3Com WX4400 3CRWX440095A WX1200 - Manual

B C HANGING 3WXM S ERVICES P REFERENCES Overview 491 Starting or Stopping the 3WXM Services 493 Connecting to 3WXM Services 494 Certificate Check 495 Verifying that the 3WXM Client is Receiving Service Data 496 Changing Service Settings 497 Changing WX Connection Settings 498 Changing Monitoring Set...

A BOUT T HIS G UIDE This manual shows you how to plan, configure, deploy, and manage a Mobility System wireless LAN (WLAN) using the 3Com Wireless LAN Switch Manager (3WXM). Read this manual if you are a network administrator or a person responsible for managing a WLAN. If release notes are shipped ...

18 A BOUT T HIS G UIDE This manual uses the following text and syntax conventions: Documentation The 3WXM documentation set includes the following documents. „ Wireless LAN Switch Manager (3WXM) Release Notes These notes provide information about the system software release, including new features a...

Documentation Comments 19 „ Wireless LAN Switch Manager Reference Manual This manual shows you how to plan, configure, deploy, and manage a Mobility System wireless LAN (WLAN) using the 3Com Wireless LAN Switch Manager (3WXM). „ Wireless LAN Switch Manager User’s Guide This guide shows you how to pl...

20 A BOUT T HIS G UIDE Example: „ Wireless LAN Switch and Controller Configuration Guide „ Part number 730-9502-0071, Revision B „ Page 25 Please note that we can only respond to comments and questions about 3Com product documentation at this e-mail address. Questions related to Technical Support or...

1 I NSTALLING 3WXM This chapter describes how to install 3Com Wireless LAN Switch Manager (3WXM). Hardware Requirements Hardware Requirements for 3WXM Client Table 3 shows the minimum and recommended requirements to run the 3WXM client. Table 3 Hardware Requirements for Running 3WXM Client Minimum R...

Software Requirements 23 Software Requirements 3WXM client and 3WXM monitoring services are each supported on the following operating systems: „ Microsoft Windows Server 2003 „ Microsoft Windows XP with Service Pack 1 (SP1) or later „ Microsoft Windows 2000 with Service Pack 4 You must use the Engli...

24 C HAPTER 1: I NSTALLING 3WXM Serial Number and License Key 3WXM comes with a base license key, which is provided on the CD cover. To use 3WXM Services, you need to enter the base key and an activation key, which you obtain from 3Com. The base key and activation key enable you to manage up to 10 w...

26 C HAPTER 1: I NSTALLING 3WXM Installation Log File During installation, an installation log file, 3WXM_InstallLog.log, is created and placed in the 3WXM installation folder. Double-click the log file’s icon to read the log file. Have this log file available if you need to contact 3Com Technical S...

Uninstalling 3WXM 27 3 Click Uninstall . The 3WXM Uninstall Options dialog appears. By default, the following are removed when you uninstall the client application: „ Network plans „ Access control If the monitoring service was also installed, the monitoring service’s database directory is also unin...

28 C HAPTER 1: I NSTALLING 3WXM To prevent an item from being uninstalled, click on the checkbox next to the item to remove the checkmark. 4 Click Continue . The uninstall program reports its progress. When the uninstall process is complete, the uninstall program reports that the items were successf...

2 W ORKING WITH THE 3WXM U SER I NTERFACE This chapter describes how to use the 3Com Wireless LAN Switch Manager (3WXM) interface. Overview When you start 3WXM client and log into 3WXM Services, the network plan is displayed by the 3WXM client. Toolbar Organizer panel Content panel Aler ts panel Loc...

30 C HAPTER 2: W ORKING WITH THE 3WXM U SER I NTERFACE The network plan is the workspace in 3WXM you use to design and manage a 3Com network. The network plan defines the following: „ Network equipment (WX switches, MAPs, and third-party access points) „ Network site, including floor plans, RF chara...

Display Panels 31 The Organizer panel can contain the following object trees, depending on the option selected on the tool bar: „ Policies (displayed by the Policies tool bar option) — The set of device configuration policies included in your network plan. „ Equipment (displayed by the Configuration...

32 C HAPTER 2: W ORKING WITH THE 3WXM U SER I NTERFACE To expand the view of an object in the tree, click on the plus sign next to the object. For example, to display the buildings in a site, click on the plus sign next to the site name. To display the floors in the building, click next to the build...

Display Panels 33 Content Panel The Content panel displays information or configuration settings, based on the selected tool bar option. The Content panel is located to the right of the Organizer panel. (See the figure on page 29.) The Policies, RF Planning, and Configuration tool bar options displa...

34 C HAPTER 2: W ORKING WITH THE 3WXM U SER I NTERFACE Saving or Discarding Configuration Changes When you select the Policies, RF Planning, or Configuration tool bar option, the Content panel contains a Save button and a Discard button. „ Save —Click Save to send unsaved configuration changes to 3W...

Display Panels 35 To resolve errors and deploy the changes, use the Verification option. The Verification option provides detailed information for errors and warnings and enables you to resolve them. Generally, you can resolve an error or warning by ignoring it or by clicking a link to open a config...

36 C HAPTER 2: W ORKING WITH THE 3WXM U SER I NTERFACE Some wizards contain multiple pages. Click the Next and Previous buttons at the bottom of a wizard to navigate among the wizard’s pages. The Finish button saves the changes. If applicable, saving the changes also results in the newly configured ...

Display Panels 37 Properties Dialogs To open a version of the configuration wizard that contains all the configurable settings for the object, even ones that rarely need to be changed, select the object in the table, then click Properties . Resizing a Display Panel You can resize a panel by clicking...

38 C HAPTER 2: W ORKING WITH THE 3WXM U SER I NTERFACE Menu Bar Options Table 8 lists the options available from the menu at the top of the main 3WXM window. Click on a menu category to display the options for that category. Table 8 3WXM Menu Options Menu Option Description File Connect Log on to 3W...

Tool Bar Options 39 Tool Bar Options Table 9 lists the options available from the tool bar of the main 3WXM window. Click on an option to open the data or tabs for that option. Some tool bar options fill the Content panel. Others fill the entire window area under the tool bar. The larger icons provi...

Tool Bar Options 41 Verification Display the Config Verification and Network Verification tabs. The Verification tabs enable you to troubleshoot configuration issues on WX switches in the network plan or in the live network. „ To display more information about an error or warning message, click on t...

44 C HAPTER 2: W ORKING WITH THE 3WXM U SER I NTERFACE Enabling Keyboard Shortcut Mnemonics (Windows XP Only) Keyboard shortcut mnemonics (also called action mnemonics ) in 3WXM underline shortcut characters in action names in toolbars and menus. When a character is underlined, you can press the cor...

Enabling Keyboard Shortcut Mnemonics (Windows XP Only) 45 4 Clear the box labeled Hide underlined letters for keyboard navigation until I press the Alt key . Clearing this option allows programs to show the underlined character for mnemonics in 3WXM. 5 Click OK . 6 In the Display Properties dialog b...

3 G ETTING S TARTED This chapter contains information about starting 3Com Wireless LAN Switch Manager (3WXM), restricting access to 3WXM, creating and managing network plans, and defining a Mobility Domain. Starting 3WXM The following steps describe how to start 3WXM. You must install a license key ...

48 C HAPTER 3: G ETTING S TARTED If this is the first time you are starting 3WXM, or you have not yet activated your license, the client will not establish a connection to the server when you click Next . Instead, the client will briefly contact the server, then display the following message: Error:...

Starting 3WXM 49 8 If you plan to manage 10 or fewer wireless LAN switches, click Finish and go to step 13. If you plan to manage more than 10 wireless LAN switches, click Next and go to step 9. If you are activating an evaluation copy, you can manage up to 10 wireless LAN switches. 9 Type the upgra...

50 C HAPTER 3: G ETTING S TARTED Restricting Access to 3WXM By default, all users who have been successfully authenticated to a system with 3WXM installed on it can run 3WXM. You can restrict the users allowed to access 3WXM on a system and define their access privileges by creating three types of 3...

Restricting Access to 3WXM 51 Creating an Administrator Account Before you can restrict user access to 3WXM, you must create an administrator account. After creating an administrator account, you can create provision or monitor accounts. To create an administrator account: 1 Select Tools > 3WXM S...

54 C HAPTER 4: W ORKING WITH N ETWORK P LANS Creating a Network Plan To create a network plan: 1 From the main 3WXM window, select File > New . The Create Network Plan wizard appears. 2 In the Network Plan Name box, type a name for the network plan. You can use 1 to 60 alphanumeric characters, wi...

Managing Network Plans 55 „ Wireless Switch—Use a wizard to configure basic switch parameters. (See “Using the Create Wireless Switch Wizard” on page 165.) „ Third-Party AP—Add a third-party AP for use in network planning. (See “Creating a Third-Party AP” on page 63.) „ Country Code—Change the regul...

Managing Network Plans 57 To open a network plan: 1 Establish a connection to the 3WXM Services host on which the network plan is saved. You can do this by restarting 3WXM or selecting File > Open , and then entering the IP address of the 3WXM Services host in the 3WXM Services Connection dialog ...

58 C HAPTER 4: W ORKING WITH N ETWORK P LANS 3WXM compares the object names in the plan to be imported with the object names in the open plan. If both plans have objects of the same name and type, the objects are listed and Conflict appears in the Status column. 3 Do one of the following, depending ...

60 C HAPTER 4: W ORKING WITH N ETWORK P LANS To disable notification 1 In the main 3WXM window, select Tools > Preferences . 2 Click the Persistence tab. 3 To disable change notification, clear Plan Change Notification . 4 Click Close . Defining a Mobility Domain A Mobility Domain is a collection...

Defining a Mobility Domain 61 „ Mobility Domain communications are stable. Generally, the communications required for roaming are the same as those required for VLAN tunneling. Roaming between ports on a WX is possible even if the Mobility Domain is down. „ Authentication, authorization, and account...

62 C HAPTER 4: W ORKING WITH N ETWORK P LANS Traffic Ports Used by a Mobility Domain When deploying a Mobility Domain, you might attach the WX switches to subnets that have firewalls or access controls between them. Within a Mobility Domain, the WX switches exchange information and other types of tr...

Creating a WX Switch 63 6 In the Available Devices list, select the WX switches you want to add to the Mobility Domain. 7 Click Next . 8 Select the switch to act as the seed switch for the Mobility Domain. 9 Click Finish . Creating a WX Switch 1 Select the Configuration tool bar option. 2 In the Org...

Changing the Country Code 65 Changing the Country Code The country code determines the valid radio types as well as channel numbers and power settings for MAP radios. The country code is one of the parameters you set when you create a network plan. If you need to change a plan’s country code, use th...

Converting Auto DAPs into Statically Configured APs 67 Converting Auto DAPs into Statically Configured APs Distributed MAPs that are not configured on any WX switches in the Mobility Domain can nonetheless be booted and managed by a switch if the switch has a profile for Distributed MAPs, and has ca...

68 C HAPTER 4: W ORKING WITH N ETWORK P LANS To simplify configuration, 3WXM assumes that the extent of the Network Domain is the same as extent of the entire network plan. 3WXM also automatically sets the seed affinities on each switch as described in Table 11. 3Com recommends that you allow 3WXM t...

70 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM Accessing the RF Planning Tools To access the RF planning tools, select the RF Planning tool bar option and do one of the following: „ If you are creating a new building, click on the site name in the Organizer panel and select Create Building in ...

RF Planning Overview 71 Adjust the paper space (crop the drawing). Define the drawing scale. Change the grid size. Zoom in. Zoom out. Fit view in window. Print the view displayed in the floor display area. Toggle AP label. Copy selected objects. Paste selected objects. Undo last change. Redo last ch...

72 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM Creating or Modifying a Site A site is a folder that contains the buildings in the network plan. A site usually represents a campus of geographically colocated buildings. If your network plan encompasses multiple campuses, create a site for each c...

Creating or Modifying a Site 73 1 In the Site Name box, type a name for the site (1 to 80 alphanumeric characters, with no spaces or tabs). 2 To change the Country Code, select Setup Country Code in the Task List panel, then in the Change Country Code dialog, select the country where the network is ...

Creating or Modifying Buildings in a Site 75 1 In the Building Name box, type the name of the building (1 to 30 alphanumeric characters, with no spaces or tabs). 2 In the Task List Panel, under Other, click Edit Building. The Edit Building dialog box is displayed. 3 In the Number Of Floors box, spec...

76 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM 4 In the Starting Floor Level box, specify the floor number of the first floor in the building. To start with a subterranean floor, you can specify 0 or a negative floor number. 5 In the Skip Floor Levels box, specify floor numbers you want to ski...

Creating or Modifying Floors 77 Creating or Modifying Floors To create or modify a floor in a building: 1 Select the RF Planning tool bar option. 2 In the Organizer panel, click the building name. 3 Do one of the following: „ If you are creating a new floor, click on the building name in the Organiz...

78 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM 6 In the Height of the Ceiling box, type the number of feet or meters from the floor to the ceiling (1 to 1000 feet or meters). The ceiling height is based on the surface of the ceiling where the access points will be mounted, not on the center of...

Importing or Drawing Floor Details 79 File Recommendations For optimal results, use a DWG or DXF drawing. These types of drawings are made of vector graphics line objects (lines), which you can easily convert into RF obstacles after importing the drawing into 3WXM. In addition, the drawing objects a...

Importing or Drawing Floor Details 81 To check the contents of the invisible layers to make sure the information can be discarded, reverse the frozen/unfrozen status of all layers, to that only the layers that normally are frozen are visible. In TurboCAD, delete the unneeded layers. In AutoCAD, clic...

82 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM To move objects to the new RF layers, click-drag to select objects, select Modify >Properties , and change the objects’ layer. „ Save the drawing on DWG and DXF formats, in case one format does not import well. To save the file into a specific ...

Importing or Drawing Floor Details 83 Importing the Drawing To import a floor drawing: 1 Select the RF Planning tool bar option. 2 In the Organizer panel, click on the plus sign next to the building to expand it, then click on the name of the floor for which you are importing the drawing. An empty f...

84 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM Figure 1 Floor Plan After Importing At this point, you can edit the floor contents. Go to “Cropping the Paper Space”, next, to begin. Cropping the Paper Space You can crop the paper space of a drawing to remove unneeded space and objects around th...

Importing or Drawing Floor Details 85 If you click Yes , all objects and paper space outside the area you selected are removed and the image is resized to fill the removed space. Figure 1 on page 84 shows the same floor plan as Figure 2 (below) after cropping the paper space. Figure 2 Floor Plan Aft...

86 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM Adjusting the Origin Point 3WXM uses a building’s origin point to understand what is above or below a given floor. When calculating RF coverage, 3WXM needs to understand where MAP access points on adjacent floors are located so that 3WXM can take ...

Importing or Drawing Floor Details 87 In this example, the origin point has been moved to an interior shaft. Working with Layers Most drawings contain multiple layers of information. 3WXM allows you to hide, add and delete individual layers. You also can add and remove objects and move objects from ...

88 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM For best performance and simpler planning, 3Com recommends that you hide or remove unnecessary layers and remove unnecessary objects. The Clean Layout option automatically deletes all objects that meet the cleanup criteria, which you can modify. (...

Importing or Drawing Floor Details 89 Adding or removing a layer To add a new layer to a drawing, do the following: 1 Right-click the list of layers in the Organizer panel. 2 Select Add Layer from the menu that is displayed. 3WXM adds the new layer to the list and highlights its name so you can edit...

90 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM To clean up a drawing 1 Display the floor plan in the Content panel. 2 In the Task List panel, under RF Planning, click Clean Layout . The Floor Plan Clean Up wizard appears. 3 In the Remove Lines and Remove Objects group boxes, click next to any ...

Importing or Drawing Floor Details 91 6 To change the maximum size of objects to be removed, type the new horizontal and vertical dimensions in the X-axis and Y-axis boxes. 3WXM removes all objects that fit within both the specified axes. 7 In the Layer List group box, select the layers you want to ...

Importing or Drawing Floor Details 93 Drawing Floor Objects Manually You can use the Free Draw palette to add objects to your floor drawing that are not related to RF obstacles (for example, a conference room table). The tools for drawing non-RF objects work the same as the tools for drawing RF obje...

94 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM Specifying the RF Characteristics of a Floor 3WXM uses RF attenuation information in the floor plan when calculating how many MAPs you need and where to place them to provide the wireless coverage required for the floor. The RF attenuation informa...

Specifying the RF Characteristics of a Floor 95 Converting Objects into RF Obstacles You have several options when creating RF obstacles: „ Convert all objects in a layer of a CAD drawing into RF obstacles. „ Convert all objects in an area of the drawing into RF obstacles. „ Convert multiple objects...

96 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM To create RF obstacles by grouping objects You can group several objects in a drawing to specify them as one RF obstacle. For example, if a wall consists of several lines, the lines can be grouped. If you subsequently ungroup the objects, the RF o...

Specifying the RF Characteristics of a Floor 97 3 In the Attenuation Factor boxes, specify the attenuation factor for 802.11a and 802.11b/g technology (0 to 100 dB). The default is the typical attenuation factor for the material chosen. 4 Click Finish to save the changes and close the dialog box. „ ...

98 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM Using an object other than a line to represent an RF obstacle’s dimensions does not materially affect the calculation of RF attenuation. When 3WXM calculates attenuation along any vector passing through the obstacle, it counts the obstacle’s RF at...

Specifying the RF Characteristics of a Floor 99 To use this method, perform the following tasks: 1 In 3WXM, identify the major RF obstacles and assign an attenuation value to them. You can select any attenuation value. 3WXM will use the RF measurement data from the site survey to correct the attenua...

Specifying the RF Characteristics of a Floor 103 When you place an LOS point onto the floor plan, the icon disappears from the Organizer Panel. To create LOS points in 3WXM 1 Display the floor plan in the Content panel. 2 In the Task List panel, click Tools. 3 Under Site Survey, click the icon. 4 On...

104 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM 5 In the Name box, type a name for the LOS point and click Next . 6 In the AP Model listbox, select the type or model of AP you plan to use for the portable AP. If the model is not listed, select AP (Dual Radio) for a dual-radio AP or AP (Single ...

Specifying the RF Characteristics of a Floor 105 9 In the Channel Number listbox, specify the channel number on which the AP radio will be operating. 10 In the Transmit Power listbox, specify the transmit power of the AP’s radio. 11 In the MAC Address box, type the MAC address you want to use for th...

Specifying the RF Characteristics of a Floor 107 4 Select the scope for which you want generate a site survey order. You can specify the Network Plan, an individual site, an individual building, or an individual floor. 5 Select the language for the site survey order: „ English „ German 6 To specify ...

108 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM 9 Select a floor to display LOS point information for that floor. Scroll down to view the MAC address assignments for the LOS points. Use the instructions in the Ekahau Site Survey Initial Setup section of the work order to set up the survey. Whe...

Specifying the RF Characteristics of a Floor 109 4 Click Yes next to File. 5 In the format listbox, select Ekahau . 6 Click Choose to navigate to the csv file that contains the RF measurement data. 7 In the Map Name field, specify the map name. The map name must match the name specified in the site ...

110 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM Applying the RF Measurements to the Floor Plan 1 Under Site Survey in the Task List panel, click Optimize . A wizard appears, listing the progress of the request. „ The Total number of RF measurements that did not intersect any object line lists ...

Defining Wireless Coverage Areas 111 You must also identify the wireless technology required (802.11a or 802.11b/g) for coverage areas. For areas requiring multiple wireless technologies, two completely overlapping coverage areas are created—one for 802.11a and one for 802.11b/g. You define coverage...

Defining Wireless Coverage Areas 113 Defining a Coverage Area Using the coverage area drawing tool, you can specify the coverage area graphically on your floor plan. You perform the following tasks to define a coverage area: 1 “Drawing a Coverage Area” on page 114 2 “Specifying the Wireless Technolo...

114 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM The coverage areas shown in Figure 6 cannot share coverage and are not supported by 3WXM. (However, separate, nonshared coverage areas can overlap.) Figure 6 Unsupported Shared Coverage Area Example Keep the following in mind when planning shared...

