HP MSM3xx User manual

5400zl Switches
Installation and Getting Started Guide
HP MSM3xx / MSM4xx Access Points Management and Configuration Guide
HP MSM3xx / MSM4xx Access Points
Management and Configuration Guide

HP MSM3xx / MSM4xx Access Points
Management and Configuration Guide

Copyright and Disclaimer Notices
© Copyright 2011 Hewlett-Packard Development Company, L.P. The
information contained herein is subject to change without notice.
This document contains proprietary information, which is protected by
copyright. No part of this document may be photocopied, reproduced,
or translated into another language without the prior written consent of
Hewlett-Packard.
Publication Number
5998-1147
January 2011
Applicable Products
See Products covered on page 1-2.
Trademark Credits
Windows NT®, Windows®, and MS Windows® are US
registered trademarks of Microsoft Corporation.
Disclaimer
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF
ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING,
BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE. Hewlett-Packard shall not be liable for errors
contained herein or for incidental or consequential damages in
connection with the furnishing, performance, or use of this
material.
The only warranties for HP products and services are set forth
in the express warranty statements accompanying such
products and services. Nothing herein should be construed as
constituting an additional warranty. HP shall not be liable for
technical or editorial errors or omissions contained herein.
Hewlett-Packard assumes no responsibility for the use or
reliability of its software on equipment that is not furnished by
Hewlett-Packard.
Warranty
See the warranty information included with the product.
A copy of the specific warranty terms applicable to your
Hewlett-Packard products and replacement parts can be
obtained from your HP Sales and Service Office or authorized
dealer.
Open Source Software Acknowledgement
Statement
This software incorporates open source components that are
governed by the GNU General Public License (GPL), version 2.
In accordance with this license, HP will make available a
complete, machine-readable copy of the source code
components covered by the GNU GPL upon receipt of a written
request. Send a request to:
Hewlett-Packard Company, L.P.
GNU GPL Source Code
Attn: ProCurve Networking Support
Roseville, CA 95747 USA
Safety
Before installing and operating this product, please read Safety
information on page 1-10.
Hewlett-Packard Company
8000 Foothills Boulevard
Roseville, California 95747
www.hp.com/networking/

Contents
iii
Contents
1Introduction
About this guide ...........................................................................................................1-2
Products covered...................................................................................................1-2
Important terms.....................................................................................................1-3
Conventions ...........................................................................................................1-3
Warnings and cautions ...................................................................................1-3
Management tool ............................................................................................1-3
Ports .................................................................................................................1-3
Commands and program listings ..................................................................1-4
New in this release ......................................................................................................1-4
Introducing the MSM3xx/4xx Access Points............................................................1-5
Key features............................................................................................................1-5
Controlled mode versus autonomous mode ......................................................1-6
Controlled mode .............................................................................................1-6
Autonomous mode..........................................................................................1-7
Summary ..........................................................................................................1-9
Safety information......................................................................................................1-10
Professional Installation Required .............................................................1-10
Servicing.........................................................................................................1-10
HP support ..................................................................................................................1-11
Before contacting support ...........................................................................1-11
Getting started ............................................................................................................1-11
Online documentation ...............................................................................................1-11
2Management
Management tool..........................................................................................................2-2
Starting the management tool..............................................................................2-2
Customizing management tool settings..............................................................2-3
Administrative user authentication ..............................................................2-3
Manager and Operator accounts...................................................................2-4

Contents
iv
Security policies..............................................................................................2-6
Security ............................................................................................................2-6
Web server .......................................................................................................2-7
Auto-refresh.....................................................................................................2-7
Web inactivity logout......................................................................................2-7
SNMP .............................................................................................................................2-7
Configuring SNMP settings ..................................................................................2-8
Attributes .........................................................................................................2-9
v1/v2c communities ........................................................................................2-9
v3 users ............................................................................................................2-9
Notification receivers...................................................................................2-10
Security ..........................................................................................................2-10
SOAP............................................................................................................................2-11
Configuring the SOAP server .............................................................................2-11
Server settings...............................................................................................2-11
Security ..........................................................................................................2-12
Security considerations................................................................................2-12
CLI................................................................................................................................2-12
Configuring CLI support .....................................................................................2-13
Secure shell access .......................................................................................2-13
Authenticate CLI logins using .....................................................................2-13
Serial port access..........................................................................................2-14
System time.................................................................................................................2-14
LEDs.............................................................................................................................2-15
Country........................................................................................................................2-16
3Wireless configuration
Wireless coverage.........................................................................................................3-2
Factors limiting wireless coverage......................................................................3-2
Radio power ....................................................................................................3-2
Antenna configuration....................................................................................3-2
Interference .....................................................................................................3-2
Physical characteristics of the location .......................................................3-3
Configuring overlapping wireless cells...............................................................3-3

Contents
v
Performance degradation and channel separation.....................................3-3
Selecting channels in the 2.4 GHz band .......................................................3-4
Distance between APs....................................................................................3-6
Automatic transmit power control ...............................................................3-7
Supporting 802.11n and legacy wireless clients ................................................3-7
Radio configuration .....................................................................................................3-8
Radio configuration parameters........................................................................3-16
Regulatory domain........................................................................................3-16
Operating mode.............................................................................................3-16
Wireless mode ...............................................................................................3-18
Channel width ...............................................................................................3-22
Channel extension ........................................................................................3-23
Channel ..........................................................................................................3-23
Interval ...........................................................................................................3-25
Time of day ....................................................................................................3-25
Automatic channel exclusion list................................................................3-26
Antenna selection .........................................................................................3-26
Antenna gain..................................................................................................3-27
Max clients.....................................................................................................3-27
Advanced wireless settings ................................................................................3-27
Collect statistics for wireless clients..........................................................3-27
Tx beamforming............................................................................................3-28
RTS threshold................................................................................................3-28
Spectralink VIEW..........................................................................................3-28
Tx protection.................................................................................................3-29
Guard interval................................................................................................3-29
Maximum range (ack timeout)....................................................................3-30
Distance between APs..................................................................................3-30
Beacon interval .............................................................................................3-30
Multicast Tx rate ...........................................................................................3-31
Transmit power control ...............................................................................3-31
Wireless neighborhood..............................................................................................3-32
Scanning modes...................................................................................................3-32
Monitor mode ................................................................................................3-32
Automatic channel selection .......................................................................3-33
Background scanning...................................................................................3-33

Contents
vi
Viewing scan results............................................................................................3-34
Identifying unauthorized APs.............................................................................3-34
Viewing wireless information ...................................................................................3-35
Viewing all wireless clients ................................................................................3-35
Viewing wireless client data rates .....................................................................3-37
High throughput (HT) rate traffic ...............................................................3-37
Legacy rate traffic .........................................................................................3-38
Wireless access points ........................................................................................3-39
Access point status .......................................................................................3-39
4Working with VSCs
Key concepts.................................................................................................................4-2
Stand-alone deployment .......................................................................................4-2
User authentication ........................................................................................4-2
Using more than one authentication type in a VSC....................................4-3
Deployment with a controller ..............................................................................4-3
Management with VLANs .....................................................................................4-4
Viewing and editing VSC profiles ........................................................................4-5
VSC configuration options ..........................................................................................4-5
General....................................................................................................................4-7
If Use HP MSM Controller option is enabled..............................................4-7
If Use HP MSM Controller option is disabled.............................................4-7
Virtual AP................................................................................................................4-9
WLAN ...............................................................................................................4-9
Wireless clients..............................................................................................4-11
Quality of service ..........................................................................................4-12
Allowed wireless rates .................................................................................4-13
Egress VLAN ........................................................................................................4-14
Wireless security filters.......................................................................................4-14
Default wireless security filter definitions ................................................4-15
Wireless protection..............................................................................................4-16
WPA ................................................................................................................4-17
802.1X .............................................................................................................4-18
WEP ................................................................................................................4-18
MAC-based authentication .................................................................................4-19
Location-aware ....................................................................................................4-19

Contents
vii
MAC filter .............................................................................................................4-19
IP filter ..................................................................................................................4-20
VSC data flow .............................................................................................................4-21
Stand-alone deployment .....................................................................................4-21
VSC on autonomous AP ...............................................................................4-21
AP deployed with a controller ...........................................................................4-22
VSC on controller..........................................................................................4-23
Quality of service (QoS) ............................................................................................4-23
Priority mechanisms ...........................................................................................4-24
802.1p..............................................................................................................4-24
VSC-based priority ........................................................................................4-24
Differentiated Services (DiffServ) ..............................................................4-25
TOS .................................................................................................................4-25
IP QoS.............................................................................................................4-25
Upstream DiffServ tagging .................................................................................4-25
Upstream/downstream traffic marking ............................................................4-26
Upstream traffic marking.............................................................................4-26
Downstream traffic marking .......................................................................4-26
5Network configuration
Port configuration ........................................................................................................5-2
Port configuration information .....................................................................5-2
Bridge port configuration .....................................................................................5-3
Assign IP address via......................................................................................5-3
Bridge spanning tree protocol.......................................................................5-3
Port configuration .................................................................................................5-4
VLAN.................................................................................................................5-4
Link ...................................................................................................................5-5
Wireless port configuration..................................................................................5-5
VLAN support ...............................................................................................................5-5
Defining a VLAN ....................................................................................................5-5
Creating a network profile.............................................................................5-6
Assigning a VLAN to a port............................................................................5-6
Defining an egress VLAN for a VSC.....................................................................5-7
Configuring a default VLAN .................................................................................5-8
Assigning VLANs to individual users ..................................................................5-8

Contents
viii
VLAN bridging........................................................................................................5-9
Bandwidth control .......................................................................................................5-9
Discovery protocols...................................................................................................5-10
CDP .......................................................................................................................5-10
LLDP......................................................................................................................5-10
LLDP agent ....................................................................................................5-11
LLDP over local mesh ..................................................................................5-11
LLDP settings ................................................................................................5-11
TLV settings ..........................................................................................................5-12
Basic TLVs......................................................................................................5-12
802.3 TLVs ......................................................................................................5-13
DNS ..............................................................................................................................5-14
DNS servers..........................................................................................................5-14
DNS advanced settings .......................................................................................5-14
IP routes ......................................................................................................................5-15
Configuration .......................................................................................................5-15
Active routes..................................................................................................5-15
Default routes................................................................................................5-16
IP QoS ..........................................................................................................................5-16
Configuration .......................................................................................................5-17
Settings...........................................................................................................5-17
Example................................................................................................................5-18
Create the profiles ........................................................................................5-18
Assign the profiles to a VSC ........................................................................5-19
802.1X supplicant .......................................................................................................5-20
6Security
Using an external RADIUS server..............................................................................6-2
Configuring a RADIUS client profile on the AP.................................................6-2
To define a RADIUS profile ...........................................................................6-3
Configuration settings ....................................................................................6-3
Configuring user accounts on a RADIUS server ...............................................6-5
Access Request attributes..............................................................................6-5
Access Accept attributes ...............................................................................6-7

Contents
ix
Access Reject attributes.................................................................................6-8
Access Challenge attributes ..........................................................................6-8
Accounting Request attributes......................................................................6-9
Configuring administrative accounts on a RADIUS server............................6-11
Access Request attributes............................................................................6-11
Managing certificates.................................................................................................6-12
Trusted CA certificate store ...............................................................................6-12
Installing a new CA certificate ....................................................................6-13
CA certificate import formats .....................................................................6-13
Default CA certificates .................................................................................6-14
Certificate and private key store .......................................................................6-14
Installing a new private key/public key certificate chain pair ................6-15
Default installed private key/public key certificate chains .....................6-15
Certificate usage ..................................................................................................6-16
Changing the certificate assigned to a service..........................................6-17
About certificate warnings .................................................................................6-17
MAC lockout ...............................................................................................................6-17
7Local mesh
Introduction ..................................................................................................................7-2
Local mesh link types ..................................................................................................7-3
Static local mesh links ..........................................................................................7-3
Terminology.....................................................................................................7-3
Configuration guidelines................................................................................7-3
Dynamic local mesh links.....................................................................................7-4
Terminology.....................................................................................................7-4
Operational modes..........................................................................................7-5
Node discovery................................................................................................7-5
Operating channel...........................................................................................7-6
Configuration guidelines................................................................................7-6
Quality of service .........................................................................................................7-6
Radio configuration .....................................................................................................7-7
Simultaneous AP and local mesh support (single radio)...........................7-7
Simultaneous AP and local mesh support (dual radios)............................7-7
Using 802.11a/n for local mesh......................................................................7-7

Contents
x
Maximum range (ack timeout)......................................................................7-7
LLDP ..............................................................................................................................7-9
Local mesh profiles......................................................................................................7-9
Configuring a local mesh profile .......................................................................7-10
Settings...........................................................................................................7-11
AES/CCMP .....................................................................................................7-11
Policy manager..............................................................................................7-11
Addressing .....................................................................................................7-12
Sample local mesh deployments ..............................................................................7-16
RF extension ........................................................................................................7-16
Building-to-building connections ......................................................................7-17
Dynamic networks ..............................................................................................7-18
8Maintenance
Config file management...............................................................................................8-2
Manual configuration file management ..............................................................8-2
Backup configuration.....................................................................................8-2
Reset configuration ........................................................................................8-3
Restore configuration.....................................................................................8-3
Scheduled operations............................................................................................8-3
Software updates..........................................................................................................8-4
Performing an immediate software update........................................................8-5
Performing a scheduled update...........................................................................8-5
Licenses .........................................................................................................................8-5
Factory installed licenses ..............................................................................8-6
User installed licenses....................................................................................8-6
License management ......................................................................................8-6
Factory reset considerations ...............................................................................8-7
Generating and installing a feature license ........................................................8-7
Generating a license .......................................................................................8-7
Installing a license ..........................................................................................8-8

Contents
xi
AConsole ports
Console port connector specifications..................................................................... A-2
MSM335 and MSM422 console port ................................................................... A-2
MSM410, E-MSMS430, E-MSM460, E-MSM466 console port .......................... A-2
BRegulatory information
Notice for U.S.A. ................................................................................................... B-2
Manufacturer's FCC Declaration of Conformity Statement..................... B-2
FCC Class B statement.................................................................................. B-2
FCC Class A statement.................................................................................. B-3
Exposure to Radio Frequency Radiation.................................................... B-3
Notice for Canada................................................................................................. B-3
Notice for the European Community................................................................. B-4
Disposal of Waste Equipment by Users in Private Household in the
European Union ............................................................................................. B-5
Supported External Antennas............................................................................. B-5
Notice for Brazil, Aviso aos usuários no Brasil ................................................ B-6
Notice for Taiwan ................................................................................................. B-6
DOCs for the European Community .................................................................. B-6
CConnecting external antennas
Introduction ................................................................................................................. C-2
802.11n MIMO antennas for the E-MSM466 ...................................................... C-2
802.11a/b/g antennas for MSM APs .................................................................... C-3
Optional 802.11a/b/g antennas for MSM APs.............................................. C-4
Radio power-level setting example ........................................................................... C-5
DResetting to factory defaults
Read this before resetting to factory defaults .........................................................D-2
Resetting to factory defaults...................................................................................... D-2
Using the reset button.......................................................................................... D-2
Using the management tool................................................................................. D-2
Factory defaulting ruggedized products ..................................................................D-4

