background image

31

Local MAC Authentication

—Client computers can be filtered using the 

unique MAC addresses of their network cards. To build the MAC 
Authentication Table, enter a MAC address in the space provided, choose the 
permission, and click 

Update.

 MAC addresses are listed in the MAC 

Authentication Table in the order that they were entered. The Local MAC 
Authentication parameters are described in the following table:

F

ILTER

 C

ONTROL

The Filter Control page allows you to control client communication within the 
wireless network. You may enable one or more types of supported filtering; 
however, some filter choices may supersede others. Configure the options as 
described below. When you are finished, click 

Apply.

 

Session Key Refresh Rate


(minutes)

Defines how long the RADIUS server will 
dynamically re-assign a session key to a 
connected client station.

802.1x Reauthentication 
Refresh Rate


(seconds)

Defines how long the RADIUS server will 
dynamically reassign session keys to 
connected client stations.

Parameter

Description

System Default

Define the default filtering setting as Deny or Allow.

MAC Address

Enter the MAC address of a client for the access control. You 
can find the MAC address of a network card as follows:

Windows 95/98/ME

—Click 

Start/Run.

 Type winipcfg and 

press 

Enter.

 The MAC address is in the Adapter 

Address section. 

Windows NT4/2000/XP

—At the command prompt, type 

ipconfig /all and press 

Enter.

 The MAC address is listed as the 

Physical Address.

Linux

—Run the command “/sbin/ipconfig.” The card’s MAC 

address is the value after the word “HWaddr.”

Permission

Allows or denies access to the access point of devices 
matching the specified MAC address.

Update button

Click 

Update

 to refresh the MAC Authentication Table. To 

avoid the possibility of entering an invalid MAC address on 
the Authentication page, always click 

Update

 after typing the 

address. If you press 

Enter,

 address error checking does 

not occur.

Field

Default

Description

Summary of Contents for 3CRWE870075A - Wireless LAN Access Point...

Page 1: ...http www 3com com http support 3com com registration frontpg pl User Guide Wireless LAN Access Points 8200 8500 8700 3CRWE820096A 3CRWE850075A 3CRWE870075A Version 2 Published May 2003 Version 2 1 3...

Page 2: ...m and a copy will be provided to you UNITED STATES GOVERNMENT LEGEND If you are a United States government agency then this documentation and the software described herein are provided to you subject...

Page 3: ...ss LAN for Roaming Wireless PCs 11 Terminology 11 2 Installing the Access Point Installation Requirements 13 Power Requirements 14 Safety Information 14 Deciding Where to Place Equipment 15 Before You...

Page 4: ...re Web Server Connection 28 RADIUS 29 Authentication 30 Filter Control 31 Filtering by VLAN 32 Security Filters 32 Filtering by Ethernet Protocol Type 32 SNMP 33 Administration 33 System Log 34 Status...

Page 5: ...Support from 3Com 46 Returning Products for Repair 47 Regulatory Compliance Information Index...

Page 6: ...wireless network that provides users with seamless connectivity to the Internet company intranet and the wired corporate network from anywhere they happen to be conference room cafeteria or office 3Co...

Page 7: ...otocol EAP support EAP MD5 EAP TLS EAP TTLS and PEAP In addition to standards based security 3Com 128 bit Dynamic Security Link offers the highest level of security requiring a user name and password...

Page 8: ...is slower than 802 11a and it is subject to a greater risk of radio interference because it operates in the more popular 2 4 GHz band Consider 802 11b when you need wider coverage and vendor compatib...

Page 9: ...umber of non overlapping channels you can pack more access points in a tighter space NETWORK CONFIGURATION AND PLANNING The wireless solution supports a stand alone wireless network configuration as w...

Page 10: ...structure via the access point The infrastructure configuration not only extends the accessibility of wireless PCs to the wired LAN but also increases the effective wireless transmission range for wir...

