3Com WL-455 User Manual

3Com WL-455 User Manual

Wireless lan access point
Table of Contents

Advertisement

User Guide

Wireless LAN Access Point 7250

3CRWE725075
(Model WL-455)
http://www.3com.com/
http://www.3com.com/support/en_US/productreg/frontpg.html/
Published December, 2003

Advertisement

Table of Contents
loading

Summary of Contents for 3Com WL-455

  • Page 1: Wireless Lan Access Point

    User Guide Wireless LAN Access Point 7250 3CRWE725075 (Model WL-455) http://www.3com.com/ http://www.3com.com/support/en_US/productreg/frontpg.html/ Published December, 2003...
  • Page 2 3Com Corporation. 3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
  • Page 3: Table Of Contents

    ONFIGURATION Using the 3Com Wireless Device Manager - - - - - - - - - - - - - - - - - - - - - - - - - - - - Launching a Wireless Device Configuration - - - - - - - - - - - - - - - - - - - - - - - - - -...
  • Page 4 Configuration Login - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Setting the Country Code - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Basic Setup - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Advanced Setup - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
  • Page 5 ECHNICAL UPPORT Obtaining Support for your Product - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Register Your Product to Gain Service Benefits- - - - - - - - - - - - - - - - - - - - - - - - - Purchase Value-Added Services - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Where To Go For Help - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Troubleshoot Online - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
  • Page 6: Product Features

    LAN supporting up to 250 simultaneous users. ECURITY 3Com offers one of the most robust suite of standards-based security on the market today. To protect sensitive data broadcast over the wireless LAN, 3Com supports Wireless Equivalent Privacy (WEP) RC4 40/ 64-bit, 128-bit and 152-bit shared-key encryption.
  • Page 7: Performance And Reliability

    ANAGEABILITY 3Com offers a wide range of standards-based management support, from SNMP to 3Com Network Supervisor and HP OpenView for seamless integration with your wired network.
  • Page 8: Network Configuration And Planning

    • Implementing a complete wireless LAN solution, including bridges, gateways, access points and clients; Wi-Fi certification guarantees compatibility among vendors. • Providing access to hot spots in public spaces, such as coffee shops or university cafeterias. ETWORK ONFIGURATION AND The wireless solution supports a stand-alone wireless network configuration as well as an integrated configuration with 10/100 Mbps Ethernet LANs.
  • Page 9: Infrastructure Wireless Lan For Roaming Wireless Pcs

    NFRASTRUCTURE IRELESS The access point can also provide access to a wired LAN for wireless workstations. An integrated wired/wireless LAN is called an infrastructure configuration. A Basic Service Set (BSS) consists of a group of wireless PC users, and an access point that is directly connected to the wired LAN.
  • Page 10: Terminology

    ERMINOLOGY Access Point—An internetworking device that seamlessly connects wired and wireless networks. Ad Hoc—An ad hoc wireless LAN is a group of computers, each with LAN adapters, connected as an independent wireless LAN. Backbone—The core infrastructure of a network. The portion of the network that transports information from one central location to another central location where it is unloaded onto a local system.
  • Page 11 EAP—Extensible Authentication Protocol, which provides a generalized framework for several different authentication methods. ESS—Extended Service Set. More than one BSS is configured to become an ESS. LAN mobile users can roam between different BSSs in an ESS (ESS-ID, SSID). Ethernet—A popular local area data communications network, which accepts transmission from computers and terminals.
  • Page 12: Installing The Access Point

    The cable must be long enough to reach the power supply or the Power-over-Ethernet LAN port. If you use the 3Com AC adapter, you need an additional Ethernet cable to connect the access point to the LAN. • To access and use the Web configuration management system, you need a computer that is running Internet Explorer 5.0 or newer and one of the following...
  • Page 13: Power Requirements

    The access point complies with the IEEE 802.3af Power-over-Ethernet standard. It receives power over standard category 5 straight (8-wire) Ethernet cable. Installation requires the use of either the 3Com AC adapter or IEEE 802.3af compliant power supply equipment (output power rated 48 V dc @ 350 mA maximum). Such equipment must be safety certified according to UL, CSA, IEC or other applicable national or international safety requirements for the country of use.
  • Page 14: Deciding Where To Place Equipment And Performinga Site Survey

