3Com 3CRGPC10075 User Manual Download Page 71

Page: 71 / 162

Using 802.1x

■

Configure the wireless stations for 802.1x

Setting Up Microsoft

IAS as RADIUS Server

This section describes using Microsoft Internet Authentication Server as
the RADIUS Server, since it is the most common RADIUS server available
that supports the EAP-TLS authentication method.

The following services on the Windows 2000 Domain Controller (PDC)
are also required:

■

DHCPD

■

DNS

■

RRAS

■

Web server (IIS)

■

RADIUS server (Internet Authentication Service)

■

Certificate Authority

To set up a Microsoft Internet Authentication Server as the RADIUS
server, you need to perform the following tasks:

Set up a Windows 2000 Domain Controller

Install the required services

Configure the DHCP server

Set up the certificate authority server

Configure the Internet Authentication Service

Configure remote access logon for users

Setting Up a Windows 2000 Domain Controller

On the Windows 2000 Server, open a command prompt.

Run

dcpromo.exe

Follow all of the default prompts, and then ensure that DNS is installed
and enabled during installation.

Take note of the domain name that you specify during installation. You
will need this information in

“Configuring the DHCP Server”

Summary of Contents for 3CRGPC10075

Page 1: ...http www 3com com Part No DUAPOE10075BAA01 Published December 2004 OfficeConnect Wireless 108 Mbps 11g PoE Access Point User Guide 3CRGPOE10075 WL 529 ...

Page 2: ...r deface any portion of any legend provided on any licensed program or documentation contained in or delivered to you in conjunction with this User Guide Unless otherwise indicated 3Com registered trademarks are registered in the United States and may or may not be registered in other countries 3Com the 3Com logo and OfficeConnect are registered trademarks of 3Com Corporation Intel and Pentium are...

Page 3: ...eatures 17 Front Panel 17 Back Panel 17 Overview of Setup and Management Tasks 18 2 INSTALLING AND CONNECTING THE ACCESS POINT Before You Begin 19 Installation Requirements 19 Wireless Station Requirements 19 Security Information 20 Positioning the Access Point 20 Powering On and Connecting the Access Point 21 Using the Supplied Power Adapter 21 Using Power over Ethernet 21 Verifying the Installat...

Page 4: ...Configuring System Settings 49 Configuring the Wireless Settings 52 Basic Wireless Settings 52 Advanced Wireless Settings 57 4 CONFIGURING THE WIRELESS STATIONS Configuration Overview 59 No Security 59 Using WEP 60 Using WPA PSK 61 Using WPA 802 1x 61 Configuring the RADIUS Server 61 Configuring the Wireless Stations 62 Using 802 1x 62 Setting Up Microsoft IAS as RADIUS Server 63 Setting Up Window...

Page 5: ...2 Automating Configuration 92 Automating Updates 93 Detecting Rogue Access Points 94 Viewing Detected Rogue Access Points 96 6 TROUBLESHOOTING Basic Connection Checks 97 Cannot Connect to the Wireless Access Point to Configure It 97 Forgotten Password and Reset to Factory Defaults 98 Wireless Station Cannot Connect to the LAN via the Access Point 98 A TECHNICAL SPECIFICATIONS Hardware Specificatio...

Page 6: ...Configuring TCP IP on Windows XP 125 Configuring TCP IP on Windows 2000 128 Configuring TCP IP on Windows Me 98 95 130 Configuring TCP IP on Windows NT 4 0 131 E OBTAINING SUPPORT FOR YOUR PRODUCT Register Your Product 135 Purchase Value Added Services 135 Troubleshoot Online 136 Access Software Downloads 136 Telephone Technical Support and Repair 136 Contact Us 137 F SAFETY INFORMATION Important ...

Page 7: ...GLOSSARY INDEX REGULATORY NOTICES ...

Page 8: ......

Page 9: ...in this guide follow the instructions in the release notes Most user guides and release notes are available in Adobe Acrobat Reader Portable Document Format PDF or HTML on the 3Com World Wide Web site http www 3com com Conventions Throughout this guide the OfficeConnect Wireless 108 Mbps 11g PoE Access Point is referred to as the Access Point The computer used to configure the Access Point is refe...

Page 10: ...wing syntax system password password In this example you must supply a password for password Commands The word command means that you must enter the command exactly as shown and then press Return or Enter Commands appear in bold Example To display port information enter the following command bridge port detail The words enter and type When you see the word enter in this guide you must type somethi...

Page 11: ...se including new features modifications and known problems Documentation Comments Your suggestions are very important to us They will help make our documentation more useful to you Please e mail comments about this document to 3Com at pddtechpubs_comments 3com com Please include the following information when contacting us Document title Document part number on the title page Page number if approp...

Page 12: ...4 ABOUT THIS GUIDE ...

Page 13: ...pplications to difficult to wire locations and to your mobile workforce making your business more productive competitive and successful The 3Com OfficeConnect Wireless 108 Mbps 11g PoE Access Point is the affordable choice for extending your network to places where wires cannot go A single Access Point can make the Internet e mail and network resources such as printers available to dozens of wirel...

Page 14: ...n wireless devices Wireless and Networking Table 1 lists the wireless and networking features that the Access Point provides 3Com Wireless Access Point Status Power LA N Wire less Wired Local Area Network Wireless Stations Table 1 Wireless and Networking Features Feature Description Standards compliance Complies with the IEEE802 11g DSSS specifications for wireless local area networks 802 11g 802 ...

Page 15: ...s between connection speeds in response to physical conditions and RF interference Power over Ethernet PoE Solves hard to wire location problems and reduces cabling on the network See PoE Support User support Each Access Point can support up to 64 simultaneous users wireless stations allowing plenty of room for growth WDS support Supports Wireless Distribution System WDS for compatible wireless de...

Page 16: ...u are using access points other than the OfficeConnect Wireless 108 Mbps 11g PoE Access Point to build a WDS check the documentation for these access points and verify that they support WDS Wireless Bridge In a wireless bridge configuration access points are configured to interconnect or bridge two or more wired local networks at the link layer When wired local networks are bridged devices on each...

Page 17: ...their MAC addresses If you configure the OfficeConnect Wireless Access Point as the master AP and define the list of access points that are allowed to bridge with the master AP you can the set up WDS links with up to eight slave APs If you do not define a list of allowed access points up to 14 slave APs can bridge with the master AP All traffic between slave APs goes through the master AP The mast...

Page 18: ...nd slaves and configure both master and slaves to use WPA PSK Wireless Client Repeater The Access Point can also function either as a client or repeater You can use the Access Point as a repeater to extend the range of your wireless network See Figure 3 for an illustration of how the Access Point works as a repeater Wired Network A Statu s Powe r LA N Wire les s S t a t u s P o w e r L A N W i r e...