Page 11: ...networking device that seamlessly connects wired and wireless networks Ad Hoc An ad hoc wireless LAN is a group of computers each with LAN adapters connected as an independent wireless LAN Backbone Th...

Page 12: ...nals Infrastructure An integrated wireless and wired LAN is called an infrastructure configuration Roaming A wireless LAN mobile user moves around an ESS and maintains a continuous connection to the i...

Page 13: ...ower over Ethernet power supply that comes with the access point If your LAN equipment complies with the IEEE 802 3af power over Ethernet standard you can connect directly to the equipment and the 3Co...

Page 14: ...nstalled in compliance with local and national building codes regulatory restrictions and FCC rules For the safety of people and equipment only professional network personnel should install the access...

Page 15: ...gnal loss can occur if metal concrete brick walls floors or other architectural barriers block transmission If your location includes these kinds of obstructions you may need to add additional access...

Page 16: ...chable antennas These should be attached before the access point is installed If using an alternate antenna see Selecting and Connecting a Different Antenna Model on page 22 1 Carefully unpack the sta...

Page 17: ...nas available for use with the access point See on page 21 CONNECTING POWER It is advisable to connect the power and check the Ethernet cables and LEDs before installing the unit in a hard to reach lo...

Page 18: ...ht through 8 wire cable that has not been altered in any way Use of nonstandard cable could damage the access point Refer to the illustration above and follow these steps 1 Connect one end of the Ethe...

Page 19: ...e access point comes equipped with all the necessary hardware for mounting on a wall including a mounting plate For a secure installation the mounting Name Description Radio LED blinks red to indicate...

Page 20: ...w For installation on to drywall mark three screw holes using the mounting plate as a template for vertical alignment as shown at right in the illustration above Use a 5 mm 3 16 in drill bit if using...

Page 21: ...ou choose a flat surface mount select a location that is clear of obstructions and provides good reception Hold the access point at an angle Turn clockwise to engage and secure it on the mounting plat...

Page 22: ...sory cable model 3CWE481 to provide the transition from the SMA connector on the access point to the N type connector on the antenna To ensure the physical safety of anyone near the antenna and to pre...

Page 23: ...Infrastructure Device Manager Use this tool to discover access points and select devices for administrative changes 3Com 3CDaemon Server Tool This tool can act in four different capacities As a TFTP S...

Page 24: ...e wireless network or connected directly to the computer and connected to power If more than one device using the factory default name is connected make a note of the MAC address of the device you wan...

Page 25: ...see Using the Pre IP Configuration Wizard on page 26 The next window prompts for an administrative password to allow the new IP address to be set When the units are shipped from the factory there is n...

Page 26: ...field blank If an administration password has been set for the device enter the password and click Next The Configuration Management System main page appears in the Web browser CONFIGURATION LOGIN Aft...

Page 27: ...e access point to operate with a data rate of up to 108 Mbps If Turbo Mode is not allowed in your country this option is not available 802 11a Radio Channel Set the operating radio channel number Auto...

Page 28: ...y where x and y are random numbers When DHCP Client is disabled you can specify the IP setup as follows IP Address and Subnet Mask If you configure an IP address and subnet mask you must configure th...

Page 29: ...p in case the primary server fails The access point will use the secondary server if a failure is detected in the primary server Once the access point switches over to the secondary server it periodic...

Page 30: ...thentication protocol See RADIUS on page 29 and 802 11x Setup below Disable No checks are performed on an incoming client 802 1x Setup 802 1x is designed to enhance the security management of the wire...

Page 31: ...Refresh Rate 0 seconds Defines how long the RADIUS server will dynamically reassign session keys to connected client stations Parameter Description System Default Define the default filtering setting...

Page 32: ...clients client to client blocking and prevent wireless clients from performing access point administration Local Bridge Filter Enable this filter to prevent direct communication between wireless clie...

Page 33: ...ll in the IP address box for a trap manager that will receive these messages Trap Destination Community Name Fill in the community string box for a trap manager that will receive these messages Maximu...

Page 34: ...guring items on this page click Apply Each logging message is tagged with a severity level as defined in RFC3164 The severity levels are Emergency system is unusable Alert action must be taken immedia...

Page 35: ...of the access point The event log resets to zero if the access point is reset The log saves 128 events then overwrites the first event and continues RADIO INTERFACE The access point radio interface de...

Page 36: ...Rate Select the appropriate data rate from the drop down list for the data transfer speed running on your network 802 11a default 54 Mbps 802 11b default 11 Mbps In order to reach all clients this ra...

Page 37: ...to synchronize to the incoming data stream Enabling the Short preamble can boost your throughput however this can cause interoperability issues Default Long SECURITY The Security page allows you to se...

Page 38: ...the names to be deleted and click Apply To modify a password click Change Password In the next page select the user name from the pull down list Enter the new password in the spaces provided and clic...

Page 39: ...ted as the transmit key index is used by the access point for all transmissions Other keys defined can be used by the access point for decrypting station communications When enabling 802 1x security w...

Page 40: ...for Windows XP Wireless Zero Configuration The following notes apply to configuring the access point for WPA under Windows XP A WPA capable wireless network interface card is required The Windows XP...

Page 41: ...PA PSK AES Not available TKIP Open System Enable WPA Configuration Required Multicast Cipher Mode TKIP WPA Key Management WPA PSK Select Key Type and enter Pre Shared Key WEP Open System Enable WPA Co...

Page 42: ...the same subnet as the wired LAN If necessary reset the access point to the factory defaults Try the solutions in the following table If you need further assistance contact 3Com Technical Support thr...

Page 43: ...ers can roam are configured to the same WEP setting SSID and authentication settings Slow or erratic performance Try changing the wireless channel on the access point Check the access point antennas c...

Page 44: ...you want to continue configuring this access point after you save this change you must do the following 1 Close your browser 2 Return to the 3Com Device Manager Wireless Network Tree and click Refres...

Page 45: ...om service partners who are qualified to provide a variety of World Wide Web Site To access the latest networking information on the 3Com Corporation World Wide Web site enter this URL into your Inter...

Page 46: ...hnical telephone support services To find out more about your support options call the 3Com technical telephone support phone number at the location nearest you When you contact 3Com for assistance ha...

Page 47: ...om com Europe Middle East and Africa From anywhere in these regions http emea 3com com support supportnumbers html Latin America From Brazil Mexico Puerto Rico Central America and South America http w...

Page 48: ...04 Peru 511 241 1691 Uruguay 525 201 0004 Venezuela 525 201 0004 From the following countries you may call the toll free numbers select option 2 and then option 2 U S A and Canada 1 800 876 3266 Count...

Page 49: ...o frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occ...

Page 50: ...rm la norme NMB 003 du Canada European Community CE Notice 802 11a Radio Marking by the symbol indicates compliance with the essential requirements of Directive 73 23 EC and the essential requirements...

Page 51: ...0 Safety of information technology equipment including electrical business equipment Marking by the symbol indicates that usage restrictions apply In France this product must be configured to operate...

Page 52: ...ble Access Point 8200 16 AP management filter 32 AP status 35 authentication 30 37 local MAC 31 MAC 30 open system 37 RADIUS MAC 30 shared key 37 automatic channel selection 36 B basic configuration 2...

Page 53: ...evice manager 24 LEDs 19 local bridge filter 32 local MAC authentication 31 locating devices 24 25 MAC address 31 location configuration parameter 33 for installation 15 log 34 login 26 M MAC address...

Page 54: ...39 Simple Network Management Protocol SNMP 33 software utilities installing 23 SSID 35 stations status 35 status 35 subnet mask 28 system configuration 24 system log 34 T TCP IP settings 28 technical...

Reviews: