Home » 3Com Manuals » Wireless » 3Com 8760 » Manual Viewer

3Com 8760 User Guide - Page 53

MAC Authentication Settings: Enters specified MAC addresses and permissions, 1X Supplicant

UPC - 662705506531

Add to My Manuals
Save this manual to your list of manuals

Page 53 highlights

Authentication When 802.1X is enabled, the broadcast and session key rotation intervals can also be configured. „ Broadcast Key Refresh Rate: Sets the interval at which the broadcast keys are refreshed for stations using 802.1X dynamic keying. (Range: 0-1440 minutes; Default: 0 means disabled) „ Session Key Refresh Rate: The interval at which the access point refreshes unicast session keys for associated clients. (Range: 0-1440 minutes; Default: 0 means disabled) „ 802.1X Reauthentication Refresh Rate: The time period after which a connected client must be re-authenticated. During the re-authentication process of verifying the client's credentials on the RADIUS server, the client remains connected the network. Only if re-authentication fails is network access blocked. (Range: 0-65535 seconds; Default: 0 means disabled) 802.1X Supplicant - The access point can also operate in a 802.1X supplicant mode. This enables the access point itself to be authenticated with a RADIUS server using a configured MD5 user name and password. This prevents rogue access points from gaining access to the network. Local MAC Authentication - Configures the local MAC authentication database. The MAC database provides a mechanism to take certain actions based on a wireless client's MAC address. The MAC list can be configured to allow or deny network access to specific clients. „ System Default: Specifies a default action for all unknown MAC addresses (that is, those not listed in the local MAC database). • Deny: Blocks access for all MAC addresses except those listed in the local database as "Allow." • Allow: Permits access for all MAC addresses except those listed in the local database as "Deny." „ MAC Authentication Settings: Enters specified MAC addresses and permissions into the local MAC database. • MAC Address: Physical address of a client. Enter six pairs of hexadecimal digits separated by hyphens; for example, 00-90-D1-12-AB-89. • Permission: Select Allow to permit access or Deny to block access. If Delete is selected, the specified MAC address entry is removed from the database. • Update: Enters the specified MAC address and permission setting into the local database. „ MAC Authentication Table: Displays current entries in the local MAC database. 4-13

