3com 3CRWEASYA73 Manuel du propriétaire

www.3Com.comUser Guide3Com Outdoor 11a Building to Building Bridge and 11bg Access Point3CRWEASYA73 / WL-575 Part Number 10015232 Rev. AAPublished Aug

1-2 Provides access point services for the 5 GHz and 2.4 GHz radios using various external antenna options Maximum data rate up to 108 Mbps on the 8

5-52CHAPTER 5: SYSTEM CONFIGURATIONDynamic WEP (802.1x) onlyAuthentication: Open System Encryption: Enable 802.1x: Required Set 802.1x key refresh and

5-53SecurityWIRED EQUIVALENT PRIVACY (WEP) WEP provides a basic level of security, preventing unauthorized access to the network, and encrypting data

5-54CHAPTER 5: SYSTEM CONFIGURATIONNote that all clients share the same keys, which are used for user authentication and data encryption. Up to four k

5-55SecurityEncryption – Enable or disable the access point to use data encryption (WEP, TKIP, or AES). If this option is selected when using static W

5-56CHAPTER 5: SYSTEM CONFIGURATION Hexadecimal: Enter keys as 10 hexadecimal digits (0-9 and A-F) for 64 bit keys, 26 hexadecimal digits for 128 bit

5-57Security Key Type – Select the preferred method of entering WEP encryption keys on the access point and enter up to four keys:• Hexadecimal: Ent

5-58CHAPTER 5: SYSTEM CONFIGURATIONTemporal Key Integrity Protocol (TKIP): WPA specifies TKIP as the data encryption method to replace WEP. TKIP avoid

5-59Securityfor WPA2. However, the computational intensive operations of AES-CCMP requires hardware support on client devices. Therefore to implement

5-60CHAPTER 5: SYSTEM CONFIGURATIONStatus InformationThe Status page includes information on the following items:Access Point StatusThe AP Status wind

5-61Security HTTP Server: Shows if management access via HTTP is enabled. HTTP Server Port: Shows the TCP port used by the HTTP interface. Version:

1-3PACKAGE CHECKLISTThe 3Com Outdoor 11a Building to Building Bridge and 11bg Access Point package includes: One 3Com Outdoor 11a Building to Buildin

5-62CHAPTER 5: SYSTEM CONFIGURATIONsystem” and “shared key.” Open-system authentication accepts any client attempting to connect to the access point w

5-63Security Access point was set to “Open Authentication”, but a client sent an authentication request frame with a “Shared key.” Access point was

5-64CHAPTER 5: SYSTEM CONFIGURATION

6-16COMMAND LINE INTERFACEUSING THE COMMAND LINE INTERFACEACCESSING THE CLIWhen accessing the management interface for the over a direct connection to

6-2CHAPTER 6: COMMAND LINE INTERFACETelnet ConnectionTelnet operates over the IP transport protocol. In this environment, your management station and

6-3Using the Command Line InterfaceENTERING COMMANDSThis section describes how to enter CLI commands.Keywords and ArgumentsA CLI command is a series o

6-4CHAPTER 6: COMMAND LINE INTERFACEShowing CommandsIf you enter a “?” at the command prompt, the system will display the first level of keywords for

6-5Using the Command Line InterfaceNegating the Effect of CommandsFor many configuration commands you can enter the prefix keyword “no” to cancel the

6-6CHAPTER 6: COMMAND LINE INTERFACEConfiguration CommandsConfiguration commands are used to modify access point settings. These commands modify the r

6-7Using the Command Line InterfaceTabl e 8 Keystroke CommandsCOMMAND GROUPSThe system commands can be broken down into the functional groups shown

1-4HARDWARE DESCRIPTIONINTEGRATED HIGH-GAIN ANTENNAThe WL-575 bridge includes an integrated high-gain (17 dBi) flat-panel antenna for 5 GHz operation.

6-8CHAPTER 6: COMMAND LINE INTERFACEThe access mode shown in the following tables is indicated by these abbreviations: Exec (Executive Mode), GC (Glob

6-9Using the Command Line InterfaceDefault Setting NoneCommand Mode ExecExample Related Commands end (6-9)endThis command returns to the previous conf

6-10CHAPTER 6: COMMAND LINE INTERFACEexitThis command returns to the Exec mode or exits the configuration program.Default Setting NoneCommand Mode Any

6-11Using the Command Line Interface- Destination unreachable - The gateway for this destination indicates that the destination is unreachable. - Netw

6-12CHAPTER 6: COMMAND LINE INTERFACEshow historyThis command shows the contents of the command history buffer.Default Setting NoneCommand Mode ExecCo

6-13Using the Command Line InterfaceSystem Management CommandsThese commands are used to configure the user name, password, system logs, browser manag

6-14CHAPTER 6: COMMAND LINE INTERFACESyntax country <country_code>country_code - A two character code that identifies the country of operation.

