3Com AirProtect Enterprise Engine 6100 User manual




3Com®AirProtect Enterprise
Engine 6100
Quick Setup Guide
www.3Com.com
Part Number: 10015863 Rev. AA
June 2007

3Com Corporation
350 Campus Drive, Marlborough, MA USA 01752-3064
Copyright © 2003 – 2007 3Com Corporation and its Licensors. All Rights Reserved.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time to
time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied
or expressed, including, but not limited to, the implied warranties, terms, or conditions of merchantability,
satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the
product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license
agreement included with the product as a separate document, in the hardcopy documentation, or on the
removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,
please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGENDS:
If you are a United States government agency, then this documentation and the software described herein re
provided to you subject to the following:
United States Government Legend: All technical data and computer software is commercial in nature and
developed solely at private expense. Software is delivered as Commercial Computer Software as defined in
DFARS 252.227-7014 (June 1995) or as a commercial item as defined in FAR 2.101(a) and as such is provided
with only such rights as are provided in 3Com’s standard commercial license for the Software. Technical data is
provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987),
whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed
program or documentation contained in, or delivered to you in conjunction with guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may
not be registered in other countries.
3Com and the 3Com logo are registered trademarks of 3Com Corporation.
Linux is a trademark of Linus Torvalds and the Linux Mark Institute.
All other products and services are trademarks, registered trademarks, and service marks or registered service
marks of their respective owners.
Intellectual Property Notice: One or more features and components in this product have patents pending, which
are owned by AirTight Networks, Inc.




3Com AirProtect Enterprise Quick Setup Guide
1

Step1:3ComAirProtectEnterpriseApplianceand3ComAirProtectSensor
Overview
ThefrontpaneloftheappliancehasapowerswitchandstatusLEDsasshowninthefigurebelow.

Therearpaneloftheappliancehaspowerandportconnectorsasshowninthefigurebelow.

Thefrontpanelof3ComAirProtectSensorhasstatusLEDsasshowninthefigurebelow.

Therearpanelof3ComAirProtectSensorhasportsthatenableyoutopowerupthesensorand
connectittothenetworkandacomputerasshowninthefigurebelow.

3Com AirProtect Enterprise Quick Setup Guide
2

Step2:MounttheAppliance
Placetheapplianceontherackandmounttheapplianceusingtherackmountingaccessories.




3Com AirProtect Enterprise Quick Setup Guide
3
Step3:PoweruptheAppliance
Connectthepowercableasshowninthefigurebelowandpressthepowerswitchonthefront
paneloftheappliance.



Important!OnconnectingthePowercable,thePowerLEDshouldturnsolidgreen.Ifthisdoesnothappen,
refertothe3ComAirProtectEnterpriseInstallationGuide.
Step4:ConnecttheAppliancetotheNetwork
Connecttheappliancetothenetworkusingthenetworkinterfacecableasshowninthefigure
below.

Warning!ThedefaultIPaddressoftheapplianceis192.168.1.246.Pleaseensurethatnootherdeviceon
yournetworkusesthesameIPaddressastheappliance.Connectthenetworkinterfaceportontheappliance
tothedesiredsubnetusingthenetworkinterfacecableprovidedtoyou.DonotconnecttheHigh
Availability(HA)Interfaceporttothesubnet.
110-240V 50/60
Hz AC Connection

3Com AirProtect Enterprise Quick Setup Guide
4
Step5:Access3ComAirProtectEnterprise
A. ConnectyourcomputertothesamesubnetwheretheServerisconnected.
B. ChangeyourcomputerIPaddressto192.168.1.XXX.Forexample,192.168.1.244.
C. Access3ComAirProtectEnterpriseusingSSHasshowninthefigurebelow.