Section	Page
3Com Wireless 8760 Dual-radio 11a/b/g PoE Access Point	1
Contents	3
Introduction	9
Product Features	10
Security	10
Performance and Reliability	11
Virtual Access Point (VAP) Support	11
WDS Bridging and Spanning Tree Protocol (STP) Support	11
Manageability	12
Wireless Network Standards	12
802.11g	12
802.11a	13
Approved Channels	13
Installing the Access Point	15
Installation Requirements	15
Power Requirements	16
Safety Information	16
Deciding Where to Place Equipment and Performing A Site Survey	17
Before You Begin	18
Connecting the Standard Antennas	19
Connecting Power	20
Using the Power Supply	22
Using a Power-Over-Ethernet LAN Port	22
Checking the LEDs	23
Reset Button	23
Wall, Ceiling, or Electrical Box Mounting	24
Flat Surface Installation	26
Selecting and Connecting a Different Antenna Model	26
Installing Software Utilities	28
Initial Configuration	29
Networks with a DHCP Server	29
Networks without a DHCP Server	29
Using the 3Com Installation CD	30
Launch the 3COM Wireless Infrastructure Device Manager (Widman) utility	30
Launching the 3com Wireless Interface Device Manager	30
First Time Only	32
Using the Setup Wizard	32
System Configuration	41
Advanced Setup	42
System Identification	44
TCP / IP Settings	45
RADIUS	48
Authentication	49
Filter Control	54
VLAN	56
SNMP	58
Configuring SNMP and Trap Message Parameters	58
Configuring SNMPv3 Users	61
Administration	62
Changing the Password	62
Telnet and SSH Settings	63
Upgrading Firmware	64
WDS and Spanning Tree Settings	67
System Log	73
Enabling System Logging	73
Configuring SNTP	74
Radio Interface	75
802.11a Interface	76
Configuring Radio Settings	76
Configuring Common Radio Settings	78
802.11b/g Interface	82
Configuring Wi-Fi Multimedia	84
Security	89
Wired Equivalent Privacy (WEP)	92
Wi-Fi Protected Access (WPA)	96
Status Information	99
Access Point Status	99
Station Status	100
Event Logs	101
Command Line Interface	103
Using the Command Line Interface	103
Accessing the CLI	103
Console Connection	103
Telnet Connection	104
Entering Commands	105
Keywords and Arguments	105
Minimum Abbreviation	105
Command Completion	105
Getting Help on Commands	105
Showing Commands	106
Partial Keyword Lookup	106
Negating the Effect of Commands	107
Using Command History	107
Understanding Command Modes	107
Exec Commands	107
Configuration Commands	108
Command Line Processing	108
Command Groups	109
General Commands	110
configure	110
end	111
exit	112
ping	112
reset	113
show history	114
show line	114
System Management Commands	115
country	116
prompt	117
system name	118
username	118
password	119
ip ssh-server enable	119
ip ssh-server port	120
ip telnet-server enable	120
ip http port	121
ip http server	121
ip https port	122
ip https server	123
web-redirect	124
APmgmtIP	125
APmgmtUI	126
show apmanagement	127
show system	128
show version	129
show config	129
show hardware	134
System Logging Commands	134
logging on	135
logging host	135
logging console	136
logging level	136
logging facility-type	137
logging clear	138
show logging	138
show event-log	139
System Clock Commands	139
sntp-server ip	140
sntp-server enable	140
sntp-server date-time	141
sntp-server daylight-saving	142
sntp-server timezone	142
show sntp	143
DHCP Relay Commands	144
dhcp-relay enable	144
dhcp-relay	145
show dhcp-relay	145
SNMP Commands	146
snmp-server community	147
snmp-server contact	147
snmp-server location	148
snmp-server enable server	149
snmp-server host	149
snmp-server trap	150
snmp-server engine-id	152
snmp-server user	153
snmp-server targets	154
snmp-server filter	155
snmp-server filter-assignments	156
show snmp groups	157
show snmp users	158
show snmp group-assignments	158
show snmp target	159
show snmp filter	159
show snmp filter-assignments	160
show snmp	161
Flash/File Commands	162
bootfile	162
copy	163
delete	164
dir	165
show bootfile	166
RADIUS Client	166
radius-server address	167
radius-server port	167
radius-server key	168
radius-server retransmit	168
radius-server timeout	169
radius-server port-accounting	169
radius-server timeout-interim	170
radius-server radius-mac-format	170
radius-server vlan-format	171
show radius	171
802.1X Authentication	172
802.1x	173
802.1x broadcast-key-refresh-rate	174
802.1x session-key-refresh-rate	175
802.1x session-timeout	175
802.1x-supplicant enable	176
802.1x-supplicant user	176
show authentication	177
MAC Address Authentication	178
address filter default	178
address filter entry	179
address filter delete	180
mac-authentication server	180
mac-authentication session-timeout	181
Filtering Commands	181
filter local-bridge	182
filter ap-manage	183
filter uplink enable	183
filter uplink	183
filter ethernet-type enable	184
filter ethernet-type protocol	185
show filters	185
WDS Bridge Commands	186
bridge role (WDS)	187
bridge-link parent	188
bridge-link child	188
bridge dynamic-entry age-time	189
show bridge aging-time	190
show bridge filter-entry	191
show bridge link	192
Spanning Tree Commands	193
bridge stp enable	194
bridge stp forwarding-delay	194
bridge stp hello-time	195
bridge stp max-age	196
bridge stp priority	196
bridge-link path-cost	197
bridge-link port-priority	198
show bridge stp	198
Ethernet Interface Commands	199
interface ethernet	200
dns server	200
ip address	201
ip dhcp	202
speed-duplex	203
shutdown	203
show interface ethernet	204
Wireless Interface Commands	205
interface wireless	206
vap	207
speed	207
turbo	208
multicast-data-rate	209
channel	210
transmit-power	211
radio-mode	211
preamble	212
antenna control	213
antenna id	214
antenna location	214
beacon-interval	215
dtim-period	216
fragmentation-length	217
rts-threshold	217
super-a	218
super-g	219
description	219
ssid	220
closed-system	220
max-association	221
assoc-timeout-interval	221
auth-timeout-value	222
shutdown	222
show interface wireless	223
show station	227
Rogue AP Detection Commands	227
rogue-ap enable	228
rogue-ap authenticate	229
rogue-ap duration	230
rogue-ap interval	230
rogue-ap scan	231
show rogue-ap	232
Wireless Security Commands	232
auth	233
encryption	235
key	236
transmit-key	237
cipher-suite	238
mic_mode	239
wpa-pre-shared-key	240
pmksa-lifetime	241
pre-authentication	241
Link Integrity Commands	243
link-integrity ping-detect	243
link-integrity ping-host	244
link-integrity ping-interval	244
link-integrity ping-fail-retry	245
link-integrity ethernet-detect	245
show link-integrity	246
IAPP Commands	246
iapp	246
VLAN Commands	247
vlan	248
management-vlanid	248
vlan-id	249
WMM Commands	250
wmm	250
wmm-acknowledge-policy	251
wmmparam	252
Troubleshooting	255

Match case Limit results 1 per page

4-13

Authentication

When 802.1X is enabled, the broadcast and session key rotation intervals can also

be configured.

Broadcast Key Refresh Rate: Sets the interval at which the broadcast keys are

refreshed for stations using 802.1X dynamic keying. (Range: 0-1440 minutes;

Default: 0 means disabled)

Session Key Refresh Rate: The interval at which the access point refreshes

unicast session keys for associated clients. (Range: 0-1440 minutes; Default: 0

means disabled)

802.1X Reauthentication Refresh Rate: The time period after which a

connected client must be re-authenticated. During the re-authentication

process of verifying the client’s credentials on the RADIUS server, the client

remains connected the network. Only if re-authentication fails is network

access blocked. (Range: 0-65535 seconds; Default: 0 means disabled)

802.1X Supplicant

– The access point can also operate in a 802.1X supplicant

mode. This enables the access point itself to be authenticated with a RADIUS

server using a configured MD5 user name and password. This prevents rogue

access points from gaining access to the network.

Local MAC Authentication

– Configures the local MAC authentication database.

The MAC database provides a mechanism to take certain actions based on a

wireless client’s MAC address. The MAC list can be configured to allow or deny

network access to specific clients.

System Default: Specifies a default action for all unknown MAC addresses (that

is, those not listed in the local MAC database).

•

Deny: Blocks access for all MAC addresses except those listed in the local

database as “Allow.”

•

Allow: Permits access for all MAC addresses except those listed in the local

database as “Deny.”

MAC Authentication Settings: Enters specified MAC addresses and permissions

into the local MAC database.

•

MAC Address: Physical address of a client. Enter six pairs of hexadecimal

digits separated by hyphens; for example, 00-90-D1-12-AB-89.

•

Permission: Select Allow to permit access or Deny to block access. If Delete

is selected, the specified MAC address entry is removed from the database.

•

Update: Enters the specified MAC address and permission setting into the

local database.

MAC Authentication Table: Displays current entries in the local MAC database.