Related Manuals for 3Com AP9152
Summary of Contents for 3Com AP9152
- Page 1 3Com AP9152 and AP9552 Access Points Quick Configuration Guide Manual Version: 6W101 www.3com.com 3C Number： 3CRWE955275(Fat Mode) 3CRWE915275(Fat Mode) 3Com Corporation 350 Campus Drive, Marlborough, MA, USA 01752 3064...
- Page 2 3Com Corporation. 3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
- Page 3 About This Manual Organization 3Com AP9152 and AP9552 Access Points Quick Configuration Guide is organized as follows: Chapter Contents 1 Logging In to the Web Interface Describes how to logging in to the web interface. 2 Setting IP Address Describes how to setting IP address.
- Page 4 Operation Manual. For a complete description of all command lines and the command index, see Command Manual. Obtaining Documentation You can access the most up-to-date 3Com product documentation on the World Wide Web at this URL: http://www.3com.com.
-
Page 5: Table Of Contents
Table of Contents 1 Logging In to the Web Interface···············································································································1-1 Logging In to the Web Interface··············································································································1-1 2 Setting IP Address·····································································································································2-1 Setting IP Address ··································································································································2-1 3 WLAN Access Configuration····················································································································3-1 Wireless Service Configuration Example································································································3-1 Access Service Based VLAN Configuration Example ············································································3-3 PSK Authentication Configuration Example ···························································································3-5 Local MAC Authentication Configuration Example ·················································································3-7 Remote MAC Authentication Configuration Example ···········································································3-10 Remote 802.1X Authentication Configuration Example········································································3-18... -
Page 6: Logging In To The Web Interface
The displayed web pages may vary depending on your device model. If a function or parameter is grayed out, it is either not supported or cannot be modified. The Console default setting is 9600, 8, N, 1. Logging In to the Web Interface ging In to the Web Interface To enter the web configuration p... - Page 7 Figure 1-2 Login page of the Web interfac The PC where you configure the device is not necessarily the Web-based network management terminal. A Web-based network management terminal is a PC (or another terminal) used to log in to the Web interface and is required to be reachable to the device. After logging in to the Web interface, you can create a new user and configure the IP address of the interface connecting the user and the device.
-
Page 8: Setting Ip Address
Setting IP A ddress Setting IP Address reating a VLAN Select Network > VLAN in the navigatio n tree. The system automatically selects the VLAN tab and enters the page as shown in Figure 2-1. Figure 2-1 VLAN configuration page Click to enter the pa ge for creating a VLAN, as shown in... - Page 9 Figure 2-3 Interface management pag Figure 2-4 Create an interface Choose Vlan-interface 2. Choose Static Address. Set the primary IP address 192.168.1.100. Set the mask 24. Click Apply.
- Page 10 Configuration verification Figure 2-5 View the IP address of VLAN Configuration guidelines When satisfied with the configuration Save Configuration to File to ensure it is not lost when the Access Point restarts.
-
Page 11: Wlan Access Configuration
WLAN Access Configuration Wireless Service Configuration Example etwork requirem As shown in Figure 3-1, it is required that the client access the wireless network by passing plain text authentication. Figure 3-1 WLAN service configuration IP network FAT AP L2 switch Client onfiguration procedure Select a correct country/region code... - Page 12 Click Apply. Bind a radio to the wireless service an d enable the wireless service Select Wireless Service > Access Service from the navigation tree to enter the page for enabling wireless service, as shown in Figure 3-4: Figure 3-4 Enable the wireless service Click the Bind link in the Wireless Service column, select the target radio, and click Bind.
-
Page 13: Access Service Based Vlan Configuration Example
The IP addresses of clients obtained by the AP can be displayed only when ARP snooping is enabled. By default, ARP snooping is enabled. The client can be pinged successfully on the AP. Confi guration guidelines Note the following when configuring a wireless service: Select a correct country/region code. - Page 14 # After the wireless servi ce is created, the system is automatically navigated to the wireless service page, where you can perform the VLAN settings (before this operation, select Network > VLAN create VLAN 2 first). Figure 3-8 Set the VLANs Type 2 in the VLAN (Untagged) text box.
