User Guide
Page 4
... Wireless Interface Device Manager 3-2 First Time Only 3-4 Using the Setup Wizard 3-4 4 System Configuration Advanced Setup 4-2 System Identification 4-4 TCP / IP Settings 4-5 RADIUS 4-8 Authentication 4-9 Filter Control 4-14 VLAN 4-16 SNMP 4-18 Configuring SNMP and Trap Message Parameters Configuring SNMPv3 Users 4-21 4-18 Administration 4-22 Changing the Password 4-22 Telnet and SSH Settings 4-23 Upgrading Firmware 4-24 WDS and Spanning Tree Settings 4-27 System Log 4-33 Enabling System Logging 4-33 Configuring SNTP 4-34 Radio Interface 4-35 802.11a Interface 4-36 Configuring Radio...
... Wireless Interface Device Manager 3-2 First Time Only 3-4 Using the Setup Wizard 3-4 4 System Configuration Advanced Setup 4-2 System Identification 4-4 TCP / IP Settings 4-5 RADIUS 4-8 Authentication 4-9 Filter Control 4-14 VLAN 4-16 SNMP 4-18 Configuring SNMP and Trap Message Parameters Configuring SNMPv3 Users 4-21 4-18 Administration 4-22 Changing the Password 4-22 Telnet and SSH Settings 4-23 Upgrading Firmware 4-24 WDS and Spanning Tree Settings 4-27 System Log 4-33 Enabling System Logging 4-33 Configuring SNTP 4-34 Radio Interface 4-35 802.11a Interface 4-36 Configuring Radio...
User Guide
Page 9
... existing and emerging wireless standards. 1 INTRODUCTION The 3Com® Wireless 8760 Dual-radio 11a/b/g PoE Access Point offers a dual-mode architecture that provides users with 3Com's enterprise-class wireless access point, you can build a cost-effective, reliable, secure wireless network that supports 802.11g, 802.11a, and 802.11b wireless users on a single access point. With their increasingly mobile workforce. 1-1 This means you can mix and match radio bands to serve their flexibility and unfettered access, wireless LANs are changing the way...
... existing and emerging wireless standards. 1 INTRODUCTION The 3Com® Wireless 8760 Dual-radio 11a/b/g PoE Access Point offers a dual-mode architecture that provides users with 3Com's enterprise-class wireless access point, you can build a cost-effective, reliable, secure wireless network that supports 802.11g, 802.11a, and 802.11b wireless users on a single access point. With their increasingly mobile workforce. 1-1 This means you can mix and match radio bands to serve their flexibility and unfettered access, wireless LANs are changing the way...
User Guide
Page 11
... per radio are available, and each VAP can be used to offer two services: The first service provides access to protected data for authenticated university staff members, while the second service provides open access to the Internet for interference-free communication. „ Auto network connect and dynamic rate shifting keep users connected through the network. „ Virtual Access Point (VAP) support provides flexibility by linking several wireless access points together with its own security settings. WDS uses the wireless medium...
... per radio are available, and each VAP can be used to offer two services: The first service provides access to protected data for authenticated university staff members, while the second service provides open access to the Internet for interference-free communication. „ Auto network connect and dynamic rate shifting keep users connected through the network. „ Virtual Access Point (VAP) support provides flexibility by linking several wireless access points together with its own security settings. WDS uses the wireless medium...
User Guide
Page 12
... you need to 3Com Network Supervisor and HP OpenView for seamless integration with difficult-to-wire or hard-to a greater risk of mounting configurations because you make the best choice for expansion into 802.11g. „ Implementing a complete wireless LAN solution, including bridges, gateways, access points and clients; With Power over Ethernet (PoE) support, the same Category 5 cable that connects your access point to hot spots in the more popular 2.4 GHz band. Wi...
... you need to 3Com Network Supervisor and HP OpenView for seamless integration with difficult-to-wire or hard-to a greater risk of mounting configurations because you make the best choice for expansion into 802.11g. „ Implementing a complete wireless LAN solution, including bridges, gateways, access points and clients; With Power over Ethernet (PoE) support, the same Category 5 cable that connects your access point to hot spots in the more popular 2.4 GHz band. Wi...
