User Guide Wireless LAN Access Points 8250/8750/8850 3CRWE825075A 3CRWE875075A 3CRWE885075A (Models WL-450, WL-463, WL-464) http://www.3com.com/ http://www.3com.com/support/en_US/productreg/frontpg Part No. DUA82507-5AAA01 Published April 2005...
Page 2
LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.
Contents Introduction Product Features Security Performance and Reliability Dual G Radio Support Virtual Access Point (VAP) Support WDS Bridging and Spanning Tree Protocol (STP) Support Manageability Wireless Network Standards 802.11g 802.11a Standard Network Configuration and Planning Ad Hoc Wireless LAN Infrastructure Wireless LAN Infrastructure Wireless LAN for Roaming Wireless PCs Advanced Network Configuration and Planning...
Page 4
Selecting and Connecting a Different Antenna Model Power Settings on the Access Point for External Antennas Installing Software Utilities System Configuration Using the 3Com Wireless Device Manager Launching a Wireless Device Configuration Using the Pre-IP Configuration Wizard Configuration Login Setting the Country Code...
Administration WDS/STP Settings Configuration Guidelines Radio Bridge Roles Bridge Address Entry Scanning for WDS Links Configuring Spanning Tree Protocol Settings System Log Status Radio Interface Radio Settings Virtual Access Point (VAP) Configuration Enabling Virtual Access Point (VAP) Changing Radio Settings Security Selecting a Virtual Access Point (VAP) Configuring Authentication...
Mini PCI upgrade kit. The 8250 also has the ability to have two radios installed in it, providing local access point service on one radio and a full bandwidth WDS bridge on the other radio.
Access Point 8850—Creates a high-performance enterprise-class access point in an 802.11g and an 802.11a WDS bridge. ECURITY 3Com offers one of the most robust suite of standards-based security on the market today. To protect sensitive data broadcast over the wireless LAN, 3Com supports the Advanced Encryption Standard (AES).
ERFORMANCE AND ELIABILITY 3Com wireless access point performance features ensure reliable and seamless connections for users wherever they roam: Automatic channel selection automatically finds the least loaded channel for interference-free communication. Auto network connect and dynamic rate shifting keep users connected through a wide variety of conditions by changing to the optimum connection speed as they move through the network.
WDS Bridging and Spanning Tree Protocol (STP) Support A Distribution System (DS) is a network (typically a wired network) that interconnects separate access points into a single LAN. With WDS, the interconnection no longer needs to be physically wired. WDS uses the wireless medium to interconnect separate access points, thereby eliminating the cost and inconvenience that may hinder wire installations.
For added security, the AP 8250 supports AES encryption over the WDS link. Additionally, Spanning Tree Protocol (STP) support prevents loops from being formed on the network. For more information on these items, see the Wireless LAN Access Points User Guide.
Implementing a complete wireless LAN solution, including bridges, gateways, access points and clients; Wi-Fi certification guarantees compatibility among vendors Providing access to hot spots in public spaces such as coffee shops or university cafeterias 802.11 802.11a operates at the 5 GHz band and supports data rates at up to 54 Mbps. For those organizations demanding even higher speeds, a “turbo mode”...
TANDARD ETWORK ONFIGURATION AND LANNING The wireless solution supports a stand-alone wireless network configuration as well as an integrated configuration with 10/100 Mbps Ethernet LANs. The wireless network cards, adapters, and access point can be configured as: Ad hoc for departmental or SOHO LAN Infrastructure for wireless LAN Infrastructure wireless LAN for roaming wireless PCs IRELESS...
A wireless infrastructure can be used for access to a central database, or for connection between mobile workers, as shown in the following figure. Wired LAN Extension to Wireless Adapters File Server Desktop PC Switch Notebook with Wireless PC Card Adapter Access Point PC with Wireless PCI Adapter...
DVANCED ETWORK ONFIGURATION AND LANNING Virtual Access Point (VAP) and WDS Bridging capabilities allow the access point to be integrated into many new network configurations. Some common configurations are explained briefly in this section: Public/private access point service Remote building wireless access with the AP8250 and 802.11a Bridging Kit Remote building wireless access with the AP8250 and 802.11g Upgrade Kit UBLIC RIVATE...
