2
D-Link des-1016a Quick Install Manual preview
des-1016a
Brand: D-Link Pages: 2
eao 04 Series Assembly Instructions preview
04 Series
Brand: eao Pages: 2
eao 04 Series Assembly Instruction preview
04 Series
Brand: eao Pages: 2

Brands by name

Popular brands

Load more brands