Page 19: ...like a wireless card that is connected to a computer to provide a wireless interface When operating in client mode the Access Point can only communicate with a wireless router or an access point Wired Network S t a t u s P o w e r L A N W i r e l e s s WDS Link Statu s Powe r LA N Wire les s ...

Page 20: ...rk and centralizes authentication of wireless users across the network Security profiles and multiple SSIDs Supports creation of up to eight security profiles allowing you to create multiple connections with different SSIDs and wireless security settings Up to four security profiles can be enabled simultaneously Multiple SSIDs Supports multiple SSIDs when multiple security profiles are configured ...

Page 21: ...s using WEP for encryption The rest of the wireless stations can associate with the other SSID that uses WPA VLAN support Supports the 802 1Q VLAN standard allowing traffic from different sources to be segmented When combined with the multiple SSID feature serves as a powerful tool for controlling access to the wireless network See VLAN Support RADIUS client support Functions as a RADIUS client th...

Page 22: ...or example you have two active SSIDs SSID1 and SSID2 and two existing VLANs VLAN1 and VLAN2 To segment wireless stations associated with SSID1 into VLAN1 you need to map SSID1 to VLAN1 using the VLAN Configuration screen of the Web interface Do the same with SSID2 to segment wireless stations that are associated with it into VLAN2 Figure 7 illustrates this VLAN setup VLAN support requires a one to...

Page 23: ...gh the SSIDs and up to four SSIDs can be enabled at any time you can configure the Access Point to forward packets to up to four different VLANs Configuration and Management Table 3 lists the configuration and management features that the Access Point provides 3Com Wireless Access Point VLAN1 Wireless Stations Connected to SSID2 Wireless Stations Connected to SSID1 Single Ethernet Link Supports VL...

Page 24: ... FTP server and downloads and installs any available update Simplifies the task of upgrading firmware on multiple Access Points on the network Command Line Interface Supports configuration via the command line interface CLI allowing advanced users to create scripts that automate common configuration changes NetBIOS and WINS support Supports NetBIOS broadcast and WINS allowing for seamless integrat...

Page 25: ...is starting up or firmware is being upgraded Power Green Normal operation Off No power LAN Green LAN Ethernet port is active Off No active connection on the LAN Ethernet port Flashing Data is being transmitted or received via the corresponding LAN Ethernet port Wireless Green Idle Off An error has occurred or wireless connection is unavailable Flashing Data is being transmitted or received via the...

Page 26: ... as changing the password to the Web interface backing up the configuration file and upgrading the device firmware Step by step procedures for these tasks are available in Chapter 5 starting on page 79 Troubleshooting information is available in Chapter 6 starting on page 97 Reset button Use the Reset button to Reboot the device To restart or reboot the device press the Reset button for about five...

Page 27: ... from the Access Point kit Ethernet cable not included in the Access Point kit To configure the Access Point after installation you need a computer with TCP IP that is connected to the same local network as the Access Point This computer must also have a Web browser that supports JavaScript such as Netscape 4 7 or later Internet Explorer 5 0 or later or Mozilla 1 2 1 or later If you want to use Po...

Page 28: ...to the wireless computers that will connect to the Access Point A suitable location might be on top of a high shelf or similar furniture to optimize wireless connections to computers in both horizontal and vertical directions allowing wider coverage When positioning your Access Point ensure It is out of direct sunlight and away from sources of heat Cabling is away from power lines fluorescent ligh...

Page 29: ...ect one end of a standard Ethernet cable either straight through or crossover to the Ethernet port on the back panel of the Access Point 2 Connect the other end of the cable to a 10 100BaseT hub router or switch on the local network 3 Connect the power adapter to the Power port on the back panel of the Access Point and then connect the plug to a power source Figure 8 Powering the Access Point Usin...

Page 30: ...d check the LEDs on the front panel The Status LED should flash and then go off The Power Wireless and LAN LEDs should be on Accessing the Web Interface The Access Point provides an intuitive Web browser based interface that you use to configure the device You connect to this interface using the IP address that is assigned to the device When connected to a network that has a DHCP server the Access...

Page 31: ...w the instructions in Without a DHCP Server on page 26 to connect to the Web interface 1 On a computer that is connected to the same local network insert the CD ROM into the CD drive The setup program for the 3Com Access Point Manager starts automatically If it does not start automatically run setup exe in the root folder of the CD ROM 2 Follow the setup wizard instructions to install the utility ...

Page 32: ...int so you can connect to the Web interface For more information refer to If the Access Point Is on a Different Subnet The interface loads in your Web browser and an authentication dialog box appears 6 In User name type admin and in Password type password User name and password are case sensitive 7 Click OK If the Access Point Is on a Different Subnet The default subnet for the Access Point is 255...

Page 33: ... Mask This mask must be the same as the subnet mask for the admin computer Gateway DNS 3 Click OK and then click Refresh The 3Com Access Point Manager screen refreshes and then the Web Management button becomes available 4 Click Web Management to start the Web interface The interface loads in your Web browser and an authentication dialog box appears 5 In User name type admin and in Password type p...

Page 34: ...ck Internet Protocol and then click Properties 3 On the General tab click Use the following IP address 4 Assign an IP address and a subnet mask to the computer In IP address type any IP address within the range of 192 168 0 1 to 192 168 0 255 except 192 168 0 228 In Subnet mask ensure that it is set to 255 255 255 0 5 Click OK 6 Start your Web browser 7 In the Address or Location bar type http 192...

Page 35: ...h it Navigating the Web Interface The Web interface has been designed to enable you to easily perform configuration tasks and view information about the Access Point Figure 12 Access Point Web Interface Menu and Tabs The menu is on the left side of the Web interface When you click an item on the menu the related screen will appear in the main part of the ...

Page 36: ...ess to the online help system The help system contains additional information about the screens and the tasks that you can perform To access the online help system click Help Timeout Setting The Web interface has a timeout mechanism that automatically logs you off if it does not detect any activity within five minutes This mechanism helps prevent unauthorized users from accessing the Web interface...

Page 37: ...Point on the wireless network 5 In Wireless Security System click an encryption method for securing data that is transmitted on the wireless network Available options include None Data encryption is disabled WEP A 64 bit or 128 bit encryption method with user configurable fixed keys WPA PSK A 256 bit encryption method that requires users to enter a pre shared key PSK It uses an encryption key whic...

Page 38: ... configuring the settings for RADIUS based MAC authentication click Save and then Close Current Status for RADIUS MAC Authentication will change to Enabled after you save the security profile 7 If user access to the wireless network needs to be accounted for and you have a RADIUS server on the network you can configure Universal Access Method UAM for the security profile UAM authentication is not ...

Page 39: ...stations have the same setting and key value Authentication Normally you can simply set this to Automatic However if authentication fails select the appropriate value either Open System or Shared Key Check your wireless card s documentation to determine the correct authentication method to use Key input Click either Hex 0 9 and A F or ASCII depending on your input method All keys are converted to ...

Page 40: ...ers in this text box and then click Generate Key If encryption strength is set to 64 bit each of the four key fields will be populated with key values If encryption strength is set to 128 bit only the selected WEP key field will be given a key value Table 7 Options for WPA PSK Option Description Network Key Type the key value Data is encrypted using this key Other wireless stations must use the sa...

Page 41: ...ted using TKIP and multicast broadcast transmissions are encrypted using 128 bit WEP AES CCMP Unicast point to point transmissions and multicast broadcast transmissions are encrypted using AES CCMP Group Key Update Refers to the key used for broadcast transmissions If you want the keys to be updated regularly select the Group Key Update check box And then in Key Lifetime specify the time interval ...

Page 42: ... address of the RADIUS Server on the network RADIUS Port Type the port number used for connections to the RADIUS Server Client Login Name This read only field displays the name used for the Client Login on the RADIUS Server This login name must be created on the RADIUS Server On some RADIUS Servers you can use the Access Point s IP address instead of this name Shared Key Key used for client logon ...

Page 43: ...ypted using AES CCMP and multicast broadcast transmissions are encrypted using TKIP Group Key Update Refers to the key used for broadcast transmissions If you want the keys to be updated regularly select the Group Key Update check box And then in Key Lifetime specify the time interval in minutes after which the group key will be dynamically updated Update Group Key when any membership terminated I...

Page 44: ...36 CHAPTER 3 CONFIGURING THE ACCESS POINT 802 1x Options If you selected 802 1x you need to configure the settings listed in Table 9 Figure 17 Security Options for 802 1x ...

Page 45: ...it encryption the key size is 13 chars ASCII or 26 chars in HEX 0 9 and A F 156 Bit Data is encrypted using the default key before being transmitted You must enter at least the default key For 156 bit encryption the key size is 16 chars ASCII or 32 chars in HEX 0 9 and A F Dynamic WEP key EAP TLS PEAP If checked the required WEP key is dynamically generated This may use EAP TLS PEAP or another met...

Page 46: ...shared key as configured on the Access Point To ensure that the Access Point can log on to the RADIUS server verify that the correct RADIUS server address port and shared key are configured on the Access Point This information is entered either on the Security screen or the RADIUS based MAC Authentication screen depending on the security method used 2 On the RADIUS server create a RADIUS client ac...

Page 47: ...that you selected Figure 18 RADIUS based MAC Authentication Screen On this screen provide the required information about your RADIUS server This information is required to enable the Access Point to successfully forward MAC addresses of wireless stations to the RADIUS server for authentication Table 10 lists the options that you may need to configure on the RADIUS based MAC Authentication screen T...

Page 48: ...ions other types of traffic are ignored To use UAM you need the RADIUS server for client authentication and configure the UAM settings There are two types of UAM authentication that you can use Internal authentication Uses the Web page that is built into the Access Point External authentication Uses a customized Web page on your Web server If you want to provide more information to the user for ex...

Page 49: ...y as configured on the Access Point Verify that the correct RADIUS server address port and shared key are configured on the Access Point This information is entered either on the Security screen or the UAM screen depending on the security settings used 2 Create user accounts on the RADIUS server database and then grant them access to the Internet 3 Verify that the wireless security settings on the...

Page 50: ...the wireless station s MAC address is added to the Access Point log The wireless station s status also appears as Authenticated on the list of associated stations If the logon credentials are invalid the user will not be able to access any other Web page except for the logon page An entry xx xx xx xx xx xx WEB authentication failed is added to the log and the station s status appears as Authentica...

Page 51: ...r and obtain Internet access e In RADIUS Server Address type the IP address or host name of the RADIUS server that will authenticate clients f In RADIUS Port type the port number on the RADIUS server that is configured for communication with RADIUS clients g In Shared Key type the same key value as the one you set on the RADIUS server 6 Click Save and then click Close When external UAM authenticat...

Page 52: ...when the Access Point is in AP mode 2 In 802 11b g Bridge Mode select the profile that you want to set as primary when the Access Point is in bridge mode Figure 20 Primary Profile Options Isolating Wireless Clients with Different Profiles On the Security Profiles screen under Isolation click one of the following options No isolation Click to allow wireless stations that are using different profile...

Page 53: ...g Access to the Wireless Network By default the Access Point s security settings are disabled to allow you to easily connect and configure it after the initial setup Anyone that can detect the SSID that is broadcast on the wireless network can therefore connect to it You can configure the Access Point to prevent unauthorized or untrusted wireless stations from accessing your wireless network To do...

Page 54: ...ly entering the MAC addresses on the Trusted Stations tab By importing the MAC address list of trusted stations Manually Entering the MAC Addresses 1 On the menu click Access Control 2 Click the Trusted Stations tab 3 In Name type the name for or a description of the wireless station 4 In Address type the MAC address of the wireless station that you want to add You can type the MAC address with or...

Page 55: ...Stations To create the text based access control list 1 On the computer that you are using to configure the Access Point create a text file using a text editor for example Notepad 2 Type the MAC addresses of all the wireless stations that you want to add to the access control list Each line in the text file must have only one MAC address 3 Save the file to your computer To upload the access contro...

Page 56: ...rmation has been successfully saved on the Access Point Enabling Access Control Based on MAC Address After defining the access control list you need to enable the access control function of the Access Point Before performing this procedure make sure that the MAC address or addresses of the admin computer is included in the access control list Otherwise you will no longer be able to access the Web ...

Page 57: ...e As dialog box appears 3 Specify a location on the local disk to which to save the file and modify the file name if necessary The default file name is maclist acl 4 Click Save 5 Verify that the list was successfully saved by checking if the file exists in the target location Configuring System Settings System settings include information that helps identifies the Access Point on the network inclu...

Page 58: ...ss Point when you are using the Access Point Management utility Description optional If there are multiple access points on the network type a description in this text box to help you identify the Access Point Country or Domain Select your country from the drop down list Use of certain wireless channels is restricted in some countries To ensure that you are using only the approved channels select ...

Page 59: ...ts default IP address 192 168 0 228 and subnet mask 255 255 255 0 If these IP settings do not match your network settings change them to ensure that the Access Point and other devices on the network can communicate with each other 4 If you have a WINS server on the network and you want to use it to resolve names and addresses used by the Access Point click Enable WINS and then type the host name o...

Page 60: ...and wireless channel selection Figure 26 Basic Wireless Settings Screen To configure basic wireless settings 1 On the menu click Wireless The Basic tab appears 2 In Wireless Mode select the appropriate mode For information on each available wireless mode refer to the following table Table 11 Wireless Mode Options Mode Option Description Disable 2 4GHz band Disables the wireless function of the Acc...

Page 61: ... Allows connections from 802 11b wireless stations only 802 11g wireless stations may still be able to connect if they are fully backward compatible with the 802 11b standard 802 11g Allows connections from 802 11g wireless stations only If you only have an 802 11g network select this option instead of the default for optimal wireless performance Dynamic Super 802 11g 108Mbps Uses Packet Bursting ...

Page 62: ... mode see Figure 27 on page 55 For more information about setting the Access Point to PTMP bridge mode refer to Configuring PTMP Bridge Settings on page 55 6 In Channel select the wireless channel that you want the Access Point to use If set to Automatic the Access Point will select the best available channel Use of certain wireless channels is restricted in some countries To ensure that you are u...

Page 63: ...ts to PTP bridge mode and specify the Access Point s MAC address in their PTP bridge access point settings In this setup all traffic will be sent to the master access point Wired Network A Statu s Powe r LA N Wire les s S t a t u s P o w e r L A N W i r e l e s s Wired Network B WDS Link Statu s Powe r LA N Wire les s Wired Network C WDS Link Master Set to PTMP Mode Slave Set to PTP Mode Slave Set...

Page 64: ...ect Wireless Access Point To do this 1 Under the Bridge Mode section of the Basic tab select the In PTMP mode only allow specified APs check box 2 Click Set PTMP APs The PTMP AP List screen appears 3 Type the MAC addresses of the access points that you want to bridge with the OfficeConnect Wireless Access Point You can specify up to eight access points 4 Click Save ...

Page 65: ...ate is used for broadcasting It does not determine the data transmission rate which is determined by the Mode setting on the Basic screen Available options for basic rate include 802 11 1 2 Mbps 802 11b 1 2 5 5 11 Mbps 802 11g 1 2 5 5 11 6 12 24 Mbps OFDM 6 12 24 Mbps Do not select the 802 11g or ODFM option unless all your wireless stations support this If either option is selected 802 11b client...

Page 66: ...nd 1000 Normally this can be left at the default value RTS CTS Threshold Enter the preferred setting between 256 and 2346 Normally this can be left at the default value Preamble Type Select the desired option The default is Long The Short setting takes less time when used in a good environment Output Power Level Select the desired power output Higher levels will give a greater range but are also m...

Page 67: ... to be able to successfully associate with the Access Point their settings must be configured to match those on the Access Point The configuration of these settings depends on the wireless security settings that have been set on the Access Point This chapter provides instructions for configuring wireless stations when the Access Point is Set to No Security Using WEP Using WPA PSK Using WPA 802 1x ...

Page 68: ...t to infrastructure mode not ad hoc mode SSID ESSID This SSID must match an SSID that is specified on the Access Point The default SSID is 3Com NOTE The SSID is case sensitive Table 13 Client Wireless Settings When Using WEP Setting Description Mode The wireless station must be set to infrastructure mode not ad hoc mode SSID ESSID The SSID must match an SSID that is specified on the Access Point T...

Page 69: ... are authenticated and network keys are managed by the RADIUS server Therefore after configuring the Access Point to use WPA 802 1x there are still two tasks that you need to perform Configure the RADIUS server Configure the wireless stations Configuring the RADIUS Server The RADIUS server on your network must be configured as follows It must provide and accept certificates for user authentication...

Page 70: ...hese settings refer to the documentation that came with the wireless network adapter that is installed on the wireless station Using 802 1x To use 802 1x for client authentication on your wireless network you need to Set up a Microsoft Internet Authentication Server as RADIUS server Table 15 Client Wireless Settings When Using WPA 802 1x Setting Description Mode The wireless station must be set to...

Page 71: ...a Microsoft Internet Authentication Server as the RADIUS server you need to perform the following tasks 1 Set up a Windows 2000 Domain Controller 2 Install the required services 3 Configure the DHCP server 4 Set up the certificate authority server 5 Configure the Internet Authentication Service 6 Configure remote access logon for users Setting Up a Windows 2000 Domain Controller 1 On the Windows 2...

Page 72: ...ined after installing certificate services Click Yes to select certificate services and continue World Wide Web Server Select World Wide Web Server on the Internet Information Services IIS component From the Networking Services category select Dynamic Host Configuration Protocol DHCP and Internet Authentication Service DNS should already be selected and installed Figure 30 Windows Component Wizard...

Page 73: ... 8 Click Next to use the CA s default configuration Windows setup displays a warning message that IIS is running and must be stopped before continuing 9 Click OK and then click Finish Configuring the DHCP Server 1 From the Start menu point to Programs Administrative Tools and then click DHCP 2 Right click the server name and then click New Scope ...

Page 74: ...ESS STATIONS Figure 32 DHCP Dialog Box 3 When the New Scope wizard starts click Next 4 Type a name and description for the scope and then click Next 5 Define the IP address range Change the subnet mask if necessary Click Next when done ...

Page 75: ...9 Type the router address for the current subnet If there is no router on the network leave the router address blank Click Next 10 In the Parent domain type the domain name you specified during the domain controller setup and then in IP address type the server s address Click Next 11 If you do not have a WINS server on the network simply click Next 12 Select Yes I want to activate this scope now 1...

Page 76: ...o Issue Figure 34 Certification Authority Screen 3 Hold down the Ctrl key and then on the Select Certificate Template screen click Authenticated Session and Smartcard Logon 4 Click OK 5 From the Start menu point to Programs Administrative Tools and then click Active Directory Users and Computers The Active Directory Users and Computers screen appears 6 Right click on your active directory domain a...

Page 77: ...ration Windows Settings Security Settings Public Key Policies 9 Under Public Key Policies right click Automatic Certificate Request Settings point to New and then click Automatic Certificate Request The Automatic Certificate Request Setup Wizard appears 10 Click Next 11 Click Computer and then click Next ...

Page 78: ... It may take a few minutes for this command to take effect Setting Up the Internet Authentication Service RADIUS 1 From the Start menu point to Programs Administrative Tools and then click Internet Authentication Service The Internet Authentication Service screen appears 2 Right click Clients and then click New Client 3 Type a name for the Access Point and then click Next 4 Type the address or nam...

Page 79: ...e Restrictions and then click Add 9 Click Permitted click OK and then click Next 10 Click Grant remote access permission and then click Next 11 Click Edit Profile and then click the Authentication tab The Edit Dial in Profile screen appears 12 Select the Extensible Authentication Protocol check box and then select Smart Card or other Certificate from the drop down menu Figure 37 Edit Dial in Profi...

Page 80: ...click Active Directory Users and Computers 2 Double click the user name that you want to grant remote access 3 Click the Dial in tab and then click Allow access under Remote Access Permission Dial in or VPN Figure 38 User Properties Dialog Box 4 Click OK Setting Up Windows XP for 802 1x Windows XP ships with a complete 802 1x client implementation If the wireless stations on your network are runni...