Page 16
Child Bridge 1 Root Bridge Child Bridge 2 The 802.11g radio at the remote location can be configured with any security configuration desired, including open security or full WPA security with 802.1X client authentication and AES encryption. Required Products To use this configuration, you need the following products: 802.11a/g Bridging Access Point (3CRWE885075A) Root-Bridge Ultra Low Loss Cable (3CWE580 or 3CWE581 or 3CWE582)
AP8250 EMOTE UILDING IRELESS CCESS WITH THE 802.11 PGRADE This installation scenario describes one layer of bridging with one Root-Bridge and one Child Bridge. This scenario is common, for example, in schools or universities where students or professionals in remote buildings need secure, high-bandwidth 802.11b or 802.11g access to the network.
Page 18
Required Products To use this configuration, you need the following products: AP8250 or AP7250 (3CRWE825075A or 3CRWE725075A) Root Bridge Ultra Low Loss Cable (3CWE580 or 3CWE581 or 3CWE582) 8 dBi Omnidirectional Antenna (3CWE491) AP8250 (3CRWE825075A) Each Remote Location 802.11g Upgrade Kit (3CRWEGMOD75A) (Child Bridge) Ultra Low Loss Cable (3CWE580 or 3CWE581 or 3CWE582) 8 dBi Panel Antenna (3CWE498) or 13 dBi Panel Antenna...
ERMINOLOGY Access Point—An internetworking device that seamlessly connects wired and wireless networks. Ad Hoc—An ad hoc wireless LAN is a group of computers, each with LAN adapters, connected as an independent wireless LAN. Backbone—The core infrastructure of a network. The portion of the network that transports information from one central location to another central location where it is unloaded onto a local system.
Page 20
VAP—Virtual Access Point. An access point radio capable of operating as two separate access points. VLAN—Virtual Local Area Network. A LAN consisting of groups of hosts that are on physically different segments but that communicate as though they were on the same segment.
Standard category 5 straight (8-wire) Ethernet cable. The cable must be long enough to reach the power supply or the power-over-Ethernet LAN port. If you use the 3Com power supply, you need an additional Ethernet cable to connect the access point to the LAN.
See “Using the Power Supply” on page 21 and “Using a Power-Over-Ethernet LAN Port” on page 21. Note for use of the 3Com power supply (part number 61-0107-000) in Norway: This product is also designed for use on an IT power system with phase-to-phase voltage of 230 V.
All references to power supply in this document refer to equipment meeting these requirements. CAUTION: The 3Com power supply input relies on a 16A rated building fuse or circuit protector for short circuit protection of the line to neutral conductors.
Configuring a wireless LAN can be as easy as placing a 3Com Wireless Access Point in a central area and making the necessary connections to the AP and the clients. However, installing multiple Access Points may require more planning. Using the 3Com Site Survey tool (located on the installation CD) can help you determine if your wireless LAN connectivity and throughput is adequate and all users are covered by an Access Point.
Hand-tighten the antennas at the very base of the SMA connectors without handling the antenna tips. Access Point 8250 and Access Point 8750: Position the antennas so they turn out and away from the access point at a 45-degree angle. After network startup, you may need to adjust the antennas to fine-tune coverage in your area.
5 straight (8-wire) Ethernet cable. There are two ways to supply power to the access point: Use the 3Com Integrated Power-over-Ethernet power supply. In this case, you need to supply a second Ethernet cable to connect to the wired LAN.
If your LAN equipment complies with the IEEE 802.3af power-over-Ethernet standard, you can connect the access point directly to a LAN port. For example, the illustration above right shows a connection through a 3Com Ethernet Power ® Supply to a 3Com SuperStack...
HECKING THE When power is connected, the access point LEDs light. The illustration and the following table describe the LEDs and their functions. Name Description LED blinks red to indicate radio activity. Faster Radio blinking indicates more activity. LED lights green when operational code Power is running.
Page 29
Install the mounting plate as shown in the following illustration, on either a stud (or other hard wall surface), or onto drywall. If installing into drywall, use If installing into a stud or other secure vertical surface, use 2 screws. 3 plastic anchors and 3 screws.
Position the access point at an angle to the mounting plate bayonet connection and turn the unit clockwise until it snaps into place, as shown below. Leave at least 13 cm (5 in.) length. Hold the access point at an angle. Turn Ethernet cable may be routed through clockwise to engage and secure it on center opening or through the side.
The standard detachable antennas supplied with the Access Point are suitable for a broad variety of environments. If you require a different type of antenna for the Access Point, several options are available by model number from the 3Com Web site (www.3Com.com).
AP8250 and AP8750. Note: The power settings for the 802.11a radio on the AP8850 were unavailable at the time of publication. Please check the 3Com web site or the Release Notes included with the access point for the appropriate power levels.
IP devices, including 3Com wireless access points. It is not required for access point management. 3Com Site Survey Tool. This utility assists in selecting the best location for your access point before installing the device permanently. Use the Site Survey Tool to determine if the intended mounting locations will provide adequate coverage with good signal strength and quality.