-
Page 15: Psk Authentication Configuration Example
Click Apply. # Bind the corresponding radio to wireless services office and research respectively, enable the wireless service s office and research, and enable the radios. Verify the configuration Select Summary > Client from the navigation tree, and enter the page shown in Figure 3-10 to view the online clients. - Page 16 Figure 3-12 Create a wireless servic Set the service name to psk. Select the wireless service type crypto. Click Apply. Configure the wireless service After you create a wireless service, you will enter the wireless service configuration page. You need to perform security setup when configuring PSK authentication, as shown in Figure 3-13:...
-
Page 17: Local Mac Authentication Configuration Example
Figure 3-14 Bind the radio to and enable the wireless servic Click the Bind link in the Wireless Service column, select the target radio, and click Bind. Select the psk check box. Click Enable. Enable 802.11n (2.4GHz) radio (By default, 802.11n (2.4GHz) radio is enabled. Therefore, this step is optional.) Select Radio >... - Page 18 Figure 3-16 Network diagram for local MAC authentication configuratio IP network FAT AP L2 switch Client Configuration procedure Select a correct country/region code Select Advanced > Country/Region Code from the navigation tree to enter the page for setting a country/region code, as shown in Figure 3-2.
- Page 19 Figure 3-18 Security setu Select the Open-System from the Authentication Type drop-down list. Select the Port Set check box, and select mac-authentication from the Port Mode drop-down list. Select MAC Authentication check box, and select system from the Domain drop-down list (you can select Authentication >...
-
Page 20: Remote Mac Authentication Configuration Example
Configure a MAC authentication list Select Wireless Service > Access Service from the navigation tree, and click MAC Authentication List to enter the page for configuring a MAC authentication list, as shown in Figure 3-20: Figure 3-20 Add a MAC authentication list Add a local user in the MAC Address box. - Page 21 Figure 3-21 Remote MAC authenticatio Configuration procedure Configure the IP address of the fat AP In the Network > VLAN page, create a VLAN on the fat AP, and configure the VLAN interface in the Device > Interface Management page. Configure a RADIUS scheme # Configure the RADIUS authentication server.
- Page 22 Figure 3-23 Configure the RADIUS accounting serve Select Accounting Server as the server type. Enter 10.18.1.88 as the IP address of the primary accounting server. Enter 1813 as the UDP port of the primary accounting server. Select active as the primary server status. Click Apply.
- Page 23 Select the Authentication Server Shared Key check box and enter expert in the text box. Enter expert in the Confirm Authentication Shared Key text box. Select the Accounting Server Shared Key check box and enter expert in the text box. Enter expert in the Confirm Accounting Shared Key text box.
- Page 24 Figure 3-26 Configure the AAA authorization method for the ISP domai Perform the following configuration, as shown in Figure 3-26. Select the domain name system. Select the Default AuthZ checkbox and then select RADIUS as the authorization mode. Select system from the Name drop-down list to use it as the authorization scheme. Click Apply.
- Page 25 # Create a wireless service. Select Wireless Service > Access Service from the navigation tree, and click New to enter the page for creating a wireless service, as shown in Figure 3-28: Figure 3-28 Create a wireless service Set the wireless service name as mac-auth. Select the wireless service type clear.
- Page 26 Figure 3-30 Bind the radio to the wireless service and enable the wireless servic Click the Bind link in the Wireless Service column, select the target radio, and click Bind. Select the mac-auth check box. Click Enable. Enable 802.11g radio (By default, the 802.11g radio is enabled. Therefore, this step is optional. ) Select Radio >...
- Page 27 Figure 3-31 Add access devic # Add service. Select the Service tab, and then select Access Service > Service Configuration from the navigation tree to enter the add service page. Then click Add on the page to enter the following configuration page. Set the service name as mac, and keep the default values for other parameters.