Page 81: ... the Windows 2000 Server To set up Windows XP for 802 1x authentication you need to perform the following tasks 1 Generate a client certificate 2 Set up 802 1x authentication Generating a Client Certificate 1 Connect to a network that does not require port authentication 2 Start your Web browser 3 In the Address or Location bar enter the IP address of the Windows 2000 Server followed by certsrv Fo...

Page 82: ...rs and then the Certificate Issued screen appears 8 Click Install this certificate A confirmation message appears 9 Click Yes Certificate setup is now complete Setting Up 802 1x Client Authentication 1 From the Start menu point to All Programs Connect To and then click Network Connections 2 Right click Wireless Network Connection and then click Properties The Wireless Network Connection Properties...

Page 83: ...y that Smart Card or other Certificate is selected Configuring the Encryption Settings By default Windows XP automatically detects available wireless networks and allows you to configure each network independently Configure the encryption settings on the wireless station to match those on the Access Point 802 1x networks normally use EAP TLS This is a dynamic key system so there is no need to ente...

Page 84: ...From the list of available networks click the SSID for the Access Point and then click Configure 3 On the Wireless Network Properties screen specify the SSID for the Access Point and then configure the wireless network key settings For example if you need to use EAP TLS Select the Data encryption WEP enabled check box Select the The key is provided for me automatically check box ...

Page 85: ...y is provided for me automatically check box see Figure 42 must not be selected Instead the user must manually enter a WEP key that matches the WEP key specified on the Access Point To set up 802 1x follow the procedures in Using 802 1x starting on page 62 except for the difference mentioned above On some systems the 64 bit WEP key is shown as 40 bit and the 128 bit WEP key is shown as 104 bit Thi...

Page 86: ...78 CHAPTER 4 CONFIGURING THE WIRELESS STATIONS ...

Page 87: ...rform after setting up and configuring the Access Point and wireless stations Configuring Administrator Access To prevent unauthorized users from gaining access to the Web interface 3Com recommends that you Change the default logon account and change the admin password periodically Configure admin connections ...

Page 88: ...e logon settings To change the admin user name type a new name in User name To change the admin password select the Change Admin Password check box and then type a new password in New Password Retype that password in Repeat New Password 3 Click Save and then click Apply Restart Configuring Admin Connections Use the Admin Connections section of the Admin Login screen to restrict access to the Web i...

Page 89: ...enabled Enable Management via Telnet Select this check box to connect to the Access Point using a Telnet client When connecting to the Access Point via Telnet use the same logon information user name and password as for an HTTP Web connection 3 Click Save Viewing Information About the Device There are three types of status information that you can view on the Access Point Device status Summary of ...

Page 90: ... device Subnet Mask Displays the network or subnet mask for the assigned IP address Gateway Displays the gateway IP address for the local network to which the device is connected For the Access Point and wireless stations to successfully communicate they must have the same gateway IP address DHCP Client Indicates whether the current IP address was obtained from a DHCP server on the network Possibl...

Page 91: ... address mode SSID to which it connected and current status appears on the Stations tab Working with Logs The Access Point keeps a record of devices activities such as system startup and client association and disassociation The maximum log file size that the Access Point can store is 30 KB If the accumulated log records reach this file size the Access Point automatically clears all log records Vi...

Page 92: ...e Access Point logs are queried from a public Network Time Protocol NTP time server on the Internet The time zone is set when you select your country domain on the System screen For the logs to show the correct date and time select your country from the list and make sure the Access Point is connected to a local network that has an Internet connection Figure 45 Viewing Log Entries Saving and Clear...

Page 93: ... a file 1 On the Log screen click Save to File The File Download dialog box appears 2 Click Save and then choose as location on local disk 3 Rename the file if necessary The default file name is ap11g log 4 Click Save To purge logs that are currently saved on the device click Clear Log The screen refreshes and then displays a blank Log screen Viewing Device Statistics Figure 46 Statistics Screen T...

Page 94: ...association packets received Association creates a connection between the Access Point and the wireless station Wireless stations normally associate with only one access point at any time Disassociation Displays the number of disassociation packets received Disassociation breaks the existing connection between the Access Point and the wireless station Reassociation Displays the number of reassocia...

Page 95: ...ig File Screen Backing Up the Configuration File To back up the configuration file 1 On the menu click Management 2 Click the Config File tab 3 Click Backup The File Download dialog box appears 4 Click Save The Save As dialog box appears 5 Choose a location on the local disk where to save the backup Change the default file name if necessary The default file name is ap11g cfg 6 Click Save ...

Page 96: ...t to restart itself The device will terminate your connection to the Web interface when it restarts By default the Access Point acts as a DHCP client If there is a DHCP server on the network the device will automatically obtain an IP address from it The new IP address will most likely be different from the old one Use the 3Com Access Point Manager to determine the new IP address Sending Device Log...

Page 97: ...y very important alert information to the syslog server 2 Critical 3 Error 4 Warning 5 Notice 6 Informational 5 Click Save Configuring the SNMP Agent An SNMP manager application gains access to the Access Point s SNMP agent if the management application has the Access Point s IP address To ensure security when SNMP is used the SNMP agent can be configured as read only read write or disabled The Ac...

Page 98: ...e normally either Private or Public 5 In Access Rights select either Read only Allows get and trap operations data can be read but not changed Read Write Allows get set and trap operations data can be read and setting changed 6 In Managers specify a trap manager You can set Any Station Only this Station Send traps to a specific computer If you select this option you also need to type the IP addres...

Page 99: ...ss has been designed to preserve your configuration settings 3Com recommends that you make a backup of the configuration beforehand in case the upgrade process fails for any reason For example if the connection between the computer and the Access Point is lost while the new software is being copied to the Access Point your configuration settings may be erased After downloading the firmware upgrade...

Page 100: ...nt the Access Point integrates both auto update and auto configure features Using auto update you can configure the Access Point to automatically check an FTP server for available firmware updates Auto configuration on the other hand lets the Access Point to automatically copy the configuration settings of another compatible access point Figure 51 Auto Config Update Screen Automating Configuration...

Page 101: ...ble access points If it finds a compatible access point it will copy its configuration settings If it finds more than one compatible access point it will copy the configuration of the first that was detected After the Access Point successfully copies another access point s configuration it automatically clears the Perform Auto Configuration on this AP next restart check box This is to prevent the ...

Page 102: ...ame type a logon name that is authorized to access the FTP server 8 In FTP Password type the password for the logon name 9 Click Save Detecting Rogue Access Points A rogue access point is an unauthorized access point on the network Having rogue access points on the network poses a security risk since it can be used as a backdoor to gain access to your network and consequently the devices on it The...

Page 103: ...s detected select the Detection generates SNMP trap check box 6 Specify the criteria by which a detected access point will be considered rogue Select either or both of these check boxes No Security If detected access point does not have wireless security enabled it will be considered as rogue No in Legal IP List If the detected access point is not in the list of authorized access points it will be...

