3Com OfficeConnect WX1200 User manual

Part No. 10015906
Published June 2007
MOBILITY SYSTEM SOFTWARE
QUICK START GUIDE
This document describes how to quickly install and
configure a new WX switch running Mobility System
Software Version 6.0. You can use any of the following
methods to configure a new switch:
Web Quick Start (WXR100, WX1200, or WX2200)
(see below)
Remote configuration by 3Com Wireless Switch
Manager (3WXM) Management Application (see
page 2)
CLI quickstart command (see page 7)
You might also need to perform some minor network or
client configuration tasks. See “Preparing the Network
for Distributed MAPs” on page 8 and “Preparing
Clients” on page 9.
Using the Web Quick Start (WXR100, WX1200,
or WX2200)
1Use a Category 5 (Cat 5) or higher Ethernet cable to con-
nect the switch directly to a PC that has a web browser.
On WX2200, attach the Ethernet cable to the
management port only.
On WX1200 or WXR100, you can attach the
Ethernet cable to any 10/100 port.
2Connect the switch to an AC power source.
If you are configuring a WXR100, do not press the
Fn switch during power on. Pressing this switch on an
unconfigured switch causes the switch to attempt to
contact 3WXM Services instead of displaying the Web
Quick Start.
3Ensure the NIC of the PC that is connected to the switch
is enabled.
4Verify that the NIC is configured to use DHCP to obtain
its IP address. You will not be able to access the Web
Quick Start if the IP address of the NIC is statically
configured.
5Use a web browser to access IP address 192.168.100.1.
This is a temporary, well-known address assigned to the
unconfigured switch when you power it on. The Web
Quick Start enables you to change this address.
The Web View application on the switch opens in a
browser window. The first page of the Quick Start
wizard is displayed (as shown on the next page).
If a certificate check dialog appears, click Accept or OK
to accept the certificate.

2MOBILITY SYSTEM SOFTWARE QUICK START GUIDE
6Click Start to begin. The wizard screens guide you
through the configuration steps. Each screen has
online help to guide you through the configuration.
7After guiding you through the configuration, the
wizard displays a summary of the configuration values
you selected. Here is an example:
8Review the configuration settings, then click Finish to
save the changes, or click Back to change settings. If
you want to quit for now and start over later, click
Cancel.
If you click Finish, the wizard saves the configuration
settings into the switch’s configuration file. If the
switch is rebooted, the configuration settings are
restored when the reboot is finished.
The switch is ready for operation. You do not need to
restart the switch.
CAUTION: On a WXR100, do not press the Fn switch
for more than four seconds! On a WXR100 that is
fully booted, the Fn switch erases the configuration if
held for five seconds or more. If you do accidentally
erase the configuration, you can use the Web Quick
Start to reconfigure the switch.
Remotely Configuring a Switch Using 3WXM
(any model)
This installation option requires someone to
preconfigure the switch in a 3WXM network plan and
someone to physically install and power on the switch.
Preconfigure the Switch in 3WXM
If you know the switch’s serial number, use the
following procedure to set up the switch’s
configuration in 3WXM.
1Start 3WXM Services.
2Start a 3WXM client and connect to 3WXM Services.

Remotely Configuring a Switch Using 3WXM (any model) 3
3Select 3WXM Services > Setup from the menu bar
in the main 3WXM window. A browser window
containing the Setup page appears.
If a certificate check dialog appears, click Accept or
OK to accept the certificate.
4Select WX Connection Settings in the column on
the left.
5Select Accept Self-signed Certificates, in the
Connection Security area.
6Click Save.
7Open the network plan for the site, or create a new
one.
To create a new network plan, select Plan
Management and New Plan on the server (in the
browser window).
8Access the Create Wireless Switch Wizard:
aSelect the Configuration tool bar option.
bIn the Organizer panel, select the network plan
name.
cIn the Task List panel, select Create Wireless
Switch.
9Enter a name for the switch in the WX Name box.
10 Select the switch model.
11 Enter the serial number in the Serial Number box.
12 Configure other parameters as required for the
switch’s deployment.
You can configure an enabled password for the switch
even if it does not already have one. When sending the
configuration, 3WXM tries the configured password
first, then tries a blank password if the enabled
password does not match the one on the switch. If the
switch does not have an enabled password, the blank
password is accepted. 3WXM then sends the
configuration to the switch, including the configured
(non-blank) enabled password.
13 Click Finish to save the switch configuration and
close the wizard.
Leave 3WXM Services running, with the network plan
open. When the switch is powered on at the remote site
(and the Fn switch is pressed, if a WXR100), the switch
uses its DHCP client to obtain an IP address, then contacts
3WXM Services to request a configuration.
Install the Switch and MAPs and Press the Fn Switch
(WXR100 only)
Drop ship configuration requires a DHCP server at the
remote office. The WXR100 uses the DHCP server to
obtain an IP configuration in order to communicate
with 3WXM Services in the corporate network. The
drop ship option also requires an entry in the local
DNS server that maps the hostname wlan-config-srv
to 3WXM Service’s IP address.
1Add an entry to the local DNS server that maps the host-
name wlan-config-srv to the IP address of 3WXM Ser-
vices. Include the corporate network’s domain name in
the entry (for example, wlan-config-srv.example.com).
2Connect WXR100 port 1 to the network.

4MOBILITY SYSTEM SOFTWARE QUICK START GUIDE
3Install the MAP access points:
To manage a directly connected MAP, physically
install the MAP and connect it to WXR100 port 2.
To manage a Distributed MAP (a MAP con-
nected to the WX over the network), physically
install the MAP and connect it to the network
and to a Power over Ethernet (PoE) source.
4Power on the WXR100 and insert a paperclip or similar
object into the WXR100’s Fn hole to press the switch.
Figure 1 Fn Switch on WXR100
5Keep pressing the Fn switch until the Fn LED (the right
LED above port 1) flashes. Normally, this LED remains
solidly lit for three seconds after power on. However,
when the Fn switch is pressed, the LED flashes for
three seconds instead.
The WXR100 contacts 3WXM Services. 3WXM
Services checks the currently selected network plan
for a WX configuration with a matching serial
number and deploys the configuration to the switch.
If the network plan does not have a configuration
with a matching serial number, a verification warning
appears in 3WXM. The warning lists the switch’s
serial number and IP address. The network
administrator can upload the switch into the network
plan, configure switch parameters, and deploy a
configuration to the switch.
Stage the Switch (any model)
You can use this method of remote configuration for
any model WX switch, regardless of whether the local
office (the switch installation site) has a DHCP server
or DNS server.
Preparing the Network
If the network where the switch will be installed has a
DNS server, add an entry that maps the IP address of
3WXM Services to the hostname wlan-config-srv.
Include the corporate network domain name in the
entry (for example, wlan-config-srv.example.com).
Alternatively, you can configure an IP alias on the
switch itself that maps the server IP address to this
well-known name. (See “Example 2: Deployment Site
Has No DHCP and No DNS” on page 5.)
Preparing the Switch
Preconfigure the WX with the following information:
IP address
Default router (gateway) address
Domain name and DNS server address

Remotely Configuring a Switch Using 3WXM (any model) 5
You can enable the switch to use the MSS DHCP
client to obtain this information from a DHCP server
in the local network where the switch will be
deployed. Alternatively, you can statically configure
the information.
The IP address and DNS information are configured
independently. You can configure the combination of
settings that work with the network resources
available at the deployment site. The following
examples show some of the combinations you can
configure.
Example 1: Deployment Site Has DHCP and Local
DNS The deployment site in this example has a
DHCP server. The switch is configured to use the MSS
DHCP client to obtain an IP address, default router
address, DNS domain name, and DNS server IP
addresses.
1Configure a VLAN:
WX1200# set vlan 1 port 7
success: change accepted.
2Enable the DHCP client on VLAN 1:
WX1200# set interface 1 ip dhcp-client enable
success: change accepted.
3Enable the auto-config option:
WX1200# set auto-config enable
success: change accepted.
4Save the configuration changes:
WX1200# save config
success: configuration saved.
5Power off or restart the switch.
Example 2: Deployment Site Has No DHCP and
No DNS The deployment site in this example does
not have a DHCP server or a local DNS server.
Therefore, IP and DNS information must be statically
configured. Because no DNS server is available, an IP
alias is configured to map the IP address of the host
where 3WXM Services are installed to the well-known
hostname wlan-config-srv.
1Configure a VLAN:
WX1200# set vlan 1 port 7
2Configure an IP interface on the VLAN:
WX1200# set interface 1 ip 192.168.1.252
255.255.255.0
3Configure a default route through the local default
router:
WX1200# set ip route default 192.168.1.1 1
4Configure the default DNS domain name:
WX1200# set ip dns domain example.com
5Configure an IP alias to map the 3WXM server IP
address to the well-known name wlan-config-srv:
WX1200# set ip alias wlan-config-srv
172.16.22.84
6Enable the auto-config option:
WX1200# set auto-config enable
7Save the configuration changes:
WX1200# save config
8Power off or restart the switch.