6-15Using the Command Line InterfaceDefault Setting US - for units sold in the United States 99 (no country set) - for units sold in other countriesCo

6-16CHAPTER 6: COMMAND LINE INTERFACEDefault Setting Outdoor 11a Building to Building Command Mode Global ConfigurationExample system nameThis command

6-17Using the Command Line InterfaceDefault Setting adminCommand Mode Global ConfigurationExamplepasswordAfter initially logging onto the system, you

1-5External antennas connect to the N-type RF connectors on the wireless bridge using the optional RF coaxial cables.Using the external antennas in a

6-18CHAPTER 6: COMMAND LINE INTERFACECommand Mode Interface Configuration (Ethernet)Command Usage • The access point supports Secure Shell version 2.0

6-19Using the Command Line InterfaceCommand Mode Interface Configuration (Ethernet)Exampleip http portThis command specifies the TCP port number used

6-20CHAPTER 6: COMMAND LINE INTERFACECommand Mode Global ConfigurationExample Related Commandsip http port (6-19)ip https portUse this command to spec

6-21Using the Command Line InterfaceExample ip https serverUse this command to enable the secure hypertext transfer protocol (HTTPS) over the Secure S

6-22CHAPTER 6: COMMAND LINE INTERFACEweb-redirectUse this command to enable web-based authentication of clients. Use the no form to disable this funct

6-23Using the Command Line InterfaceAPmgmtIPThis command specifies the client IP addresses that are allowed management access to the access point thro

6-24CHAPTER 6: COMMAND LINE INTERFACEExampleThis example restricts management access to the indicated addresses.APmgmtUIThis command enables and disab

6-25Using the Command Line Interfaceshow apmanagementThis command shows the AP management configuration, including the IP addresses of management stat

6-26CHAPTER 6: COMMAND LINE INTERFACEshow systemThis command displays basic system configuration settings.Default SettingNoneCommand Mode ExecExampleO

6-27Using the Command Line Interfaceshow versionThis command displays the software version for the system.Command Mode ExecExample show configThis com

1-6network interconnection devices such as a switch or router that provide MDI-X ports. However, when connecting the access point to a workstation or

6-28CHAPTER 6: COMMAND LINE INTERFACEProtocol Filter Information===========================================================Local Bridge :DISAB

6-29Using the Command Line Interface----------------Security-----------------------------------Closed System : DISABLEDMulticast cipher

6-30CHAPTER 6: COMMAND LINE INTERFACERadius Secondary Server Information========================================IP : 0.0.0.0Port

6-31Using the Command Line InterfaceSNTP Information===========================================================Service State : DisabledSNTP (se

6-32CHAPTER 6: COMMAND LINE INTERFACEshow hardwareThis command displays the hardware version of the system.Command Mode ExecExample System Logging Com

6-33Using the Command Line Interfacelogging onThis command controls logging of error messages; i.e., sending debug or error messages to memory. The no

6-34CHAPTER 6: COMMAND LINE INTERFACEDefault Setting NoneCommand Mode Global ConfigurationExample logging consoleThis command initiates logging of err

6-35Using the Command Line InterfaceCommand Usage Messages sent include the selected level down to Emergency level.Example logging facility-typeThis c

6-36CHAPTER 6: COMMAND LINE INTERFACEExample logging clearThis command clears all log messages stored in the access point’s memory.Syntaxlogging clear

6-37Using the Command Line Interfaceshow event-logThis command displays log messages stored in the access point’s memory.Syntaxshow event-logCommand M

1-7WALL- AND POLE-MOUNTING BRACKET KITThe wireless bridge includes a bracket kit that can be used to mount the bridge to a wall, pole, radio mast, or

6-38CHAPTER 6: COMMAND LINE INTERFACEsntp-server ipThis command sets the IP address of the servers to which SNTP time requests are issued. Use the thi

6-39Using the Command Line InterfaceDefault Setting EnabledCommand Mode Global ConfigurationCommand Usage The time acquired from time servers is used

6-40CHAPTER 6: COMMAND LINE INTERFACERelated Commandssntp-server enable (6-38)sntp-server daylight-savingThis command sets the start and end dates for

6-41Using the Command Line InterfaceCommand Mode Global ConfigurationCommand Usage This command sets the local time zone relative to the Coordinated U

6-42CHAPTER 6: COMMAND LINE INTERFACEDHCP Relay CommandsDynamic Host Configuration Protocol (DHCP) can dynamically allocate an IP address and other co

6-43Using the Command Line InterfaceExample dhcp-relayThis command configures the primary and secondary DHCP server addresses.Syntaxdhcp-relay <pri

6-44CHAPTER 6: COMMAND LINE INTERFACECommand Mode ExecExample SNMP CommandsControls access to this access point from management stations using the Sim

6-45Using the Command Line Interfaceshow snmp filter Displays the SNMP v3 notification filters Exec 6-58show snmp filter-assignmentsDisplays the SNMP

6-46CHAPTER 6: COMMAND LINE INTERFACEsnmp-server communityThis command defines the community access string for the Simple Network Management Protocol.

6-47Using the Command Line InterfaceDefault Setting NoneCommand Mode Global ConfigurationExample Related Commandssnmp-server location (6-47)snmp-serve

1-8The wireless bridge modes connect two or more wired networks, for example networks in different buildings with no wired connections. You will need

6-48CHAPTER 6: COMMAND LINE INTERFACEsnmp-server enable serverThis command enables SNMP management access and also enables this device to send SNMP tr

6-49Using the Command Line Interface• host_name - Name of the host. (Range: 1-63 characters)• community-string - Password-like community string sent w

6-50CHAPTER 6: COMMAND LINE INTERFACEre-associated with the access point.- dot11StationRequestFail - A client station has failed association, re-assoc

6-51Using the Command Line InterfaceDefault Setting All traps enabledCommand Mode Global ConfigurationCommand Usage This command is used in conjunctio

6-52CHAPTER 6: COMMAND LINE INTERFACEExample snmp-server userThis command configures the SNMP v3 users that are allowed to manage the access point. Us

6-53Using the Command Line Interface• The command prompts for the following information to configure an SNMP v3 user:- user-name - A user-defined stri