D. LoginusingtheUsername:configandPassword:password.


3Com AirProtect Enterprise Quick Setup Guide
5
Step6:CompletetheServerInitializationandSetupWizard
FollowthestepsintheServerInitializationandSetupWizardtoconfigurethe3ComAirProtect
EnterpriseServer.
Important!OntheDateandTimesettingsscreen‐Step3,ifthedayexceeds31andthemonth
exceeds12,3ComAirProtectEnterpriseautomaticallysetsthedayto31andmonthto12.



















Important!YouneedtoreboottheServeroncompletionoftheInitializationandSetupWizard
beforeyouaccesstheServerConsole(“GUI”).
InitializationandConfiguration
WizardWelcomeScreen
Step1:
Changetheconfigshellpassword,
password
Step3:
SettheTimeZone,Dateand
TimeSettings
Step2:
ChangetheNetworkSettings
Step4:
SetServerIDSettings
Initializationand
ConfigurationWizard
CompletionScreens
OnloggingintotheServerConfigShell,type
thecommandhelptoviewthelistofavailable
commands

3Com AirProtect Enterprise Quick Setup Guide
6
Step7:SetuptheServerDNSEntry
AddaDNSentry‘wifi‐security‐server’inyourorganization’s/enterpriseDNSserver.Thisentry
shouldpointtotheIPAddressoftheServerconfiguredinStep6(CompleteServerInitialization
andSetupWizard)—Substep2(ChangetheNetworkSettings).
Addingthisentryservestwopurposes:
A. SensorscanconnecttotheServerwith“zeroconfiguration”iftheyareconnectedtoa
DHCPenabledsubnet.
B. YoucanaccesstheServerusingtheaddress‘https://wifi‐security‐server’.
Step8:Accessthe3ComAirProtectEnterpriseConsole(GUI)
Important!Theminimumsystemrequirementstoaccessthe3ComAirProtectEnterpriseGUIConsoleare
alaptopwithIntelP4X861.4GHzProcessor,512MBRAM,,Windows2000orXPOperatingSystem,IE
5.5orhigher,andJRE14.2only.
A. Type‘https://wifi‐security‐server’toaccessthe3ComAirProtectEnterpriseConsole.

The3ComAirProtectEnterpriseConsolecantakeupto2minutestoload.
Important!Pop‐upblockers(ifany)mustbedisabledontheWebbrowser.TheReusewindowsfor
launchingshortcutsoptioninTools‐>InternetOptions‐>AdvancedshoulbedeselectedintheInternet
ExplorerWebbrowser.
B. ClickYesoneachoftheSecurityAlert/Warningpop‐upscreens.




3Com AirProtect Enterprise Quick Setup Guide
7

C. Typethedefaultusername:adminandpassword:passwordontheLoginscreen.

Important!Ifyouseeablankscreeninsteadofthe3ComAirProtectEnterpriseConsoleLoginscreeninthe
pop‐upwindow,despitehavingSunJRE1.4.2,thenSunJRE1.4.2maynotbethedefaultplug‐inforyour
Webbrowser.ToensurethatSunJRE1.4.2isthedefaultplug‐inforyourWebbrowser,dothefollowing:
1.Ifyouseea“JavaCup”iconinthesystemtray,rightclickitandselect“OpenControlPanel”.
2.Ifyoudonotseetheicon,clickStart
Æ Settings Æ ControlPanelanddouble‐clicktheJavaPlug‐inicon.
3.OncetheJava™Plug‐inControlPaneldialogisopen,gototheBrowsertabandselectthecheckbox
MicrosoftInternetExplorer.