6MOBILITY SYSTEM SOFTWARE QUICK START GUIDE
Example 3: Deployment Site Has DNS But No
DHCP The deployment site in this example does not
have a DHCP server but does have a local DNS server.
The configuration is similar to Example 1, but includes
DNS configuration information instead of an IP alias.
1Configure a VLAN:
WX1200# set vlan 1 port 7
2Configure an IP interface on the VLAN.
WX1200# set interface 1 ip 192.168.1.252
255.255.255.0
3Configure a default route through the local default
router:
WX1200# set ip route default 192.168.1.1 0
4Configure the default DNS domain name:
WX1200# set ip dns domain example.com
5Configure DNS server information:
WX1200# set ip dns server 192.168.11.2
6Enable the MSS DNS client:
WX1200# set ip dns server enable
7Enable the auto-config option:
WX1200# set auto-config enable
8Save the configuration changes:
WX1200# save config
9Power off or restart the switch.
Example 4: Deployment Site Has DHCP But Local
DNS Domain Differs From Corporate DNS
Domain The deployment site in this example has a
DHCP server, so the switch’s DHCP client is enabled.
Static IP address and default router information are
not required. The site also has a local DNS server.
However, the local DNS domain name is different
from the corporate DNS domain name where 3WXM
Services are located. The static DNS configuration on
the switch overrides the DNS configuration from the
DHCP server.
1Configure a VLAN:
WX1200# set vlan 1 port 7
2Enable the DHCP client on VLAN 1:
WX1200# set interface 1 ip dhcp-client enable
3Configure the default DNS domain name:
WX1200# set ip dns domain examplecorp.com
4Configure DNS server information:
WX1200# set ip dns server 192.168.11.2
5Enable the MSS DNS client:
WX1200# set ip dns server enable
6Enable the auto-config option:
WX1200# set auto-config enable
7Save the configuration changes:
WX1200# save config
8Power off or restart the switch.

Using the quickstart Command (any model) 7
Using the quickstart Command (any model)
To run the quickstart command:
1Attach a PC to the WX switch serial console port. (Use
these modem settings: 9600 bps, 8 bits, 1 stop, no
parity, hardware flow control disabled.)
2Press Enter three times to display a username prompt
(Username:), a password prompt (Password:), and
then a command prompt such as the following:
WX1200-aabbcc>
(Each switch has a unique system name that contains
the model number and the last half of the switch’s
MAC address.)
3Access the enabled level (the configuration level) of
the CLI:
WX1200-aabbcc> enable
4Press Enter at the Enter password prompt.
5Type quickstart. The command asks you a series of
questions. You can type ?for more help. To quit,
press Ctrl+C.
WX1200-aabbcc# quickstart
This will erase any existing config. Continue? [n]: y
Answer the following questions. Enter '?' for
help. ^C to break out
System Name [WX1200]: WX1200-Corp
Country Code [US]: US
System IP address []: 172.16.0.21
System IP address netmask []: 255.255.255.0
Default route []: 172.16.0.20
Do you need to use 802.1Q tagged default VLAN
[Y/N]? Y: y
Specify the port number that needs to be tagged
[1-2, <CR> ends config]: 2
Specify the tagged value for port [2] [<CR> ends
config:] 100
Specify the port number that needs to be tagged
[1-2, <CR> ends config]:
Admin username [admin]: wxadmin
Admin password [optional]: letmein
Enable password [optional]: enable
Do you wish to set the time? [y]: y
Enter the date (dd/mm/yy) []: 08/01/07
Is daylight saving time (DST) in effect [n]: n
Enter the time (hh:mm:ss) []: 18:58:00
Enter the timezone []: PST
Enter the offset from GMT for 'PST' in hh:mm [0:0]:
-8:0
Do you wish to configure wireless? [y]: y
Enter a clear SSID to use: public
Do you want Web Portal authentication? [y] y
Enter a username with which to do Web Portal,
<cr> to exit: user1
Enter a password for user1: user1pass
Enter a username with which to do Web Portal,
<cr> to exit:
Do you want to do 802.1x and PEAP-MSCHAPv2? [y]: y
Enter a crypto SSID to use: corporate
Enter a username with which to do PEAP-MSCHAPv2,
<cr> to exit: bob
Enter a password for bob: bobpass
Enter a username with which to do PEAP-MSCHAPv2,
<cr> to exit:
Do you wish to configure access points? [y]: y
Enter a port number [1-2] on which an AP
resides, <cr> to exit: 2
Enter AP model on port 2: ap3750
Enter a port number [1-2] on which an AP
resides, <cr> to exit:
Do you wish to configure distributed access
points? [y]: y
Enter a DAP serial number, <cr> to exit:
0422700351
Enter model of DAP with S/N 0422700351: ap3750