6-54CHAPTER 6: COMMAND LINE INTERFACESyntaxsnmp-server targets <target-id> <ip-addr> <sec-name> [version {3}] [udp-port {port-num

6-55Using the Command Line InterfaceSyntaxsnmp-server filter <filter-id> <include | exclude> <subtree> [mask {mask}] no snmp-serv

6-56CHAPTER 6: COMMAND LINE INTERFACEExample snmp-server filter-assignmentsThis command assigns SNMP v3 notification filters to targets. Use the no fo

6-57Using the Command Line InterfaceSyntax show snmp groupsCommand ModeExecExample show snmp usersThis command displays the SNMP v3 users and settings

1-9The following figure shows a point-to-multipoint “in-line” configuration with one bridge set to “Master” and using a directional panel antenna.19°

6-58CHAPTER 6: COMMAND LINE INTERFACESyntax show snmp group-assignmentsCommand ModeExecExample show snmp targetThis command displays the SNMP v3 notif

6-59Using the Command Line InterfaceCommand Mode ExecExample show snmp filter-assignmentsThis command displays the SNMP v3 notification filter assignm

6-60CHAPTER 6: COMMAND LINE INTERFACEshow snmpThis command displays the SNMP configuration settings.Command Mode ExecExampleOutdoor 11a Building to Bu

6-61Using the Command Line InterfaceFlash/File CommandsThese commands are used to manage the system code or configuration files.Tabl e 17 Flash/File

6-62CHAPTER 6: COMMAND LINE INTERFACEExamplecopy This command copies a boot file, code image, or configuration file between the access point’s flash m

6-63Using the Command Line InterfaceExample The following example shows how to upload the configuration settings to a file on the TFTP server:The foll

6-64CHAPTER 6: COMMAND LINE INTERFACEExample This example shows how to delete the test.cfg configuration file from flash memory.Related Commandsbootfi

6-65Using the Command Line Interfaceshow bootfileThis command displays the name of the current operation code file that booted the system.Syntaxshow s

6-66CHAPTER 6: COMMAND LINE INTERFACEradius-server addressThis command specifies the primary and secondary RADIUS servers. Syntaxradius-server [second

6-67Using the Command Line InterfaceExample radius-server keyThis command sets the RADIUS encryption key. Syntax radius-server [secondary] key <key

1-10

6-68CHAPTER 6: COMMAND LINE INTERFACEDefault Setting 3Command Mode Global ConfigurationExample radius-server timeoutThis command sets the interval bet

6-69Using the Command Line InterfaceDefault Setting 0 (disabled)Command Mode Global ConfigurationCommand Usage • When the RADIUS Accounting server UDP

6-70CHAPTER 6: COMMAND LINE INTERFACESyntaxradius-server radius-mac-format <multi-colon | multi-dash | no-delimiter | single-dash>• multi-colon

6-71Using the Command Line InterfaceDefault SettingNoneCommand Mode ExecExample 802.1X AuthenticationThe access point supports IEEE 802.1X access cont

6-72CHAPTER 6: COMMAND LINE INTERFACETabl e 19 802.1X Authentication802.1xThis command configures 802.1X as optionally supported or as required for

6-73Using the Command Line Interfacestations initiating 802.1X, only those stations successfully authenticated are allowed to access the network. For

6-74CHAPTER 6: COMMAND LINE INTERFACE• When 802.1X is required, the access point enforces 802.1X authentication for all 802.11 associated stations. If

6-75Using the Command Line InterfaceExample802.1x session-key-refresh-rateThis command sets the interval at which unicast session keys are refreshed f

6-76CHAPTER 6: COMMAND LINE INTERFACEDefault0 (Disabled)Command ModeGlobal ConfigurationExample802.1x-supplicant enableThis command enables the access

6-77Using the Command Line InterfaceSyntax802.1x-supplicant user <username> <password> no 802.1x-supplicant user• username - The access po

2-12 BRIDGE LINK PLANNINGThe 3Com Outdoor 11a Building to Building Bridge and 11bg Access Point supports fixed point-to-point or point-to-multipoint w

6-78CHAPTER 6: COMMAND LINE INTERFACECommand ModeExecExampleMAC Address Authentication Use these commands to define MAC authentication on the access p

6-79Using the Command Line Interfaceaddress filter defaultThis command sets filtering to allow or deny listed MAC addresses.Syntaxaddress filter defau

6-80CHAPTER 6: COMMAND LINE INTERFACEDefaultNoneCommand ModeGlobal ConfigurationCommand Mode• The access point supports up to 1024 MAC addresses.• An

6-81Using the Command Line Interfaceaddress filter deleteThis command deletes a MAC address from the filter table.Syntaxaddress filter delete <mac-

6-82CHAPTER 6: COMMAND LINE INTERFACEDefaultDisabledCommand ModeGlobal ConfigurationExampleRelated Commandsaddress filter entry (6-79) radius-server a

6-83Using the Command Line InterfaceTabl e 21 Filtering Commandsfilter local-bridgeThis command disables communication between wireless clients. Use

6-84CHAPTER 6: COMMAND LINE INTERFACEDefaultDisabledCommand ModeGlobal ConfigurationCommand UsageThis command can disable wireless-to-wireless communi

6-85Using the Command Line Interfacefilter ap-manageThis command prevents wireless clients from accessing the management interface on the access point

6-86CHAPTER 6: COMMAND LINE INTERFACEDefaultDisabledCommand ModeGlobal ConfigurationExamplefilter ethernet-type enableThis command checks the Ethernet

