Home » 3Com Manuals » Wireless » 3Com 8760 » Manual Viewer

3Com 8760 User Guide - Page 56

VLAN, management VLAN ID.

UPC - 662705506531

Add to My Manuals
Save this manual to your list of manuals

Page 56 highlights

CHAPTER 4: SYSTEM CONFIGURATION VLAN The access point can employ VLAN tagging support to control access to network resources and increase security. VLANs separate traffic passing between the access point, associated clients, and the wired network. There can be a VLAN assigned to each associated client, a default VLAN for each VAP (Virtual Access Point) interface, and a management VLAN for the access point. Note the following points about the access point's VLAN support: „ The management VLAN is for managing the access point through remote management tools, such as the web interface, SSH, SNMP, or Telnet. The access point only accepts management traffic that is tagged with the specified management VLAN ID. „ All wireless clients associated to the access point are assigned to a VLAN. If IEEE 802.1X is being used to authenticate wireless clients, specific VLAN IDs can be configured on the RADIUS server to be assigned to each client. If a client is not assigned to a specific VLAN or if 802.1X is not used, the client is assigned to the default VLAN for the VAP interface with which it is associated. The access point only allows traffic tagged with assigned VLAN IDs or default VLAN IDs to access clients associated on each VAP interface. „ When VLAN support is enabled on the access point, traffic passed to the wired network is tagged with the appropriate VLAN ID, either an assigned client VLAN ID, default VLAN ID, or the management VLAN ID. Traffic received from the wired network must also be tagged with one of these known VLAN IDs. Received traffic that has an unknown VLAN ID or no VLAN tag is dropped. „ When VLAN support is disabled, the access point does not tag traffic passed to the wired network and ignores the VLAN tags on any received frames. NOTE: Before enabling VLAN tagging on the access point, be sure to configure the attached network switch port to support tagged VLAN frames from the access point's management VLAN ID, default VLAN IDs, and other client VLAN IDs. Otherwise, connectivity to the access point will be lost when you enable the VLAN feature. Using IEEE 802.1X and a central RADIUS server, up to 64 VLAN IDs can be mapped to specific wireless clients, allowing users to remain within the same VLAN as they move around a campus site. This feature can also be used to control access to network resources from clients, thereby improving security. 4-16