116 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM The Create Coverage Area wizard appears. Go to “Specifying the Wireless Technology for a Coverage Area”. Specifying the Wireless Technology for a Coverage Area (To draw a coverage area, see “Drawing a Coverage Area” on page 114.) To specify wirel...

Defining Wireless Coverage Areas 117 2 To refine the dimensions of the coverage area, specify the appropriate dimension in the X-Length and Y-Length boxes. 3 Click Next . The wizard presents properties and association pages for the technology you chose in step 1. The following example shows the wiza...

118 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM 4 Click Next . The Floor Properties page appears. Specifying Floor Properties for the Coverage Area You can optionally specify floor properties for the coverage area (if they are different from the defaults for the floor): 1 To change the ceiling...

Defining Wireless Coverage Areas 119 Specifying Default Device Settings for the Coverage Area You can optionally specify the WX switch or MAP models that 3WXM uses when calculating the devices to include in the coverage area. 1 To change the WX switch model, select the model from the WX Model list. ...

120 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM If the MAPs are directly connected to the WX, ensure that UTP Cat 5 cabling distances between the MAP and the WX in the wiring closet do not exceed 100 meters (330 feet). An indirectly attached MAP requires Power over Ethernet (PoE) from a source...

Defining Wireless Coverage Areas 121 2 To change the MAP connection type for the redundant connection, select Direct or Distributed from the MAP Connection Type list. WX4400 switches support indirect MAP connections only. 3 To change the number of redundant connections for the distributed connection...

122 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM Configuring Capacity Calculation for Data 3WXM can perform multiple calculations for MAP placement. One is based on coverage only. Another is based on capacity for data traffic, using the data capacity parameters. 3WXM compares the results of the...

Defining Wireless Coverage Areas 123 Configuring Capacity Calculation for Voice 3WXM can perform multiple calculations for MAP placement. One is based on coverage only. Another is based on capacity for voice over IP service, using the capacity for voice parameters. 3WXM compares the results of the c...

Defining Wireless Coverage Areas 125 Specifying Mobility Domain, Radio Profile, and Wiring Closet Associations To specify association information for the coverage area: 1 In the Mobility Domain list, select the Mobility Domain that contains the MAPs used for this coverage area. 2 In the Radio Profil...

126 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM 4 Select the coverage area you want to edit and click Properties . The Coverage Area Properties dialog for the selected coverage area appears. (You can also display this dialog by displaying the floor plan, selecting Coverage Areas in the Organiz...

Defining Wireless Coverage Areas 127 5 Under the General tab, you can do the following: „ In the Name box, edit the name of the coverage area (1 to 60 characters long, with no tabs). „ In the Technology list, select one of the following: „ 802.11a „ 802.11b „ 802.11g „ 802.11a and 802.11b „ 802.11a ...

128 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM „ In the Active Handsets per AP list, specify the number of voice over IP phones that you want each MAP to handle. „ In the Expected Handset Count list, specify the number of voice over IP phones you expect to be in the coverage area. „ In the Ha...

Defining Wireless Coverage Areas 129 8 Under the Constraints tab, you can do the following: „ To change the ceiling height, specify the new height in the Height of the Ceiling box. „ To change the height where MAPs are mounted, specify the new mounting height in the AP Placement Height box. „ To cha...

Placing Third-Party Access Points 131 Moving a Third-Party AP Icon to its Floor Location If you added a third-party access point while using the Configuration or Rogue Detection tool bar options, the access point is on the Objects to Place tab. 1 In RF Planning, navigate to the floor plan. 2 In the ...

Placing Third-Party Access Points 133 12 In the AP Model drop-down list, select one of the following: „ AP (Dual Radio) —802.11a and 802.11b or 802.11b/g „ AP (Single Radio) —802.11a, 802.11b, or 802.11g 13 In the Radio Type drop-down list, select one of the following: 11a , 11b , 11g . The choices ...

Placing Installed and Auto-Configured MAPs 135 Placing Installed and Auto-Configured MAPs You can place MAPs that are already installed on the floor into the network plan. To do this, you upload the MAP configuration into 3WXM, associate the MAP with a coverage area, then place them on the floor pla...

136 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM Computing MAP Placement After you provide information about floor plans, RF obstacles, and wireless coverage requirements, 3WXM can design your 3Com wireless network for this floor using the following process: „ Compute and place MAPs (See “Compu...

Computing MAP Placement 137 If you are modifying an existing coverage area with deployed MAPs or if you need to preserve manual changes made to the current configuration, you can lock the MAPs. Locked MAPs cannot be moved or deleted during the Compute and Place process. You perform the following tas...

138 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM 5 To change the height where MAPs are mounted, specify the new mounting height in the AP Placement Height box. 6 To change the WX switch model, select the model from the WX Model list. 7 To change the MAP connection type, select the type from the...

Computing MAP Placement 141 10 Go to “To review coverage area computation”. To review coverage area computation 1 Review the number of MAPs required for each coverage area, and the overriding criterion used (coverage or capacity). 2 Click Finish to apply the changes. Icons for the suggested MAP loca...

142 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM To see the RF coverage area for an area, right-click on the area (either in the organizer panel or on the floor) and select Display RF Coverage . If the area supports more than one radio technology, you also need to select the technology. The cho...

Computing MAP Placement 143 You must now compute the optimal power. See “Computing Optimal Power” on page 147. Locking and Unlocking MAPs After you compute and place the necessary MAPs for a coverage area, you can move them to fine-tune the wireless coverage. If you need a MAP to be located at a fix...

144 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM Assigning MAP Channels If you do not plan to use the RF Auto-Tuning feature to automatically set the channels on the MAPs after deployment and installation, use the Assign Channels to MAPs option to assign channels to the MAPs. Appropriate assign...

Computing MAP Placement 145 3 To change the starting floor for channel assignment, select the floor from the Begin On Floor List. By default, 3WXM starts at the top floor and works down. 4 To change the ending floor for channel assignment, select the floor from the End On Floor List. The ending floo...

Computing MAP Placement 147 „ Yellow—Up (but with minor service degradation) „ Orange—Up (but with major service degradation) „ Red—Down „ Blue—Unknown A MAP with a blue background is not in the live network even though it is on the floor plan. The channel number for this MAP will match the channel ...

Computing MAP Placement 149 To resolve optimal power computation problems If power levels for one or more coverage areas could not be optimized, show the RF coverage at baseline association and minimum transmit rates for the coverage areas by doing the following: 1 In the Show RF coverage using list...

Verifying the Wireless Network 151 3 In the Show RF coverage using listbox, select how you want to display the coverage: „ Baseline Association Rate—Coverage is shown based on the MAP radio baseline association rate. The baseline association rate is the typical data rate the radio is expected to sup...

152 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM 4 On the floor plan, click where you want the measurement point to be placed. The Create RF Measurement Point dialog box appears. 5 In the Description box, type a description for the measurement point (1 to 60 characters). 6 In the RSSI Options b...

Generating RF Network Design Information 155 Generating RF Network Design Information After 3WXM has calculated the number of MAPs required to provide wireless coverage, you can generate a work order report. The work order report provides all of the necessary information for the physical installatio...

156 C HAPTER 5: P LANNING THE 3C OM M OBILITY S YSTEM 4 Specify whether to include the following information in the work order: „ RF Coverage „ RSSI Projections „ Show Disabled MAPs (only available if RSSI Projections is selected) „ Show RF Coverage On Entire Floor (only available if RSSI Projection...

6 C ONFIGURING WX S YSTEM P ARAMETERS This chapter and the following two chapters describe how to view and configure WX switches using 3WXM. If you want to use 3WXM planning to configure switches for you as part of coverage planning, see “Planning the 3Com Mobility System” on page 69. If you are pla...

158 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS Table 16 WX Switch Object Types Category Object Type Description System Ports Settings for individual ports. (See “Viewing and Changing Port Settings” on page 176.) Port Groups Settings for port groups. (See “Viewing and Changing Port Groups” on pa...

WX Switch Configuration Objects 159 System, cont. VLANs Groups of physical ports configured as a distinct Layer 2 broadcast domain. Each VLAN has its own Spanning Tree Protocol (STP) and Internet Group Management Protocol (IGMP) settings. Optionally, a VLAN can be associated with an IP interface. (S...

Adding a WX Switch to the Network Plan 161 Adding a WX Switch to the Network Plan You can use any of the following methods to add a WX switch to a network plan: „ Allow 3WXM to create the switch as part of RF planning. „ Use the Create Wireless Switch wizard. „ Copy and paste a switch that is alread...

162 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS Creating a New WX Switch Based on a Configured Switch in the Network Plan You can copy and modify a switch that is already in the network plan, by copying and pasting the switch in the Organizer panel. 1 Select the Configuration tool bar option. 2 ...

Using the Create Wireless Switch Wizard 165 Deploying Changes To deploy all the changes, click Deploy . 3WXM compares the changes to the verification rules, and lists any warnings or error messages. If there are any errors, 3WXM will not deploy the changes. To deploy the changes, you must first reso...

Setting Up a Switch 167 Setting Up a Switch After you create a switch, you can use the System Setup Wizard to configure the following essential operation and management parameters: „ SNMP settings for monitoring of the switch by 3WXM „ VLANs „ RADIUS servers and server groups „ Wireless services „ A...

Modifying Basic Switch Parameters 171 „ Default source IP address used in unsolicited communications such as AAA accounting reports and SNMP notifications 6 To enable the switch to be managed by 3WXM, select Managed. Until this option is selected, you cannot deploy the switch configuration you creat...

Viewing and Changing Port Settings 177 3 To specify the speed of a 10/100 Ethernet port, select one of the following: „ Auto —Sets the port to automatically detect the traffic speed and set the speed accordingly. This is the default value. „ 10 —Sets the speed to 10 Mbps. „ 100 —Sets the speed to 10...

Viewing and Changing Port Settings 179 6 Click Next . The non-editable number (1 or 2) indicates the radio number on the MAP. 7 To enable the radio, select Enabled . 8 In the Channel Number list, select the channel number for the radio. If RF Auto-Tuning for channel configuration is enabled, setting...