User Guide
Page 23
... access point is present. 11a Green The access point has WLAN frame transmission over the 802.11g 2.4 GHz radio band. Flashing Indicates that the access point is present. If you may have made are removed, and the factory default configuration is proportional to the access point. 2-9 Off No link is transmitting or receiving data on a 10/100 Mbps Ethernet LAN. Checking the LEDs CHECKING THE LEDS When power is used to reset the access point or restore the factory default configuration...
... access point is present. 11a Green The access point has WLAN frame transmission over the 802.11g 2.4 GHz radio band. Flashing Indicates that the access point is present. If you may have made are removed, and the factory default configuration is proportional to the access point. 2-9 Off No link is transmitting or receiving data on a 10/100 Mbps Ethernet LAN. Checking the LEDs CHECKING THE LEDS When power is used to reset the access point or restore the factory default configuration...
User Guide
Page 32
... for wireless clients. USING THE SETUP WIZARD There are only a few basic steps you through its Ethernet port or console port. CHAPTER 3: INITIAL CONFIGURATION Directly connect to login into the AP Configuration screen: 1 Load a web browser and enter . 2 The Logon screen appears. To log on the Setup Wizard for the 11a interface, and 3Com5 to the Web interface: 1 Username, type admin (case sensitive). 2 Password, type password 3 Click Log On. For a new access point installation, the default WLAN Service Area (ESSID) is connected to the same network as Internet...
... for wireless clients. USING THE SETUP WIZARD There are only a few basic steps you through its Ethernet port or console port. CHAPTER 3: INITIAL CONFIGURATION Directly connect to login into the AP Configuration screen: 1 Load a web browser and enter . 2 The Logon screen appears. To log on the Setup Wizard for the 11a interface, and 3Com5 to the Web interface: 1 Username, type admin (case sensitive). 2 Password, type password 3 Click Log On. For a new access point installation, the default WLAN Service Area (ESSID) is connected to the same network as Internet...
User Guide
Page 43
Advanced Setup Menu SNMP Administration WDS/STP Settings Syslog Set-up Status AP Status Station Status Event Logs 802.11a Interface Radio Settings Security 802.11b/g Interface Radio Settings Security Description Configures SNMP settings Configures user name and password for each VAP interface Enables each VAP interface, sets the SSID, and configures wireless security Page 4-18 4-22 4-27 4-33 4-59 4-59 4-60 4-61 4-35 4-36 4-49 4-35 4-42 4-49 4-3 and resets the access point Configures WDS bridging and Spanning Tree Protocol features Controls logging of error messages; sets the system ...
Advanced Setup Menu SNMP Administration WDS/STP Settings Syslog Set-up Status AP Status Station Status Event Logs 802.11a Interface Radio Settings Security 802.11b/g Interface Radio Settings Security Description Configures SNMP settings Configures user name and password for each VAP interface Enables each VAP interface, sets the SSID, and configures wireless security Page 4-18 4-22 4-27 4-33 4-59 4-59 4-60 4-61 4-35 4-36 4-49 4-35 4-42 4-49 4-3 and resets the access point Configures WDS bridging and Spanning Tree Protocol features Controls logging of error messages; sets the system ...
User Guide
Page 46
... used for routing to manually configure a static address for the access point. „ IP Address: The IP address of the router for the access point, which is not on the network. The IP address, subnet mask, default gateway, and Domain Name Server (DNS) address are dynamically assigned to the access point by the web browser interface. „ HTTPS Server: Enables the secure HTTP server on another subnet, type the IP address of the default gateway router in the text fields provided. If you have management stations, DNS, RADIUS, or other network servers...
... used for routing to manually configure a static address for the access point. „ IP Address: The IP address of the router for the access point, which is not on the network. The IP address, subnet mask, default gateway, and Domain Name Server (DNS) address are dynamically assigned to the access point by the web browser interface. „ HTTPS Server: Enables the secure HTTP server on another subnet, type the IP address of the default gateway router in the text fields provided. If you have management stations, DNS, RADIUS, or other network servers...
User Guide
Page 63
... uses generated public keys to generate host encryption keys. The SSH server is "admin." (Length: 3-16 characters, case sensitive) New Password - TELNET AND SSH SETTINGS Telnet is not secure from anywhere in the network. The name of the user. Enter the password again for management access. (Length: 3-16 characters, case sensitive) Confirm New Password - The Secure Shell (SSH) can be installed on the management station to configure the access point from hostile attacks. The default...
... uses generated public keys to generate host encryption keys. The SSH server is "admin." (Length: 3-16 characters, case sensitive) New Password - TELNET AND SSH SETTINGS Telnet is not secure from anywhere in the network. The name of the user. Enter the password again for management access. (Length: 3-16 characters, case sensitive) Confirm New Password - The Secure Shell (SSH) can be installed on the management station to configure the access point from hostile attacks. The default...
User Guide
Page 64
... using before the upgrade started. CHAPTER 4: SYSTEM CONFIGURATION „ Telnet Server: Enables or disables the Telnet server. (Default: Disabled) „ SSH Server: Enables or disables the SSH server. (Default: Enabled) „ SSH Port Number: Sets the UDP port for the SSH server. (Range: 1-65535; New software may be provided periodically from an TFTP server. Also note that new software that is incompatible with the current configuration automatically restores the access point to the factory default settings when first activated after a reboot. 4-24 Default: 22) UPGRADING FIRMWARE...
... using before the upgrade started. CHAPTER 4: SYSTEM CONFIGURATION „ Telnet Server: Enables or disables the Telnet server. (Default: Disabled) „ SSH Server: Enables or disables the SSH server. (Default: Enabled) „ SSH Port Number: Sets the UDP port for the SSH server. (Range: 1-65535; New software may be provided periodically from an TFTP server. Also note that new software that is incompatible with the current configuration automatically restores the access point to the factory default settings when first activated after a reboot. 4-24 Default: 22) UPGRADING FIRMWARE...
User Guide
Page 80
... the transmission range. The maximum data rate at which the access point transmits multicast and broadcast packets on the wireless interface. CHAPTER 4: SYSTEM CONFIGURATION NOTE: The Antenna ID must be selected in conjunction with the Output Antenna to ensure that high-power signals do not interfere with the operation of other radio devices in the service area. (Options: 100%, 50%, 25%, 12%, minimum; Selects the use of...
... the transmission range. The maximum data rate at which the access point transmits multicast and broadcast packets on the wireless interface. CHAPTER 4: SYSTEM CONFIGURATION NOTE: The Antenna ID must be selected in conjunction with the Output Antenna to ensure that high-power signals do not interfere with the operation of other radio devices in the service area. (Options: 100%, 50%, 25%, 12%, minimum; Selects the use of...
User Guide
Page 91
...WPA Pre-Shared Key Authentication: WPA-PSK Local only No only Encryption: Enable WPA Configuration: Required Cipher Configuration: TKIP 802.1x: Disable WPA Pre-shared Key Type: Hexadecimal or Alphanumeric Enter a WPA Pre-shared key Static and dynamic Enter 1 to 4 WEP keys (802.1x) WEP keys Select a WEP transmit key Local, RADIUS, or Yes Disabled Authentication: Open System Encryption: Enable 802.1x: Supported Set 802.1x key refresh and reauthentication rates Dynamic WEP and 802.1x WPA Authentication: WPA Local or Disabled Yes Encryption: Enable WPA Configuration: Supported...
...WPA Pre-Shared Key Authentication: WPA-PSK Local only No only Encryption: Enable WPA Configuration: Required Cipher Configuration: TKIP 802.1x: Disable WPA Pre-shared Key Type: Hexadecimal or Alphanumeric Enter a WPA Pre-shared key Static and dynamic Enter 1 to 4 WEP keys (802.1x) WEP keys Select a WEP transmit key Local, RADIUS, or Yes Disabled Authentication: Open System Encryption: Enable 802.1x: Supported Set 802.1x key refresh and reauthentication rates Dynamic WEP and 802.1x WPA Authentication: WPA Local or Disabled Yes Encryption: Enable WPA Configuration: Supported...
User Guide
Page 94
... multicast and broadcast traffic, which is supported by all types of entering WEP encryption keys on the access point and all clients. (Default: Disabled) NOTE: You must configure at least one key on the access point and enter up to enable all wireless clients. „ AES: AES-CCMP is used as the multicast encryption cipher. CHAPTER 4: SYSTEM CONFIGURATION Encryption - If this option is the default setting. 4-54 Select the preferred method of encryption (WEP, TKIP, or AES) in the access point. Cipher Modes...
... multicast and broadcast traffic, which is supported by all types of entering WEP encryption keys on the access point and all clients. (Default: Disabled) NOTE: You must configure at least one key on the access point and enter up to enable all wireless clients. „ AES: AES-CCMP is used as the multicast encryption cipher. CHAPTER 4: SYSTEM CONFIGURATION Encryption - If this option is the default setting. 4-54 Select the preferred method of encryption (WEP, TKIP, or AES) in the access point. Cipher Modes...
User Guide
Page 96
... to update the client keys. (Default: Key 1) NOTE: Key index and type must match that configured on wireless clients requires a WPA-enabled network card driver and 802.1X client software that supports the EAP authentication type that prevents users from accidentally joining a rogue network. Working together, these protocols provide "mutual authentication" between a client, the access point, and a RADIUS server that you can change the encryption key to any of the four settings without having to provide an enhanced security solution for each VAP interface. NOTE...
... to update the client keys. (Default: Key 1) NOTE: Key index and type must match that configured on wireless clients requires a WPA-enabled network card driver and 802.1X client software that supports the EAP authentication type that prevents users from accidentally joining a rogue network. Working together, these protocols provide "mutual authentication" between a client, the access point, and a RADIUS server that you can change the encryption key to any of the four settings without having to provide an enhanced security solution for each VAP interface. NOTE...
User Guide
Page 100
...; Radio Channel: The radio channel through which antenna/e are "open 4-60 Type: Shows the type of authentication used. „ Output Antenna: Displays which the access point communicates with the access point. Note that Interface Wireless A refers to the 802.11a radio and Interface Wireless G refers the 802.11b/g radio. „ VAP: Displays the VAP number. „ Radio Status: Displays if the radio is enabled or disabled for data encryption. „ Radio Auth. AP Wireless Configuration - The AP Wireless Configuration tables display the radio and VAP interface settings listed...
...; Radio Channel: The radio channel through which antenna/e are "open 4-60 Type: Shows the type of authentication used. „ Output Antenna: Displays which the access point communicates with the access point. Note that Interface Wireless A refers to the 802.11a radio and Interface Wireless G refers the 802.11b/g radio. „ VAP: Displays the VAP number. „ Radio Status: Displays if the radio is enabled or disabled for data encryption. „ Radio Auth. AP Wireless Configuration - The AP Wireless Configuration tables display the radio and VAP interface settings listed...
User Guide
Page 211
.... Using the Command Line Interface transmit-power This command adjusts the power of the radio signals transmitted from the access point. (Options: full, half, quarter, eighth, min) Default Setting full Command Mode Interface Configuration (Wireless) Command Usage • The "min" keyword indicates minimum power. • The longer the transmission distance, the higher the transmission power required. Power selection is not just a trade off between coverage area and maximum supported clients...
.... Using the Command Line Interface transmit-power This command adjusts the power of the radio signals transmitted from the access point. (Options: full, half, quarter, eighth, min) Default Setting full Command Mode Interface Configuration (Wireless) Command Usage • The "min" keyword indicates minimum power. • The longer the transmission distance, the higher the transmission power required. Power selection is not just a trade off between coverage area and maximum supported clients...
User Guide
Page 215
... carry power-management information. The rate for transmitting beacon signals. (Range: 20-1000 milliseconds) Default Setting 100 Command Mode Interface Configuration (Wireless) Command Usage The beacon signals allow wireless clients to "right." • Selecting the correct location ensures that the access point only uses radio channels that are transmitted from the access point. Example Enterprise AP(if-wireless g)#beacon-interval 150 Enterprise AP(if-wireless g)# 5-113 Using the Command Line Interface Default Setting Indoor Command Mode Interface Configuration (Wireless) Command...