    If your location includes these kinds of obstructions, you may need to add additional access points to improve coverage. Configuring a wireless LAN can be as easy as placing a 3Com Wireless Access Point in a central area and making the necessary connections to the AP and the clients.
  • Page 15: Before You Begin

    For optimal performance, ensure the access point operates in temperature ranges between 0° C to 40° C (32° F to 104° F). When used with external antennas, the access point operating temperature range must be 15° C to 40° C (59° F to 104° F). NOTE: Regulatory restrictions dictate that when this device is operational, the minimal body-to-antenna distance is 1 Meter (3 Feet).
  • Page 16: Connecting Power

    ONNECTING THE The Access Point 7250 is supplied with standard detachable antennas. These should be attached before the access point is installed. If using alternate antennas, see “Selecting and Connecting a Different Antenna Model” on page 20. Carefully unpack the standard detachable antennas. CAUTION: Do not handle the antenna tips, especially after they are connected to the access point, as this could lead to electrostatic discharge (ESD), which could damage the equipment.
  • Page 17: Using The Included Ac Adapter

    There are three ways to supply power to the access point: • Use the AC adapter included with the Access Point 7250 • Use a 3Com Integrated Power-over-Ethernet power supply. In this case, you need to supply a second Ethernet cable to connect to the wired LAN.
  • Page 18: Using An Optional Power-Over-Ethernet Injector

    SING PTIONAL CAUTION: To avoid damaging network equipment, make sure that the cables are connected from access point to power supply to LAN as shown above and described below. The Power-Over-Ethernet Injector can be located at any point between the access point and the LAN access port, wherever a convenient power outlet exists.
  • Page 19: Checking The Leds

    If your LAN equipment complies with the IEEE 802.3af power-over-Ethernet standard, you can connect the access point directly to a LAN port. For example, the illustration above right shows a connection through a 3Com Ethernet Power Supply to a 3Com SuperStack HECKING THE When power is connected, the access point LEDs light.
  • Page 20: Mounting On A Wall

    OUNTING ON A CAUTION: The mounting plate is designed for wall mount installation only. To avoid equipment damage and possible injury, do not use the mounting plate for a ceiling installation. The access point comes equipped with all the necessary hardware for mounting on a wall, including a mounting plate.
  • Page 21: Flat Surface Installation

    Alternatively, you can simply attach the Ethernet cable to the side of the unit, allowing it to trail along the wall. • If you have routed the Ethernet cable through the center opening, secure the cable on the hook located on the mounting plate as shown in the illustration below.
  • Page 22: Selecting And Connecting A Different Antenna Model

    For maximum efficiency, use the shortest antenna cable possible. Antenna cables induce signal loss, which will limit the radiated power output and range of the access point. Of the options available, we recommend the 3Com 6-foot Antenna Cable (3CWE480).
  • Page 23 Antennas can be connected to either side of the access point after the standard detachable antennas have been removed, as shown below. Position the antenna so that there are minimal obstacles between it and any client with which it will communicate. While maintaining a direct line of sight between the antenna and a client is not strictly necessary, such an arrangement helps to ensure a strong signal.
  • Page 24: Power Settings On The Access Point For External Antennas

    OWER ETTINGS ON THE NTENNAS 6 ft (3CWE480) 20ft (3CWE481) 50 ft (3CWE482) European Community 6 ft (3CWE480) 20ft (3CWE481) 50 ft (3CWE482) CCESS OINT FOR 2.5dBi 4dBi (3CWE492) (3CWE490, 3CWE497) 100% 100% 100% 100% 100% 100% 2.5dBi 4dBi (3CWE492) (3CWE490, 3CWE497) 100%...
  • Page 25: Installing Software Utilities

    IP devices, including 3Com wireless access points. It is not required for access point management. • 3Com Site Survey Tool. This utility assists in selecting the best location for your access point before installing the device permanently. Use the Site Survey Tool to determine if the intended mounting locations will provide adequate coverage with good signal strength and quality.
  • Page 26: System Configuration

    Windows operating system and Web browser. SING THE After the 3Com Wireless Device Manager is installed, ensure that the device to be configured is either wired to the network, associating with the wireless network, or connected directly to the computer, and connected to power. If more than one device using the factory default name is connected, make a note of the MAC address of the device you want to select so that you can identify it in the device manager.
  • Page 27 Next. The 3Com Web Configuration Management System main screen appears in your Web browser. The following table describes the functions of the buttons in the 3Com Wireless Infrastructure Device Manager window. Button...
  • Page 28: Using The Pre-Ip Configuration Wizard

    Button Help SING THE You can only configure devices that are on the same subnet as your computer. To configure a device on a different subnet, you must first assign it an IP address on the same subnet as your computer. After you launch the configuration, you can change settings as usual.
  • Page 29: Basic Setup

    ASIC ETUP For a basic configuration, use the Setup Wizard as described below. At any time, you can click Home to return to the Home page of the configuration interface. If you want to configure more advanced features, click Advanced Setup in the Home page.
  • Page 30: Advanced Setup

    DVANCED ETUP The Advanced Setup pages allow you to configure features that are not available in the basic setup. On the Home page, click Advanced Setup to open the Advanced Setup menu. After making selections and entering data on each page, click Apply to save the changes.
  • Page 31: Secure Web Server Connection

    Your internet service provider should provide the IP address of one or more domain name servers. Enter those addresses in Primary DNS Address and Secondary DNS Address fields. ECURE This option controls whether Secure Socket Layer (SSL) technology is used to encrypt information between the computer and the device during a configuration session.
  • Page 32: Authentication

    See below for recommended steps in configuring RADIUS Authentication. In the RADIUS Authentication section, enter the required parameters for a primary and secondary RADIUS authentication server. In the RADIUS Accounting section, click the Enable radio button, then enter required parameters for a primary and secondary RADIUS accounting server. When you are finished configuring items on this page, click Apply.
  • Page 33 Authentication, clients attempting to authenticate to the access point MUST pass these settings before any subsequent 802.1x authentication is attempted and verified. If no MAC address filtering is desired, leave this set to the default setting of Disable. Configure the options as described below. When you are finished, click Apply. •...
  • Page 34 Field Default Session Key Refresh Rate (minutes) 802.1x Reauthentication Refresh Rate (seconds) • Access Point 802.1x Authentication to Network—802.1x can also be enabled on the ethernet port of the switch that the access point’s ethernet cable is plugged into. Having 802.1x enabled on the switch prevents any device that is not able to successfully authenticate from being able to use the ethernet port.
  • Page 35: Filter Control

    Define the default filtering setting as Deny or Allow. Enter the MAC address of a client for the access control. You can find the MAC address of a network card as follows: Windows 95/98/ME—Click Start/Run. Type winipcfg and press Enter. The MAC address is in the Adapter Address section.
  • Page 36: Security Filters

    Tunnel_Private_group_ID (81) = VLAN ID specified in Hexadecimal format. VLAN Switch ports must be tagged ports that match the VLAN ID on the Access Point. Associated client VLAN IDs will appear in the Syslog file in ASCII Decimal format. When VLAN filtering is enabled, the access point queries the server for the VLAN IDs of associating clients and saves the VLAN IDs.
  • Page 37: Filtering By Ethernet Protocol Type

    client-to-client communications between clients associated with different AP’s on the local subnet. For instance an airport may have several AP’s to service several "hot spots" within the airport. However the client-to-client blocking feature of the AP will only block communications to other clients associated with the same AP. It will not block client-to-client of other AP communications.
  • Page 38: Administration

    first be enabled and the Network Management Station must submit a valid community string for authentication. Select SNMP Enable and enter data into the fields as described below. When you are finished, click Apply. • Location—Specifies the access point location. •...
  • Page 39: System Log

    you save access point settings in an external file or copy them from an external file to the access point. You can save an entire configuration for use as a backup to a single access point, or you can save a basic configuration, which can then be used in common by several access points in a network, providing an easy way to reconfigure all access points in a network.
  • Page 40: Status

    • Alert: action must be taken immediately • Critical: critical conditions • Error: error conditions • Warning: warning conditions • Notice: normal but significant condition • Informational: informational messages • Debug: debug-level messages To set up a server for event logs: Select System Log Setup Enable, select a logging severity level from the pull-down list, enable the Logging Host and Logging Console, and enter the IP address of the server in the space provided.
  • Page 41: Radio Interface

    ADIO NTERFACE The access point radio interface detects the number of radios installed and their type (802.11g Radio or 802.11b Radio). The Radio Settings and Security options for the radio interface are described in the following sections. ADIO ETTINGS When you are finished configuring items on this page, click Apply. •...
  • Page 42 • Fragment Length (256-2346) —The Fragment Length can be set between 256 and 2,346. If the packet size is smaller than the preset fragment size, the packet will not be segmented. Fragmentation of the PDUs (Package Data Unit) can increase the reliability of transmissions because it increases the probability of a successful transmission due to smaller frame size.
  • Page 43: Security

    • Shared Key—If Shared Key is enabled, Encryption must also be enabled as described in “Configuring Encryption” on page 42. • 128-Bit Dynamic Security Link—This option can only be used with other 3Com Wireless LAN devices. The user name and password set on the access point must match those set on the clients.
  • Page 44: Configuring Encryption

    ONFIGURING NCRYPTION There are two types of data encryption available: • WPA—Wi-Fi Protected Access. • WEP—Wired Equivalent Privacy. The access point and the wireless devices must have the same encryption settings to communicate. You can choose to allow only clients using WPA encryption, or you can allow both WPA and WEP clients.
  • Page 45: Wep Configuration

    Select the Key Type. Hexadecimal (0~9, A~F; for example, D7 0A 9C 7F E5) Alphanumeric (0~9, A~F; for example 01234) 3Com Passphrase(a string, described below) Enter the keys in their fields. 64-bit—Each key contains 10 hexadecimal digits or 5 alphanumeric characters.
  • Page 46: How To Setup The Access Point For Radius Authentication

    3Com Passphrase—This encryption string is for use only with other 3Com Wireless LAN devices. It is a case-sensitive string between 6 and 30 characters long. To enter the string, click 3Com Passphrase. Then type any combination of letters and numbers in the Key 1 field and click Apply.
  • Page 47: How To Setup The Access Point For Wpa With 802.1X Session Keys

    d Cipher Mode is set to WEP. e WEP Configuration has at least one valid WEP key. f Click on Apply. 11 The Access Point is now configured for RADIUS Authentication. OW TO SETUP THE ACCESS POINT FOR ESSION KEYS Using the Wireless Infrastructure Device Manger access the configuration screen for the AP8x00/AP82x0.
  • Page 48: How To Setup The Access Point For Wpa With Pre-Shared (Psk) Key

    f WPA Key Management set to WPA Authentication over 802.1x. g Click on Apply. 11 The Access Point is now configured for WPA Authentication over 802.1x. OW TO SETUP THE ACCESS POINT FOR (PSK) K HARED Using the Wireless Infrastructure Device Manger access the configuration screen for the AP8x00/AP82x0.
  • Page 49: Wpa Configuration For Windows Xp

    WPA C ONFIGURATION FOR The following table shows how to configure the access point to support the various authentication and encryption options available for Windows XP Wireless Zero Configuration. The following notes apply to configuring the access point for WPA under Windows •...
  • Page 50 Windows XP Wireless Zero Configuration Authentication Encryption WPA-PSK TKIP Access Points 7250/8250/8500/8750 Authentication Encryption Not available on 8200 Open System Enable Open System Enable Other WPA Configuration: Required Multicast Cipher Mode: TKIP WPA Key Management: WPA-PSK Select Key Type and enter Pre-Shared Key WPA Configuration: Required...
  • Page 51: Troubleshooting

    ROUBLESHOOTING If you have difficulty with the 3Com Wireless LAN access point, first check the following items in the configuration: • Radio Settings page: Ensure that the SSID is the same on clients and the access point. • Security page: Ensure that Encryption is the same on clients and the access point.
  • Page 52 After you specify an IP address In the 3Com Device Manager window click the Refresh for an access point, the 3Com button to refresh the Wireless Network Tree. Then click the...
  • Page 53 1 Close your browser. 2 Return to the 3Com Device Manager Wireless Network 3 Select the access point and click Configure to start a new The access point cannot be...
  • Page 54: Obtaining Support For Your Product

