background image

49

WPA C

ONFIGURATION

 

FOR

 W

INDOWS

 XP

The following table shows how to configure the access point to support the various 
authentication and encryption options available for Windows XP Wireless Zero 
Configuration.

The following notes apply to configuring the access point for WPA under Windows 
XP:

o

A WPA-capable wireless network interface card is required.

o

The Windows XP Support Patch for Wireless Protected Access, which you can 
download from the Microsoft Web site, is required.

o

To allow WEP clients, clear the WPA Configuration Required check box and enter 
an appropriate WEP key.

o

For all WPA configurations, 802.1x must be enabled on the Authentication page.

Windows XP Wireless Zero 

Configuration

Access Points 8200/8250/8500/8700/8750

Authentication 

Encryption 

Authentication 

Encryption 

Other

Open

Disabled

Open System

Disable

WEP

Open System

Enable

Enter static keys under 

WEP Configuration 

Shared

Disabled

Not available

WEP

Shared Key

Enable

Enter static keys under 

WEP Configuration 

WPA

AES

Not available on 8200

TKIP

Open System

Enable

WPA Configuration: 

Required
Multicast Cipher Mode: 

TKIP
WPA Key Management: 

WPA 802.1x

WEP

Open System

Enable

WPA Configuration: 

Required
Multicast Cipher Mode: 

WEP
WPA Key Management: 

WPA 802.1x

Summary of Contents for 3CRWE825075A

Page 1: ...p www 3com com support en_US productreg frontpg html User Guide Wireless LAN Access Points 8250 8500 8750 3CRWE825075A 3CRWE850075A 3CRWE875075A Models WL 450 WL 462 WL 463 Version 2 Published January...

Page 2: ...opy will be provided to you UNITED STATES GOVERNMENT LEGEND If you are a United States government agency then this documentation and the software described herein are provided to you subject to the fo...

Page 3: ...1 1 Installing the Access Point Installation Requirements 13 Power Requirements 14 Safety Information 14 Deciding Where to Place Equipment and Performing A Site Survey 15 16 Before You Begin 16 Connec...

Page 4: ...5 Filtering by VLAN 35 Security Filters 36 Client List Timeout 36 Uplink Port MAC Address Filtering 36 Filtering by Ethernet Protocol Type 37 SNMP 37 Administration 38 System Log 39 Status 40 Radio In...

Page 5: ...Product 54 Register Your Product to Gain Service Benefits 54 Purchase Value Added Services 54 Where To Go For Help 54 Troubleshoot Online 54 Access Software Downloads 55 Contact Us 55 Telephone Techni...

Page 6: ...ork from anywhere they happen to be conference room cafeteria or office 3Com s dual mode design supports 802 11g 802 11a and 802 11b wireless standards on a single access point This capability increas...

Page 7: ...ABILITY 3Com wireless access point performance features ensure reliable and seamless connections for users wherever they roam Automatic channel selection automatically finds the least loaded channel f...

Page 8: ...cation guarantees compatibility among vendors o Providing access to hot spots in public spaces such as coffee shops or university cafeterias HIGH PERFORMANCE 802 11A Ratified in 2002 802 11a is IEEE s...

Page 9: ...less adapter connected via radio signals as an independent wireless LAN Computers in a specific ad hoc wireless LAN must therefore be configured to the same radio channel An ad hoc wireless LAN can be...

Page 10: ...e Set BSS is the communications domain for each access point For wireless PCs that do not need to support roaming set the domain identifier SSID for the wireless card to the SSID of the access point t...

Page 11: ...maintains communications with the mobile radiotelephone sets within its range In cellular and personal communications applications each cell or micro cell has its own base station each base station in...

Page 12: ...ser moves around an ESS and maintains a continuous connection to the infrastructure network RTS Threshold Transmitters contending for the medium may not be aware of each other they are hidden nodes Th...

Page 13: ...hernet power supply that comes with the access point If your LAN equipment complies with the IEEE 802 3af power over Ethernet standard you can connect directly to the equipment and the 3Com power supp...

Page 14: ...he safety of people and equipment only professional network personnel should install the access point cables and antennas Note for use of the 3Com power supply part number 61 0107 000 in Norway This p...

Page 15: ...includes these kinds of obstructions you may need to add additional access points to improve coverage Configuring a wireless LAN can be as easy as placing a 3Com Wireless Access Point in a central are...

Page 16: ...Point 8250 and Access Point 8750 are supplied with standard detachable antennas These should be attached before the access point is installed If using an alternate antenna see Selecting and Connectin...

Page 17: ...le for use with the access point See Selecting and Connecting a Different Antenna Model on page 22 CONNECTING POWER It is advisable to connect the power and check the Ethernet cables and LEDs before i...

Page 18: ...e for connecting power be sure that it is standard category 5 straight through 8 wire cable that has not been altered in any way Use of nonstandard cable could damage the access point Refer to the ill...

Page 19: ...on a wall including a mounting plate For a secure installation the mounting plate should be placed perpendicular to the floor with the arrow pointed up as indicated on the mounting plate with the smo...

Page 20: ...the mounting plate as a template for vertical alignment as shown at right in the illustration above o Use a 5 mm 3 16 in drill bit if using the plastic anchors provided o For drywall mounts you can r...

Page 21: ...ou choose a flat surface mount select a location that is clear of obstructions and provides good reception Hold the access point at an angle Turn clockwise to engage and secure it on the mounting plat...

Page 22: ...e physical safety of anyone near the antenna and to prevent damage to the access point follow the building codes for antenna installations in your area Also when connecting the optional antenna to the...

Page 23: ...e from the antenna to the access point 2 If they are installed remove both arms of the standard detachable antenna making sure not to handle the tips of the antenna 3 Connect one end of the optional a...

Page 24: ...lities to help you set up and administer the wireless components of your network 2 5dBi 3CWE492 4dBi 3CWE490 3CWE497 8dBi 3CWE491 3CWE498 6 ft 3CWE480 100 100 100 20ft 3CWE481 100 100 100 50 ft 3CWE48...

Page 25: ...plays network links and IP devices including 3Com wireless access points It is not required for access point management o 3Com Site Survey Tool This utility assists in selecting the best location for...

Page 26: ...ss network or connected directly to the computer and connected to power If more than one device using the factory default name is connected make a note of the MAC address of the device you want to sel...

Page 27: ...ing the Pre IP Configuration Wizard on page 28 The next window prompts for an administrative password to allow the new IP address to be set When the units are shipped from the factory there is no admi...

Page 28: ...and you should leave the password field blank If an administration password has been set for the device enter the password and click Next The Configuration Management System main page appears in the...

Page 29: ...rating radio channel number o Auto Channel Select When this mode is enabled the access point selects a radio channel automatically 802 11a You can select from these options o Turbo Mode In some countr...

Page 30: ...lick Apply DHCP CLIENT When DHCP Dynamic Host Configuration Protocol Client is enabled and a DHCP server is located on the network the network DHCP server assigns the IP address subnet mask and defaul...

Page 31: ...between the various RADIUS policies or authentication types for example EAP MD5 EAP TLS EAP TTLS These policies are setup and controlled on the AAA server Note that for most RADIUS software packages t...

Page 32: ...ransmit attempts The number of times the access point will try to authenticate logon access o Update Interval RADIUS Accounting Only This is the interval in seconds between accounting updates sent to...

Page 33: ...access point will neither initiate nor respond to any 802 1x authentication requests to or from wireless clients Supported Legacy clients non 802 1x and 802 1x clients are both supported This is prov...

Page 34: ...te using the username and password supplied If you press the Apply button when no password is specified the previous password will continue to be the one used You must enter the same password twice to...

Page 35: ...back to the authenticating client The AP s IP address is the RADIUS Client Radius User Tunnel_type 64 VLAN 13 Tunnel_Medium_type 65 802 Tunnel_Private_group_ID 81 VLAN ID specified in Hexadecimal form...

Page 36: ...ccess point for management for example through TELNET or SNMP CLIENT LIST TIMEOUT This option sets the timeout for inactive clients to be disassociated and removed from the associated client list The...

Page 37: ...P server if it not the same as the gateway as well as and redirect gateways and other servers that should be allowed to communicate with the AP s wireless clients Make sure to click on the save button...

Page 38: ...the user name and new password in the spaces provided and click Apply It is recommended that you change the password from the default value no password to ensure network security o Firmware Upgrade Y...

Page 39: ...de at the point the backup was created will appear in the User Comments field This feature allows the user to select the correct restoration point To restore comments Click the Restore Comments button...

Page 40: ...ter a reset until the access point receives the correct information from the SNTP server STATUS The Status pages display additional information about the access point status and station status o AP St...