... carry power-management information. The rate for transmitting beacon signals. (Range: 20-1000 milliseconds) Default Setting 100 Command Mode Interface Configuration (Wireless) Command Usage The beacon signals allow wireless clients to "right." • Selecting the correct location ensures that the access point only uses radio channels that are transmitted from the access point. Example Enterprise AP(if-wireless g)#beacon-interval 150 Enterprise AP(if-wireless g)# 5-113 Using the Command Line Interface Default Setting Indoor Command Mode Interface Configuration (Wireless) Command...
User Guide
Page 239
... of the access point can impact throughput and performance. Default Setting software Command Mode Interface Configuration (Wireless) Command Usage • The Michael Integrity Check (MIC) is part of hardware or software for each transmitted packet and this can be upgraded to calculate the MIC. • software - The access point supports a choice of the Temporal Key Integrity Protocol (TKIP) encryption used in the network, wireless clients must be improved by selecting the best method for...
... of the access point can impact throughput and performance. Default Setting software Command Mode Interface Configuration (Wireless) Command Usage • The Michael Integrity Check (MIC) is part of hardware or software for each transmitted packet and this can be upgraded to calculate the MIC. • software - The access point supports a choice of the Temporal Key Integrity Protocol (TKIP) encryption used in the network, wireless clients must be improved by selecting the best method for...
User Guide
Page 259
... Name Server See DNS downloading software 4-24, 5-61 DTIM 4-41, 5-114 Dynamic Host Configuration Protocol See DHCP E EAP 4-56 encryption 4-49, 4-52, 4-56 Ethernet cable 2-1 event logs 4-61, 5-36 Extensible Authentication Protocol See EAP F factory defaults restoring 5-11 filter 4-14, 5-76 address 4-9, 5-76 between wireless clients 5-80 local bridge 5-80 local or remote 4-9, 5-78 management access 4-15, 5-81 protocol types 4-15, 5-82 VLANs 4-37, 5-145 firmware displaying version 4-26, 5-27 upgrading 4-24, 4-26, 5-61 flat surface installation 2-12...
... Name Server See DNS downloading software 4-24, 5-61 DTIM 4-41, 5-114 Dynamic Host Configuration Protocol See DHCP E EAP 4-56 encryption 4-49, 4-52, 4-56 Ethernet cable 2-1 event logs 4-61, 5-36 Extensible Authentication Protocol See EAP F factory defaults restoring 5-11 filter 4-14, 5-76 address 4-9, 5-76 between wireless clients 5-80 local bridge 5-80 local or remote 4-9, 5-78 management access 4-15, 5-81 protocol types 4-15, 5-82 VLANs 4-37, 5-145 firmware displaying version 4-26, 5-27 upgrading 4-24, 4-26, 5-61 flat surface installation 2-12...
User Guide
Page 260
....3af power-over-Ethernet 2-6 initial setup 3-1 installation 2-1 access point 2-1 antenna 2-5 cable 2-1 flat surface 2-12 location 2-3 power 2-2 requirements 2-1 software utilities 2-14 wall mount 2-12 IP address BOOTP/DHCP 5-99, 5-100 configuring 3-9, 4-5, 5-99, 5-100 troubleshooting 6-2 L LEDs 2-9 location for installation 2-3 log messages 4-34, 4-61, 5-33 server 4-33, 5-33 login CLI 5-1 web 3-5 logon authentication RADIUS client 4-13, 5-64 M MAC address recording 2-4 MAC address, authentication 4-11, 5-76, 5-77 maximum associated clients 4-40 maximum data rate 5-107 802.11a interface 5-107...
....3af power-over-Ethernet 2-6 initial setup 3-1 installation 2-1 access point 2-1 antenna 2-5 cable 2-1 flat surface 2-12 location 2-3 power 2-2 requirements 2-1 software utilities 2-14 wall mount 2-12 IP address BOOTP/DHCP 5-99, 5-100 configuring 3-9, 4-5, 5-99, 5-100 troubleshooting 6-2 L LEDs 2-9 location for installation 2-3 log messages 4-34, 4-61, 5-33 server 4-33, 5-33 login CLI 5-1 web 3-5 logon authentication RADIUS client 4-13, 5-64 M MAC address recording 2-4 MAC address, authentication 4-11, 5-76, 5-77 maximum associated clients 4-40 maximum data rate 5-107 802.11a interface 5-107...
