H3C WX Series User manual

H3C WX Series Access Controllers
Getting Started Guide
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Document Version: 6W100-20101124

Copyright © 2010, Hangzhou H3C Technologies Co., Ltd. and its licensors
All Rights Reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior
written consent of Hangzhou H3C Technologies Co., Ltd.
Trademarks
H3C, , Aolynk, , H3Care, , TOP G, , IRF, NetPilot, Neocean, NeoVTL,
SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V2G, VnG, PSPT,
XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co.,
Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners.
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface
The H3C WX Series Access Controllers Getting Started Guide describes the installation preparations,
login, command line interface (CLI), basic configurations, software maintenance, and troubleshooting of
the H3C WX series access controllers.
This preface includes:
zAudience
zConventions
zAbout the H3C WX Series Documentation Set
zObtaining Documentation
zTechnical Support
zDocumentation Feedback
Audience
This documentation is intended for:
zNetwork planners
zField technical support and servicing engineers
zNetwork administrators working with the H3C WX series
Conventions
This section describes the conventions used in this documentation.
Command conventions
Convention Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are
optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars,
from which you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical
bars, from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by
vertical bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by
vertical bars, from which you may select multiple choices or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&)
sign can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.

GUI conventions

Category Documents Purposes
WX Series Access Controllers Getting Started
Guides
Guide you through the main functions of
your AC, and describes how to install and
log in to your AC, perform basic
configurations, maintain software, and
troubleshoot your AC.

i
Table of Contents
1 Product Overview······································································································································1-1
WX3000 Series Unified Switches ···········································································································1-1
WX5000 Series Multi-Service Access Controllers··················································································1-1
WX6000 Series Carrier-Class Multi-Service Access Controllers····························································1-1
2 Installation Preparations···························································································································2-1
3 Installing an AC··········································································································································3-1
4 Logging In to an AC···································································································································4-1
Powering on the AC and Connecting It to a Network ·············································································4-1
Logging In to an AC ································································································································4-1
5 Configuring Basic Functions ···················································································································5-1
Specifying an IP Address for an AC········································································································5-3
Configuring WLAN Service ·····················································································································5-4
Saving the Current Configuration············································································································5-5
Configuration File Encryption··················································································································5-6
Modes in Saving the Configuration·········································································································5-6
6 Software Maintenance·······························································································································6-1
7 Troubleshooting ········································································································································7-1
The AC Cannot Connect to the Network·································································································7-1
The Optical Interface Cannot Connect to the Network···········································································7-1
10-GE Interface Card Problem of the WX3024 ······················································································7-2
Over-Temperature Alarm························································································································7-2
No Information of the Serial Port Is Output·····························································································7-3
When a WX3000 Series Unified Switch Supplies Power to APs Trough PoE, the APs May Work
Abnormally··············································································································································7-3
The WX6103 Access Controller Switch Interface Board Cannot Be Started··········································7-4
The Main Control Board on the WX6103 Access Controller Cannot Be Started····································7-5
8 Index ···························································································································································8-1

1-1
1 Product Overview
Developed by Hangzhou H3C Technologies Co., Ltd (hereinafter referred to as H3C), H3C WX series
access controllers (ACs) (hereinafter referred to as the WX series) include ACs, access controller
modules, and unified switches switching engines. The WX series include the WX3000 series, WX5000
series, and WX6000 series.
WX3000 Series Unified Switches
The WX3000 series provides Gigabit ports, supports power over Ethernet plus (PoE+) and
802.11a/b/g/n, with the maximum output power of 25 W per port.
The WX3000 series unified switches include the WX3024, WX3010 and WX3008 unified switches. The
WX3024 provides two 10-GE interface slots on its rear panel to promote the transmission speed at the
WLAN network core.
The WX3000 series is the ideal solution to the provisioning of integrated wired and wireless access for
small- and medium-sized enterprises and branches of large-sized enterprises.
WX5000 Series Multi-Service Access Controllers
The WX5000 series are medium-capacity, multi-service access controllers that provide high reliability,
abundant features, and powerful wired and wireless data processing functions.
The WX5000 series inlcude the WX5002, WX5002V

2-1
2 Installation Preparations
Preparations for installing WX series access controllers include precautions, preparation of installation
tools, environment examination, and

3-1
3 Installing an AC

4-1
4 Logging In to an AC
Before logging in to an AC, power on the AC and connect it to a network. For more information, see
Powering on the AC and Connecting It to a Network.
You can use any of the following methods to log in to a WX series access controller:
zLogging in through the console port
zLogging in through telnet
zLogging in through SSH
zLogging in through web-based network management system
zLogging in through NMS
Powering on the AC and Connecting It to a Network
After installing the AC, perform the following steps before logging in to the AC.
Step1 Power on theAC and connect it to an Ethernet.
For how to connect the power supply and connect your AC to a network, see the installation guide of the
AC.
Step2 Check the LEDs on theAC.
1) Power LED
Check the power LED of the AC to seewhether the power supply works normally. For more information,
see the installation guide or card manual of your AC.
2) Ethernet LED
Check the Ethernet LED to see whether theAC is connected to the Ethernet, and whether data is being
transmitted and received. For more information, see the installation guide or card manual of your AC.
Logging In to an AC
For more information about how to log in to an AC, see Logging In to the AC in the Fundamentals
Configuration Guide in the H3C WX Series Access Controllers Configuration Guides.

5-1
5 Configuring Basic Functions
The WX series access controller has the default configuration as follows:
The default output depends on your AC model.
#
version 5.20, Release 2106P01
#
sysname H3C
#
undo info-center logfile enable
#
domain default enable system
#
telnet server enable
#
port-security enable
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
#
local-user admin

5-2
interface NULL0
#
interface Vlan-interface1
ip address 192.168.0.100 255.255.255.0
#
interface GigabitEthernet1/0/1
#
interface GigabitEthernet1/0/2
#
interface GigabitEthernet1/0/3
#
interface GigabitEthernet1/0/4
#
interface Ten-GigabitEthernet1/0/5
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
Table 5-1 Description of the default configuration
Field Description
version 5.20, Release 2106P01 The AC software version currently in use
sysname H3C The default sysname is H3C.
undo info-center logfile enable Disable the logfile function.
domain default enable system The default enabled domain is system.
telnet server enable By default, telnet server is enabled.
port-security enable By default, port security is enabled.
vlan 1 VLAN 1 is the default VLAN, and you cannot create and
delete a default VLAN.
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
Basic configurations in the default domain system:
The number of associated clients is not limited.
Specify the current domain to be in the active state.
Disable the idle-cut function for the current ISP domain.
Disable the location function of the self-service server.
user-group system system is the default user group. You cannot delete the
default user group but you can modify its configuration.
local-user admin
password simple admin
authorization-attribute level 3
service-type telnet
The default configuration of the local user is as follows:
zThe username is admin.
zThe password is admin, case sensitive.
zThe user level is 3 (manage level).
zThe service type is telnet.

5-3
Field Description
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
The default 802.11a/b/g settings are as shown on the
left column.
The default rates depend on your AC model.
interface NULL0 The interface type supported by the AC.
interface Vlan-interface1
ip address 192.168.0.100 255.255.255.0 By default, the default IP address of VLAN-interface 1 is
192.168.0.100, and the subnet mask is 255.255.255.0.
interface GigabitEthernet1/0/1
interface GigabitEthernet1/0/2
interface GigabitEthernet1/0/3
interface GigabitEthernet1/0/4
interface Ten-GigabitEthernet1/0/5
The interface type supported by the AC.
Support for the interface types depends on the AC
model.
load xml-configuration The AC loads the configuration file with extension .xml
after startup.
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
The AC supports console and VTY user interfaces. By
default, the authentication mode for VTY login is AAA,
and the user privilege level is 3.
Besides the default configurations, you need to perform the following configurations to use an AC in
your network:
zSpecifying an IP Address for an AC
zConfiguring WLAN Service
zSaving the Current Configuration
Specifying an IP Address for an AC
Follow these steps to specify an IP address for the AC:
To do… Use the command… Remarks
Enter system view system-view —
Create VLANs vlan { vlan-id1 [to
vlan-id2 ]| all }
Optional
Using this command can create multiple VLANs in
batches.
Create a VLAN interface
and enter VLAN
interface view
interface
vlan-interface
vlan-interface-id
Required
zIf the VLAN interface already exists, you enter its view
directly.
zIf the VLAN interface does not exist, you need to
create a VLAN and then enter VLAN interface view.
Assign an IP address to
the VLAN interface ip address ip-address
{ mask | mask-length }
Required
IP address 192.168.0.100 is assigned to VLAN interface 1
by default. No IP address is configured for other VLAN
interfaces.