Page 104: ...ilable in the Rogue Access Point List screen SSID Displays the SSID that the rogue access point is broadcasting to the network MAC Address Displays the MAC or physical address of the rogue access point Channel Displays the wireless channel that the rogue access point is using Cause Displays the reason why the access point was considered as rogue Possible reasons include Insecurity Access point doe...

Page 105: ...eady for use Some network interfaces may not be correctly initialized until the startup procedure has completed If the LAN LED is not on check if the cable you are using is not faulty Try a different cable Check also that the Uplink Normal switch on the hub or switch is in the correct position Cannot Connect to the Wireless Access Point to Configure It Check the following The Access Point is prope...

Page 106: ...eset button held down and remove power from the Access Point 4 Release the Reset button 5 Re apply power to the Access Point and when the startup sequence has completed browse to the IP address of the Access Point and run the configuration wizard You may need to restart your computer before you attempt this 6 When the configuration wizard has completed you may reconnect your network as it was befo...

Page 107: ...ork Standard IEEE 802 11b Wi Fi and IEEE 802 11g compliance OFDM 802 11b CCK 11 Mbps 5 5 Mbps DQPSK 2 Mbps DBPSK 1 Mbps Operating Frequencies 2 412 2 497 GHz Operating Channels 802 11g 11 for North America 13 for Europe ETSI 13 for Japan 802 11b 11 for North America 14 for Japan 13 for Europe ETSI Operating temperature 0º C to 40º C Storage temperature 20º C to 70º C Power adapter 24VDC 300ma PD c...

Page 108: ...Specification Description Receive sensitivity at 11 Mbps min 85dBm Receive sensitivity at 5 5 Mbps min 89dBm Receive sensitivity at 2 Mbps min 90dBm Receive sensitivity at 1 Mbps min 93dBm Maximum receive level min 5dBm Transmit power 18 dBm Modulation Direct Sequence Spread Spectrum BPSK QPSK CCK ...

Page 109: ... Mbps 396 meters 1300 ft 2 Mbps 457 meters 1500 ft 1 Mbps 802 11g Indoors 30 meters 98 ft 54 Mbps 33 meters 108 ft 48 Mbps 37 meters 121 ft 36 Mbps 46 meters 151 ft 24 Mbps 62 meters 203 ft 18 Mbps 68 meters 223 ft 12 Mbps 78 meters 256 ft 9 Mbps 92 meters 302 ft 6 Mbps Outdoors 100 meters 328 ft 54 Mbps 295 meters 968 ft 11 Mbps 420 meters 1378 ft 6 Mbps Table 22 Wireless Specifications Specifica...

Page 110: ...s channel selection Antenna selection Tx power adjustment Country selection Preamble type long or short support RTS threshold adjustment Fragmentation threshold adjustment Beacon interval adjustment SSID assignment Operating mode Common AP client repeater AP Peer to peer bridge point to multipoint bridge Bridge mode can be used simultaneously with common AP mode Security Open shared WPA and WPA PS...

Page 111: ... Access control list file support Configuration file backup and restore Statistics support Device discovery program Windows utility Other features DHCP client WINS client Rogue AP detection Auto configuration Auto firmware update Firmware upgrade HTTP FTP network protocol download Table 23 Software Specifications Specification Description ...

Page 112: ...104 APPENDIX A TECHNICAL SPECIFICATIONS ...

Page 113: ...ting to the CLI via Telnet To use Telnet session to gain access to the CLI the computer that you are using must have a TCP IP stack This computer can be on either the wired or wireless local network To connect to the CLI via Telnet 1 From the command prompt telnet to the Access Point s IP address For example if the Access Point is using its default IP address 192 168 0 228 enter Telnet 192 168 0 2...

Page 114: ...e Programs in Control Panel And then click Windows Setup or Add Remove Windows Components depending on your version of Windows Select the check box for HyperTerminal and then click OK to install it 3 Configure the connection properties In Name assign a name to this connection to the Access Point In Port or Connect Using select the serial port to which the cable is connected Do not select your mode...

Page 115: ... name and password that you use for the Web interface The default user name is admin and the default password is password The command prompt appears You are now connected to the Access Point via the serial port Once connected you can use any of the commands listed in Command Reference starting on page 108 Cable Pinouts for Serial Connectors Figure 54 and Figure 55 describe the connector pinout ass...

Page 116: ...reen 3 RxD 2 TxD 7 Ground 4 RTS 20 DTR 5 CTS 6 DSR 8 DCD Access Point Cable Connector 9 Pin Female PC Terminal Cable Connector 25 Pin Male Female Screen Shell DTR 4 TxD 3 RxD 2 CTS 8 Ground 5 DSR 6 RTS 7 DCD 1 Shell Screen 1 DCD 2 RxD 3 TxD 4 DTR 5 Ground 6 DSR 7 RTS 8 CTS Access Point Cable Connector 9 Pin Female PC AT Serial Port Cable Connector 9 Pin Female Table 24 Console Commands Command Des...

Page 117: ...splay authentication type get autochannelselect Display auto channel select get basic11b Display basic 11b rates get basic11g Display basic 11g rates get beaconinterval Display beacon interval get burstSeqThreshold Display max number of frames per burst get burstTime Display burst time get calibration Display noise and offset calibration mode get cckTrigHigh Display higher trigger threshold for CC...

Page 118: ...n rate get gdraft5 Display 11g draft 5 0 compatibility get groupkeyupdate Display group key update interval in seconds get hardware Display hardware revisions get hostipaddr Display host IP address get ipaddr Display IP address get ipmask Display IP subnet mask get keyentrymethod Display encryption key entry method get keysource Display source of encryption keys get login Display logon user name g...

Page 119: ... get rtsthreshold Display RTS CTS threshold get shortpreamble Display short preamble usage get shortslottime Display short slot time usage get sntpserver Display SNTP NTP server IP address get softwareretry Display software retry get spurImmunityLvl Display ANI parameter for spur immunity level get ssid Display service set ID get ssidsuppress Display SSID suppress mode get station Display station ...

Page 120: ...play rogue AP definition get roguesnmp Display rogue AP detection SNMP trap enable disable get roguelegal Display legal AP list of rogue AP get autoConfig Display auto config enable disable get autoResponse Display respond to auto config request enable disable get autoChangeName Display provide admin logon name and password enable disable get autoSetResp Display provide respond to auto config requ...

Page 121: ...thentication enable disable get snmpMode Display SNMP mode get snmpCommunity Display SNMP community name get snmpAccessRight Display SNMP access right get snmpAnyStaMode Display SNMP any station mode get snmpStationIPAddr Display SNMP station address get trapMode Display trap mode get trapVersion Display trap version get trapSendMode Display trap send mode get trapRecvIp Display trap receiver IP a...

Page 122: ... Set aging interval set antenna Set antenna set authentication Set authentication type set autochannelselect Set auto channel selection set basic11b Set use of basic 11b rates set basic11g Set use of basic 11g rates set beaconinterval Modify beacon interval set burstSeqThreshold Set maximum number of frames per burst set burstTime Set burst time set calibration Set calibration period set cckTrigHi...

Page 123: ...z set gateway Set gateway IP address set gbeaconrate Set 11g beacon rate set groupkeyupdate Set group key update interval in seconds set gdraft5 Set 11g draft 5 0 compatibility set hostipaddr Set host IP address set ipaddr Set IP address set ipmask Set IP subnet mask set keyentrymethod Select encryption key entry method set keysource Select source of encryption keys set login Modify logon user nam...

Page 124: ...ccess point s MAC address set hwtxretries Set HW transmit retry limit set swtxretries Set SW transmit retry limit set rtsthreshold Set RTS CTS threshold set shortpreamble Set short preamble set shortslottime Set short slot time set sntpserver Set SNTP NTP server IP address set softwareretry Set software retry set spurImmunityLvl Set ANI parameter for spur immunity level set ssid Set service set ID...

Page 125: ...et roguetype Set rogue AP definition set roguesnmp Set rogue AP detection SNMP trap enable disable set roguelegal Add delete one AP MAC OUI into from rogue AP legal List set autoConfig Set auto config enable disable set autoResponse Set respond to auto config request enable disable set autoChangeName Set provide admin logon name and password enable disable set autoSetResp Set provide respond to au...

Page 126: ...hentication logon failure URL set macAuth Set MAC authentication enable disable set snmpMode Set SNMP mode set snmpCommunity Set SNMP community name set snmpAccessRight Set SNMP access rights set snmpAnyStaMode Set SNMP any station mode set snmpStationIPAddr Set SNMP station address set trapMode Set trap mode set trapVersion Set trap version set trapSendMode Set trap send mode set trapRecvIp Set t...

Page 127: ...debug level set sdAdd Add debug level set sdDel Del debug level start wlan Start the current WLAN stop wlan Stop the current WLAN timeofday Display current time of day version Software version Table 24 Console Commands Command Description ...

Page 128: ...120 APPENDIX B COMMAND LINE REFERENCE ...

Page 129: ...e In infrastructure mode one or more Access Points are used to connect wireless stations to a wired local network The wireless stations that are associated with the Access Point can access all resources on the local network Access Points can only function in infrastructure mode and can communicate only with wireless stations that are set to infrastructure mode SSID ESSID BSS SSID A group of wirele...

Page 130: ...re available in North America if using 802 11b If using multiple Access Points it is better if adjacent Access Points use different channels to reduce interference The recommended channel spacing between adjacent Access Points is 5 channels for example use Channels 1 and 6 or 6 and 11 In infrastructure mode wireless stations normally scan all channels to search for an active Access Point If more t...

Page 131: ...gon account on the RADIUS server Each wireless station must support 802 1x and provide the logon data when required All data transmission is encrypted using the WPA standard Keys are automatically generated so no key input is required 802 1x This uses the 802 1x standard for client authentication and WEP for data encryption If possible you should use WPA 802 1x instead because WPA encryption is mu...

Page 132: ...124 APPENDIX C WIRELESS LAN BASICS ...

Page 133: ... connectivity between equipment from many vendors over a wide variety of networking technologies For the wireless stations to be able to communicate with the Access Point they must have TCP IP settings that match This appendix provides step by step instructions for Configuring TCP IP on Windows XP Configuring TCP IP on Windows 2000 Configuring TCP IP on Windows Me 98 95 Configuring TCP IP on Windo...

Page 134: ...HE TCP IP SETTINGS OF WIRELESS STATIONS Figure 56 Local Area Connection Properties Dialog Box on Windows XP 3 Click Internet Protocol TCP IP and then click Properties The TCP IP Properties dialog box as shown in Figure 61 appears ...

Page 135: ... then do the following In IP Address type an IP address that belongs to the same range as the IP address assigned to the Access Point For example if the Access Point is using its default IP address 192 168 0 228 type an IP address within the range 192 168 0 1 to 192 168 0 255 except 192 168 0 228 In Subnet Mask type the same subnet mask that is assigned to the Access Point For example if the mask ...

Page 136: ...Settings and then click Network and Dial up Connections 2 Right click the local area network connection that you want to configure and then click Properties The Local Area Network Connection window appears as shown in Figure 58 Figure 58 Local Area Connection Properties Dialog Box on Windows 2000 3 Click Internet Protocol TCP IP and then click Properties The TCP IP Properties dialog box as shown i...

Page 137: ...nd then do the following In IP Address type an IP address that belongs to the same range as the IP address assigned to the Access Point For example if the Access Point is using its default IP address 192 168 0 228 type an IP address within the range 192 168 0 1 to 192 168 0 255 except 192 168 0 228 In Subnet Mask type the same subnet mask that is assigned to the Access Point For example if the mas...

Page 138: ...rt menu point to Settings and then click Control Panel 2 Double click Network The Network dialog box appears as shown in Figure 60 Figure 60 Network Dialog Box on Windows Me 98 95 3 Select the TCP IP component for the wireless network card and then click Properties The TCP IP Properties dialog box as shown in Figure 61 appears Figure 61 TCP IP Properties Dialog Box 4 Verify that the TCP IP setting...

Page 139: ...ddress 192 168 0 228 type an IP address within the range 192 168 0 1 to 192 168 0 255 except 192 168 0 228 In Subnet Mask type the same subnet mask that is assigned to the Access Point For example if the mask that is assigned to the Access Point is 255 255 255 0 type 255 255 255 0 5 Click OK You may have to restart the wireless station for the changes to take effect Configuring TCP IP on Windows N...

Page 140: ... IP SETTINGS OF WIRELESS STATIONS Figure 62 Network Dialog Box on Windows NT 3 Select the TCP IP component for the wireless network card and then click Properties The Microsoft TCP IP Properties dialog box as shown in Figure 61 appears ...

Page 141: ...the following In IP Address type an IP address that belongs to the same range as the IP address assigned to the Access Point For example if the Access Point is using its default IP address 192 168 0 228 type an IP address within the range 192 168 0 1 to 192 168 0 255 except 192 168 0 228 In Subnet Mask type the same subnet mask that is assigned to the Access Point For example if the mask that is a...

Page 142: ...134 APPENDIX D CONFIGURING THE TCP IP SETTINGS OF WIRELESS STATIONS ...

Page 143: ...t If you have trouble registering your product please contact 3Com Global Services for assistance Purchase Value Added Services To enhance response times or extend warranty benefits contact 3Com or your authorized 3Com network supplier Value added services like 3Com ExpressSM and GuardianSM can include 24x7 telephone technical support software upgrades onsite assistance or advance hardware replace...