D. OntheEndUserLicenseAgreement(EULA)screen,readtheagreementcarefullyandselectI
havereadandagreetotheLicensingAgreementabove.Click<Next>.
Login
Information

3Com AirProtect Enterprise Quick Setup Guide
8

E. IfyouseetheWelcomescreen,closethewindow.YouaredonewiththeServerSetup.You
willrevisittheWelcomescreenlater.



3Com AirProtect Enterprise Quick Setup Guide
9
Step9:Connect3ComAirProtectSensorstotheNetwork
PowerandConnecttotheNetwork
A. Ensurethatthe3ComAirProtectEnterpriseServerisalreadyrunningonyournetwork.
Note:MakesurethataDNSentry‘wifi‐security‐server’issetuponallDNSServers.Thisentryshould
pointtotheIPaddressoftheServer.Otherwise,configuretheSensormanually.Pleaserefertothe3Com
AirProtectEnterpriseInstallationGuidefordetails.
B. Usenetworkinterfacecablestoconnect3ComAirProtectSensorstoallthenetworksegments
(subnets)thatneedtobeprotected.MakesurethatthenetworksegmentisDHCPenabled.
Otherwise,configuretheIPaddressofthe3ComAirProtectSensormanually.

Note:LogintotheServerusingSSH.Runthecommand‘getsensorlist’tocheckifalltheSensorsadded
havebeendetectedbytheServer.IfalltheSensorsareconnected,gotothenextstep.IfsomeSensorsarenot
connected,thenyoumayneedtoconfiguretheSensorsmanually.
C. WaitforthestatusoftheLEDstostabilize.Thisprocessmaytakeupto2minutes.
D. IfallLEDsglowgreen,thenthe3ComAirProtectSensorisoperationalandconnectedtothe
3ComAirProtectEnterpriseServer.





E. IfStepDsucceeds,theSensorisnowfullyoperationalandisreadytoprotectyournetwork.
LED1
SolidGreen
LED2
SolidGreen
LED3
SolidGreen
LED4
SolidGreen

3Com AirProtect Enterprise Quick Setup Guide
10
Important!IftheLEDstatusattheendofStepDdoesnotmatchthestatusshowninthisQuickSetup
Guide,refertothe3ComAirProtectEnterpriseInstallationGuideformoredetails.
Step10:BegintheSystemSetupWizardandSelectInstallationType
A. Logintothe3ComAirProtectEnterpriseConsolewiththedefaultusername:adminand
password:password.
B. ClickStartonthe‘SystemSetupWizardWelcome’screenandthenselectoneoftheinstallation
typeslistedbelowthefigureonthe‘SelectyourInstallationType’screen.

C. SelectTypicalInstallationandclickNext.
Note:SelectingTypicalInstallationgenerallysatisfiesmostofthedesiredrequirementssuchas:atypical
setupwithWi‐Fialreadyinstalled,automaticAPmovementtoRogueandExternalfolders,automatic
classificationonlyforUncategorizedClients,IntrusionPreventionPolicyenabledforRogueAPs,Mis‐
configuredAPs,ClientMis‐association,UnauthorizedAssociations,Adhocconnections,andHoneypot/Evil
TwinAPs,andsoon.YoucanchangethepolicieslaterasperyourneedsfromtheAdministrationtab.


3Com AirProtect Enterprise Quick Setup Guide
11
Step11:Completethe3ComAirProtectEnterpriseSystemSetupWizard
FollowthestepsintheSystemSetupWizardtospecifythe802.11Security,DeviceClassification,
andIntrusionPreventionPolicies.Clicktheicontoviewdetails.


3Com AirProtect Enterprise Quick Setup Guide
12
Step12:EnableGlobalFlags
Eventgenerationandintrusionpreventionactivationflagsareturnedoffgloballyoncompletionof
theSystemSetupWizardtoavoidspuriousgenerationofevents.TheActivationofIntrusion
PreventionandEventGenerationiconappearsontheNavigationbarasshowninthefigure
below.Onceyourdeploymentisstableandfullyconfigured,turntheseflagsontoactivateevent
generationandintrusionpreventionactivitybyselectingthechecktheboxesonthe
AdministrationÆDeploymentÆActivationscreenasshowninthefigurebelow.Theiconthen
doesnotappearontheNavigationbar.

The3ComAirProtectEnterpriseServerisinstalledandconfigured!
IntrusionPreventionand
EventGenerationturnedOFF
g
loball
y