8MOBILITY SYSTEM SOFTWARE QUICK START GUIDE
Enter a DAP serial number, <cr> to exit:
success: created keypair for ssh
success: Type “save config” to save the
configuration
WX1200-aabbcc# save config
6Optionally, enable Telnet and enable the admin user
to use Telnet.
WX1200-aabbcc# set ip telnet server enable
WX1200-aabbcc# set user wxadmin attr
service-type 6
7Verify the configuration changes.
WX1200-aabbcc# display config
8Save the configuration changes.
WX1200-aabbcc# save config
Preparing the Network for Distributed MAPs
A MAP that is not directly connected to a WX switch
is considered a Distributed MAP. Distributed MAPs
require the following support in order to find a WX
switch to configure and manage the MAP:
Power—Power over Ethernet (PoE) must be
provided on one of the Ethernet connections to
the MAP. Use a PoE injection device that has been
tested by 3Com. Providing PoE on both of the
Ethernet connections allows for redundant PoE.
DHCP—By default, a Distributed MAP uses IP for
communication, and relies on DHCP to obtain IP
parameters. Therefore, DHCP services must be
available on the subnet that the MAP is connected to.
DHCP must provide the following parameters to
the MAP:
IP address
Default router address
The DHCP server might also need to supply the fol-
lowing DNS parameters, unless the WX switch is in
the same subnet as the MAPs, or DHCP option 43
is used to supply a list of WX IP addresses or host-
names in the DHCP message.
Domain Name
DNS Server address
Static IP configuration—If DHCP is not available in
the network, a Distributed MAP can be configured
with static IP information that specifies its IP
address, as well as the WX switch uses as its boot
device. See the Wireless LAN Switch and Controller
Configuration Guide for more information.
DNS—If the intermediate network between the
WX switch and Distributed MAP includes one or
more IP routers, do one of the following:
Configure DHCP option 43 on the DHCP server
(see above).
Create a 3COMWX.mynetwork.com entry on
the DNS server.