180 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS 1 Access the Configure Wired Auth wizard: a Select the Configuration tool bar option. b In the Organizer panel, click the plus sign next to the WX switch. c Click the plus sign next to System. d Select Ports . e Select the row for the port. f In th...

182 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS To use an existing rule, leave the rule in the list. c Click Next . d Select the authentication and accounting method (RADUS server group or local database). (For information, see “AAA Methods (RADIUS Server Groups and the Local User Database)” on ...

184 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS If you select Web Portal in step 2, 3WXM automatically creates a user named web-portal-wired. Similarly, if you select Open Access, 3WXM creates a user called last-resort-wired. Do not delete or modify these users. (You can add, modify, or delete u...

Viewing and Changing Port Groups 185 Creating a Port Group To create a port group: 1 In the Task List panel, select Port Group. The Create Port Group wizard appears. 2 In the Port Group Name box, type the name of the port group (1 to 16 alphanumeric characters, with no spaces or tabs). 3 Click Next ...

Viewing and Changing Management Settings 187 You can specify from 0 to 86400 seconds (one day). The default is 3600 (one hour). If you specify 0, the idle timeout is disabled. The timeout interval is in 30-second increments. For example, the interval can be 0, or 30 seconds, or 60 seconds, or 90 sec...

188 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS 3 Select the version(s) of SNMP you want the switch to run: „ V1 „ V2c „ USM (SNMPv3) 4 See the following sections for more configuration options. Configuring an SNMP V1 or V2c Community String 1 Access the Create Community wizard: a Select the Con...

Viewing and Changing Management Settings 191 Configuring a Notification Profile A notification profile is a named list of all the notification types that can be generated by a switch, and for each notification type, the action to take (drop or send) when an event occurs. 1 Access the Create Notifica...

196 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS „ Authenticated —SNMP message exchanges are authenticated but are not encrypted. (This security level is the same as the authNoPriv level described in SNMPv3 RFCs.) „ Encrypted —SNMP message exchanges are authenticated and encrypted. (This security...

198 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS Viewing and Setting Log and Trace Settings System logs provide information about system events that you can use to monitor and troubleshoot MSS. Event messages for the WX switch and its attached MAPs can be stored or sent to the following destinati...

Viewing and Setting Log and Trace Settings 199 „ Critical —You must resolve the critical condition. If you do not resolve the condition, the WX can reboot or shut down. „ Error —The WX is missing data or unable to form a connection. „ Warning —A possible problem exists. „ Notice —Events that can cau...

200 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS Creating an External Log Server You can specify a syslog server. Syslog facilities are identifiers that allow a syslog server to handle different syslog messages from different sources. You can use a facility in the range of Local 0 through Local 7...

Viewing and Configuring IP Services Settings 201 3 Optionally, in the Level box, specify the amount of information included in the trace output (0 to 10). 0 provides the minimum amount of information and 10 proves the maximum amount of information. The default is 5. 4 Optionally, in the User Name bo...

202 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS Creating a Static Route The IP routing table contains routes that MSS uses for determining the interfaces for a WX switch’s external communications. When you add an IP interface to a VLAN that is up, MSS automatically adds corresponding entries to ...

Viewing and Configuring IP Services Settings 203 Create an IP Alias You can map an IP address to a name by creating an IP alias. For example, if you create an IP alias carmel for IP address 10.20.30.40, you could type telnet carmel rather than telnet 10.20.30.40 . You can use IP aliases in conjuncti...

Viewing and Configuring IP Services Settings 205 Configuring ARP The Address Resolution Protocol (ARP) table maps IP addresses to MAC addresses. ARP is enabled by default on the WX and cannot be disabled. An ARP entry is added to the table in one of the following ways: „ Automatically by the WX. The...

206 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS Viewing and Configuring VLANs A virtual LAN (VLAN) is a Layer 2 broadcast domain that can span multiple wired or wireless LAN segments. Each VLAN is a separate logical network, and, if you configure IP interfaces on the VLANs, MSS treats each VLAN ...

Viewing and Configuring VLANs 207 Roaming and VLANs WX switches in a Mobility Domain contain a user’s traffic within the VLAN the user is assigned to. For example, if you assign a user to VLAN red , the WX switches in the Mobility Domain contain the user’s traffic within VLAN red configured on the s...

212 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS „ If STP is enabled on the VLAN, spanning tree packets are dropped at the port. „ If STP is disabled on the VLAN, spanning tree packets are forwarded transparently through the VLAN to and from that port. 6 In the Port Priority box, specify a priori...

Viewing and Configuring VLANs 213 Enabling STP Fast Convergence Features The standard STP timers delay traffic forwarding briefly after a topology change. The time a port takes to change from the listening state to the learning state or from the learning state to the forwarding state is called the f...

Viewing and Configuring VLANs 215 8 In the Other Querier Present Interval box, specify how long (1 to 65,535 seconds) the WX switch waits for a general query to arrive before making itself the querier. The default interval is 255 seconds. 9 In the Query Response Interval box, specify how long (1 to ...

Viewing and Configuring ACLs 221 You can choose to count the number of times an ACE is matched. This hit count is useful for troubleshooting complex ACL configurations and for monitoring traffic load for specific network applications or protocols. The hit count can only be seen from the CLI. To star...

Viewing and Configuring ACLs 223 b Select the well-known name of the protocol from the Protocol Name drop-down list. If the protocol’s name is not listed, select Other to activate the Protocol Number box, then type or select the number. c Click OK . d If you selected tcp or udp , go to step 7. Other...

Viewing and Configuring ACLs 225 „ 0 (normal) —Packets with normal TOS defined are filtered. „ 1 (minimum monetary cost) —Packets with minimum monetary cost TOS defined are filtered. „ 2 (maximum reliability) —Packets with maximum reliability TOS defined are filtered. „ 4 (maximum throughput )—Packe...

Viewing and Configuring ACLs 227 To enable the established option for TCP ACEs By default, a new TCP ACE applies to new sessions as well as established (existing) sessions. To apply the ACE only to established sessions, enable the established option. 1 Select the TCP ACE in the ACL table. 2 In the T...

228 C HAPTER 6: C ONFIGURING WX S YSTEM P ARAMETERS Adding a New ACE to a Configured ACL To add a new ACE to a configured ACL: 1 Access the ACL table: a Select the Configuration tool bar option. b In the Organizer panel, click the plus sign next to the WX switch. c Click the plus sign next to System...

Viewing and Changing CoS Mappings 231 Viewing and Changing CoS Mappings MSS supports Layer 2 and Layer 3 classification and marking of traffic, to help provide end-to-end QoS throughout the network. QoS support includes support of Wi-Fi Multimedia (WMM), which provides wireless QoS for time-sensitiv...

7 C ONFIGURING W IRELESS P ARAMETERS This chapter describes how to view and configure the following wireless parameters for WX switches: „ Service Set Identifiers (SSIDs), which are managed by service profiles „ Radio profiles, which assign IEEE 802.11 settings and a service profile to radios „ Auto...

236 C HAPTER 7: C ONFIGURING W IRELESS P ARAMETERS Wireless Service Parameters A wireless service consists of the following parameters: „ Service profile „ Access rules Service Profiles A service profile configures an SSID. Table 18 lists the parameters. For parameters that are assigned default valu...

238 C HAPTER 7: C ONFIGURING W IRELESS P ARAMETERS You don’t need to select the values for all these parameters when you configure a service. The Service Profile wizards help you configure the essential parameters and assign appropriate values to the rest. Some of the parameters that 3WXM automatica...

Viewing and Configuring Wireless Services 239 „ For Windows domain clients using Protected EAP (PEAP), the user glob is in the format Windows_domain_name\username . The Windows domain name is the NetBIOS domain name and must be specified in capital letters. For example, EXAMPLE\sydney, or EXAMPLE\*....

240 C HAPTER 7: C ONFIGURING W IRELESS P ARAMETERS „ Uses challenge-response to compare hashes. „ Provides no encryption or integrity checking for the connection. The EAP-MD5 option does not work with Microsoft wired authentication clients. „ PEAP Offload— Protected EAP with Microsoft Challenge Hand...

Viewing and Configuring Wireless Services 241 „ If you specify a RADIUS server group as the first method and a user is denied access by the RADIUS server, no authentication and authorization are attempted with the other methods specified in the list. „ If you specify LOCAL as the first method and a ...

242 C HAPTER 7: C ONFIGURING W IRELESS P ARAMETERS Configuring an 802.1X Wireless Service The 802.1X Service Profile wizard requires you to select one or more RADIUS server groups and does not allow you to complete the configuration without selecting one. To be available for selection in the wizard,...

Viewing and Configuring Wireless Services 243 10 Select the EAP type: „ EAP-MD5 Offload „ PEAP Offload „ Local EAP-TLS „ External RADIUS Server If you select PEAP, the EAP Sub-Protocol is MS-CHAPV2. For other protocols, the EAP Sub-Protocol is None. (For information, see “EAP Type (802.1X Only)” on ...

Viewing and Configuring Wireless Services 253 Modifying Service Profile Settings You can modify the following service profile settings in the Wireless Service Profiles table itself: „ SSID name „ SSID type (encrypted or clear) „ Beacon state (advertisement of the SSID) „ Radio profile (maps MAP radi...

254 C HAPTER 7: C ONFIGURING W IRELESS P ARAMETERS Static WEP Tab All of the settings on the Static WEP tab are explained in the sections on the service profile wizards. Authorization Attributes Tab The Authorization Attributes tab lists the default authorization attributes for the SSID. When a user...

Viewing and Configuring Wireless Services 255 Radio Profile Selection Tab The Radio Profile Selection tab list the radio profiles mapped to the service profiles. Service profile wizards map the service profiles to the default radio profile by default. To map another radio profile to the service prof...

256 C HAPTER 7: C ONFIGURING W IRELESS P ARAMETERS „ Long Retry Count—Number of times (1 to 15) the MAP transmits an unacknowledged unicast frame that is equal to or longer than the fragment threshold before discarding the frame. The default is 5. Client Timeout Tab The Client Timeout tab lists sett...

Viewing and Configuring Wireless Services 257 „ Multicast rate—Data rate at which the radio sends multicast frames. The valid rates depend on the radio type and are the same as the mandatory rates. The default is Automatic, which sets the multicast rate to the highest rate that can reach all clients...

258 C HAPTER 7: C ONFIGURING W IRELESS P ARAMETERS SODA Tab The SODA tab has settings for the Sygate On-Demand (SODA) feature. SODA is an endpoint security solution that allows enterprises to enforce security policies on client devices without having to install any special software on the client mac...

Viewing and Configuring Radio Profiles 263 Viewing and Configuring Radio Profiles A radio profile is a set of attributes that you can apply to multiple radios. A default radio profile named default is provided and cannot be deleted. Rather than configuring each radio individually, you can create a n...

266 C HAPTER 7: C ONFIGURING W IRELESS P ARAMETERS CAUTION: Countermeasures affect wireless service on a radio. When a MAP radio is sending countermeasures, the radio is disabled for use by network traffic, until the radio finishes sending the countermeasures. „ Configured—Causes radios to attack on...

Viewing and Configuring Radio Profiles 267 Auto Tune Tab The Auto Tune tab lists settings for RF Auto-Tuning: „ Tune Channel—Automatically configures and tunes the channel. This feature is enabled by default. RF Auto-Tuning of channels on 802.11a radios uses only the bottom eight channels in the ban...

Viewing and Changing the Auto-DAP Profile 269 Voice Configuration Tab The Voice Configuration tab lists settings for VoIP services: „ QoS Mode—Classification and marking of high priority traffic on the WX and MAP: „ WMM—Classifies, marks, and forwards traffic for Wi-Fi Multimedia (WMM) devices based...

272 C HAPTER 7: C ONFIGURING W IRELESS P ARAMETERS Converting Auto DAPs into Statically Configured DAPs See “Converting Auto DAPs into Statically Configured APs” on page 67. Deleting Auto DAPs See “Deleting Auto DAPs” on page 175. Viewing and Configuring MAPs MAPs contain radios that provide network...

Viewing and Configuring MAPs 273 Viewing the Configured MAPs To view the configured MAPs: 1 Select the Configuration tool bar option. 2 In the Organizer panel, click the plus sign next to the WX switch. 3 Click the plus sign next to Wireless. 4 Select Access Points . The MAPs that are configured on ...

274 C HAPTER 7: C ONFIGURING W IRELESS P ARAMETERS d Select Access Points . e In the Task List panel, select Distributed AP . 2 In the Name box, type a name (1 to 16 alphanumeric characters, with no spaces or tabs). 3 In the DAP Number box, specify the connection number for the WX switch’s connectio...

Viewing and Configuring MAPs 275 b In the Radio Profile list, select the profile to which the radio belongs. (For more information, see “Viewing and Configuring Radio Profiles” on page 263.) c In the Channel Number list, select the channel number for the radio. If RF Auto-Tuning for channel configur...

Viewing and Configuring MAPs 279 8 To configure settings for a radio, click 802.11g Radio or 802.11a Radio . a To enable the radio, select Enabled . b If the MAP model supports external antennas, select the external antenna model from the Antenna Type box. c To indicate the direction of the antenna’...

Viewing and Changing Radio Settings 281 Viewing and Changing Radio Settings You can configure MAP radio settings when you configure the MAPs. You also can view or change radio settings after the MAPs are configured. Viewing Radio Settings To view radio settings: 1 Select the Configuration tool bar o...

Viewing and Changing RF Detection Settings 283 4 Select the vendor from the Vendor drop-down list. 5 Select the specific OUIs you want to allow for the selected vendor. Go to step 9. If the vendor or OUI is not listed, click Cancel , then select Permitted OUI Entry in the Task List panel. Go to step...

Creating and Managing Users in the Local User Database 289 Creating a Named User To create a named user: 1 Access the Create Named User wizard: a Select the Configuration tool bar option. b In the Organizer panel, click the plus sign next to the WX switch. c Click the plus sign next to AAA. d Select...

Creating and Managing Users in the Local User Database 291 Creating a MAC User To create a MAC user: 1 When creating MAC address users, you configure authentication Access the Create MAC User wizard: a Select the Configuration tool bar option. b In the Organizer panel, click the plus sign next to th...

Creating and Managing Users in the Local User Database 293 Authorization Attributes Authorization attributes can be assigned to users in the local database or on remote servers. The attributes, which include access control list (ACL) filters, VLAN membership, encryption type, session time-out period...

Creating and Managing Users in the Local User Database 295 service-type Type of access the user is requesting. Access type, which can be one of the following: „ 2—Framed; for network user access „ 6—Administrative; for administrative access, with authorization to access the enabled (configuration) m...

298 C HAPTER 8: C ONFIGURING A UTHENTICATION , A UTHORIZATION , AND A CCOUNTING P ARAMETERS Viewing and Configuring RADIUS Settings Remote Authentication Dial-In User Service (RADIUS) is a client-server security protocol that provides authentication, authorization, and accounting for network users a...

Viewing and Configuring RADIUS Settings 299 Viewing RADIUS Settings, Servers, and Server Groups To view RADIUS settings, servers, and server groups: 1 Select the Configuration tool bar option. 2 In the Organizer panel, click the plus sign next to the WX switch. 3 Click the plus sign next to AAA. 4 S...

300 C HAPTER 8: C ONFIGURING A UTHENTICATION , A UTHORIZATION , AND A CCOUNTING P ARAMETERS 8 In the Timeout box, specify how long (1 to 65,535 seconds) the WX switch must wait for a RADIUS server to respond before retransmitting. The default is 5 seconds. 9 In the Retry Count box, specify how many ...

Viewing and Configuring Global 802.1X Settings 303 Providing an authorization password is required only for users whose devices are authenticated by their MAC addresses or for last-resort users, neither of which have a regular username or password. The default authorization password is 3Com . Changi...

304 C HAPTER 8: C ONFIGURING A UTHENTICATION , A UTHORIZATION , AND A CCOUNTING P ARAMETERS 2 To enable 802.1X authentication for all wired authentication ports on the WX switch, select System Authentication Control . To disable 802.1X authentication for all wired authentication ports, clear System ...

Viewing and Configuring Global 802.1X Settings 305 9 To enable reauthentication of 802.1X clients, select Reauthentication . To disable reauthentication, clear Reauthentication . By default, reauthentication is enabled. 10 To specify the number of reauthentication requests the WX switch attempts bef...

306 C HAPTER 8: C ONFIGURING A UTHENTICATION , A UTHORIZATION , AND A CCOUNTING P ARAMETERS Viewing and Configuring 802.1X Network Access Rules This section describes how to view and configure 802.1X rules for user network access. To configure other types of network access rules, see the following: ...

Viewing and Configuring 802.1X Network Access Rules 307 2 Specify whether the rule is for wireless access to an SSID or access through a wired authentication port: „ If the rule is for access to an SSID, do one of the following: „ To match on any SSID name, leave the value any in the SSID box. „ To ...

Viewing and Configuring MAC Network Access Rules 311 2 Specify whether the rule is for wireless access to an SSID or access through a wired authentication port: „ If the rule is for access to an SSID, do one of the following: „ To match on any SSID name, leave the value any in the SSID box. „ To mat...

Viewing and Configuring WebAAA Network Access Rules 313 Viewing and Configuring WebAAA Network Access Rules Web AAA allows network users to access the network by logging on a web page. When a user attempts to access a web page over the network, the WX switch intercepts the HTTP or HTTPS request and ...

Viewing and Configuring Last-Resort Network Access Rules 317 2 Specify whether the rule is for wireless access to an SSID or access through a wired authentication port: „ If the rule is for access to an SSID, do one of the following: „ To match on any SSID name, leave the value any in the SSID box. ...

Viewing and Configuring WX Administrator Access Rules 319 Creating an Access Rule for Console Access To create an access rule for console access: 1 Access the Create Console Admin User wizard: a Select the Configuration tool bar option. b In the Organizer panel, click the plus sign next to the WX sw...

Viewing and Configuring AAA Support for Third-Party AP Users 323 For the userglob, type a full or partial username to be matched during authentication (1 to 80 alphanumeric characters, with no spaces or tabs). The format of a user glob depends on the client type and EAP method. „ For Windows domain ...

Viewing and Changing Location Policy Rules 325 Viewing and Changing Location Policy Rules During the login process, the AAA authorization process is started immediately after clients are authenticated to use the WX switch. During authorization, MSS assigns the user to a VLAN and applies optional use...

Viewing and Changing Location Policy Rules 327 9 Select the Distributed MAPs for which the location policy is applied and click Add . 10 Click Next . 11 In the Action list, select one of the following: „ Permit —Allows access if the conditions in the location policy rule are matched. If you select P...

Viewing and Changing Mobility Profiles 329 4 In the Ports drop-down list, select the ports to include in the Mobility Profile: „ All —Include all MAP or wired authentication ports. „ Selected —Include a selected list of ports. „ None —Include no ports. If you select Selected , select the individual ...

9 C ONFIGURING WX S WITCHES R EMOTELY You can use 3WXM Services running in your corporate network to configure WX switches in remote offices. The following remote configuration scenarios are supported: „ Drop ship—3WXM Services running in the corporate network can configure a WXR100 switch shipped d...

How Remote WX Configuration Works 333 Figure 9 shows the location of the Fn switch and the LED. Figure 9 Fn Switch on WXR100 5 Because the Fn switch was pressed while the switch was starting, the WXR100 configures the following items, to enable itself to contact 3WXM Services: „ Ports 1 and 2 in the...

334 C HAPTER 9: C ONFIGURING WX S WITCHES R EMOTELY „ If the serial number does not match and the Auto-Config IP Subnet Matching option is disabled, 3WXM cannot give the switch a configuration. 3WXM generates a verification warning (on the Network Verification tab). The warning lists the switch’s se...

3WXM Requirements 335 8 3WXM receives the configuration request, and looks in the currently open network plan for a switch configuration with the same model and serial number as the one in the configuration request. „ If the network plan contains a configuration with a matching model and serial numb...

336 C HAPTER 9: C ONFIGURING WX S WITCHES R EMOTELY Staging a WX Switch for Configuration by 3WXM The auto-config option must be enabled on a WX switch in order for the switch to try to contact 3WXM Services for configuration. The auto-config option is automatically enabled on an unconfigured WXR100...

Staging a WX Switch for Configuration by 3WXM 337 3 Enable the auto-config option: WX1200# set auto-config enable success: change accepted. 4 Save the configuration changes: WX1200# save config success: configuration saved. 5 Power off or restart the switch. Example 2: Deployment Site Has No DHCP an...

338 C HAPTER 9: C ONFIGURING WX S WITCHES R EMOTELY Example 3: Deployment Site Has DNS But No DHCP The deployment site in this example does not have a DHCP server but does have a local DNS server. The configuration is similar to Example 1, but includes DNS configuration information instead of an IP ...

Staging a WX Switch for Configuration by 3WXM 339 Example 4: Deployment Site Has DHCP But Local DNS Domain Differs From Corporate DNS Domain The deployment site in this example has a DHCP server, so the switch’s DHCP client is enabled. Static IP address and default gateway information are not requir...

340 C HAPTER 9: C ONFIGURING WX S WITCHES R EMOTELY 8 Save the configuration changes: WX4400# save config success: configuration saved. 9 Power off or restart the switch. Preconfiguring a Switch in 3WXM If you know the switch’s serial number, use the following procedure to set up the switch’s config...

Preconfiguring a Switch in 3WXM 341 14 Click Finish to save the switch configuration and close the wizard. Leave 3WXM Services running, with the network plan open. When the switch is powered on at the remote site (and the Fn switch is pressed, if a WXR100), the switch contacts 3WXM Services to reque...

342 C HAPTER 9: C ONFIGURING WX S WITCHES R EMOTELY 13 Click on a resolution to correct the error or warning condition. 14 Select the Devices option on the 3WXM tool bar. 15 Select the switch. 16 In the Task List panel, select Deploy. Replacing a Switch and Reusing its Configuration If a remote swit...

Replacing a Switch and Reusing its Configuration 343 How Switch Replacement Works 1 A network administrator enables the Auto-Config IP Subnet Matching option in 3WXM. (This option is on the 3WXM Services Setup dialog.) 2 Someone at the remote office physically unplugs the failed switch and plugs in ...

344 C HAPTER 9: C ONFIGURING WX S WITCHES R EMOTELY Replacing a Switch This task is performed by someone at the remote office and does not require a network administrator. 3Com recommends that you read through the entire procedure before beginning. To replace a switch 1 Remove the power cord from th...

10 M ANAGING WX S YSTEM I MAGES AND C ONFIGURATIONS This chapter describes the management of WX system files. It includes information about uploading a WX switch configuration into 3WXM, verifying configuration information, synchronizing local and network changes, deploying WX switches from a networ...

346 C HAPTER 10: M ANAGING WX S YSTEM I MAGES AND C ONFIGURATIONS Devices Tab The Devices tab allows you to manage configuration changes for WX switches in the network plan. To access the Devices tab, do one of the following: „ Select the Devices tool bar option. „ In the Alerts panel, click on Loca...

Devices Tab 347 Task List Options The Task List panel in the Devices tab has the following pages: „ Change Management „ Device Operations Table 24 lists the tasks you can select on the Devices tab. Table 24 Devices Tasks Task Option Task Group Task Description Change Management Local Changes Review ...

Synchronizing Local and Network Changes 351 „ Selecting Review in Local Changes displays changes made in 3WXM. „ Selecting Review in Network Changes displays changes that have occurred in the network. 5 To print the changes, click Print . 6 Click Close to return to the Managed Devices tab. Accepting...

Synchronizing Local and Network Changes 353 You can click Close at any time after clicking Deploy . The operation continues in the background. To review the status of the operation, use the operation log. (See “Viewing the Operation Log” on page 358.) To schedule deployment of local changes 1 Select...

Distributing System Images 355 Distributing System Images You can distribute a system image to one or more WX switches in a network plan. To use a new system image, you must reboot the WX. For more information, see “Rebooting WX Switches or MAP Access Points” on page 356. 3Com recommends that you us...

Enabling or Disabling Management of a Switch by 3WXM 357 Enabling or Disabling Management of a Switch by 3WXM The Devices tab lists managed switches and unmanaged switches separately. Managed switches can be deployed to the network and can be monitored by 3WXM Services. Unmanaged switches can be con...

Importing and Exporting Switch Configuration Files 359 Importing and Exporting Switch Configuration Files You can import or export switch configuration files in Extensible Markup Language (XML) format. „ The import option enables you to create a WX switch in the network plan by importing configurati...

Modifying Configuration Change Polling Options 361 Modifying Configuration Change Polling Options By default, 3WXM client polls WX switches in the network every 15 minutes for network changes, and displays a popup message if changes are detected. The popup message is in addition to notification in t...

11 V ERIFYING C ONFIGURATION C HANGES 3WXM uses a set of rules to verify WX switch configurations. Changes to a switch’s configuration in 3WXM or in the live network are automatically evaluated by comparing the changes to the rules. If the evaluation detects any error or warning conditions, the info...

364 C HAPTER 11: V ERIFYING C ONFIGURATION C HANGES Details about the selected error or warning appear in the lower left section of the tab. The Resolution section of the tab lists options for resolving the warning or error. Toolbar Options Table 27 lists the options on the Event tab’s toolbar. Filt...

Resolving an Error or Warning 365 To resolve an error or warning 1 Select the error or warning message in the Message column. 2 Read the information in the Error/Warning Details section. For some errors and warnings, this section contains information about how to resolve the error or warning. 3 If a...

368 C HAPTER 11: V ERIFYING C ONFIGURATION C HANGES 6 Reenable the rule or instances: „ To reenable a rule all of whose instances are disabled, click on the checkbox in the Enabled column. The Disable All Instances option is deselected. „ To reenable an individual instance of a rule, click on the ch...

12 M ANAGING C ERTIFICATES A digital certificate is a form of electronic identification for computers. This chapter describes processing and managing certificates, and distributing PKS #12 files. Overview A digital certificate is a form of electronic identification for computers. The 3Com Mobility S...

Managing Certificates 371 Managing Certificates After you have installed certificates, you can review a certificate or delete a certificate that is stored in the 3WXM certificate store. Reviewing Certificate Details After installing a certificate in 3WXM, you can see information such as the time fra...

C ONFIGURING AND A PPLYING P OLICIES A policy is a set of WX configuration parameters that you can define once in 3WXM and then apply to multiple WX switches. When you apply a policy to a set of WX switches, all parameter settings in the policy are applied to the switches and update the settings alr...

374 C HAPTER 13: C ONFIGURING AND A PPLYING P OLICIES Viewing Policies To view policies: 1 Select the Policies tool bar option. 2 To view the feature areas in the policy, click on the plus sign next to the policy name. Only the areas that are configured in the policy are listed. Click on the plus si...

Configuring Feature Settings in a Policy 375 Configuring Feature Settings in a Policy To configure feature settings in a policy: 1 If you have not already done so, use the procedure in “Creating a Policy” on page 374 to configure a policy and select the switches to which you want to apply the policy...

376 C HAPTER 13: C ONFIGURING AND A PPLYING P OLICIES Table 28 Feature Categories For This Feature Area See... System Features IP Services “Viewing and Configuring IP Services Settings” on page 201 VLANs, Spanning Trees and Port Groups “Viewing and Configuring VLANs” on page 206 “Changing STP Port S...

14 U SING THE E VENT L OG 3WXM maintains a log of system events. The log contains messages generated by the following: „ WX switches in the network plan—messages generated by the WX switches in the network plan that are being monitored by the 3WXM service „ 3WXM Services—messages generated by the 3W...

378 C HAPTER 14: U SING THE E VENT L OG Refreshing Event Data By default, the event data is refreshed whenever the 3WXM client generates a new message for itself, or receives a new message from the 3WXM Services. To disable automatic refreshing of events, clear the Auto-update checkbox and click App...

Filtering Event Messages 379 Filtering Events by Content When using the predefined filters, you can limit the events you see in Event tab by specifying criteria such as IP address, date, or text in the log message. You can use advanced filters to further limit the events you see. To filter messages ...

384 C HAPTER 15: G ENERATING R EPORTS Overview The Reports option of the 3WXM toolbar enables you to generate reports for network clients, RF usage, rogue devices, and 3Com equipment. „ Configuration reports: „ Inventory „ Mobility Domain Configuration „ WX Configuration „ Client monitoring reports:...

Generating an Inventory Report 385 Generating an Inventory Report The inventory report lists the WX switches and MAP access points in a specific Mobility Domain or that do not belong to a Mobility Domain. To generate an inventory report 1 Select the Reports tool bar option. 2 In the Report Category ...

386 C HAPTER 15: G ENERATING R EPORTS Generating a Mobility Domain Configuration Report The Mobility Domain configuration report lists information for all the WX switches in a Mobility Domain, including the VLANs, radio and service profiles, and RADIUS server groups and servers configured on the WX ...

Generating a WX Configuration Report 387 Generating a WX Configuration Report The WX configuration report lists configuration details for a WX switch. 1 Select the Reports toolbar option. 2 In the Report Category list, select Configuration Reports. 3 In the Reports list, select WX Configuration. 4 I...

388 C HAPTER 15: G ENERATING R EPORTS Generating a Client Summary Report The client summary report lists current client sessions. The data for this report comes from the 3WXM Services. The Enable client session collection option, located in the Client Monitor group box of the Monitoring Settings tab...

Generating a Client Details Report 389 5 Select the instance for which you want the report. For example, if the scope is Building, select the building. 6 To select or change the output directory for the report, click Choose , navigate to the new directory, and click Select . 7 To prevent 3WXM from r...

Generating a Client Errors Report 391 Generating a Client Errors Report The client errors report lists error statistics for current client sessions. The data for this report comes from 3WXM Services. The Enable RF trending option, located in the RF Monitor group box, must be enabled. (See “Changing ...

Generating a Network Usage Report 393 „ Session Statistics „ AP Statistics (See “Using the Client Monitor View” on page 415 for information about the data columns in each section of the report.) Generating a Network Usage Report The network usage report lists network usage statistics. The data for t...