EVICE ANAGER After the 3Com Wireless Device Manager is installed, ensure that the device to be configured is either wired to the network, associating with the wireless network, or connected directly to the computer, and connected to power. If more than one...
Page 36
The tree lists all WLAN service areas on the network and expands to show the 3Com wireless LAN devices that are associated to each service area. Devices in a different subnet than your computer are identified with exclamation points (!). You can refresh this display by clicking Refresh. You should refresh the display, for example, after you change a device IP address.
-IP C SING THE ONFIGURATION IZARD You can only configure devices that are on the same subnet as your computer. To configure a device on a different subnet, you must first assign it an IP address on the same subnet as your computer. After you launch the configuration, you can change settings as usual.
ASIC ETUP For a basic configuration, use the Setup Wizard as described below. At any time, you can click Home to return to the Home page of the configuration interface. If you want to configure more advanced features, click Advanced Setup in the Home page.
Primary DNS Address and Secondary DNS Address—The Domain Name Servers (DNS) map numerical IP addresses to the equivalent domain name (for example, www.3Com.com). Your internet service provider should provide the IP address of one or more domain name servers. Enter those addresses in...
ERVERS This option controls whether the web management interface is enabled. There are two protocols available for web server connection: HTTP—Sends data unencrypted over the network. HTTPS—Uses Secure Socket Layer (SSL) technology to encrypt information between the access point and the web browser. By default, both protocols are enabled.
Disable—The access point does not monitor the wired network, and therefore, the radio interface does not shut down due to a broken Ethernet link. This is the default setting. Enable—The access point monitors the Ethernet link and shuts down radios if the link is broken.
Page 42
The access point uses the secondary accounting server if a failure is detected in the primary accounting server. It continues to use the secondary accounting server until it fails, in which case it returns to sending data to the primary accounting server.
UTHENTICATION The Authentication page allows you to configure the type of upper-layer authentication the access point uses for wireless clients. This authentication setup is applicable for both radio interfaces. Access is checked against the MAC Address authentication database stored on the access point. NOTE: This level of authentication occurs BEFORE any 802.1x authentication configured on the Security page.
Page 44
Required — Clients authenticate to a RADIUS server via the access point. Clients are not allowed onto the wired LAN until authentication is successful. If two Radios are installed and WPA is being used, both radios’ security must be set to “WPA authentication over 802.1x” for the WPA key management when 802.1x is Required.
Page 45
Local MAC Authentication—Client computers can be filtered using the unique MAC addresses of their network cards. To build the MAC Authentication Table, enter a MAC address in the space provided, choose the permission, and click Update. MAC addresses are listed in the MAC Authentication Table in the order that they were entered.
ILTER ONTROL The Filter Control page allows you to control client communication within the wireless network. You may enable one or more types of supported filtering; however, some filter choices may supersede others. Configure the options as described below. When you are finished, click Apply. VLAN ILTERING BY The access point supports filtering of up to 64 VLANs (virtual local area networks).
ECURITY ILTERS These options allow you to block communication among wireless clients (client-to-client blocking) and prevent wireless clients from performing access point administration. Ethernet Broadcast Storm Control—This option allows users to limit broadcast/multicast traffic coming from the Ethernet network. This feature allows wireless clients to communicate properly under a heavy broadcast environment.
For security reasons it is desirable to block client to client communications for wireless clients associated with an access point (AP). It is also desirable to block client to client communications between clients associated with different AP’s on the local sub net. For instance an airport may have several AP’s to service several "hot spots"...
SNMP Use the SNMP page to display and enter a community string for the Simple Network Management Protocol (SNMP). To communicate with the access point, the SNMP agent must first be enabled and the Network Management Station must submit a valid community string for authentication. You can set up to four trap destinations, each configurable with the IP address and community string of the trap manager.
Trap Destination 3—Select Enable to set up a third trap manager to receive these messages. IP Address—Fill in the IP address box for the third trap manager that will receive these messages. Community Name—Fill in the community string box for the third trap manager that will receive these messages.
Trap Description (When the Trap is Sent) dot1xMacAddrAuthSuccess Sent when a station successfully authenticates the MAC address with the RADIUS server. The trap also includes the MAC address of the station that has authenticated. dot1xMacAddrAuthFail Sent when a station fails to authenticate the MAC address with the RADIUS server.
Users can be created and placed into a group. There are two parameters to configure: authentication and privacy. The selected authentication and privacy policy must match the group security level. For example, if an SNMP user is configured for MD5 authentication and its group does not allow authentication, an error message appears.