Page 144: ...pport heading at http www 3com com Software Upgrades are the software releases that follow the software version included with your original product In order to access upgrades and related documentation you must first purchase a service contract from 3Com or your 3Com network supplier Telephone Technical Support and Repair To enable telephone support and other service benefits you must first regist...

Page 145: ... directory of contact information posted on the 3Com Web site at http csoweb4 3com com contactus Country Telephone Number Country Telephone Number Asia Pacific Rim Telephone Technical Support and Repair Australia Hong Kong India Indonesia Japan Malaysia New Zealand Pakistan 1 800 678 515 800 933 486 61 2 9424 5179 or 000800 650 1111 001 803 61009 00531 616 439 or 03 3507 5984 1800 801 777 0800 446...

Page 146: ...12 1 800 998 2112 52 5 201 0010 1 800 998 2112 1 800 998 2112 0800 13 3COM 1 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 1 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 Guatemala Haiti Honduras Jamaica Martinique Mexico Nicaragua Panama Paraguay Peru Puerto Rico Salvador Trinidad and Tobago Uruguay Venezuela Virgin Islands AT T 800 998 2112 57 1 657 0888 AT T 800 998 2112...

Page 147: ...nt with other OfficeConnect units WARNING To ensure compliance with international safety standards only use the power adapter that is supplied with the unit WARNING The socket outlet must be near to the unit and easily accessible You can only remove power from the unit by disconnecting the power cord from the outlet WARNING This unit operates under SELV Safety Extra Low Voltage conditions accordin...

Page 148: ...räts ist mit höchster Vorsicht vorzugehen VORTSICHT Stapeln Sie das Geräts nur mit anderen OfficeConnect Gerätes zusammen VORSICHT Aufgrund von internationalen Sicherheitsnormen darf das Gerät nur mit dem mitgelieferten Netzadapter verwendet werden VORSICHT Die Netzsteckdose muß in der Nähe des Geräts und leicht zugänglich sein Die Stromversorgung des Geräts kann nur durch Herausziehen des Geräten...

Page 149: ...ISSEMENT Faites très attention lors de l installation et de la dépose du groupe AVERTISSEMENT Seulement entasser le moyer avec les autres moyeux OfficeConnects AVERTISSEMENT Pour garantir le respect des normes internationales de sécurité utilisez uniquement l adaptateur électrique remis avec cet appareil AVERTISSEMENT La prise secteur doit se trouver à proximité de l appareil et son accès doit êtr...

Page 150: ...aptateur électrique avant de retirer cet appareil AVERTISSEMENT Ports RJ 45 Il s agit de prises femelles blindées de données RJ 45 Vous ne pouvez pas les utiliser comme prise de téléphone Branchez uniquement des connecteurs de données RJ 45 sur ces prises femelles ...

Page 151: ...ess clients and which acts as a bridge between wireless clients and a wired network such as Ethernet Wireless clients can be moved anywhere within the coverage area of the Access Point and still connect with each other If connected to an Ethernet network the Access Point monitors Ethernet traffic and forwards appropriate Ethernet messages to the wireless network while also monitoring wireless clie...

Page 152: ... addresses such as 192 34 45 8 A DNS server keeps a database of host computers and their respective domain names and IP addresses so that when a domain name is requested as in typing 3com com into your Internet browser the user is sent to the proper IP address The DNS server address used by the computers on your home network is the location of the DNS server your ISP has assigned encryption A meth...

Page 153: ...essed devices An IP address consists of 32 bits divided into two or three fields a network number and a host number or a network number a subnet number and a host number IP Address Internet Protocol Address A unique identifier for a device attached to a network using TCP IP The address is written as four octets separated with periods full stops and is made up of a network section an optional subne...

Page 154: ...nsion of the IP addressing scheme that allows a site to use a single IP network address for multiple physical networks subnet mask A subnet mask which may be a part of the TCP IP information provided by your ISP is a set of four numbers configured like an IP address It is used to create IP address numbers used only within a particular network as opposed to valid IP address numbers recognized by th...

Page 155: ...ity criteria see also 802 11b 802 11g WECA wireless client or wireless station The term used to describe a desktop or mobile PC that is wirelessly connected to your wireless network Wireless LAN Service Area Another term for ESSID Extended Service Set Identifier wizard A Windows application that automates a procedure such as installation or configuration WLAN Wireless Local Area Network A WLAN is ...

Page 156: ...148 GLOSSARY ...

Page 157: ...erial port 106 connecting via Telnet 105 client certificate 73 command line interface See CLI configuration file 86 backing up 87 restoring from backup 88 console port 17 conventions notice icons About This Guide 2 text About This Guide 2 D DHCP support 7 disassociated timeout 58 E Ethernet port 18 F features 6 configuration and management 15 security 12 wireless and networking 6 firmware download...

Page 158: ...uring for UAM authentication 40 configuring for WPA 802 1x 61 setting up Microsoft IAS 63 requirements installation 19 wireless stations 19 Reset button 18 resetting to factory defaults 88 98 rogue access points detecting 94 viewing detected 96 RTS CTS threshold 58 S security information 139 security profile 28 configuring 29 viewing summary 82 security settings 802 1x 36 configuring 31 WEP 31 WPA...

Page 159: ... 8 wireless clients See wireless stations Wireless Distribution System 7 Wireless Distribution System See WDS wireless security 29 802 1x 30 WEP 29 WPA 802 1x 29 WPA PSK 29 wireless separation 58 wireless settings 802 11b 58 advanced 57 basic 52 configuring 52 wireless stations configuring for 802 1x 72 configuring for 802 1x without WPA 77 configuring for WEP 60 configuring for WPA 802 1x 62 conf...

Page 160: ...152 INDEX ...

Page 161: ...dio TV Interference Problems This booklet is available from the U S Government Printing Office Washington DC 20402 Stock No 004 000 00345 4 In order to meet FCC emissions limits this equipment must be used only with cables which comply with IEEE 802 3 CSA STATEMENT This Class B digital apparatus meets all requirements of the Canadian Interference Causing Equipment Regulations Cet appareil numériqu...

Page 162: ... the interference causing equipment standard entitled Digital Apparatus ICES 003 of Industry Canada Cet appareil numérique respecte les limites de bruits radioélectriques applicables aux appareils numériques de Classe B préscrites dans la norme sur le matèriel brouilleur Appareils Numériques NMB 003 édictée par l Industrie Canada ...

Search results

Summary of Contents for 3CRGPC10075

Reviews:

Related manuals for 3CRGPC10075

Brands by name

Popular brands

3Com 3CRGPC10075, User Manual

Search results

Summary of Contents for 3CRGPC10075

Reviews:

Related manuals for 3CRGPC10075

Brands by name

Popular brands