Section	Page
3Com Wireless 8760 Dual-radio 11a/b/g PoE Access Point	1
Contents	3
Introduction	9
Product Features	10
Security	10
Performance and Reliability	11
Virtual Access Point (VAP) Support	11
WDS Bridging and Spanning Tree Protocol (STP) Support	11
Manageability	12
Wireless Network Standards	12
802.11g	12
802.11a	13
Approved Channels	13
Installing the Access Point	15
Installation Requirements	15
Power Requirements	16
Safety Information	16
Deciding Where to Place Equipment and Performing A Site Survey	17
Before You Begin	18
Connecting the Standard Antennas	19
Connecting Power	20
Using the Power Supply	22
Using a Power-Over-Ethernet LAN Port	22
Checking the LEDs	23
Reset Button	23
Wall, Ceiling, or Electrical Box Mounting	24
Flat Surface Installation	26
Selecting and Connecting a Different Antenna Model	26
Installing Software Utilities	28
Initial Configuration	29
Networks with a DHCP Server	29
Networks without a DHCP Server	29
Using the 3Com Installation CD	30
Launch the 3COM Wireless Infrastructure Device Manager (Widman) utility	30
Launching the 3com Wireless Interface Device Manager	30
First Time Only	32
Using the Setup Wizard	32
System Configuration	41
Advanced Setup	42
System Identification	44
TCP / IP Settings	45
RADIUS	48
Authentication	49
Filter Control	54
VLAN	56
SNMP	58
Configuring SNMP and Trap Message Parameters	58
Configuring SNMPv3 Users	61
Administration	62
Changing the Password	62
Telnet and SSH Settings	63
Upgrading Firmware	64
WDS and Spanning Tree Settings	67
System Log	73
Enabling System Logging	73
Configuring SNTP	74
Radio Interface	75
802.11a Interface	76
Configuring Radio Settings	76
Configuring Common Radio Settings	78
802.11b/g Interface	82
Configuring Wi-Fi Multimedia	84
Security	89
Wired Equivalent Privacy (WEP)	92
Wi-Fi Protected Access (WPA)	96
Status Information	99
Access Point Status	99
Station Status	100
Event Logs	101
Command Line Interface	103
Using the Command Line Interface	103
Accessing the CLI	103
Console Connection	103
Telnet Connection	104
Entering Commands	105
Keywords and Arguments	105
Minimum Abbreviation	105
Command Completion	105
Getting Help on Commands	105
Showing Commands	106
Partial Keyword Lookup	106
Negating the Effect of Commands	107
Using Command History	107
Understanding Command Modes	107
Exec Commands	107
Configuration Commands	108
Command Line Processing	108
Command Groups	109
General Commands	110
configure	110
end	111
exit	112
ping	112
reset	113
show history	114
show line	114
System Management Commands	115
country	116
prompt	117
system name	118
username	118
password	119
ip ssh-server enable	119
ip ssh-server port	120
ip telnet-server enable	120
ip http port	121
ip http server	121
ip https port	122
ip https server	123
web-redirect	124
APmgmtIP	125
APmgmtUI	126
show apmanagement	127
show system	128
show version	129
show config	129
show hardware	134
System Logging Commands	134
logging on	135
logging host	135
logging console	136
logging level	136
logging facility-type	137
logging clear	138
show logging	138
show event-log	139
System Clock Commands	139
sntp-server ip	140
sntp-server enable	140
sntp-server date-time	141
sntp-server daylight-saving	142
sntp-server timezone	142
show sntp	143
DHCP Relay Commands	144
dhcp-relay enable	144
dhcp-relay	145
show dhcp-relay	145
SNMP Commands	146
snmp-server community	147
snmp-server contact	147
snmp-server location	148
snmp-server enable server	149
snmp-server host	149
snmp-server trap	150
snmp-server engine-id	152
snmp-server user	153
snmp-server targets	154
snmp-server filter	155
snmp-server filter-assignments	156
show snmp groups	157
show snmp users	158
show snmp group-assignments	158
show snmp target	159
show snmp filter	159
show snmp filter-assignments	160
show snmp	161
Flash/File Commands	162
bootfile	162
copy	163
delete	164
dir	165
show bootfile	166
RADIUS Client	166
radius-server address	167
radius-server port	167
radius-server key	168
radius-server retransmit	168
radius-server timeout	169
radius-server port-accounting	169
radius-server timeout-interim	170
radius-server radius-mac-format	170
radius-server vlan-format	171
show radius	171
802.1X Authentication	172
802.1x	173
802.1x broadcast-key-refresh-rate	174
802.1x session-key-refresh-rate	175
802.1x session-timeout	175
802.1x-supplicant enable	176
802.1x-supplicant user	176
show authentication	177
MAC Address Authentication	178
address filter default	178
address filter entry	179
address filter delete	180
mac-authentication server	180
mac-authentication session-timeout	181
Filtering Commands	181
filter local-bridge	182
filter ap-manage	183
filter uplink enable	183
filter uplink	183
filter ethernet-type enable	184
filter ethernet-type protocol	185
show filters	185
WDS Bridge Commands	186
bridge role (WDS)	187
bridge-link parent	188
bridge-link child	188
bridge dynamic-entry age-time	189
show bridge aging-time	190
show bridge filter-entry	191
show bridge link	192
Spanning Tree Commands	193
bridge stp enable	194
bridge stp forwarding-delay	194
bridge stp hello-time	195
bridge stp max-age	196
bridge stp priority	196
bridge-link path-cost	197
bridge-link port-priority	198
show bridge stp	198
Ethernet Interface Commands	199
interface ethernet	200
dns server	200
ip address	201
ip dhcp	202
speed-duplex	203
shutdown	203
show interface ethernet	204
Wireless Interface Commands	205
interface wireless	206
vap	207
speed	207
turbo	208
multicast-data-rate	209
channel	210
transmit-power	211
radio-mode	211
preamble	212
antenna control	213
antenna id	214
antenna location	214
beacon-interval	215
dtim-period	216
fragmentation-length	217
rts-threshold	217
super-a	218
super-g	219
description	219
ssid	220
closed-system	220
max-association	221
assoc-timeout-interval	221
auth-timeout-value	222
shutdown	222
show interface wireless	223
show station	227
Rogue AP Detection Commands	227
rogue-ap enable	228
rogue-ap authenticate	229
rogue-ap duration	230
rogue-ap interval	230
rogue-ap scan	231
show rogue-ap	232
Wireless Security Commands	232
auth	233
encryption	235
key	236
transmit-key	237
cipher-suite	238
mic_mode	239
wpa-pre-shared-key	240
pmksa-lifetime	241
pre-authentication	241
Link Integrity Commands	243
link-integrity ping-detect	243
link-integrity ping-host	244
link-integrity ping-interval	244
link-integrity ping-fail-retry	245
link-integrity ethernet-detect	245
show link-integrity	246
IAPP Commands	246
iapp	246
VLAN Commands	247
vlan	248
management-vlanid	248
vlan-id	249
WMM Commands	250
wmm	250
wmm-acknowledge-policy	251
wmmparam	252
Troubleshooting	255

Match case Limit results 1 per page

4-16

HAPTER

4: S

YSTEM

ONFIGURATION

VLAN

The access point can employ VLAN tagging support to control access to network

resources and increase security. VLANs separate traffic passing between the

access point, associated clients, and the wired network. There can be a VLAN

assigned to each associated client, a default VLAN for each VAP (Virtual Access

Point) interface, and a management VLAN for the access point.

Note the following points about the access point’s VLAN support:

The management VLAN is for managing the access point through remote

management tools, such as the web interface, SSH, SNMP, or Telnet. The

access point only accepts management traffic that is tagged with the specified

management VLAN ID.

All wireless clients associated to the access point are assigned to a VLAN. If IEEE

802.1X is being used to authenticate wireless clients, specific VLAN IDs can be

configured on the RADIUS server to be assigned to each client. If a client is not

assigned to a specific VLAN or if 802.1X is not used, the client is assigned to

the default VLAN for the VAP interface with which it is associated. The access

point only allows traffic tagged with assigned VLAN IDs or default VLAN IDs to

access clients associated on each VAP interface.

When VLAN support is enabled on the access point, traffic passed to the wired

network is tagged with the appropriate VLAN ID, either an assigned client

VLAN ID, default VLAN ID, or the management VLAN ID. Traffic received from

the wired network must also be tagged with one of these known VLAN IDs.

Received traffic that has an unknown VLAN ID or no VLAN tag is dropped.

When VLAN support is disabled, the access point does not tag traffic passed to

the wired network and ignores the VLAN tags on any received frames.

Using IEEE 802.1X and a central RADIUS server, up to 64 VLAN IDs can be

mapped to specific wireless clients, allowing users to remain within the same

VLAN as they move around a campus site. This feature can also be used to control

access to network resources from clients, thereby improving security.

NOTE:

Before enabling VLAN tagging on the access point, be sure to configure the

attached network switch port to support tagged VLAN frames from the access

point’s management VLAN ID, default VLAN IDs, and other client VLAN IDs.

Otherwise, connectivity to the access point will be lost when you enable the VLAN

feature.