SNMP T ARGETS This table is used to select the management targets for receiving notifications, as well as the type of notifications that should be sent. Target ID—The name that identifies the target. IP Address—The IP address of the target. UDP port—The UDP port number of the target.
DMINISTRATION The Administration page allows you to perform access point management tasks as described below. Change Password—A password is required to configure the access point. Enter the user name and new password in the spaces provided and click Apply. It is recommended that you change the password from the default value (no password) to ensure network security.
ETTINGS The WDS/STP Settings page allows you to configure a Wireless Distribution System (WDS) link to connect 3Com access points. WDS provides a flexible way to extend a wireless network. A Distribution System (DS) is a network (typically a wired network) that interconnects separate access points into a single LAN.
VAP specified to set up the WDS link.) The WDS link can be set up between 3Com access points only. The pair of access points to be configured with a WDS link must have the same radio channel and SSID.
WDS configuration window. Return to the WDS Settings page and click Apply to save the changes. Note: Only nearby 3Com Access Points models 7250, 8250, 8500, 8700, or 8750 that are running firmware versions 3.0 or later appear in the station list.
Bridge Hello Time (1-10 sec.)—Enter a value to determine how often the access point broadcasts the hello message. Bridge Forwarding Delay (4-30 sec.)—Enter a value to determine how long the access point remains in listening and learning states before its ports enter the forwarding state.
To use the access point as an SNTP server: Select SNTP Server Disable, specify time values in the spaces provided, select the time zone from the pull-down list. If you select Enable Daylight Saving, the time adjusts automatically for standard and daylight savings time.
STA Role—Describes the role of a nearby 3Com access point (model 7250, 8250, 8500, 8700, or 8750) if the access point is running firmware version 3.0 or later. Possible roles are: -AP: This station is a physical interface (VAP1) of a 3Com access point and is not acting as a WDS bridge.
Page 61
To enable VAP service: Open the Radio Settings page for the Radio Interface you want to configure. Click Enabled next to VAP1 to enable a single VAP. Click Enabled next to VAP2 to enable a second VAP. Note: Enabling this option turns on the Virtual Access Point. VAP 1 must be enable to enable VAP2.
HANGING ADIO ETTINGS Some radio settings are available only on the 802.11a radio, as noted in the descriptions below. To change radio settings on a VAP, select a VAP from the list to display its current configuration. When you are finished configuring items on this page, click Apply. Country Code—Displays the country where this access point is installed and running.
Page 63
Maximum Transmit Data Rate—Select the appropriate data rate from the drop-down list for the data transfer speed running on your network. (802.11b default: 11 Mbps.) In order to reach all clients, this rate should be set lower (for example, 1 or 2 Mbps on an 802.11b radio). To isolate clients that are unable to connect at higher rates, set this value higher.
The access points contending for the medium may not be aware of each other. The RTS/CTS mechanism can solve this hidden node problem. (Default: 2346) Preamble Length (802.11g and 802.11b only)—IEEE 802.11 frames begin with an alternating pattern of 1s and 0s called the preamble, which tells receiving stations that a frame is arriving.
The access point and the wireless devices must have the same encryption settings to communicate. You can choose to allow only clients using WPA encryption, or you can allow both WPA and WEP clients. The following sections describe how to configure each type of encryption. When you are finished configuring the encryption, click Apply.
Select the Key Type. Hexadecimal (0~9, A~F; for example, D7 0A 9C 7F E5) ASCII (0~9, A~F; for example 01234) 3Com Passphrase(a string, described below) Enter the keys in their fields. 64-bit—Each key contains 10 hexadecimal digits or 5 alphanumeric...
3Com Passphrase—This encryption string is for use only with other 3Com Wireless LAN devices. It is a case-sensitive string between 6 and 30 characters long. To enter the string, click 3Com Passphrase. Then type any combination of letters and numbers in the Key 1 field and click Apply.
b Encryption is Enabled c WPA Configuration Required “Allow only WPA Clients” is left unchecked. d Cipher Mode is set to WEP. e WEP Configuration has at least one valid WEP key. f Click on Apply. 11 The Access Point is now configured for RADIUS Authentication. 802.1 OW TO SETUP THE ACCESS POINT FOR WITH...
d Cipher Mode is set to AES/TKIP/WEP (WEP Cipher Mode is intended ONLY for support of legacy clients. If only WPA clients are on the network, choose AES or TKIP for increased security). e WEP Configuration has at least one valid WEP key. f WPA Key Management set to WPA Authentication over 802.1x.