6-87Using the Command Line Interfacefilter ethernet-type protocolThis command sets a filter for a specific Ethernet type. Use the no form to disable f

3Com Corporation 350 Campus Drive Marlborough, MA 01752-3064Copyright © 2006 3Com Corporation. All rights reserved. No part of this documentation may

2-2DATA RATESUsing the 5.0 GHz integrated antenna, two WL-575 bridges can operate over a range of up to 15.4 km (9.6 miles) or provide a high-speed co

6-88CHAPTER 6: COMMAND LINE INTERFACEExampleWDS Bridge Commands The commands described in this section are used to set the operation mode for each acc

6-89Using the Command Line Interfacebridge modeThis command selects between Master and Slave mode.Syntaxbridge mode <master | slave>• master - O

6-90CHAPTER 6: COMMAND LINE INTERFACEWhen the access point is operating in this mode, traffic is not forwarded to the Ethernet port from the radio int

6-91Using the Command Line Interfacebridge-link parentThis command configures the MAC address of the parent bridge node.Syntaxbridge-link parent <m

6-92CHAPTER 6: COMMAND LINE INTERFACEDefault Setting NoneCommand Mode Interface Configuration (Wireless)Command Usage • In root bridge mode, up to six

6-93Using the Command Line InterfaceDefault Setting 300 secondsCommand Mode Global ConfigurationCommand Usage If the MAC address of an entry in the ad

6-94CHAPTER 6: COMMAND LINE INTERFACEshow bridge aging-timeThis command displays the current WDS forwarding table aging time setting.

6-95Using the Command Line InterfaceCommand Mode ExecExample show bridge filter-entryThis command displays current entries in the WDS forwarding table

6-96CHAPTER 6: COMMAND LINE INTERFACEExample Outdoor 11a Building to Building#show bridge filter-entrymax entry numbers =512current entry nums =13****

6-97Using the Command Line Interfaceshow bridge linkThis command displays WDS bridge link and spanning tree settings for specified interfaces.Syntaxsh

2-3RADIO PATH PLANNINGAlthough the wireless bridge uses IEEE 802.11a radio technology, which is capable of reducing the effect of multipath signals du

6-98CHAPTER 6: COMMAND LINE INTERFACECommand Mode ExecExample Outdoor 11a Building to Building#show bridge link wireless aInterface Wireless A WDS Inf

6-99Using the Command Line InterfaceSpanning Tree CommandsThe commands described in this section are used to set the MAC address table aging time and

6-100CHAPTER 6: COMMAND LINE INTERFACESyntax [no] bridge stp enableDefault Setting EnabledCommand Mode Global ConfigurationExample This example global

6-101Using the Command Line Interfacechanges before it starts to forward frames. In addition, each port needs time to listen for conflicting informati

6-102CHAPTER 6: COMMAND LINE INTERFACESyntax bridge stp max-age <seconds>no bridge stp max-ageseconds - Time in seconds. (Range: 6-40 seconds)Th

6-103Using the Command Line InterfaceDefault Setting 32768Command Mode Global ConfigurationCommand Usage Bridge priority is used in selecting the root

6-104CHAPTER 6: COMMAND LINE INTERFACEExample bridge-link port-priorityUse this command to configure the priority for the specified port. Syntax bridg

6-105Using the Command Line InterfaceSyntaxshow bridge stpCommand ModeExecExampleEthernet Interface Commands The commands described in this section co

6-106CHAPTER 6: COMMAND LINE INTERFACEinterface ethernetThis command enters Ethernet interface configuration mode.Default Setting NoneCommand Mode Glo

6-107Using the Command Line InterfaceRelated Commands show interface ethernet (6-110)ip address This command sets the IP address for the access point.

2-4• Be sure there is enough clearance from buildings and that no building construction may eventually block the path.• Check the topology of the la

6-108CHAPTER 6: COMMAND LINE INTERFACEip dhcp This command enables the access point to obtain an IP address from a DHCP server. Use the no form to res

6-109Using the Command Line Interfacespeed-duplexThis command configures the speed and duplex mode of a given interface when autonegotiation is disabl

6-110CHAPTER 6: COMMAND LINE INTERFACECommand Usage This command allows you to disable the Ethernet port due to abnormal behavior (e.g., excessive col

6-111Using the Command Line InterfaceWireless Interface CommandsThe commands described in this section configure connection parameters for the wireles

6-112CHAPTER 6: COMMAND LINE INTERFACEinterface wirelessThis command enters wireless interface configuration mode.Syntaxinterface wireless <a | g&g

6-113Using the Command Line InterfacevapThis command provides access to the VAP (Virtual Access Point) interface configuration mode.Syntaxvap <vap-

6-114CHAPTER 6: COMMAND LINE INTERFACE(e.g., setting the speed to 54 Mbps limits the effective maximum speed to 108 Mbps).ExampleturboThis command set

6-115Using the Command Line Interfacerate. However, this reduces the number of channels supported (e.g., 5 channels for the United States).Example mul

6-116CHAPTER 6: COMMAND LINE INTERFACEchannelThis command configures the radio channel through which the access point communicates with wireless clien

6-117Using the Command Line Interfacetransmit-powerThis command adjusts the power of the radio signals transmitted from the access point.Syntaxtransmi

2-5Note that to avoid any obstruction along the path, the height of the object must be added to the minimum clearance required for a clear radio line-

6-118CHAPTER 6: COMMAND LINE INTERFACEDefault Settingb+g modeCommand ModeInterface Configuration (Wireless - 802.11g)Command Usage • For Japan, only 1