-
Page 28: Remote 802.1X Authentication Configuration Example
Figure 3-33 Add accoun Configuration verification During authentication, the client does not need to input the username or password. After the client passes MAC authentication, the client can associate with the AP and access the WLAN. You can view the online clients by selecting Summary > Client. Configuration guidelines When satisfied with the configuration Save Configuration to File... - Page 29 In the Network > VLAN page, create a VLAN on the fat AP, and in the Device > Interface Management page, configure the VLAN interface. Configure a RADIUS scheme # Configure the RADIUS authentication server. From the navigation tree, select Authentication > RADIUS. The RADIUS server configuration page appears.
- Page 30 Select Accounting Server as the server type. Enter 10.18.1.88 as the IP address of the primary accounting server. Enter 1813 as the UDP port of the primary accounting server. Select active as the primary server status. Click Apply. # Configure the parameters for communication between the AP and the RADIUS servers. Select the RADIUS Setup tab and configure the parameters, as shown in Figure 3-37.
- Page 31 Figure 3-38 Configure the AAA authentication method for the ISP domai Perform the following configuration, as shown in Figure 3-38. Select the ISP domain name system. Select the Default AuthN checkbox and then select RADIUS as the authentication mode. Select system from the Name drop-down list to use it as the authentication scheme. Click Apply.
- Page 32 Figure 3-40 Configure the AAA accounting method for the ISP domai Perform the following configuration, as shown in Figure 3-40. Select the domain name system. Select the Accounting Optional checkbox and then select Enable. Select the Default Accounting checkbox and then select RADIUS as the accounting mode. Select system from the Name drop-down list to use it as the accounting scheme.
- Page 33 Figure 3-42 Security setu Select Open-System from the Authentication Type drop-down list. Select the Cipher Suite check box, select CCMP from the Cipher Suite drop-down list, and select WPA2 from the Security IE drop-down list. Select the Port Set check box, and select userlogin-secure-ext from the Port Mode drop-down list.
- Page 34 Select Radio > Radio from the navigation tree to enter the Radio page. Make sure that 802.11g is enabled. Configure the RADIUS server (iMC) The following takes the iMC (iMC PLAT 3.20-R2602 and iMC UAM 3.60-E6102) as an example to illustrate the basic configuration of the RADIUS server.
- Page 35 Figure 3-45 Add servic # Add account. Select the User tab, and then select User > All Access Users from the navigation tree to enter the user page. Then, click Add on the page to enter the page shown in Figure 3-46.
-
Page 36: 802.11N Configuration Example
You can view the online clients by selecting Summary > Client. Configuration guidelines When satisfied with the configuration Save Configuration to File to ensure it is not lost when the Access Point restarts. 802.11n Configuration Example Network requirements As shown in Figure 3-47, configure the AP supporting 802.11n to provide wireless access for 802.11n clients. - Page 37 Figure 3-49 Bind the radio to the wireless service and enable the wireless servic Click the Bind link in the Wireless Service column, select the target radio, and click Bind. Select the 11nservice check box. Click Enable. Enable 802.11n (2.4GHZ) radio (By default, 802.11n (2.4GHZ) radio is enabled. Therefore, this step is optional.
- Page 38 Figure 3-51 View online clients Configuration guidelines When configuring 802.11n, note that: To modify the 802.11n radio setup and 802.11n rates, shut down the radio first. Select Radio > Radio from the navigation tree, select the AP to be configured, and click the corresponding icon to enter the radio configuration page, where you can modify the 802.11n-related parameters, including Bandwidth Mode, A-MSDU, A-MPDU, Short GI, and...
-
Page 39: Wds Configuration
WDS Configuration WDS Configuration Example Network requirements As shown in Figure 4-1: AP 1 and AP 2 are connected to different LAN se gments. The WDS link between AP 1 and AP 2 is formed in 80 2.11n (2.4GHZ) radio mode. Figure 4-1 Network diagram for WDS configuration onfiguration procedure Select a correct country/region code... - Page 40 Figure 4-3 WDS setup pag Select the Pass Phrase check box, and input 12345678 in the Preshared Key input box. Do not set the neighbor MAC address, indicating that the AP can establish a WDS link with any other AP. Click Apply.