394 C HAPTER 15: G ENERATING R EPORTS 8 To prevent 3WXM from replacing an existing report of the same type with this new report, click next to Overwrite Existing Files to deselect this option. 9 Click Generate . 10 When the report is generated, click the report link to view it. The network usage rep...

Generating a Radio Details Report 395 7 To select or change the output directory for the report, click Choose , navigate to the new directory, and click Select . 8 To prevent 3WXM from replacing an existing report of the same type with this new report, click next to Overwrite Existing Files to desel...

396 C HAPTER 15: G ENERATING R EPORTS 8 Click Generate . 9 When the report is generated, click the report link to view it. (See “Using the RF Monitor View” on page 442 and “Using the RF Trends View” on page 447 for information about the data in each section of the report.) Generating a Rogue Details...

Generating a Rogue Summary Report 397 Generating a Rogue Summary Report The rogue summary report lists information about rogues. The data for this report comes from 3WXM Services. The Enable Rogue Detection option, located in the Rogue Detection group box of the Monitoring Settings tab, must be enab...

Generating a Work Order 399 Scroll down to view the MAC address assignments for the LOS points. Use the instructions in the Ekahau Site Survey Initial Setup section of the work order to set up the survey. When you import the floor map into the site survey tool, make sure you use the map name specifi...

400 C HAPTER 15: G ENERATING R EPORTS 7 To change the output directory for the report, click on the button next to output directory, navigate to the new directory, and click Select . 8 Click Generate . 9 When the report is generated, click View . A browser window containing the report opens. 10 Opti...

16 M ONITORING THE N ETWORK This chapter describes how to use the 3WXM monitoring service. It includes information about monitoring service requirements, accessing monitored data, using the Explore, Status Summary, Client Monitor, RF Monitor, and RF Trends windows, and accessing realtime performance...

402 C HAPTER 16: M ONITORING THE N ETWORK The 3WXM Services is configured to provide data for the Explore and Status Summary windows by default. To provide data to the client and RF windows, you must enable the service to poll WX switches for client and RF data. You also can enable the service to re...

Using the Explore Window 403 3 Select an object in the Organizer panel. Monitored data for the selected object is displayed. Using the Explore Window The Explore view shows the status of 3Com equipment within the scope of the object selected in the Equipment or Sites section of the Organizer panel. ...

Using the Explore Window 405 In either the link display or the floor display, the operational status of 3Com equipment is indicated by the following colors: „ Green — Up „ Yellow — Up (but with minor service degradation) „ Orange — Up (but with major service degradation) „ Red — Down „ Blue — Unknow...

406 C HAPTER 16: M ONITORING THE N ETWORK Table 34 lists the options on the toolbar in the floor display. Table 34 Toolbar Options in Floor Display of Explore View Icon Description Edit 3WXM preferences. Configure 3WXM Services. Launch Help. Zoom in. Zoom out. Refresh the information. Fit the view i...

Using the Explore Window 407 Threshold Flags A red flag next to an object in the link view of the Explore view indicates that a threshold for the object has been exceeded. The thresholds are defined by the 3WXM Services. (See “Changing 3WXM Services Preferences” on page 491.) For example, a red flag...

410 C HAPTER 16: M ONITORING THE N ETWORK Displaying Object Details To drill down for more detailed information for an object in the Explore view, double-click on the object. All Monitor views, including the Explore view itself, are updated to display information specifically about the selected obje...

Using the Explore Window 411 The jagged appearance of the coverage area is normal and is caused by the RF obstacles around the radio. The RF obstacle information in the floor plan enables 3WXM to more accurately portray RF information for the network, including a radio’s coverage. If the coverage ar...

412 C HAPTER 16: M ONITORING THE N ETWORK Taking RF Measurements In the floor plan display, you can take an RF measurement at any point on the floor plan. An RF measurement point indicates the RSSI value for each 3Com radio on the floor. To take an RF measurement 1 In the floor plan display of the E...

Using the Explore Window 413 Table 36 lists the RF measurement information that is displayed for the measurement point. RF measurement point RSSI measurements Table 36 RF Measurement Information Item Value X (Feet) Distance in the X direction from the 0,0 coordinate (the upper left corner of the pan...

Using the Client Monitor View 415 Using the Client Monitor View The Client Monitor view shows detailed information about client activity on the network. Client information is displayed in the following tabs: „ Client Activity — displays association and 802.1X information for the clients „ Client Ses...

416 C HAPTER 16: M ONITORING THE N ETWORK Refreshing Client Data The data displayed in the Client Monitor view is refreshed at regular intervals (every 5 minutes by default). The data is refreshed based on the client monitor polling interval specified. (See “Changing Monitoring Settings” on page 500...

Using the Client Monitor View 417 The same counters appear when you select a Site, building, or floor. Table 38 lists the data displayed on the Client Activity tab when a Mobility Domain is selected. The counters are incremented each time the 3WXM Services receives a client activity trap generated b...

Using the Client Monitor View 419 Data Displayed When a Switch, MAP, or Radio is Selected When a WX switch, MAP, or individual radio is selected in the Organizer panel, the Client Monitor view’s Client Activity tab displays a row of information for each client activity trap generated by the selected...

Using the Client Monitor View 421 Table 40 Activity Details for Association Failure Column Description MAC Address MAC address of the client. Failure Cause Cause of the association failure: „ already-exist „ cipher-mismatch „ cipher-rejected „ load-balance „ other „ switching-ssid „ wep-not-configur...

422 C HAPTER 16: M ONITORING THE N ETWORK Client Location Mobility Domain, WX switch, MAP access point, and radio that were dealing with the client. Session ID ID used by 3Com equipment to track the session within the Mobility Domain. Auth Server IP System IP address of the WX switch that was attemp...

Using the Client Monitor View 427 Displaying Client Session Information The Client Session tab displays session statistics. The data fields in the display depend on the scope: „ If a Mobility Domain is selected, a row of data is displayed for each WX switch in the Mobility Domain. „ If a WX switch, ...

428 C HAPTER 16: M ONITORING THE N ETWORK Table 48 lists the data displayed on the Client Sessions tab when the scope is a Mobility Domain. Data Displayed When a WX Switch, MAP, or Radio is Selected When a WX switch, MAP, or individual radio is selected in the Organizer panel, the Client Monitor vie...

Using the Client Monitor View 429 Displaying Session Details To display details for a user session, select the session in the Client Sessions list. Details for the session appear in the following tabs at the bottom of the window: „ Session Properties „ Session Statistics „ Location History Displayin...

432 C HAPTER 16: M ONITORING THE N ETWORK Displaying Session Statistics On the Client Sessions tab, select the Session Statistics tab at the bottom of the view. On the Session Statistics tab, you can select statistics for the MAP the client is associated with, or total statistics for the client’s en...

Using the Client Monitor View 433 Displaying Session Location History On the Client Sessions tab, select the Location History tab at the bottom of the window. Each row represents a session with a 3Com radio. When a client roams from one radio to another, the session on the radio the client is leavin...

434 C HAPTER 16: M ONITORING THE N ETWORK Sessions in the location history are sorted from newest to oldest, with the oldest session at the bottom of the list and the newest session at the top. Table 52 lists the information displayed on the tab. Managing the Client Watch List You can add clients to...

Using the Client Monitor View 435 1 In the Client Monitor window, click on the window’s toolbar. The Find Clients dialog box appears. 2 Select one of the following: „ Find a specific user — to find a user using specific search attributes. Go to step 3. „ Find all users — to find all users. Go to ste...

436 C HAPTER 16: M ONITORING THE N ETWORK When specifying search criteria, you must provide an exact match. For a username, you can also specify the prefix of the username. For example, to find [email protected], you could specify the following: „ [email protected] „ nat Wildcards are not suppor...

Using the Client Monitor View 437 7 To add a user to the watch list in the User Management tab, select the Add Watch checkbox in the user row. Repeat for all users that you want to add to the watch list. 8 Click Finish . Displaying the Client Watch List To display the watch list, select the Client W...

438 C HAPTER 16: M ONITORING THE N ETWORK Details are displayed on the following tabs: „ Session — displays the Session Properties, Session Statistics, and Location History tabs. These are the same tabs displayed at the bottom of the Client Sessions tab. (For descriptions of the data they display, s...

440 C HAPTER 16: M ONITORING THE N ETWORK To improve the accuracy of the client location display, you can select up to six MAPs from the list. 3WXM uses the selected MAPs to calculate the location of the client. For best results, you should select the MAPs that have detected the client most recently...

442 C HAPTER 16: M ONITORING THE N ETWORK Using the RF Monitor View The RF Monitor view shows detailed RF information for each radio. Radio information is displayed in the following tabs: „ RF Neighborhood — lists the other transmitting devices that the radio can hear. „ SSID-BSSID Mapping — lists t...

Using the RF Monitor View 443 Displaying RF Neighborhood Information In the RF Monitor view, select the RF Neighborhood tab at the bottom of the window. The RF Neighborhood tab lists the transmitters that can hear or are heard by the radio selected in the top section of the window. You can select th...

444 C HAPTER 16: M ONITORING THE N ETWORK Displaying the SSID-to-BSSID Mapping To display the SSIDs configured on a radio and their BSSIDs, in the RF Monitor window, select the SSID-BSSID Mapping tab at the bottom of the window. BSSID BSSID detected by the radio. Note — This column displays a single...

Using the RF Monitor View 445 Displaying the Activity Log The activity log displays RF Auto-Tuning and countermeasures activity for the radio. To display the activity log, in the RF Monitor view, select the Activity tab at the bottom of the window. Table 55 lists the information displayed on the tab...

446 C HAPTER 16: M ONITORING THE N ETWORK Displaying RF Environment Statistics To display RF environment statistics, in the RF Monitor window, select the RF Environment tab at the bottom of the window. Table 56 lists the information displayed on the tab. Table 56 RF Monitor Environment Columns Colum...

Accessing Realtime Performance Statistics 449 To change how you view data values, select Absolute to see absolute values or Deltas to see rate-of-change values. Refreshing RF Trend Data The data displayed in the RF Trends view is refreshed at regular intervals (every 5 minutes by default). The data ...

Accessing Realtime Performance Statistics 451 Generally, the scope is an aggregate object, which means that it is made up of sub-objects. (The exception is when a scope is a set of ports.) When you see performance data for the aggregate object, you are seeing the sum of the data of the sub-objects. ...

452 C HAPTER 16: M ONITORING THE N ETWORK For example, if the number of octets in is 11,101,288 at the beginning of the polling period, the number of octets in is 11,146,904 at the end of the polling period, and the time difference is 60 seconds, the delta value is 760.267. To change how you view da...

Accessing Realtime Performance Statistics 453 To reset counters in the current view For absolute values, you can reset the counters in the current view by clicking Reset Counters In View . Resetting counters applies to the current view only. The performance data continues to be collected. The view s...

454 C HAPTER 16: M ONITORING THE N ETWORK Viewing Data in Percentages To see a set of objects in a particular category of data as percentages in a pie chart, click the Percent tab. Data for the pie chart is captured when you click the tab and is based on the polling interval you selected. To see det...

Accessing Realtime Performance Statistics 455 Exporting Performance Data You can export performance data (absolute values only) to a file in comma-delimited text (.csv) format. To export data to a file 1 In the Statistics tab, click Export Absolute . The Export Data dialog box appears.

456 C HAPTER 16: M ONITORING THE N ETWORK 2 To specify a directory and name for the file, click Choose . 3 To overwrite existing files, select Overwrite Existing Files . By default, this option is selected. 4 To make a copy of files before overwriting them, select Copy Files Before Overwriting . By ...

17 D ETECTING AND C OMBATTING R OGUE D EVICES This chapter discusses how to manage rogue devices that try to use your wireless network. Information includes an overview of detection features, enabling countermeasures, using the Rogue Detection tab, displaying a rogue’s geographical location, ignorin...

458 C HAPTER 17: D ETECTING AND C OMBATTING R OGUE D EVICES Rogue Detection Requirements Rogue detection in 3WXM has the following requirements. „ The Enable Rogue Detection option must be selected on the Monitoring Settings tab of the 3WXM Services Setup dialog. (See “Changing Monitoring Settings” ...

Rogue Detection Requirements 459 To use countermeasures, they must be enabled. You can enable them on an individual radio profile basis. (See “Viewing and Configuring Radio Profiles” on page 263.) Mobility Domain Requirement RF Detection requires the Mobility Domain to be completely up. If a Mobilit...

Rogue Detection Lists 461 MAP radio detects wireless packet. No Yes Yes Source MAC in SSID in Permitted Ignore List? Device is not a threat. SSID List? Yes OUI in PermittedVendor List? No Source MAC in Attack List? No Generate an alarm. Classify device as a rogue. No Yes Issue countermeasures(if ena...

Using the Rogue Detection Screen 463 „ Activity Log — Lists activity (appearance or disappearance) of the rogue selected in the rogue list. The entries in the Activity Log tab come from either of the following sources: „ Notification data received from a switch „ 3WXM Services, if they detect the ap...

464 C HAPTER 17: D ETECTING AND C OMBATTING R OGUE D EVICES Filtering the Rogue List By default, the rogue list contains all rogues detected during the most-recent polling interval, in all Mobility Domains in the network plan. You can change the filter criteria for which rogues are listed. To filter...

Using the Rogue Detection Screen 465 „ Ad-hoc clients —Wireless clients who are configured to communicate wirelessly outside of the network infrastructure. Ad-hoc clients are not necessarily malicious, but they do steal bandwidth from your infrastructure users. Ad-hoc clients are further categorized...

466 C HAPTER 17: D ETECTING AND C OMBATTING R OGUE D EVICES Each rogue is listed only once, even if multiple entries for the rogue appear in the Activity Log tab. For example, if a rogue is detected during three polling intervals, separate entries for each polling interval appear in the Activity Log...

Using the Rogue Detection Screen 467 Clients Tab The Clients tab lists details about the clients of rogue devices. To display client information for a rogue, select the rogue in the Filtered List. Table 62 lists the information displayed on the Clients tab. Table 61 Listeners Columns Column Descript...

468 C HAPTER 17: D ETECTING AND C OMBATTING R OGUE D EVICES Displaying a Rogue’s Geographical Location If building and floor information for the site is modeled in the network plan, you can display the likely physical location of a rogue. 3WXM displays the floor plan for the floor where the rogue is...

Displaying a Rogue’s Geographical Location 469 2 Select the client under the Clients tab. 3 Click on the toolbar. The Device Location screen appears, indicating the approximate location of the client. The client is most likely in the vicinity of the area indicated by the red squares in the floor pla...

Adding a Device to the Attack List 471 Adding a Device to the Attack List An attack list is a switch’s list of AP MAC addresses to attack whenever they are present on the network. 1 In the Filtered List of rogues on the Rogue Detection screen, select the devices you want to attack. 2 Click on the to...

Adding a Rogue’s Clients to the Black List 473 Adding a Rogue’s Clients to the Black List The client black list is a switch’s list of MAC addresses of wireless clients who are not allowed on the network. MSS prevents clients on the list from accessing the network through a WX switch. 1 In the Filter...

18 O PTIMIZING A N ETWORK P LAN After you deploy a network plan to the 3Com equipment in your live network, you can optimize the plan based on RF information from the network. The RF information can be from a site survey or from MAP radios. „ Site survey—RF measurements come from a site survey file ...

478 C HAPTER 18: O PTIMIZING A N ETWORK P LAN The measurements reflect how well the measuring MAPs can hear one another, and do not directly measure how well clients can hear the MAPs. For example, if the MAPs are mounted on the ceiling, attenuation of their signals to one another might be less than...

Locating and Fixing Coverage Holes 479 6 On the toolbar, click the radio type for which you want to display coverage: You also can show coverage by right-clicking on the scope in the Coverage Areas section, then selecting Show RF Coverage. Coverage for the selected scope(s) is displayed. This exampl...

A C HANGING 3WXM P REFERENCES This chapter discusses how to set 3Com Wireless LAN Switch Manager (3WXM) client preferences. It describes how to reset preferences values and change options for network synchronization, user interface, persistence, tools, certificate management, RF planning, and 3WXM l...

482 C HAPTER A: C HANGING 3WXM P REFERENCES Changing Network Synchronization Options By default, 3WXM checks for configuration changes, events, and status changes on WX switches. You can configure checking (also called polling ) for configuration changes in the network made with the CLI, Web Manager...

Changing Persistence Options 483 3 To enable a confirmation prompt after you close a wizard, select the Warn checkbox. To disable the confirmation prompt, clear the Warn checkbox. By default, if you close a wizard, a pop-up box appears, asking whether you want to close the wizard. (Changes are lost ...

Changing Options for RF Planning 485 Changing Options for RF Planning You can change the following RF planning options: „ Typical transmit power for clients in the 3Com network. „ Color schemes for showing RF information Configuring the Typical Client’s Transmit Power To change the typical client’s ...

Changing 3WXM Logging Options 489 3 In the Log Event Level list, select one of the following event levels: „ Critical — A critical condition has occurred that requires immediate resolution. „ Warning — An event that might require attention has occurred. „ Info — Informational messages only. No actio...

B C HANGING 3WXM S ERVICES P REFERENCES This chapter discusses how to change 3WXM Services preferences. Overview To set 3WXM Services preferences, select Tools > 3WXM Services Setup from the toolbar in the main 3WXM window. See the following figure on the next page. This chapter describes how to ...

492 C HAPTER B: C HANGING 3WXM S ERVICES P REFERENCES The 3WXM Services Setup window contains a configuration area and a message area at the bottom. When you click Save to implement changes you make on one of the window’s tabs, the monitoring service verifies the changes. If the changes are valid, t...

Starting or Stopping the 3WXM Services 493 Starting or Stopping the 3WXM Services 3WXM Services is started automatically when you complete installation and starts automatically whenever you restart your system. 3Com recommends that all clients that are using 3WXM Services be closed before you stop t...

Connecting to 3WXM Services 495 If the Certificate Check dialog is displayed, click Accept . (For more certificate options, see the next section, “Certificate Check”.) If the Finish button does not become available, read the last message in the message area of the page to determine why the service c...

Changing Service Settings 497 Changing Service Settings The service settings control the connection parameters, key store information, and access control to 3WXM Services. The port numbers used by 3WXM Services must not be used by other applications on the machine where the 3WXM Services is installe...

498 C HAPTER B: C HANGING 3WXM S ERVICES P REFERENCES (For more information about this option, see “Replacing a Switch and Reusing its Configuration” on page 342.) 7 To change the name of the key store file that contains the encryption keys the 3WXM Services uses for authentication with 3WXM, edit t...

Changing WX Connection Settings 499 By default, 3WXM Services accepts certificates from WX switches regardless of whether they are generated by a certificate authority (CA) or they are self-signed certificates. When you disable this option, the Accept self-signed certificates option remains enabled....

Changing Monitoring Settings 501 The data for some reports also requires monitoring options to be enabled. For information, see the descriptions for each report in “Generating Reports” on page 383. To change monitoring settings To change monitoring settings, use the following procedure. 1 Select Too...

502 C HAPTER B: C HANGING 3WXM S ERVICES P REFERENCES „ Low SNR specifies how low the signal-to-noise ratio (SNR) can be for a radio without triggering a TCA. You can specify from 0 to 60 decibels (dB). The default is 20 dB. „ Max clients per AP specifies the maximum number of clients that can be as...

C O BTAINING S UPPORT FOR YOUR P RODUCT Register Your Product Warranty and other service benefits start from the date of purchase, so it is important to register your product quickly to ensure you get full use of the warranty and other service benefits available to you. Warranty and other service be...

Contact Us 509 To send a product directly to 3Com for repair, you must first obtain a return authorization number (RMA). Products sent to 3Com, without authorization numbers clearly marked on the outside of the package, will be returned to the sender unopened, at the sender’s expense. If your produc...

I NDEX Numbers 3WXM restricting access to 50 software requirements 23 3WXM client installing 24 3WXM service installing 24 802.1Q tagging 209 802.1X configuring 303 802.1X authentication standard 303 A access control entries. See ACEs (access control entries) access control lists. See ACLs (access c...