3Com Corporation. 3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
LAN supporting up to 250 simultaneous users. ECURITY 3Com offers one of the most robust suite of standards-based security on the market today. To protect sensitive data broadcast over the wireless LAN, 3Com supports Wireless Equivalent Privacy (WEP) RC4 40/ 64-bit, 128-bit and 152-bit shared-key encryption.
• Implementing a complete wireless LAN solution, including bridges, gateways, access points and clients; Wi-Fi certification guarantees compatibility among vendors. • Providing access to hot spots in public spaces, such as coffee shops or university cafeterias. ETWORK ONFIGURATION AND The wireless solution supports a stand-alone wireless network configuration as well as an integrated configuration with 10/100 Mbps Ethernet LANs.
NFRASTRUCTURE IRELESS The access point can also provide access to a wired LAN for wireless workstations. An integrated wired/wireless LAN is called an infrastructure configuration. A Basic Service Set (BSS) consists of a group of wireless PC users, and an access point that is directly connected to the wired LAN.
ERMINOLOGY Access Point—An internetworking device that seamlessly connects wired and wireless networks. Ad Hoc—An ad hoc wireless LAN is a group of computers, each with LAN adapters, connected as an independent wireless LAN. Backbone—The core infrastructure of a network. The portion of the network that transports information from one central location to another central location where it is unloaded onto a local system.
EAP—Extensible Authentication Protocol, which provides a generalized framework for several different authentication methods. ESS—Extended Service Set. More than one BSS is configured to become an ESS. LAN mobile users can roam between different BSSs in an ESS (ESS-ID, SSID). Ethernet—A popular local area data communications network, which accepts transmission from computers and terminals.
The cable must be long enough to reach the power supply or the Power-over-Ethernet LAN port. If you use the 3Com AC adapter, you need an additional Ethernet cable to connect the access point to the LAN. • To access and use the Web configuration management system, you need a computer that is running Internet Explorer 5.0 or newer and one of the following...
The access point complies with the IEEE 802.3af Power-over-Ethernet standard. It receives power over standard category 5 straight (8-wire) Ethernet cable. Installation requires the use of either the 3Com AC adapter or IEEE 802.3af compliant power supply equipment (output power rated 48 V dc @ 350 mA maximum). Such equipment must be safety certified according to UL, CSA, IEC or other applicable national or international safety requirements for the country of use.
If your location includes these kinds of obstructions, you may need to add additional access points to improve coverage. Configuring a wireless LAN can be as easy as placing a 3Com Wireless Access Point in a central area and making the necessary connections to the AP and the clients.
For optimal performance, ensure the access point operates in temperature ranges between 0° C to 40° C (32° F to 104° F). When used with external antennas, the access point operating temperature range must be 15° C to 40° C (59° F to 104° F). NOTE: Regulatory restrictions dictate that when this device is operational, the minimal body-to-antenna distance is 1 Meter (3 Feet).
ONNECTING THE The Access Point 7250 is supplied with standard detachable antennas. These should be attached before the access point is installed. If using alternate antennas, see “Selecting and Connecting a Different Antenna Model” on page 20. Carefully unpack the standard detachable antennas. CAUTION: Do not handle the antenna tips, especially after they are connected to the access point, as this could lead to electrostatic discharge (ESD), which could damage the equipment.
There are three ways to supply power to the access point: • Use the AC adapter included with the Access Point 7250 • Use a 3Com Integrated Power-over-Ethernet power supply. In this case, you need to supply a second Ethernet cable to connect to the wired LAN.
SING PTIONAL CAUTION: To avoid damaging network equipment, make sure that the cables are connected from access point to power supply to LAN as shown above and described below. The Power-Over-Ethernet Injector can be located at any point between the access point and the LAN access port, wherever a convenient power outlet exists.
If your LAN equipment complies with the IEEE 802.3af power-over-Ethernet standard, you can connect the access point directly to a LAN port. For example, the illustration above right shows a connection through a 3Com Ethernet Power Supply to a 3Com SuperStack HECKING THE When power is connected, the access point LEDs light.
OUNTING ON A CAUTION: The mounting plate is designed for wall mount installation only. To avoid equipment damage and possible injury, do not use the mounting plate for a ceiling installation. The access point comes equipped with all the necessary hardware for mounting on a wall, including a mounting plate.
Alternatively, you can simply attach the Ethernet cable to the side of the unit, allowing it to trail along the wall. • If you have routed the Ethernet cable through the center opening, secure the cable on the hook located on the mounting plate as shown in the illustration below.
For maximum efficiency, use the shortest antenna cable possible. Antenna cables induce signal loss, which will limit the radiated power output and range of the access point. Of the options available, we recommend the 3Com 6-foot Antenna Cable (3CWE480).
Antennas can be connected to either side of the access point after the standard detachable antennas have been removed, as shown below. Position the antenna so that there are minimal obstacles between it and any client with which it will communicate. While maintaining a direct line of sight between the antenna and a client is not strictly necessary, such an arrangement helps to ensure a strong signal.
OWER ETTINGS ON THE NTENNAS 6 ft (3CWE480) 20ft (3CWE481) 50 ft (3CWE482) European Community 6 ft (3CWE480) 20ft (3CWE481) 50 ft (3CWE482) CCESS OINT FOR 2.5dBi 4dBi (3CWE492) (3CWE490, 3CWE497) 100% 100% 100% 100% 100% 100% 2.5dBi 4dBi (3CWE492) (3CWE490, 3CWE497) 100%...
IP devices, including 3Com wireless access points. It is not required for access point management. • 3Com Site Survey Tool. This utility assists in selecting the best location for your access point before installing the device permanently. Use the Site Survey Tool to determine if the intended mounting locations will provide adequate coverage with good signal strength and quality.
Windows operating system and Web browser. SING THE After the 3Com Wireless Device Manager is installed, ensure that the device to be configured is either wired to the network, associating with the wireless network, or connected directly to the computer, and connected to power. If more than one device using the factory default name is connected, make a note of the MAC address of the device you want to select so that you can identify it in the device manager.
Next. The 3Com Web Configuration Management System main screen appears in your Web browser. The following table describes the functions of the buttons in the 3Com Wireless Infrastructure Device Manager window. Button...
Button Help SING THE You can only configure devices that are on the same subnet as your computer. To configure a device on a different subnet, you must first assign it an IP address on the same subnet as your computer. After you launch the configuration, you can change settings as usual.
ASIC ETUP For a basic configuration, use the Setup Wizard as described below. At any time, you can click Home to return to the Home page of the configuration interface. If you want to configure more advanced features, click Advanced Setup in the Home page.
DVANCED ETUP The Advanced Setup pages allow you to configure features that are not available in the basic setup. On the Home page, click Advanced Setup to open the Advanced Setup menu. After making selections and entering data on each page, click Apply to save the changes.
Your internet service provider should provide the IP address of one or more domain name servers. Enter those addresses in Primary DNS Address and Secondary DNS Address fields. ECURE This option controls whether Secure Socket Layer (SSL) technology is used to encrypt information between the computer and the device during a configuration session.
See below for recommended steps in configuring RADIUS Authentication. In the RADIUS Authentication section, enter the required parameters for a primary and secondary RADIUS authentication server. In the RADIUS Accounting section, click the Enable radio button, then enter required parameters for a primary and secondary RADIUS accounting server. When you are finished configuring items on this page, click Apply.
Authentication, clients attempting to authenticate to the access point MUST pass these settings before any subsequent 802.1x authentication is attempted and verified. If no MAC address filtering is desired, leave this set to the default setting of Disable. Configure the options as described below. When you are finished, click Apply. •...
Field Default Session Key Refresh Rate (minutes) 802.1x Reauthentication Refresh Rate (seconds) • Access Point 802.1x Authentication to Network—802.1x can also be enabled on the ethernet port of the switch that the access point’s ethernet cable is plugged into. Having 802.1x enabled on the switch prevents any device that is not able to successfully authenticate from being able to use the ethernet port.
Define the default filtering setting as Deny or Allow. Enter the MAC address of a client for the access control. You can find the MAC address of a network card as follows: Windows 95/98/ME—Click Start/Run. Type winipcfg and press Enter. The MAC address is in the Adapter Address section.
Tunnel_Private_group_ID (81) = VLAN ID specified in Hexadecimal format. VLAN Switch ports must be tagged ports that match the VLAN ID on the Access Point. Associated client VLAN IDs will appear in the Syslog file in ASCII Decimal format. When VLAN filtering is enabled, the access point queries the server for the VLAN IDs of associating clients and saves the VLAN IDs.
client-to-client communications between clients associated with different AP’s on the local subnet. For instance an airport may have several AP’s to service several "hot spots" within the airport. However the client-to-client blocking feature of the AP will only block communications to other clients associated with the same AP. It will not block client-to-client of other AP communications.
first be enabled and the Network Management Station must submit a valid community string for authentication. Select SNMP Enable and enter data into the fields as described below. When you are finished, click Apply. • Location—Specifies the access point location. •...
you save access point settings in an external file or copy them from an external file to the access point. You can save an entire configuration for use as a backup to a single access point, or you can save a basic configuration, which can then be used in common by several access points in a network, providing an easy way to reconfigure all access points in a network.
• Alert: action must be taken immediately • Critical: critical conditions • Error: error conditions • Warning: warning conditions • Notice: normal but significant condition • Informational: informational messages • Debug: debug-level messages To set up a server for event logs: Select System Log Setup Enable, select a logging severity level from the pull-down list, enable the Logging Host and Logging Console, and enter the IP address of the server in the space provided.
ADIO NTERFACE The access point radio interface detects the number of radios installed and their type (802.11g Radio or 802.11b Radio). The Radio Settings and Security options for the radio interface are described in the following sections. ADIO ETTINGS When you are finished configuring items on this page, click Apply. •...
• Fragment Length (256-2346) —The Fragment Length can be set between 256 and 2,346. If the packet size is smaller than the preset fragment size, the packet will not be segmented. Fragmentation of the PDUs (Package Data Unit) can increase the reliability of transmissions because it increases the probability of a successful transmission due to smaller frame size.
• Shared Key—If Shared Key is enabled, Encryption must also be enabled as described in “Configuring Encryption” on page 42. • 128-Bit Dynamic Security Link—This option can only be used with other 3Com Wireless LAN devices. The user name and password set on the access point must match those set on the clients.
ONFIGURING NCRYPTION There are two types of data encryption available: • WPA—Wi-Fi Protected Access. • WEP—Wired Equivalent Privacy. The access point and the wireless devices must have the same encryption settings to communicate. You can choose to allow only clients using WPA encryption, or you can allow both WPA and WEP clients.
Select the Key Type. Hexadecimal (0~9, A~F; for example, D7 0A 9C 7F E5) Alphanumeric (0~9, A~F; for example 01234) 3Com Passphrase(a string, described below) Enter the keys in their fields. 64-bit—Each key contains 10 hexadecimal digits or 5 alphanumeric characters.
3Com Passphrase—This encryption string is for use only with other 3Com Wireless LAN devices. It is a case-sensitive string between 6 and 30 characters long. To enter the string, click 3Com Passphrase. Then type any combination of letters and numbers in the Key 1 field and click Apply.
d Cipher Mode is set to WEP. e WEP Configuration has at least one valid WEP key. f Click on Apply. 11 The Access Point is now configured for RADIUS Authentication. OW TO SETUP THE ACCESS POINT FOR ESSION KEYS Using the Wireless Infrastructure Device Manger access the configuration screen for the AP8x00/AP82x0.
f WPA Key Management set to WPA Authentication over 802.1x. g Click on Apply. 11 The Access Point is now configured for WPA Authentication over 802.1x. OW TO SETUP THE ACCESS POINT FOR (PSK) K HARED Using the Wireless Infrastructure Device Manger access the configuration screen for the AP8x00/AP82x0.
WPA C ONFIGURATION FOR The following table shows how to configure the access point to support the various authentication and encryption options available for Windows XP Wireless Zero Configuration. The following notes apply to configuring the access point for WPA under Windows •...
Windows XP Wireless Zero Configuration Authentication Encryption WPA-PSK TKIP Access Points 7250/8250/8500/8750 Authentication Encryption Not available on 8200 Open System Enable Open System Enable Other WPA Configuration: Required Multicast Cipher Mode: TKIP WPA Key Management: WPA-PSK Select Key Type and enter Pre-Shared Key WPA Configuration: Required...
ROUBLESHOOTING If you have difficulty with the 3Com Wireless LAN access point, first check the following items in the configuration: • Radio Settings page: Ensure that the SSID is the same on clients and the access point. • Security page: Ensure that Encryption is the same on clients and the access point.
3Com Extended Warranty and Professional Services is available at http://www.3com.com/ HERE Contact your authorized 3Com reseller or 3Com for additional product and support information. You will find support tools posted on the 3Com web site at http://www.3com.com/ ROUBLESHOOT 3Com Knowledgebase helps you troubleshoot 3Com products. This query-based interactive tool is located at of technical solutions written by 3Com support engineers.
When you contact 3Com for assistance, please have the following information ready: To send a product directly to 3Com for repair, you must first obtain a return authorization number (RMA). Products sent to 3Com, without authorization numbers clearly marked on the outside of the package, will be returned to the sender unopened, at the sender’s expense.
Pakistan +61 2 9937 5083 You can also obtain support in this region using the following email: email@example.com Or request a repair authorization number (RMA) by fax using this number: + 65 543 6348 Europe, Middle East, and Africa From anywhere in these regions, call: +44 (0)1442 435529 You can also obtain support in this region using the following URL: http://emea.3com.com/support/email.html...
You can obtain support in this region using the following URLs: Latin America. Spanish speakers, enter the URL: http://lat.3com.com/lat/support/form.html Portuguese speakers, enter the URL: http://lat.3com.com/br/support/form.html English speakers in Latin America should send e-mail to: firstname.lastname@example.org Or call using the following numbers: Antigua...
1 meter. This product does not contain any user serviceable components. Any unauthorized product changes or modifications will invalidate 3Com’s warranty and all applicable regulatory certifications and approvals. This product must be installed by a professional technician/installer.
Avis de Conformité à la Réglementation d’Industrie Canada Cet appareil numérique de la classe B est conform à la norme NMB-003 du Canada. European Community—CE Notice (WL-455, 802.11g Radio Module) Marking by the symbol: indicates compliance with the essential requirements of Directive 73/23/EC and the essential requirements of articles 3.1(b), 3.2 and 3.3 of Directive 1999/5/EC.
Countries: France Italy Austria, Denmark, Finland, Germany, Greece, Iceland, Ireland, Liechtenstein, Luxembourg, The Netherlands, Norway, Portugal, Spain, Sweden, Switzerland, The United Kingdom. Safety Compliance Notice This device has been tested and certified according to the following safety standards and is intended for use only in Information Technology Equipment which has been tested and certified to these or other equivalent standards: •...