6-119Using the Command Line InterfaceExampleantenna controlThis command selects the use of two diversity antennas or a single antenna for the radio in

6-120CHAPTER 6: COMMAND LINE INTERFACEantenna idThis command specifies the antenna type connected to the access point represented by a four-digit hexa

6-121Using the Command Line InterfaceDefault SettingIndoorCommand ModeInterface Configuration (Wireless)Command Usage• When an external antenna is sel

6-122CHAPTER 6: COMMAND LINE INTERFACEdtim-period This command configures the rate at which stations in sleep mode must wake up to receive broadcast/m

6-123Using the Command Line Interfacefragmentation-length This command configures the minimum packet size that can be fragmented when passing through

6-124CHAPTER 6: COMMAND LINE INTERFACEDefault Setting 2347Command Mode Interface Configuration (Wireless)Command Usage • If the threshold is set to 0,

6-125Using the Command Line InterfaceExamplesuper-g This command enables Atheros proprietary Super G performance enhancements. Use the no form to disa

6-126CHAPTER 6: COMMAND LINE INTERFACEExamplessidThis command configures the service set identifier (SSID). Syntaxssid <string>string - The name

6-127Using the Command Line InterfaceCommand Mode Interface Configuration (Wireless-VAP)Command Usage When closed system is enabled, the access point

2-6ANTENNA POSITION AND ORIENTATIONOnce the required antenna height has been determined, other factors affecting the precise position of the wireless

6-128CHAPTER 6: COMMAND LINE INTERFACEDefault Setting 30Command Mode Interface Configuration (Wireless-VAP)Exampleauth-timeout-valueThis command confi

6-129Using the Command Line InterfaceCommand Mode Interface Configuration (Wireless-VAP)Command UsageYou must first enable VAP interface 0 before you

6-130CHAPTER 6: COMMAND LINE INTERFACECommand Mode ExecExample Outdoor 11a Building to Building #show interface wireless g 0Wireless Interface Informa

6-131Using the Command Line Interface----------------Security-------------------------------------------------Closed System : Disabl

6-132CHAPTER 6: COMMAND LINE INTERFACEWMM AP ParametersAC0(Best Effort) : logCwMin: 4 logCwMax: 6 AIFSN: 3

6-133Using the Command Line Interfaceshow stationThis command shows the wireless clients associated with the access point.Command Mode ExecExample Rog

6-134CHAPTER 6: COMMAND LINE INTERFACEThe access point can be configured to periodically scan all radio channels and find other access points within r

6-135Using the Command Line InterfaceThe rogue AP database can be viewed using the show rogue-ap command.• The access point sends Syslog messages for

6-136CHAPTER 6: COMMAND LINE INTERFACEaccess points are allowed or are rogues. If you enable authentication, you should also configure a RADIUS server

6-137Using the Command Line InterfaceSyntaxrogue-ap interval <minutes>minutes - The interval between consecutive scans. (Range: 30-10080 minutes

2-7RADIO INTERFERENCEThe avoidance of radio interference is an important part of wireless link planning. Interference is caused by other radio transmi

6-138CHAPTER 6: COMMAND LINE INTERFACEDefault SettingDisabledCommand Mode Interface Configuration (Wireless)Command Usage While the access point scans

6-139Using the Command Line Interfaceshow rogue-apThis command displays the current rogue AP database.Command Mode ExecExample Wireless Security Comma

6-140CHAPTER 6: COMMAND LINE INTERFACEauthThis command configures authentication for the VAP interface.Syntaxauth <open-system | shared-key | wpa |

6-141Using the Command Line Interface• To use WEP shared-key authentication, set the authentication type to “shared-key” and define at least one stati

6-142CHAPTER 6: COMMAND LINE INTERFACEWEP). To place the VAP into AES only mode, use “required” and then select the “cipher-ccmp” option for the ciph

6-143Using the Command Line InterfaceExampleRelated Commandskey (6-143)key This command sets the keys used for WEP encryption. Use the no form to dele

6-144CHAPTER 6: COMMAND LINE INTERFACEExampleRelated Commandskey (6-143) encryption (6-142) transmit-key (6-144)transmit-keyThis command sets the inde

6-145Using the Command Line Interface• In a mixed-mode environment with clients using static and dynamic keys, select transmit key index 2, 3, or 4. T

6-146CHAPTER 6: COMMAND LINE INTERFACEand a re-keying mechanism. Select TKIP if there are clients in the network that are not WPA2 compliant.• TKIP

6-147Using the Command Line InterfaceThe MIC calculation is performed in the access point for each transmitted packet and this can impact throughput a

2-8• Snow and Ice — Falling snow, like rain, has no significant effect on the radio signal. However, a build up of snow or ice on antennas may cause

6-148CHAPTER 6: COMMAND LINE INTERFACEExample Related Commandsauth (6-140)pmksa-lifetime This command sets the time for aging out cached WPA2 Pairwise

6-149Using the Command Line InterfaceExample pre-authentication This command enables WPA2 pre-authentication for fast secure roaming.Syntaxpre-authent

6-150CHAPTER 6: COMMAND LINE INTERFACELink Integrity CommandsThe access point provides a link integrity feature that can be used to ensure that wirele

6-151Using the Command Line Interfacehost does not respond or is unreachable) exceeds the limit set by the link-integrity ping-fail-retry command, the

6-152CHAPTER 6: COMMAND LINE INTERFACEExample link-integrity ping-fail-retryThis command configures the number of consecutive failed Ping counts befor