Page 41: ...hoose channels separated by at least five channels to avoid channel interference You can deploy up to three access points in the same area for example Ch1 Ch6 and Ch11 o Auto Channel Select 802 11g an...

Page 42: ...m can solve this hidden node problem Default 2346 o Preamble Setting 802 11g and 802 11b only IEEE 802 11 frames begin with an alternating pattern of 1s and 0s called the preamble which tells receivin...

Page 43: ...d on the access control list and the saved passwords on the clients 3 Create a User Access List There must be at least one entry in the User Access List which determines the users that can associate w...

Page 44: ...support is critical AES Advanced Encryption Standard Highest Security TKIP Temporal Key Integrity Protocol provides per packet key mixing a message integrity check and a re keying mechanism WEP Provi...

Page 45: ...At least one transmit key must be defined in the WEP Configuration Wireless devices without a valid WEP key will be excluded from network traffic The key selected as the transmit key index is used by...

Page 46: ...r Primary RADIUS Authentication Server make sure the IP Address and Key match those on the RADIUS Authentication software 6 Click on Apply 7 Choose Authentication from the left frame page Menu 8 Make...

Page 47: ...ion is Disabled if Local or RADIUS MAC Authentication is chosen MAC address filtering or authentication respectively will be done before the 802 1x authentication Therefore these setups must be valida...

Page 48: ...ust be validated individually and verified functional before 802 1x can be done b 802 1x Wireless Setup is set to Disabled or Optional if RADIUS clients need access too c Click on Apply 6 Click Securi...

Page 49: ...nfiguration Required check box and enter an appropriate WEP key o For all WPA configurations 802 1x must be enabled on the Authentication page Windows XP Wireless Zero Configuration Access Points 8200...

Page 50: ...nt WPA PSK Select Key Type and enter Pre Shared Key WEP Open System Enable WPA Configuration Required Multicast Cipher Mode WEP WPA Key Management WPA PSK Select Key Type and enter Pre Shared Key Wind...

Page 51: ...ame subnet as the wired LAN If necessary reset the access point to the factory defaults Try the solutions in the following table If you need further assistance contact 3Com Technical Support through t...

Page 52: ...ers can roam are configured to the same WEP setting SSID and authentication settings Slow or erratic performance Try changing the wireless channel on the access point Check the access point antennas c...

Page 53: ...rvice area to match If you change the IP address and save the change you cannot continue to configure the access point using the old IP address Therefore if you want to continue configuring this acces...

Page 54: ...24x7 telephone technical support software upgrades onsite assistance or advance hardware replacement Experienced engineers are available to manage your installation with minimal disruption to your ne...

Page 55: ...il and internet access to technical support and repair services To access these services for your region use the appropriate telephone number URL or e mail address from the list below You will find a...

Page 56: ...m com Or request a repair authorization number RMA by fax using this number 65 543 6348 Europe Middle East and Africa Telephone Technical Support and Repair From anywhere in these regions call 44 0 14...

Page 57: ...800 988 2112 0 810 444 3COM 1 800 998 2112 1 800 998 2112 1 800 998 2112 52 5 201 0010 1 800 998 2112 1 800 998 2112 0800 13 3COM 1 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 AT T 800 998 2112 1...

Page 58: ...and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that inte...

Page 59: ...ymbol indicates compliance with the essential requirements of Directive 73 23 EC and the essential requirements of articles 3 1 b 3 2 and 3 3 of Directive 1999 5 EC Such marking is indicative that thi...

Page 60: ...Marking by the symbol indicates that usage restrictions apply n To ensure compliance with local regulations be sure to select the country in which the access point in installed n This product can be u...

Page 61: ...d and certified according to the following safety standards and is intended for use only in Information Technology Equipment which has been tested and certified to these or other equivalent standards...

Page 62: ...tion 32 43 local MAC 34 MAC 33 open system 43 RADIUS MAC 33 shared key 43 automatic channel selection 41 B backup configuration 38 basic configuration 29 beacon interval 41 bridge resetting 31 broadca...

Page 63: ...52 L launching the device manager 26 LEDs 19 local bridge filter 36 local MAC authentication 34 locating devices 26 27 MAC address 35 location configuration parameter 38 for installation 15 log 39 log...

Page 64: ...setup 802 1x 33 shared key 43 shared key encryption 45 Simple Network Management Protocol SNMP 37 software utilities installing 24 25 SSID 41 stations status 40 statistics accounting 32 status 40 subn...

Reviews: