HP MSM3xx User manual

5400zl Switches
Installation and Getting Started Guide
HP MSM3xx / MSM4xx Access Points Management and Configuration Guide
HP MSM3xx / MSM4xx Access Points
Management and Configuration Guide

HP MSM3xx / MSM4xx Access Points
Management and Configuration Guide

Copyright and Disclaimer Notices
© Copyright 2011 Hewlett-Packard Development Company, L.P. The
information contained herein is subject to change without notice.
This document contains proprietary information, which is protected by
copyright. No part of this document may be photocopied, reproduced,
or translated into another language without the prior written consent of
Hewlett-Packard.
Publication Number
5998-1147
January 2011
Applicable Products
See Products covered on page 1-2.
Trademark Credits
Windows NT®, Windows®, and MS Windows® are US
registered trademarks of Microsoft Corporation.
Disclaimer
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF
ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING,
BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE. Hewlett-Packard shall not be liable for errors
contained herein or for incidental or consequential damages in
connection with the furnishing, performance, or use of this
material.
The only warranties for HP products and services are set forth
in the express warranty statements accompanying such
products and services. Nothing herein should be construed as
constituting an additional warranty. HP shall not be liable for
technical or editorial errors or omissions contained herein.
Hewlett-Packard assumes no responsibility for the use or
reliability of its software on equipment that is not furnished by
Hewlett-Packard.
Warranty
See the warranty information included with the product.
A copy of the specific warranty terms applicable to your
Hewlett-Packard products and replacement parts can be
obtained from your HP Sales and Service Office or authorized
dealer.
Open Source Software Acknowledgement
Statement
This software incorporates open source components that are
governed by the GNU General Public License (GPL), version 2.
In accordance with this license, HP will make available a
complete, machine-readable copy of the source code
components covered by the GNU GPL upon receipt of a written
request. Send a request to:
Hewlett-Packard Company, L.P.
GNU GPL Source Code
Attn: ProCurve Networking Support
Roseville, CA 95747 USA
Safety
Before installing and operating this product, please read Safety
information on page 1-10.
Hewlett-Packard Company
8000 Foothills Boulevard
Roseville, California 95747
www.hp.com/networking/

Contents
iii
Contents
1Introduction
About this guide ...........................................................................................................1-2
Products covered...................................................................................................1-2
Important terms.....................................................................................................1-3
Conventions ...........................................................................................................1-3
Warnings and cautions ...................................................................................1-3
Management tool ............................................................................................1-3
Ports .................................................................................................................1-3
Commands and program listings ..................................................................1-4
New in this release ......................................................................................................1-4
Introducing the MSM3xx/4xx Access Points............................................................1-5
Key features............................................................................................................1-5
Controlled mode versus autonomous mode ......................................................1-6
Controlled mode .............................................................................................1-6
Autonomous mode..........................................................................................1-7
Summary ..........................................................................................................1-9
Safety information......................................................................................................1-10
Professional Installation Required .............................................................1-10
Servicing.........................................................................................................1-10
HP support ..................................................................................................................1-11
Before contacting support ...........................................................................1-11
Getting started ............................................................................................................1-11
Online documentation ...............................................................................................1-11
2Management
Management tool..........................................................................................................2-2
Starting the management tool..............................................................................2-2
Customizing management tool settings..............................................................2-3
Administrative user authentication ..............................................................2-3
Manager and Operator accounts...................................................................2-4

Contents
iv
Security policies..............................................................................................2-6
Security ............................................................................................................2-6
Web server .......................................................................................................2-7
Auto-refresh.....................................................................................................2-7
Web inactivity logout......................................................................................2-7
SNMP .............................................................................................................................2-7
Configuring SNMP settings ..................................................................................2-8
Attributes .........................................................................................................2-9
v1/v2c communities ........................................................................................2-9
v3 users ............................................................................................................2-9
Notification receivers...................................................................................2-10
Security ..........................................................................................................2-10
SOAP............................................................................................................................2-11
Configuring the SOAP server .............................................................................2-11
Server settings...............................................................................................2-11
Security ..........................................................................................................2-12
Security considerations................................................................................2-12
CLI................................................................................................................................2-12
Configuring CLI support .....................................................................................2-13
Secure shell access .......................................................................................2-13
Authenticate CLI logins using .....................................................................2-13
Serial port access..........................................................................................2-14
System time.................................................................................................................2-14
LEDs.............................................................................................................................2-15
Country........................................................................................................................2-16
3Wireless configuration
Wireless coverage.........................................................................................................3-2
Factors limiting wireless coverage......................................................................3-2
Radio power ....................................................................................................3-2
Antenna configuration....................................................................................3-2
Interference .....................................................................................................3-2
Physical characteristics of the location .......................................................3-3
Configuring overlapping wireless cells...............................................................3-3

Contents
v
Performance degradation and channel separation.....................................3-3
Selecting channels in the 2.4 GHz band .......................................................3-4
Distance between APs....................................................................................3-6
Automatic transmit power control ...............................................................3-7
Supporting 802.11n and legacy wireless clients ................................................3-7
Radio configuration .....................................................................................................3-8
Radio configuration parameters........................................................................3-16
Regulatory domain........................................................................................3-16
Operating mode.............................................................................................3-16
Wireless mode ...............................................................................................3-18
Channel width ...............................................................................................3-22
Channel extension ........................................................................................3-23
Channel ..........................................................................................................3-23
Interval ...........................................................................................................3-25
Time of day ....................................................................................................3-25
Automatic channel exclusion list................................................................3-26
Antenna selection .........................................................................................3-26
Antenna gain..................................................................................................3-27
Max clients.....................................................................................................3-27
Advanced wireless settings ................................................................................3-27
Collect statistics for wireless clients..........................................................3-27
Tx beamforming............................................................................................3-28
RTS threshold................................................................................................3-28
Spectralink VIEW..........................................................................................3-28
Tx protection.................................................................................................3-29
Guard interval................................................................................................3-29
Maximum range (ack timeout)....................................................................3-30
Distance between APs..................................................................................3-30
Beacon interval .............................................................................................3-30
Multicast Tx rate ...........................................................................................3-31
Transmit power control ...............................................................................3-31
Wireless neighborhood..............................................................................................3-32
Scanning modes...................................................................................................3-32
Monitor mode ................................................................................................3-32
Automatic channel selection .......................................................................3-33
Background scanning...................................................................................3-33

Contents
vi
Viewing scan results............................................................................................3-34
Identifying unauthorized APs.............................................................................3-34
Viewing wireless information ...................................................................................3-35
Viewing all wireless clients ................................................................................3-35
Viewing wireless client data rates .....................................................................3-37
High throughput (HT) rate traffic ...............................................................3-37
Legacy rate traffic .........................................................................................3-38
Wireless access points ........................................................................................3-39
Access point status .......................................................................................3-39
4Working with VSCs
Key concepts.................................................................................................................4-2
Stand-alone deployment .......................................................................................4-2
User authentication ........................................................................................4-2
Using more than one authentication type in a VSC....................................4-3
Deployment with a controller ..............................................................................4-3
Management with VLANs .....................................................................................4-4
Viewing and editing VSC profiles ........................................................................4-5
VSC configuration options ..........................................................................................4-5
General....................................................................................................................4-7
If Use HP MSM Controller option is enabled..............................................4-7
If Use HP MSM Controller option is disabled.............................................4-7
Virtual AP................................................................................................................4-9
WLAN ...............................................................................................................4-9
Wireless clients..............................................................................................4-11
Quality of service ..........................................................................................4-12
Allowed wireless rates .................................................................................4-13
Egress VLAN ........................................................................................................4-14
Wireless security filters.......................................................................................4-14
Default wireless security filter definitions ................................................4-15
Wireless protection..............................................................................................4-16
WPA ................................................................................................................4-17
802.1X .............................................................................................................4-18
WEP ................................................................................................................4-18
MAC-based authentication .................................................................................4-19
Location-aware ....................................................................................................4-19

Contents
vii
MAC filter .............................................................................................................4-19
IP filter ..................................................................................................................4-20
VSC data flow .............................................................................................................4-21
Stand-alone deployment .....................................................................................4-21
VSC on autonomous AP ...............................................................................4-21
AP deployed with a controller ...........................................................................4-22
VSC on controller..........................................................................................4-23
Quality of service (QoS) ............................................................................................4-23
Priority mechanisms ...........................................................................................4-24
802.1p..............................................................................................................4-24
VSC-based priority ........................................................................................4-24
Differentiated Services (DiffServ) ..............................................................4-25
TOS .................................................................................................................4-25
IP QoS.............................................................................................................4-25
Upstream DiffServ tagging .................................................................................4-25
Upstream/downstream traffic marking ............................................................4-26
Upstream traffic marking.............................................................................4-26
Downstream traffic marking .......................................................................4-26
5Network configuration
Port configuration ........................................................................................................5-2
Port configuration information .....................................................................5-2
Bridge port configuration .....................................................................................5-3
Assign IP address via......................................................................................5-3
Bridge spanning tree protocol.......................................................................5-3
Port configuration .................................................................................................5-4
VLAN.................................................................................................................5-4
Link ...................................................................................................................5-5
Wireless port configuration..................................................................................5-5
VLAN support ...............................................................................................................5-5
Defining a VLAN ....................................................................................................5-5
Creating a network profile.............................................................................5-6
Assigning a VLAN to a port............................................................................5-6
Defining an egress VLAN for a VSC.....................................................................5-7
Configuring a default VLAN .................................................................................5-8
Assigning VLANs to individual users ..................................................................5-8

Contents
viii
VLAN bridging........................................................................................................5-9
Bandwidth control .......................................................................................................5-9
Discovery protocols...................................................................................................5-10
CDP .......................................................................................................................5-10
LLDP......................................................................................................................5-10
LLDP agent ....................................................................................................5-11
LLDP over local mesh ..................................................................................5-11
LLDP settings ................................................................................................5-11
TLV settings ..........................................................................................................5-12
Basic TLVs......................................................................................................5-12
802.3 TLVs ......................................................................................................5-13
DNS ..............................................................................................................................5-14
DNS servers..........................................................................................................5-14
DNS advanced settings .......................................................................................5-14
IP routes ......................................................................................................................5-15
Configuration .......................................................................................................5-15
Active routes..................................................................................................5-15
Default routes................................................................................................5-16
IP QoS ..........................................................................................................................5-16
Configuration .......................................................................................................5-17
Settings...........................................................................................................5-17
Example................................................................................................................5-18
Create the profiles ........................................................................................5-18
Assign the profiles to a VSC ........................................................................5-19
802.1X supplicant .......................................................................................................5-20
6Security
Using an external RADIUS server..............................................................................6-2
Configuring a RADIUS client profile on the AP.................................................6-2
To define a RADIUS profile ...........................................................................6-3
Configuration settings ....................................................................................6-3
Configuring user accounts on a RADIUS server ...............................................6-5
Access Request attributes..............................................................................6-5
Access Accept attributes ...............................................................................6-7