6-153Using the Command Line InterfaceSyntax[no] link-integrity ethernet-detectDefault SettingDisabledCommand Mode Global ConfigurationExample show lin

6-154CHAPTER 6: COMMAND LINE INTERFACEiappThis command enables the protocol signaling required to hand over wireless clients roaming between different

6-155Using the Command Line InterfaceThe VLAN commands supported by the access point are listed below.Tabl e 29 VLAN CommandsNOTE: When VLANs are en

6-156CHAPTER 6: COMMAND LINE INTERFACEvlanThis command enables VLANs for all traffic. Use the no form to disable VLANs.Syntax[no] vlan enable DefaultD

6-157Using the Command Line InterfaceDefault Setting 1Command Mode Global ConfigurationCommand Usage The management VLAN is for managing the access po

3-13 HARDWARE INSTALLATIONBefore mounting antennas to set up your wireless bridge links, be sure you have selected appropriate locations for each ante

6-158CHAPTER 6: COMMAND LINE INTERFACE• If the VLAN ID has not been configured for a client on the RADIUS server, then the frames are tagged with the

6-159Using the Command Line InterfaceDefaultsupportedCommand ModeInterface Configuration (Wireless)Examplewmm-acknowledge-policyThis command allows th

6-160CHAPTER 6: COMMAND LINE INTERFACEExamplewmmparamThis command configures detailed WMM parameters that apply to the access point (AP) or the wirele

6-161Using the Command Line InterfaceDefaultCommand ModeInterface Configuration (Wireless)ExampleAP ParametersWMM Parameters AC0 (Best Effort) AC1 (B

6-162CHAPTER 6: COMMAND LINE INTERFACE

A-1A TROUBLESHOOTINGCheck the following items before you contact local Technical Support.1 If wireless bridge units do not associate with each other,

A-2 If authentication is being performed through IEEE 802.1X, be sure the wireless users have installed and properly configured 802.1X client softwar

A-3 Reset the bridge’s hardware using the console interface, web interface, or through a power reset.

A-4

B-1B CABLES AND PINOUTSTWISTED-PAIR CABLE ASSIGNMENTSFor 10/100BASE-TX connections, a twisted-pair cable must have two pairs of wires. Each wire pair

3-2TESTING BASIC LINK OPERATIONSet up the units over a very short range (15 to 25 feet), either outdoors or indoors. Connect the units as indicated in

B-210/100BASE-TX PIN ASSIGNMENTSUse unshielded twisted-pair (UTP) or shielded twisted-pair (STP) cable for RJ-45 connections: 100-ohm Category 3 or be

B-3STRAIGHT-THROUGH WIRINGBecause the 10/100 Mbps Input port on the power injector uses an MDI pin configuration, you must use “straight-through” cabl

B-4CROSSOVER WIRINGBecause the 10/100 Mbps port on the power injector uses an MDI pin configuration, you must use “crossover” cable for network connec

B-58-PIN DIN CONNECTOR PINOUTThe Ethernet cable from the power injector connects to an 8-pin DIN connector on the wireless bridge. This connector is d

B-68-PIN DIN TO RJ-45 CABLE WIRINGTo construct an extended Ethernet cable to connect from the power injector’s RJ-45 Output port to the wireless bridg

Glossary-1GLOSSARY10BASE-TIEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3 or better UTP cable.100BASE-TXIEEE 802.3u specifi

Glossary-2Broadcast KeyBroadcast keys are sent to stations using 802.1X dynamic keying. Dynamic broadcast key rotation is often used to allow the acce

Glossary-3IEEE 802.11bA wireless standard that supports wireless communications in the 2.4 GHz band using Direct Sequence Spread Spectrum (DSSS). The

Glossary-4RADIUSA logon authentication protocol that uses software running on a central server to control access to the network.RoamingA wireless LAN

Glossary-5network services. All the services are delivered using a single radio channel, enabling Virtual AP technology to optimize the use of limited

3-32 Fit the edges of the V-shaped part into the slots in the rectangular plate, and tighten the nuts.3 Attach the adjustable rectangular plate to the

Glossary-6

Index-7INDEXNumbers802.11g 6-112AAES 5-58authentication 5-10cipher suite 6-141closed system 6-127configuring 5-10MAC address 5-12, 6-79t

Index-8Hhardware version, displaying 6-27HTTP, secure server 6-21HTTPS 6-21IIAPP 6-153IEEE 802.11a 1-2, 5-37, 6-112configuring interface 5

Index-9configuring 4-6SSL 6-21STAinterface settings 6-103 to ??path cost 6-103port priority 6-104startup files, setting 6-61station status

iiiContents1 IntroductionProduct Features 1-1Radio Characteristics 1-2APPROVED CHANNELS 1-2Package Checklist 1-3Hardware Description

3-44 Attach the bridge with bracket to the plate already fixed to the pole.5 Use the included nuts to secure the wireless bridge to the pole bracket.

3-51 Always attach the bracket to a wall with flat side flush against the wall (see following figure).2 Position the bracket in the intended location

3-6CONNECT EXTERNAL ANTENNASThe bridge’s primary antenna is it’s built-in internal antenna. For some applications when deploying an WL-575 unit for a

3-7CONNECT CABLES TO THE UNIT1 Attach the Ethernet cable to the Ethernet port on the wireless bridge. 2 For extra protection against rain or moisture,

3-81 Connect the Ethernet cable from the wireless bridge to the RJ-45 port labeled “Output” on the power injector.2 Connect a straight-through unshiel

3-9CHECK THE LED INDICATORSThe bridge’s 11a and 11b/g LEDs operate in two display modes, which are configurable through the software. The default AP m

3-10ALIGN ANTENNASAfter wireless bridge units have been mounted, connected, and their radios are operating, bridge link antennas must be accurately al

3-11When you move the antenna during alignment, the radio signal from the remote antenna can be seen to have a strong central main lobe and smaller si

3-121 Pan the antenna horizontally back and forth while checking the LEDs. If using the pole-mounting bracket with the unit, you must rotate the mount

4-14 INITIAL CONFIGURATIONThe 3Com Outdoor 11a Building to Building Bridge and 11bg Access Point offers a variety of management options, including a w

ivUsing the Pole-Mounting Bracket 3-2Using the Wall-Mounting Bracket 3-4Connect External Antennas 3-6Connect Cables to the Unit 3-7Con

4-2CHAPTER 4: INITIAL CONFIGURATION1 Connect a computer directly to the Access Point using the supplied standard Category 5 UTP Ethernet cable.2 Enter

4-3Figure 1 Wireless Interface Device ManagerClick on the Properties button to see the following screenFigure 2 Wireless Interface Device Manager

4-4CHAPTER 4: INITIAL CONFIGURATIONDirectly connect to the device through its Ethernet port or console port. Follow the instructions below to login in

4-5Using the Setup WizardLogging In – Enter the username “admin,” and password “password,” then click LOGIN. For information on configuring a user nam

4-6CHAPTER 4: INITIAL CONFIGURATIONThe home page displays the Main Menu.Figure 4 Home PageLaunching the Setup Wizard – To perform initial configurat

4-7Using the Setup WizardFigure 6 Setup Wizard - Step 12 Radio Channel – You must enable radio communications for 802.11a and 802.11b/g, and set the

4-8CHAPTER 4: INITIAL CONFIGURATION 802.11aTurbo Mode – If you select Enable, the access point will operate in turbo mode with a data rate of up to 1

4-9Using the Setup Wizard4Security – Set the Authentication Type to “Open” to allow open access without authentication, or “Shared” to require authent

4-10CHAPTER 4: INITIAL CONFIGURATION5 Click Finish.6 Click the OK button to complete the wizard.Figure 10 Setup Wizard - CompletedNOTE: All wireless

5-15 SYSTEM CONFIGURATIONBefore continuing with advanced configuration, first complete the initial configuration steps described in Chapter 4 to set u

vRSSI 5-35Radio Interface 5-37802.11a Interface 5-38Configuring Radio Settings 5-38Configuring Common Radio Settings 5-39802.11b/g

5-2CHAPTER 5: SYSTEM CONFIGURATIONFigure 11 Advanced SetupThe information in this chapter is organized to reflect the structure of the web screens f

5-3Advanced SetupSNMP Configures SNMP settings 5-19Administration Configures user name and password for management access; upgrades software from loca

5-4CHAPTER 5: SYSTEM CONFIGURATIONSYSTEM IDENTIFICATIONThe system name for the access point can be left at its default setting. However, modifying thi

5-5TCP / IP SettingsTCP / IP SETTINGSConfiguring the access point with an IP address expands your ability to manage the access point. A number of acce

5-6CHAPTER 5: SYSTEM CONFIGURATIONDHCP Client (Enable) – Select this option to obtain the IP settings for the access point from a DHCP (Dynamic Host C

5-7TCP / IP SettingsFigure 14 Smart MonitorBy enabling Smart Monitor (known as Link Integrity in the CLI) and setting a target IP address, the AP wi

5-8CHAPTER 5: SYSTEM CONFIGURATIONRADIUSRemote Authentication Dial-in User Service (RADIUS) is an authentication protocol that uses software running o

5-9RADIUSFigure 15 RADIUS AuthenticationPrimary Radius Server Setup – Configure the following settings to use RADIUS authentication on the access po

5-10CHAPTER 5: SYSTEM CONFIGURATIONSecondary Radius Server Setup – Configure a secondary RADIUS server to provide a backup in case the primary server

5-11AuthenticationThe access point can also operate in a 802.1X supplicant mode. This enables the access point itself to be authenticated with a RADIU

viStraight-Through Wiring B-3Crossover Wiring B-48-Pin DIN Connector Pinout B-58-Pin DIN to RJ-45 Cable Wiring B-6GlossaryIndex

5-12CHAPTER 5: SYSTEM CONFIGURATIONFigure 16 AuthenticationMAC Authentication – You can configure a list of the MAC addresses for wireless clients t

5-13AuthenticationAuthentication section of this web page to set up the local database, and configure all access points in the wireless network servic

5-14CHAPTER 5: SYSTEM CONFIGURATION Session Key Refresh Rate: The interval at which the access point refreshes unicast session keys for associated cl

5-15Filter ControlFILTER CONTROLThe access point can employ network traffic frame filtering to control access to network resources and increase securi

5-16CHAPTER 5: SYSTEM CONFIGURATION Prevent Intra VAP client communication: When enabled, clients associated with a specific VAP interface cannot est

5-17Filter ControlVLANThe access point can employ VLAN tagging support to control access to network resources and increase security. VLANs separate tr

5-18CHAPTER 5: SYSTEM CONFIGURATIONA VLAN ID (1-4094) can be assigned to a client after successful IEEE 802.1X authentication. The client VLAN IDs mus

5-19SNMPSNMPSimple Network Management Protocol (SNMP) is a communication protocol designed specifically for managing devices on a network. Equipment c

5-20CHAPTER 5: SYSTEM CONFIGURATIONFigure 19 SNMPSNMP – Enables or disables SNMP management access and also enables the access point to send SNMP tr

5-21SNMP Trap Destination Community Name – The community string sent with the notification operation. (Maximum length: 23 characters, case sensitive;

viiTERMINOLOGYAccess Point—An internet working device that seamlessly connects wired and wireless networks.Ad Hoc—An ad hoc wireless LAN is a group of

5-22CHAPTER 5: SYSTEM CONFIGURATION dot1xMacAddrAuthSuccess - A client station has successfully authenticated its MAC address with the RADIUS server.