- Page 41 # Enable 802.11n (2.4GHz) radio (By default, 802.11n (2.4GHZ) radio is enabled. Therefore, this step is optional. ) Select Radio > Radio from the navigation tree to enter the Radio page. Make sure that 802.11n (2.4GHz) is enabled. Enable WDS Select Wireless Service >...
-
Page 42: Wds Point-To-Multipoint Configuration Example
WDS Point-to-Multipoint Configuration Example Network requirements As shown in 0, it is required that AP 1 establish a WDS link with AP 2, AP 3, and AP 4 respectively. The WDS configuration is the same as the normal WLAN WDS configuration. Note the following when configuring WDS: Configure a neighbor MAC address for each radio interface (otherwise, WDS links may be established between AP 2, AP 3 and AP 4). -
Page 43: Repeater Mode Configuration
Repeater Mode Configuratio eater Mode Conf iguration Example etwork Requirements As shown in Figure 5-1: AP1 connects to the wired network. The AP acting as a repeater needs to set up a WDS link with AP 1. At the same time, the repeater needs to provide wireless access service for clients. To atisfy the requirements above: Use the 802.11n (2.4GHz) radio to set up a WDS link between AP 1 and the repeater. - Page 44 Figure 5-2 WDS setup pag Select the 802.11n radio mode in the list and click the corresponding icon in the Operation column to enter the page shown in Figure 5-3. Figure 5-3 WDS setup page Select the Pass Phrase option and input 12345678 in the Preshared Key text box. Click Apply.
- Page 45 Figure 5-4 Configure the same channe Select 11 in the Channel drop-down list. # Enable 802.11n (2.4GHz) radio. (By default, 802.11n (2.4GHZ) radio is enabled. Therefore, this step is optional. ) Select Radio > Radio Setup from the navigation tree to enter the Radio Setup page. Make sure that 802.11n (2.4GHz) is enabled.
- Page 46 For how to configure the access service on the repeater, refer to Wireless Service Configuration Example. You can strictly follow the steps in Wireless Service Configuration Example to configure the access service on the repeater. Figure 5-6 Configure the access service When configuring access service on the repeater, make sure that the radio mode of the repeater is the same as that of WDS.
- Page 47 Figure 5-8 The page displaying radio informatio Configuration guidelines When satisfied with the configuration Save Configuration to File to ensure it is not lost when the Access Point restarts.
-
Page 48: Workgroup Bridge Mode Configuration
Workgroup Bridge Mode Configurat Workgroup Bridge Mode Configuration Example Network requirements As shown in Figure 6-1, an AP working as a workgroup bridge accesses the wireless network as a client. The Ethernet interface of the workgroup bridge connects to multiple hosts or printers in the wired network, and thus the wired network is c onnected to the wireless network through the workgroup bridge. - Page 49 Figure 6-2 Enable the client mod Select the check box corresponding to 802.11n (2.4GHz) and click Enable. With the client mode enabled, you can check the existing wireless services in the wireless service list. Figure 6-3 Check the wireless service list Connect the wireless service Click the Connect icon of the wireless service psk in the wireless service list, and a SET CODE dialog box shown in...
- Page 50 Configuration verification On the AP shown in Figure 6-1, select Summary > Client from the navigation tree to enter the page shown in Figure 6-5, where you can check that the workgroup bridge is online. Figure 6-5 Check that the workgroup bridge is online You can see that the client with MAC address 0014-6c8a-43ff and the workgroup bridge with MAC address 000f-e2333-5510 have been successfully associated with the AP.
-
Page 51: Save Configuration Over Reboot
Save Configuratio n over reboot Save Configuration to File To avoid losing the applied configuration changes when th e Access Point reboots: Select Device> Configuration from the navigation tree, and then click the Save tab to enter the save configuration confirmation page, as shown in Figure 7-1 Click the Save Current Settings button to save the current co nfiguration to the configuration file. - Page 52 The configuration from the last saved current settings will be installed from the configuration file (.cfg file or .xml file) at the next startup. Any settings applied but not saved to the configuration file will be lost when the Access Point next restarts. Saving the configuration takes a period of time.