H3C WX Series User manual

H3C WX Series Access Controllers
Getting Started Guide
Abstract
This document provides installation preparation, login, basic configurations, software
maintenance, and troubleshooting for the H3C WX series access controllers.
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com

2
Copyright © 2010, Hangzhou H3C Technologies Co., Ltd. and its licensors
No part of this manual may be reproduced or transmitted in any form or by any means
without the prior written consent of Hangzhou H3C Technologies Co., Ltd.
The information in this document is subject to change without notice. Every effort has
been made in the preparation of this document to ensure accuracy of the contents.
However, the statements, information, and recommendations in this document do not
constitute a warranty of any kind, express or implied. Hangzhou H3C Technologies Co.,
Ltd. and its licensors shall not be liable for technical or editorial errors or omissions
contained herein.
Acknowledgments
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot, Neocean,
NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA,
VVG, V2G, VnG, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of
Hangzhou H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this guide are the property of their
respective owners.
Environmental protection
This product has been designed to comply with the environmental protection
requirements. The storage, use, and disposal of this product must meet the applicable
national laws and regulations.

3
Contents
1Product overview··············································································································· 6
WX3000 series unified switches·······································································································6
WX5000 series multi-service access controllers ················································································6
WX6000 series carrier-class multi-service access controllers ······························································6
2Applicable models and software versions ············································································· 8
3Installation preparations······································································································ 9
4Installing an AC·················································································································10
5Logging in to an AC ··········································································································11
Powering on the AC and connecting it to a network ···································································· 11
Logging in to an AC ··················································································································· 11
6Configuring basic functions ································································································12
Default configuration ················································································································· 12
Configurations for using an AC ···································································································· 15
Specifying an IP address for an AC ························································································· 15
Configuring WLAN service ······································································································ 16
Saving the current configuration ································································································· 18
Configuration file encryption ·································································································· 18
Modes in saving the configuration ·························································································· 19
7Software maintenance······································································································20
8Troubleshooting ················································································································21
The AC cannot connect to the network······················································································· 21
Symptom ······························································································································ 21
Solution································································································································· 21
The optical interface cannot connect to the network ··································································· 21
Symptom ······························································································································ 21
Solution································································································································· 21
10-GE interface card problem of the WX3024 ··············································································· 22

4
Symptom ······························································································································ 22
Solution································································································································· 22
Over-temperature alarm············································································································· 23
Symptom ······························································································································ 23
Solution································································································································· 23
No information of the serial port is output ····················································································· 24
Symptom ······························································································································ 24
Solution································································································································· 24
When a WX3000 series unified switch supplies power to APs through PoE, the APs may work
abnormally ··························································································································· 25
Symptom ······························································································································ 25
Analysis································································································································· 25
Solution································································································································· 25
The WX6103 access controller switch interface board cannot be started ······································· 26
Symptom ······························································································································ 26
Solution································································································································· 26
The main control board on the WX6103 access controller cannot be started ·································· 26
Symptom ······························································································································ 26
Solution································································································································· 27
9Support and other resources ······························································································28
About the H3C WX documentation set ························································································ 28
Related documentation ············································································································· 29
Contact us································································································································· 30
Technical support ·················································································································· 30
Documentation feedback ····································································································· 31
Document conventions and symbols ··························································································· 31
Conventions·························································································································· 31
Symbols ································································································································ 32

5
NOTE:
The models listed in this manual are not applicable to all regions. Please consult your local
sales office for the models applicable to your region.
The term AC in this document refers to H3C access controllers, access controller modules, and
H3C WX series unified switches' access controller engines.

6
1Product overview
Developed by Hangzhou H3C Technologies Co., Ltd (H3C), H3C WX series access
controllers (ACs) (WX series) include ACs, access controller modules, and unified
switches switching engines. The WX series include the WX3000 series, WX5000 series, and
WX6000 series.
WX3000 series unified switches
The WX3000 series provides Gigabit ports, supports power over Ethernet plus (PoE+) and
802.11a/b/g/n, with the maximum output power of 25 W per port.
The WX3000 series unified switches include the WX3024, WX3010 and WX3008 unified
switches. The WX3024 provides two 10-GE interface slots on its rear panel to promote the
transmission speed at the WLAN network core.
The WX3000 series is the ideal solution to the provisioning of integrated wired and
wireless access for small- and medium-sized enterprises and branches of large-sized
enterprises.
WX5000 series multi-service access controllers
The WX5000 series are medium-capacity, multi-service access controllers that provide
high reliability, abundant features, and powerful wired and wireless data processing
functions.
The WX5000 series inlcude the WX5002, WX5002V2, and WX5004 access controllers, and
LS8M1WCMA0, LSWM1WCM10, and LSWM1WCM20 access controller modules.
The WX5000 series are designed to provide WLAN access for enterprise networks and
metropolitan area networks (MANs), and are most suitable for applications such as
WLAN access in a medium- and large-sized enterprise or campus network, wireless MAN
coverage, hot spot coverage.
WX6000 series carrier-class multi-service access
controllers
The WX6000 series are large-capacity access controllers that provide high reliability,
abundant features, and powerful wired and wireless data processing functions. The
WX6000 series integrate refined user control, perfect radio frequency (RF) management

7
and security mechanism, fast roaming, powerful QoS, and IPv4/IPv6 features to provide
powerful WLAN access control functions.
The WX6000 series include WX6103 access controllers, and LSQM1WCMB0,
LSBM1WCM2A0, and LSRM1WCM2A1 access controller modules.
The WX6000 series are designed to provide WLAN access for enterprise networks and
MANs, and are most suitable for applications such as WLAN access in a medium- and
large-sized enterprise or campus network, wireless MAN coverage, hot spot coverage.

8
2Applicable models and software
versions
H3C WX series access controllers include the WX3000 series unified switches, WX5000
and WX6000 series access controllers. Table 1 shows the applicable models and
software versions.
Table 1 Applicable models and software versions
Series
Model
Software version
WX3000 series unified switches
WX3024 unified switches
WX3010 unified switches
WX3008 unified switches
WX5000 series access
controllers
WX5002 access controller
WX5002V2 access controller
WX5004 access controller
LS8M1WCMA0 access controller
module
LSWM1WCM20 access controller
module
WX6000 series access
controllers
WX6103 access controller
LSQM1WCMB0 access controller
module
LSBM1WCM2A0 access controller
module
LSRM1WCM2A1 access controller
module

9
3Installation preparations
Preparations for installing WX series access controllers include precautions, preparation
of installation tools, environment examination, and antistatic preparation. The
installation preparations vary with AC models. For more information, see the installation
guide or card manual for your AC.
NOTE:
Before installation, power on your AC, and connect it to an Ethernet. Check the corresponding
LED status on your AC, and make sure that it works normally.

10
4Installing an AC
WARNING!
When you ask your H3C agent to maintain your access controller, you must ensure that the
dismantlement-preventive seal on a mounting screw of the access controller chassis is intact. If
you want to open the chassis, you should contact the agent for permission. Otherwise, you will
bear any consequence resulting from your actions.
You can install a WX series access controller on a desk or onto a 19-inch rack. Support
for the installation method depends on your AC model. For more information, see the
installation guide or card manual for your AC.
NOTE:
Some installation accessories (for example, trays and guide rails) are not shipped with your AC.
Determine whether to order them as needed.

11
5Logging in to an AC
Before logging in to an AC, power on the AC and connect it to a network. For more
information, see Powering on the AC and connecting it to a network.
You can use any of the following methods to log in to a WX series access controller:
Logging in through the console port
Logging in through telnet
Logging in through SSH
Logging in through web-based network management system
Logging in through NMS
Powering on the AC and connecting it to a network
After installing the AC, perform the following steps before logging in to the AC.
NOTE:
To connect the power supply and connect your AC to a network, see the installation guide of the
AC.
1. Power on the AC and connect it to an Ethernet.
2. Check the LEDs on the AC.
3. Power LED. Check the power LED of the AC to see whether the power supply works
normally. For more information, see the installation guide or card manual of your
AC.
4. Ethernet LED. Check the Ethernet LED to see whether the AC is connected to the
Ethernet, and whether data is being transmitted and received. For more
information, see the installation guide or card manual of your AC.
Logging in to an AC
For more information about how to log in to an AC, see Logging In to the AC in the H3C
WX Series Access Controllers Fundamentals Configuration Guide.

12
6Configuring basic functions
Default configuration
The WX series access controller has the default configuration as follows (see Table 2 ):
NOTE:
The default output depends on your AC model.
#
version 5.20, Release 2106P01
#
sysname H3C
#
undo info-center logfile enable
#
domain default enable system
#
telnet server enable
#
port-security enable
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
#
local-user admin
password simple admin
authorization-attribute level 3
service-type telnet
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2

13
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.0.100 255.255.255.0
#
interface GigabitEthernet1/0/1
#
interface GigabitEthernet1/0/2
#
interface GigabitEthernet1/0/3
#
interface GigabitEthernet1/0/4
#
interface Ten-GigabitEthernet1/0/5
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
Table 2 Description of the default configuration
Field
Description
version 5.20, Release 2106P01
The AC software version currently in use
sysname H3C
The default sysname is H3C.
undo info-center logfile enable
Disable the logfile function.
domain default enable system
The default enabled domain is system.
telnet server enable
By default, telnet server is enabled.
port-security enable
By default, port security is enabled.
vlan 1
VLAN 1 is the default VLAN, and you cannot
create and delete a default VLAN.

14
Field
Description
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
Basic configurations in the default domain
system:
The number of associated clients is not limited.
Specify the current domain to be in the active
state.
Disable the idle-cut function for the current ISP
domain.
Disable the location function of the
self-service server.
user-group system
system is the default user group. You cannot
delete the default user group but you can
modify its configuration.
local-user admin
password simple admin
authorization-attribute level 3
service-type telnet
The default configuration of the local user is as
follows:
The username is admin.
The password is admin, case sensitive.
The user level is 3 (manage level).
The service type is telnet.
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48
54
The default 802.11a/b/g settings are as shown
on the left column.
The default rates depend on your AC model.
interface NULL0
The interface type supported by the AC.
interface Vlan-interface1
ip address 192.168.0.100 255.255.255.0
By default, the default IP address of
VLAN-interface 1 is 192.168.0.100, and the
subnet mask is 255.255.255.0.

15
Field
Description
interface GigabitEthernet1/0/1
interface GigabitEthernet1/0/2
interface GigabitEthernet1/0/3
interface GigabitEthernet1/0/4
interface Ten-GigabitEthernet1/0/5
The interface type supported by the AC.
Support for the interface types depends on
the AC model.
load xml-configuration
The AC loads the configuration file with
extension .xml after startup.
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
The AC supports console and VTY user
interfaces. By default, the authentication
mode for VTY login is AAA, and the user
privilege level is 3.
Configurations for using an AC
Besides the default configurations, you must perform the following configurations to use
an AC in your network:
Specifying an IP address for an AC
Configuring WLAN service
Specifying an IP address for an AC
To specify an IP address for the AC:
1. Enter system view.
<Sysname>system-view
2. Optional: Create VLANs. Using this command can create multiple VLANs in
batches.
[Sysname]vlan { vlan-id1 [ to vlan-id2 ]| all }
3. Required: Create a VLAN interface and enter VLAN interface view. If the VLAN
interface already exists, you enter its view directly. If the VLAN interface does not
exist, you need to create a VLAN and then enter VLAN interface view.
[Sysname]interface vlan-interface vlan-interface-id
4. Required: Assign an IP address to the VLAN interface. IP address 192.168.0.100 is
assigned to VLAN interface 1 by default. No IP address is configured for other VLAN
interfaces.

16
[Sysname]ip address ip-address { mask | mask-length }
5. Optional: Configure the description of the current VLAN. VLAN interface name is
used by default, for example, Vlan-interface1 Interface.
[Sysname]description text
6. Optional: Bring up the VLAN interface. By default, a VLAN interface is in the up
state. In this case, the VLAN interface is up so long as one port in the VLAN is up and
goes down if all ports in the VLAN go down. An administratively shut down VLAN
interface however will be in the down state until you bring it up, regardless of how
the state of the ports in the VLAN changes.
[Sysname]undo shutdown
Configuring WLAN service
WLAN service configuration includes enabling WLAN service, WLAN global configuration,
country code, service template, AP, radio configuration, and interface configuration.
To configure WLAN service:
1. Enter system view.
<Sysname>system-view
2. Required: Enable WLAN service. By default, WLAN service is enabled. All WLAN
services are available only if WLAN service is enabled.
[Sysname]wlan enable
3. Required: Specifies a country code. By default, the country code value is CN. The
country code determines characteristics such as the power level and total number
of channels.
[Sysname]wlan country-code code
NOTE:
You must set the correct country code or area code before configuring an AP.
If you change the country code for an AP that has a radio card not supported by the new
country code, the corresponding WLAN-radio interface will have its configurations of the
service template, maximum power, and channels removed automatically. For more
information about country code and country, see WLAN Service in the WLAN Command
Reference in the H3C WX series access controllers Command References.
Configuring a service template

17
1. Required: Create a WLAN-ESS interface. If the WLAN-ESS interface identified by the
interface-number argument does not exist, this command creates the WLAN-ESS
interface first.
[Sysname]interface wlan-ess interface-index
2. Required: Exit interface view.
[Sysname]quit
3. Required: Create a WLAN service template. By default, no service template is
created.
[Sysname]wlan service-template service-template-number { clear | crypto }
4. Required: Specify the service set identifier (SSID). By default, no SSID is set.
[Sysname]ssid ssid-name
5. Optional: Bind the WLAN-ESS interface to the service template. By default, no
WLAN-ESS interface is bound to the service template.
[Sysname]bind wlan-ess interface-index
6. Required: Enable the authentication method. By default, open system
authentication is enabled. You can enable open system authentication, shared
key authentication, or both.
[Sysname]authentication-method { open-system | shared-key }
7. Required: Enable the service template. By default, the service-template is disabled.
[Sysname]service-template enable
8. Required: Exit interface view.
[Sysname]quit
Configuring an AP
1. Required: Specify the AP name and its model number and enter AP template view.
The model number must be specified only during new AP template creation.
[Sysname]wlan ap ap-name model model-name
2. Required: Exit interface view.
[Sysname]quit
3. Required: Enable WLAN radios. By default, no WLAN radio is enabled.
[Sysname] wlan radio { disable | enable } { radio-policy radio-policy-name |
all | dot11a | dot11an | dot11b | dot11g | dot11gn }
Configuring the radio of an AP
1. Required: Enter AP template view.
[Sysname]wlan ap ap-name model model-name

18
2. Required: Specify a radio type for the radio and enter radio view. Support for this
command depends on the AP model.
[Sysname] radio radio-number [ type { dot11a | dot11an |dot11b | dot11g |
dot11gn } ]
3. Required: Enable the radio. By default, all radios are disabled.
[Sysname]radio enable
4. Required: Exit interface view.
[Sysname]quit
Saving the current configuration
You can modify the current configuration on your AC at the CLI. However, the current
configuration is temporary. To make the modified configuration take effect at the next
startup, you must save the current configuration to the startup configuration file.
Complete these tasks to save the current configuration:
Task
Remarks
Configuration file encryption
Optional
Modes in saving the configuration
Required
Configuration file encryption
Support for this feature depends on the AC model.
This feature enables you to encrypt a configuration file before saving it (using the save
command). If you want to read the encrypted configuration file, you must decrypt it
with a legal key. Two kinds of keys are supported to encrypt a configuration file, and you
can select either of them according to your application environment:
Private key: A configuration file encrypted by a private key can be decrypted and
recognized only by the local device.
Public key: A configuration file encrypted by a public key can be decrypted and
recognized by all devices supporting this feature.
To enable configuration file encryption:
1. Enter system view.
<Sysname>system-view
2. Optional: Enable configuration file encryption. Disabled by default. The current
valid configurations are directly saved to the configuration file.

19
[Sysname] configuration encrypt { private-key | public-key }
NOTE:
For the device that supports this feature, you can use the display saved-configuration command
instead of the more command to view the encrypted configuration file, because the latter
cannot decrypt the file. Otherwise, you are prompted for operation failure or garbled characters.
Modes in saving the configuration
You can save the configuration in one of the following two modes:
Fast saving mode: Fast saving mode is implemented by using the save command
without providing the safely keyword. The mode saves the file quickly but is likely to
lose the existing configuration file if the device reboots or the power fails during the
process.
Safe mode. Safe mode is implemented by using the save command with the safely
keyword. The mode saves the file more slowly than the fast saving mode, but can
retain the configuration file on the device even if the device reboots or the power
fails during the process.
The fast saving mode is suitable for environments where power supply is stable. The safe
mode, however, is preferred in environments where stable power supply is unavailable
or remote maintenance is involved.
NOTE:
The configuration file must have extension .cfg
During the execution of the save [ safely ] command, the startup configuration file to be used
at the next system startup may be lost if the device reboots or the power supply fails. In this
case, the device boots with the null configuration. After the device reboots, you must
re-specify a startup configuration file for the next system startup.
To save the current configuration, use either command (available in any view):
1. Required: Save the current configuration to the specified file, but the configuration
file is not set as the file to be used at the next startup.
[Sysname]save file-url
2. Required: Save the current configuration to the root directory of the storage
medium and specify the file as the startup configuration file to be used at the next
startup.
[Sysname]save [ safely ]

20
7Software maintenance
If an installation guide is supplied with the AC, see Software Maintenance in the
installation guide or the separate maintenance guide.
If a card manual is supplied with the AC, see H3C Access Controller Modules
Software Upgrade Guide.