To allow WEP clients, clear the WPA Configuration Required check box and enter an appropriate WEP key. For all WPA configurations, 802.1x must be enabled on the Authentication page. Windows XP Wireless Zero Configuration Access Points 8250/8750 Authentication Encryption Authentication Encryption Other Disabled Open System Disable...
Page 71
Windows XP Wireless Zero Configuration Access Points 8250/8750 Authentication Encryption Authentication Encryption Other Not available on 8200 WPA Configuration: Required Multicast Cipher Open System TKIP Enable Mode: AES (for 8750) WPA Key Management: WPA 802.1x WPA Configuration: Required Multicast Cipher...
ROUBLESHOOTING If you have difficulty with the 3Com Wireless LAN access point, first check the following items in the configuration: Radio Settings page: Ensure that the SSID is the same on clients and the access point. Security page: Ensure that Encryption is the same on clients and the access point.
Page 74
After you specify an IP In the 3Com Device Manager window click the Refresh address for an access point, button to refresh the Wireless Network Tree. Then click...
Page 75
System stops responding. you must do the following: 1 Close your browser. 2 Return to the 3Com Device Manager Wireless Network Tree and click Refresh. 3 Select the access point and click Configure to start a new configuration session.
Page 77
This product does not contain any user serviceable components. Any unauthorized product changes or modifications will invalidate 3Com’s warranty and all applicable regulatory certifications and approvals. Only antennas specified for your region by 3Com can be used with this product. The use of external amplifiers or non-3Com antennas may invalidate regulatory certifications and approvals.
Page 78
Complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. 3Com Wireless LAN Access Point 8250 Model WL-450 Industry Canada - RF Compliance This device complies with RSS 210 of Industry Canada.
Page 79
RLAN device in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG. Bij deze verklaart 3Com Corporation dat deze RLAN device voldoet aan de essentiële eisen en aan de overige relevante bepalingen van Richtlijn 1999/5/EC.
Page 80
RLAN device è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE. Spanish Por medio de la presente 3Com Corporation declara que el RLAN device cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE.
Page 81
A copy of the signed Declaration of Conformity can be downloaded from the Product Support web page for the 3Com Wireless LAN Access Point 8250 (3CRWE825075A) at http://www.3com.com. Also available at http://support.3com.com/doc/AP8250_WL-463.pdf EU - Restrictions for Use in the 2.4GHz band This device may be operated indoors or outdoors in all countries of the European Community using the 2.4GHz band:...
Page 82
This product does not contain any user serviceable components. Any unauthorized product changes or modifications will invalidate 3Com's warranty and all applicable regulatory certifications and approvals. Only antennas specified for your region by 3Com can be used with this product. The use of external amplifiers or non-3Com antennas may invalidate regulatory certifications and approvals.
Page 83
Complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. 3Com Wireless LAN Access Point 8750 Model WL-450 Industry Canada - RF Compliance This device complies with RSS 210 of Industry Canada.
Page 84
RLAN device in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG. Bij deze verklaart 3Com Corporation dat deze RLAN device voldoet aan de essentiële eisen en aan de overige relevante bepalingen van Richtlijn 1999/5/EC.
Page 85
RLAN device è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE. Spanish Por medio de la presente 3Com Corporation declara que el RLAN device cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE.
Page 86
A copy of the signed Declaration of Conformity can be downloaded from the Product Support web page for the 3Com Wireless LAN Access Point 8750 (3CRWE875075A) at http://www.3com.com. Also available at http://support.3com.com/doc/AP8750_WL-450.pdf EU - Restrictions for Use in the 2.4GHz band This device may be operated indoors or outdoors in all countries of the European Community using the 2.4GHz band:...
Page 87
This product does not contain any user serviceable components. Any unauthorized product changes or modifications will invalidate 3Com's warranty and all applicable regulatory certifications and approvals. Only antennas specified for your region by 3Com can be used with this product. The use of external amplifiers or non-3Com antennas may invalidate regulatory certifications and approvals.
Page 88
Complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. 3Com 802.11a/g Bridge AP 8850 (3CRWE885075A) Model WL-450 Industry Canada - RF Compliance This device complies with RSS 210 of Industry Canada.
Page 89
Brazil RF Compliance Este equipamento opera em car·ter secund·rio, isto È, nao tem direito a proteÁao contra interferencia prejudicial, mesmo de estaÁoes do mesmo tipo, e nao causar interferencia a sistema operando em car·ter prim·rio.
Need help?
Do you have a question about the 8250 and is the answer not in the manual?
Questions and answers