5-23AdministrationAuth Type – The authentication type used for the SNMP user; either MD5 or none. When MD5 is selected, enter a password in the corres

5-24CHAPTER 5: SYSTEM CONFIGURATIONFigure 22 AdministrationUsername – The name of the user. The default name is “admin.” (Length: 3-16 characters, c

5-25Administration Telnet Server Status: Enables or disables the Telnet server. (Default: Enabled) SSH Server Status: Enables or disables the SSH se

5-26CHAPTER 5: SYSTEM CONFIGURATIONFigure 24 Firmware UpgradeBefore upgrading new software, verify that the access point is connected to the network

5-27Administration If upgrading from an FTP server, be sure that you have an account configured on the server with a user name and password. If VLAN

5-28CHAPTER 5: SYSTEM CONFIGURATIONRestore Factory Settings – Click the Restore button in the user interface to reset the configuration settings for t

5-29WDS and Spanning Tree SettingsFigure 25 WDS and Spanning Tree SettingsWDS Bridge – Up to six WDS bridge or repeater links (MAC addresses) per ra

5-30CHAPTER 5: SYSTEM CONFIGURATION• Root Bridge: Operates as the root bridge in the wireless bridge network. Up to six ”Child” links are available t

5-31WDS and Spanning Tree SettingsFigure 27 Spanning Tree ProtocolSpanning Tree Protocol – STP uses a distributed algorithm to select a bridging dev

viiiRTS Threshold—Transmitters contending for the medium may not be aware of each other (they are “hidden nodes”). The RTS/CTS mechanism can solve thi

5-32CHAPTER 5: SYSTEM CONFIGURATION• Range: 0-65535• Default: 32768 Bridge Max Age – The maximum time (in seconds) a device can wait without receiv

5-33System Logthe Spanning Tree Protocol is detecting network loops. Where more than one port is assigned the highest priority, the port with lowest n

5-34CHAPTER 5: SYSTEM CONFIGURATIONLogging Host – Enables the sending of log messages to a Syslog server host. Up to four Syslog servers are supported

5-35RSSIThe access point acts as an SNTP client, periodically sending time synchronization requests to specific time servers. You can configure up to

5-36CHAPTER 5: SYSTEM CONFIGURATIONFigure 29 RSSIRSSI: Auto Refresh – Enables or disables the refreshing of RSSI information. RSSI Value – The dis

5-37Radio InterfaceLED Status: Mode – Selects AP mode or Bridge mode. Bridge Port – Allows the user to select the bridge port for the LED display. (

5-38CHAPTER 5: SYSTEM CONFIGURATION802.11A INTERFACEThe IEEE 802.11a interface operates within the 5 GHz band, at up to 54 Mbps in normal mode or up t

5-39Radio InterfaceClosed System – When enabled, the VAP interface does not include its SSID in beacon messages. Nor does it respond to probe requests

5-40CHAPTER 5: SYSTEM CONFIGURATIONDescription – Adds a comment or description to the wireless interface. (Range: 1-80 characters)Turbo Mode – The nor

5-41Radio InterfaceRadio Channel – The radio channel that the access point uses to communicate with wireless clients. When multiple access points are

1-11 INTRODUCTIONThe 3Com Outdoor 11a Building to Building Bridge and 11bg Access Point system provides point-to-point or point-to-multipoint bridge l

5-42CHAPTER 5: SYSTEM CONFIGURATIONMaximum Transmit Data Rate – The maximum data rate at which the access point transmits unicast packets on the wirel

5-43Radio Interfacenegotiate the sending of a data frame. After receiving an RTS frame, the station sends a CTS (clear to send) frame to notify the se

5-44CHAPTER 5: SYSTEM CONFIGURATIONFigure 32 Radio Settings B/GClient Access Mode – Selects the operating mode for the 802.11g wireless interface. (

5-45Radio InterfaceSuper Mode – The Atheros proprietary Super G performance enhancements are supported by the access point. These enhancements include

5-46CHAPTER 5: SYSTEM CONFIGURATIONThe access point implements QoS using the Wi-Fi Multimedia (WMM) standard. Using WMM, the access point is able to p

5-47Radio Interfaceresolution mechanism first selects data with the highest priority to be granted a transmit opportunity. Then the same collision res

5-48CHAPTER 5: SYSTEM CONFIGURATIONFigure 34 WMM ConfigurationWMM – Sets the WMM operational mode on the access point. When enabled, the parameters

5-49Radio Interfaceinitial wait time is a random value between zero and the CWMin value. Specify the CWMin value in the range 0-15 microseconds. Note

5-50CHAPTER 5: SYSTEM CONFIGURATIONSECURITYThe access point is configured by default as an “open system,” which broadcasts a beacon signal including t

5-51SecurityThe access point can simultaneously support clients using various different security mechanisms. The configuration for these security comb