Contents
xii

Chapter 1: Introduction
1
Introduction
Contents
About this guide ...........................................................................................................1-2
Products covered...................................................................................................1-2
Important terms.....................................................................................................1-3
Conventions ...........................................................................................................1-3
New in this release.......................................................................................................1-4
Introducing the MSM3xx/4xx Access Points............................................................1-5
Key features............................................................................................................1-5
Controlled mode versus autonomous mode ......................................................1-6
Safety information......................................................................................................1-10
HP support ..................................................................................................................1-11
Getting started ............................................................................................................1-11
Online documentation ...............................................................................................1-11

Introduction
About this guide
1-2
About this guide
This guide explains how to install, configure, and operate HP MSM3xx/MSM4xx Access
Points in autonomous mode. Basic information on operating in controlled mode is also
provided. For detailed controlled-mode instructions, see the MSM7xx Controllers
Management and Configuration Guide.
Products covered
This guide provides autonomous-mode information for the following MSM3xx and MSM4xx
Access Points (“WW” identifies worldwide versions for the rest of the world):
The product models in the table immediately above include alternative product names in
parenthesis. For example, the MSM422 is also known as the E-MSM422. Both names refer to
the same product. Except for E-MSM430, E-MSM460, and E-MSM466, the original MSM
product names (without “E-”) are used throughout this document.
Model WW Americas Japan Israel
E-MSM430 J9651A J9650A J9652A J9653A
E-MSM460 J9591A J9590A J9589A J9618A
E-MSM466 J9622A J9621A J9620A
Model WW USA Japan
MSM310 (E-MSM310) J9379A/B J9374A/B J9524A/B
MSM310-R (E-MSM310-R) J9383A/B J9380A/B
MSM320 (E-MSM320) J9364A/B J9360A/B J9527A/B
MSM320-R (E-MSM320-R) J9368A/B J9365A/B J9528A/B
MSM325 (E-MSM325) J9373A/B J9369A/B
MSM335 (E-MSM335) J9357A/B J9356A/B
MSM410 (E-MSM410) J9427A/B J9426A/B J9529A/B
MSM422 (E-MSM422) J9359A/B J9358A/B J9530A/B

Introduction
About this guide
1-3
Important terms
The following terms are used in this guide.
Conventions
Warnings and cautions
Do not proceed beyond a WARNING or CAUTION notice until you fully understand the
hazardous conditions and have taken appropriate steps.
Warning Identifies a hazard that can cause physical injury or death.
Caution Identifies a hazard that can cause the loss of data or configuration information, create a non-
compliant condition, or hardware damage.
Management tool
This guide uses specific syntax when directing you to interact with the management tool user
interface. Refer to the following image for identification of key user-interface elements and
then the table below for example directions:
Ports
If the AP you are configuring only has a single port, this manual refers to it as Port 1. Ignore
references to Port 2.
Term Description
AP or MSM AP Refers to any HP MSM3xx or MSM4xx Access Point.
Controller Refers to any HP MSM7xx Controller, including both Access Controller
and Mobility Controller variants.
Example directions in this guide What to do in the user interface
Select Wireless > Local Mesh. On the main menu select Wireless and then
select Local mesh on the sub-menu.
For Password specify secret22. In the field Password enter the text secret22
exactly as shown.

Introduction
New in this release
1-4
Commands and program listings
Monospaced text identifies commands and program listings as follows:
New in this release
The following new features and enhancements have been added in release 5.5:
Example Description
use-access-list Command name. Specify it as shown.
ip_address Items in italics are parameters for which you must supply
a value.
ssl-certificate=URL [%s] Items enclosed in square brackets are optional. You can
either include them or not. Do not include the brackets.
In this example you can either include the “%s” or omit it.
[ONE | TWO] Items separated by a vertical line indicate a choice.
Specify only one of the items. Do not include the vertical
line.
New feature or enhancement For information see...
New access points This release supports the following new 802.11n
dual-radio access points: E-MSM430, E-MSM460,
and E-MSM466. For for more information on these
APs, see:
E-MSM430, E-MSM460, and E-MSM466
802.11n Access Points Quickstart
Radio configuration on page 3-8
802.11n MIMO antennas for the E-MSM466
on page C-2
Broadcast filtering Broadcast filtering on page 4-10
Band steering Band steering on page 4-10
Beamforming Tx beamforming on page 3-28
Transmission protection Tx protection on page 3-29
Identify RADIUS server by host name Primary/Secondary RADIUS server on page 6-5
LEAP support This release supports LEAP (with WEP, TKIP, or
WPA2 keys) when using an external RADIUS
server to validate user login credentials. Support is
automatic. No configuration is required.

Introduction
Introducing the MSM3xx/4xx Access Points
1-5
Introducing the MSM3xx/4xx Access Points
The HP MSM APs bring intelligence to the network edge, providing scalable, seamless
wireless access anywhere, anytime. They dispense multiple network services, enforce robust
security and deliver high performance client access, unlike thin or lite access points. An
integral component of HP Multi-Service Mobility solutions, MSM APs support a plug-and-play
automatic configuration and ongoing central control by HP MSM Mobility and Access
Controllers for the highest degree of configurability and ease of management.
Key features
Wireless
Single-, dual-, and tri-radios
802.11n and 802.11a/b/g
Per-radio software-selectable configuration of the 2.4 GHz and 5 GHz frequency bands
Plenum-rated or NEMA-rated enclosures for indoor and outdoor wireless coverage
Self-healing, self-optimizing local mesh extends network availability to areas without an
Ethernet infrastructure
802.3af Power over Ethernet or external power cord
Management
Centrally controlled, configured and updated with a Mobility or Access Controller
Auto-selection of RF channel and transmit power
Per-client event log of association, security, and DHCP activities for easy diagnosis
Packet capture on a VSC or LAN interface
In autonomous mode, SNMP, CLI, and Web-based management interfaces for integration
with HP Mobility Manager or third-party, standards-based network management systems
LLDP support, providing the ability to discover and exchange information with other
network devices
Security
Enforcement of client authorization based on user credentials (802.1X/EAP), hardware
identifiers (MAC address, WEP key), and HTML login
Hardware-assisted encryption using WPA2/AES (IEEE 802.11i), WPA/RC4 and/or WEP
Dedicated RF sensor and dedicated client access eliminate time-slicing on the MSM325
and MSM335.
Layer-2 client isolation per VSC
802.1X supplicant for connection to a secure switch port
Block access based on client station MAC addresses

Introduction
Introducing the MSM3xx/4xx Access Points
1-6
Wireless Network Design Process
Protocol filtering per VSC to deny unwanted traffic
IP filtering per-user and per-VSC to forward traffic to a pre-defined location
Management communication through SSH/SSL, IPsec, and digital certificates
Cable-lock compatible for physical security on the MSM335, MSM410, MSM422,
E-MSM430, E-MSM460, and E-MSM466
Controlled-mode security to prevent data from being recovered from stolen APs
Controlled mode versus autonomous mode
MSM APs can operate in one of two modes: controlled mode (default) or autonomous mode.
Note This guide explains how to install, configure, and operate HP MSM3xx/MSM4xx Access
Points in autonomous mode. For detailed controlled-mode instructions, see the MSM7xx
Controllers Management and Configuration Guide.
Controlled mode
When operating in controlled mode, APs are managed by an MSM7xx Controller (controller).
On startup, the AP must establish a management tunnel with a controller before it becomes
fully operational. Discovery of the controller is automatic if default settings are used on the
AP and the controller, and both devices are on the same subnet.
The controller manages the AP and provides all configuration settings, making it easy to
enforce consistent security and QoS policies, and automate AP configuration to minimize
deployment and operation costs.