Preparing Clients 9
Preparing Clients
MSS uses 802.1X for access to secure (encrypted)
SSIDs. For a client to access an encrypted SSID, 802.1X
must be configured on the client. Depending on the
type of encryption used for the SSID, additional
configuration on the client might be required.
The following sections describe how to configure a
Windows XP (Service Pack 2) client for access to an
unencrypted (clear) or encrypted SSID. The exact
procedure and the options that are supported depend
on the Windows version installed on the client and
might also depend on the wireless adapter card. See
the Release Notes for 3Com Mobility System Software
for additional client recommendations and a list of
supported wireless adapters.
To configure a Windows XP SP2 client to access an
SSID and use dynamic WEP encryption:
1Access the Network Connections dialog box. (Select Con-
trol Panel > Network and Internet Connections.)
2Select Network Connections.
3Right-click on the wireless network connection and
select Properties.
4Click the Wireless Networks tab.
5Click Add to display the Wireless network properties
dialog box.
6Type the SSID name in the Network name field. (If you
are using the SSIDs in this document, type public for
nonsecure access, or corporate for secure access.)
7In the Wireless network key group box, select
Network Authentication type Open or WPA.
8Select Data encryption type: WEP for open network
authentication, TKIP for WPA network authentication,
or AES for RSN/WPA2 network authentication. For
unencrypted SSIDs, select NONE instead.
9Select The key is provided for me automatically, if
not already selected.
Make sure This is a computer-to-computer (ad
hoc) network is not selected.
10 Click the Authentication tab. (If the data encryption
type is Disabled, the Authentication tab is not
applicable and is not configurable. Click OK to
complete this procedure.
11 If the SSID is encrypted, select Enable IEEE 802.1X
authentication for this network. 802.1X is
required for access to a dynamically encrypted SSID.
12 If 802.1X is enabled, select Protected EAP (PEAP).
(If 802.1X is disabled, EAP is not used.)
13 Leave the Authenticate as computer and
Authenticate as guest options disabled.
14 Click Properties.
15 Deselect Validate server certificate.
16 Select Secured password (EAP-MSCHAP v2) as the
authentication method.
17 Click OK to close the Properties dialog for the SSID.
18 Click OK to close the Network Connection dialog
box.

10 MOBILITY SYSTEM SOFTWARE QUICK START GUIDE
Configuring a Mobility Domain for Roaming
This procedure configures multiple WX switches to
form a Mobility Domain. A Mobility Domain allows
users to seamlessly roam from one WX switch to
another. A Mobility Domain uses one seed switch.
The other switches are members.
Add the switches to the same VLAN. Users can be in
the same or different VLANs, and the user VLANs do
not need to be configured on all the switches. Users
can log on and roam the network from the seed
switch, or from any member switch, by tunnelling
through any other switch that contains their VLAN.
For simplicity, the quickstart command assigns all
users to the default VLAN.
Figure 2 Mobility Domain Deployment
Configuring the Seed
1Configure WX1200-Corp as the seed:
WX1200-Corp# set mobility-domain mode seed
domain-name Corp
WX1200-Corp# set mobility-domain member 10.10.90.4
2Verify and save the configuration changes on
WX1200-Corp.
WX1200-Corp# display config
# Configuration nvgen'd at 2005-1-09 00:42:46
# Image 6.0.1.0.64
...
set mobility-domain mode seed domain-name Corp
set mobility-domain member 10.10.90.4
WX1200-Corp# save config
Configuring a Member
1Use the quickstart command to configure basic system
parameters on a second switch (WX1200-Corp2).
2Configure WX1200-Corp2 as a member of the
Mobility Domain.
WX1200-Corp2# set mobility-domain mode member
seed-ip 10.10.10.4
3Verify and save the configuration changes:
WX1200-Corp2# display config
# Configuration nvgen'd at 2007-1-09 00:42:46
# Image 6.0.1.0.64
set mobility-domain mode member seed-ip 10.10.10.4
WX1200-Corp2# save config
Copyright © 2007, 3Com Corporation. All rights reserved.
Unless otherwise indicated, 3Com registered trademarks are registered in the United
States and may or may not be registered in other countries. 3Com is a registered
trademark of 3Com Corporation. The 3Com logo is a trademark of 3Com Corporation.
Mobility Domain, Mobility Point, Mobility Profile, Mobility System, Mobility System
Software, MP, MSS, and SentrySweep are trademarks of Trapeze Networks, Inc.
Intel and Pentium are registered trademarks of Intel Corporation. Microsoft,
MS-DOS, Windows, Windows XP, and Windows NT are registered trademarks of
Microsoft Corporation.
All other company and product names may be trademarks of the respective
companies with which they are associated.
10.10.10.4
Port
3
WX 1200 - C o r p
Port
2
bob alice
Console
10.10.90.4
Port
3
WX 1200 - C o r p 2
Port
2
Console
Router
user1
user2
MAP
MAP MAP MAP
10.10.10.1 10.10.90.1