5-4
To do… Use the command… Remarks
Configure the
description of the current
VLAN description text Optional
VLAN interface name is used by default, for example,
Vlan-interface1 Interface.
Bring up the VLAN
interface undo shutdown
Optional
By default, a VLAN interface is in the up state. In this case,
the VLAN interface is up so long as one port in the VLAN is
up and goes down if all ports in the VLAN go down.
An administratively shut down VLAN interface however
will be in the down state until you bring it up, regardless of
how the state of the ports in the VLAN changes.
Configuring WLAN Service
WLAN service configuration includes enabling WLAN service, WLAN global configuration, country code,
service template,AP, radio configuration, and interface configuration.
Follow these steps to configure WLAN service:
To do… Use the command… Remarks
Enter system view system-view —
Enable WLAN service
Enable WLAN service wlan enable
Required
By default, WLAN service is enabled.
All WLAN services are available only if WLAN
service is enabled.
Specifies a country code
Specifies a country code wlan country-code code
Required
By default, the country code value is CN.
For more information about country code and
country, see WLAN Service in the WLAN
Command Reference in the H3C WX Series
Access Controllers Command References.

5-5
To do… Use the command… Remarks
Exit interface view quit Required
Create a WLAN service
template
wlan service-template
service-template-number
{ clear | crypto }
Required
By default, no service template is created.
Specify the service set
identifier (SSID) ssid ssid-name Required
By default, no SSID is set.
Bind the WLAN-ESS
interface to the service
template bind wlan-ess interface-index Optional
By default, no WLAN-ESS interface is bound
to the service template..
Enable the authentication
method authentication-method { open-system |shared-key }
Required
By default, open system authentication is
enabled.
You can enable open system authentication,
shared key authentication, or both.
Enable the service template service-template enable Required
By default, the service-template is disabled.
Exit interface view quit Required
Configuring an AP
Specify the AP name and its
model number and enter AP
template view
wlan ap ap-name model
model-name
Required
The model number needs to be specified only
during new AP template creation.
Exit interface view quit Required
Enable WLAN radios
wlan radio { disable | e0008vuTc 0.0f346.44 625.6{
sharna66a10.667 0 T1e ope2.52em

5-6
Task Remarks
Configuration File Encryption Optional
Modes in Saving the Configuration Required
Configuration File Encryption
Support for this feature depends on the AC model.
This feature enables you to encrypt a configuration file before saving it (using the save command). If
you want to read the encrypted configuration file, you must decrypt it with a legal key. Two kinds of keys
are supported to encrypt a configuration file, and you can select either of them according to your
application environment:
zPrivate key: A configuration file encrypted by a private key can be decrypted and recognized only
by the local device.
zPublic key: A configuration file encrypted by a public key can be decrypted and recognized by all
devices supporting this feature.
Follow these steps to enable configuration file encryption:
To do… Use the command… Remarks
Enter system view system-view —
Enable configuration
file encryption configuration encrypt {private-key |public-key }
Optional
Disabled by default. The current valid configurations
are directly saved to the configuration file.
For the device that supports this feature, you can use the display saved-configuration command
instead of the more command to view the encrypted configuration file, because the latter cannot
decrypt the file. Otherwise, you will be prompted for operation failure or garbled characters.
Modes in Saving the Configuration
You can save the configuration in either of the following two modes:
zFast saving mode: Fast saving mode is implemented by using the save command without
providing the safely keyword. The mode saves the file quickly but is likely to lose the existing
configuration file if the device reboots or the power fails during the process.

5-7
zSafe mode. Safe mode is implemented by using the save command with the safely keyword. The
mode saves the file more slowly than the fast saving mode, but can retain the configuration file on
the device even if the device reboots or the power fails during the process.
The fast saving mode is suitable for environments where power supply is stable. The safe mode,
however, is preferred in environments where stable power supply is unavailable or remote maintenance
is involved.
Follow these steps to save the current configuration:
To do… Use the command… Remarks
Save the current configuration to the specified file, but
the configuration file is not set as the file to be used at
the next startup save file-url
Save the current configuration to the root directory of the
storage medium and specify the file as the startup
configuration file to be used at the next startup save [ safely ]
Required
Use either command
Available in any view
zThe configuration file must be with extension .cfg
zDuring the execution of the save [ safely ] command, the startup configuration file to be used at the
next system startup may be lost if the device reboots or the power supply fails. In this case, the
device boots with the null configuration. After the device reboots, you need to re-specify a startup
configuration file for the next system startup.

6-1
6 Software Maintenance
zIf an installation guide is supplied with the AC, see Software Maintenance in the installation guide.
zIf a card manual is supplied with the AC, see H3C Access Controller Modules Software Upgrade
Guide.

7-1
7 Troubleshooting
This chapter describes how to troubleshoot H3C WX series access controllers problems. If you cannot
solve a system problem, contact the H3C technical support staff.
Technical support:
[e-mail]
http://www.h3c.com
The AC Cannot Connect to the Network
Symptom
After you connect a network cable to theAC, the AC cannot connect to the network.
Solution
Check that:
1) The AC starts up completely and you can see the user prompt.
2) The port link is not shut down.
3) The RJ-45 connector is properly connected to the network port of the AC.
4) The corresponding port on the peer device works normally.
5) The network cable works well. Otherwise, replace it with another one.
6) The length of the network cable does not exceed 100 m (328.08 ft.).
7) If the problem still exists, contact the service engineer.
The Optical Interface Cannot Connect to the Network
Symptom
After you insert an SFP optical transceiver, it cannot connect to the network.
Solution
Check that:
1) The AC starts up completely and you can see the user prompt.
2) The RJ-45 network port of the Combo port is down or not connected.
3) The optical transceiver is supported by your AC.
4) The optical transceivers used on the local and peer ends match in modes (single mode or
multi-mode) and wavelength.
5) The corresponding port on the peer device works normally.
6) The optical fiber is connected correctly. Connect the two ends of the cable to the TX and RX ends
on the two optical transceivers, respectively.
7) The optical fiber is correct and works well. Otherwise, replace it with another one.

7-2
8) Connect the two ends of the optical fiber to the TX and RX ends of the same optical transceiver to
check connectivity of the optical interfaces. If the optical interfaces still cannot connect to the
network, connect the optical fiber in the same way to the optical interfaces that work normally. If the
optical interfaces still cannot connect to the network, the optical transceiver is faulty. Use the other
optical transceiver or replace it with another one, and then perform the same test.
9) The length of the optical fiber does not exceed the distance supported by the optical transceiver.
10) If the problem still exists, contact the service engineer.
10-GE Interface Card Problem of the WX3024
Symptom
After you insert the 10-GE interface card to the WX3024, the card cannot work.
Solution
Check that:
1) The AC starts up completely and you can see the user prompt.
2) Enter the oap connect slot 0 command in user view on the WX3024.
3) You have properly installed the 10-GE interface card to the MOD slot of the WX3024, and fastened
the captive screws.
4) The installation prompt is printed at the terminal upon insertion of the interface card. If not, insert
the card to another MOD slot. If the problem still exists, the 10-GE interface card is faulty.
5) If the MOD LED of the slot installed with the 10-GE interface card on the front panel blinks yellow,
the interface card is faulty. Replace it with another one.
6) The 10-GE interface card is supported by the WX3024. For optical transceivers supported by the
WX3024, see Appendix A Specifications of Optional Interface Modules in the installation manual
supplied with the WX3024.
7) The optical fiber is correct and works well. Otherwise, replace it with another one.
8) Insert an optical transceiver to the 10-GE interface card. Then connect the TX and RX ends of the
optical transceiver with an optical fiber, and check the MOD LED on the front panel. If the LED is
not steady green, use another optical transceiver to do the same test. If the optical transceiver
works normally on other interface cards, the 10-GE interface card is faulty.
9) Contact the service engineer after the above steps.
Over-Temperature Alarm
Symptom
The AC prompts an over-temperature alarm, and the status LED or alarm LED indicates an alarm. For
description of the LED statuses, see the LED description in the installation guide supplied with theAC.
Solution
Check that:
1) The AC starts up completely.
2) The operating temperature of the AC falls in the range 0°C to 45°C (32°F to 113°F).
3) All fans run normally.
4) Execute the display environment [cpu ] command to check the temperatures of relevant
components of the AC.