    3Com Extended Warranty and Professional Services is available at http://www.3com.com/ HERE Contact your authorized 3Com reseller or 3Com for additional product and support information. You will find support tools posted on the 3Com web site at http://www.3com.com/ ROUBLESHOOT 3Com Knowledgebase helps you troubleshoot 3Com products. This query-based interactive tool is located at of technical solutions written by 3Com support engineers.
  • Page 55: Access Software Downloads

    When you contact 3Com for assistance, please have the following information ready: To send a product directly to 3Com for repair, you must first obtain a return authorization number (RMA). Products sent to 3Com, without authorization numbers clearly marked on the outside of the package, will be returned to the sender unopened, at the sender’s expense.
  • Page 56 Pakistan +61 2 9937 5083 You can also obtain support in this region using the following email: apr_technical_support@3com.com Or request a repair authorization number (RMA) by fax using this number: + 65 543 6348 Europe, Middle East, and Africa From anywhere in these regions, call: +44 (0)1442 435529 You can also obtain support in this region using the following URL: http://emea.3com.com/support/email.html...
  • Page 57 You can obtain support in this region using the following URLs: Latin America. Spanish speakers, enter the URL: http://lat.3com.com/lat/support/form.html Portuguese speakers, enter the URL: http://lat.3com.com/br/support/form.html English speakers in Latin America should send e-mail to: lat_support_anc@3com.com Or call using the following numbers: Antigua...
  • Page 58: Regulatory Compliance Information

    1 meter. This product does not contain any user serviceable components. Any unauthorized product changes or modifications will invalidate 3Com’s warranty and all applicable regulatory certifications and approvals. This product must be installed by a professional technician/installer.
  • Page 59 Avis de Conformité à la Réglementation d’Industrie Canada Cet appareil numérique de la classe B est conform à la norme NMB-003 du Canada. European Community—CE Notice (WL-455, 802.11g Radio Module) Marking by the symbol: indicates compliance with the essential requirements of Directive 73/23/EC and the essential requirements of articles 3.1(b), 3.2 and 3.3 of Directive 1999/5/EC.
  • Page 60 Countries: France Italy Austria, Denmark, Finland, Germany, Greece, Iceland, Ireland, Liechtenstein, Luxembourg, The Netherlands, Norway, Portugal, Spain, Sweden, Switzerland, The United Kingdom. Safety Compliance Notice This device has been tested and certified according to the following safety standards and is intended for use only in Information Technology Equipment which has been tested and certified to these or other equivalent standards: •...
  • Page 61 3Com 3CDaemon Server Tool - - - - - - - - - - - - - - - - - - - - - - - - - - -22 3Com Network Supervisor - - - - - - - - - - - - - - - - - - - - - - - - - - - - -22...
  • Page 62 beacon interval - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -39 bridge resetting - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -29 broadcast key refresh rate - - - - - - - - - - - - - - - - - - - - - - - - - - - - -31 cable - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -10 change password - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -36...
  • Page 63 Dynamic Security Link 128-Bit - - - - - - - - - - - - - - - - - - - - - - - - - - -40 encryption 3Com Passphrase - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -43...
  • Page 64 refreshing after changing - - - - - - - - - - - - - - - - - - - - - - - - - - - -25 troubleshooting - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -50 launching the device manager - - - - - - - - - - - - - - - - - - - - - - - - - - -24 LEDs - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -17 local bridge filter - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -34...
  • Page 65 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -11 supply, 3Com integrated - - - - - - - - - - - - - - - - - - - - - - - - - - 14, 16...
  • Page 66 shared key - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -40 shared key encryption - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -43 Simple Network Management Protocol (SNMP) - - - - - - - - - - - - - - - - - - -35 software utilities, installing - - - - - - - - - - - - - - - - - - - - - - - - - - - 22, 23 SSID - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -39...

Table of Contents