3Com 6.0.4.6 manual

Part No. 10016 430 Rev . AA Published Nove mber 2007 W IR ELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES Related Documentation Please use these notes in c onjunction with the following: ■ Wireless LAN Swi tch and Controller Quick Start Guide ■ Wireless LAN Switch and Controller Hardware Installation Guide ■ Wireless L[...]

2 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES ■ RF Load Balancing ■ Logout for W eb Authentication ■ Mobility Domain WX Seed Re dundancy ■ Local Switching (AP3850 only) ■ Mesh Services (AP3850 only) ■ Wireless Bridging (AP3850 only) ■ Enforceable B eacon Data Rate C ontrol ■ Password Management ■ Lo[...]

Points to Note When Using the WXR100, WX1200, WX4400, or WX2200 3 backup, r efer to the section titled “Backing Up and Restoring the System” on page 613 of the MSS con- figuration guide. For details on the procedur e for 3WXM, refer to th e section titled “Upg rading 3WXM” of the 3WXM Re ference Manual. 2 Upgrade 3WXM b efore upgr ading the[...]

4 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES Client and AAA Best Practices Follow these be st-practice re commendations during configuration and implement ation to avoid or solve issues you might experience. Get Clients and AAA Working First The greatest majority of installation issues are r elated to clients and AA[...]

Points to Note When Using the WXR100, WX1200, WX4400, or WX2200 5 Wireless NICs Most wireless NICs available now support 802. 1X authentication. The following table lists the NICs that have been used successfully with MSS. The majority were tested using recently available drivers usin g the Microsoft native 802.1X clie nt and a Microsoft IAS RADIUS[...]

6 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES Cisco Air onet 350 XP Pass Pass Not Te s t e d Not Te s t e d Not Te s t e d Dell T rueMobile 1150 † A00 7.43.0.9 XP Fail Fail NA NA Pass Dell T rueMobile 1150 ‡ XP Pass Fail Not Te s t e d NA Not Te s t e d Dell T rueMobile 1300 XP Pass Not Te s t e d Not Te s t e d [...]

Points to Note When Using the WXR100, WX1200, WX4400, or WX2200 7 Driver Dependent Be havior Some clients prefer a beaconed clear SSID to their configur ed SSIDs. If you configure MSS to beacon a clear SSID, some client adap ters prefer this beaconed SSID over the SSIDs they are configured to use. Conversely , some adapters can associate only with [...]

8 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES Windows XP Windows XP is a popular platform for wireless clients because of its native support of 802.1X authentication and simplified configuration of wireless networks. If you choose to use the 802.1X client built-in to W indows XP , please note the following: ■ Micro[...]

Points to Note When Using the WXR100, WX1200, WX4400, or WX2200 9 Windows 2000 Many en terprises have a larg e installed base of Windows 2000 laptops, making this a common choice of platform. Windows 2000 Service Pack 4 includes a na tive 802.1X clie nt. If you choose to use the 802.1X client built -in to W indows 2000, please note the following: ?[...]

10 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES authenticates. Y o u must contact Microsoft techni- cal support for this hotfix. It is not available from their website. For more inform ation on computer authentication, see “Compute r Authenticatio n”. ■ If you experien ce a delay in receiving yo ur DHCP IP addre[...]

Points to Note When Using the WXR100, WX1200, WX4400, or WX2200 11 Configuring computer aut hentication on the client is simple, though it r equire s the use of the Micro soft 802.1X client built-in to Windows XP and Windows 2000. Keep the followi ng information in mind when configuring computer authent ication on Microsoft clients: ■ T o enable [...]

12 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES Computer authentication al s o re q u i res s pe c i fi c co n - figuration consider ations on the WX sw itch: ■ The username of a computer authentication connection will be in the form of host/ fully-qualified-domain-name, for example host/bob-laptop.3Com.com or host/[...]

Points to Note When Using the WXR100, WX1200, WX4400, or WX2200 13 ■ Windows 2000 with Service Pack 4 ■ Cisco ACS 3. 2 or later is re quired to supp ort PEAP-MS-CHAP-V2 WP A WP A compatibility testing was conducted with a vari- ety of NICs. See “W ireless NICs” for complete details of the results . If you choose to use WP A to secure your w[...]

14 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES If you requir e the same MAC user to be able to con- nect to mor e than one SS ID, you can use encryption assignment to enfor ce the type of encryption a user or group must have to access t he network . When you assign the Encryption- T ype attribut e to a user or group,[...]

Points to Note When Using the WXR100, WX1200, WX4400, or WX2200 15 ■ Access to 3WXM. T o secure access, configure user accounts within 3WXM. ■ Access to the 3WXM m onitoring service. T o secure access, configure user a ccounts within th e moni- toring ser vice. ■ Do not use pa sswords th at are easy to guess, such as vehicle registration plat[...]

16 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES 3WXM By default, access to 3WX M and the 3WX M monito r- ing service do not r equire passwor ds. T o secure access, configure user accoun ts within each in stance of 3WXM and the monitori ng service. The monitoring service uses a signed certificate for authentication. Th[...]

Points to Note When Using the WXR100, WX1200, WX4400, or WX2200 17 Distributed MAP Best Pr actice When Us ing STP A Distributed MAP is a le af device. Y ou nee d not enable STP on the port direct ly connected to the MAP . If Spanning T ree Protocol (S TP) is enabled on the port that is directly connected to a Distributed MAP , yo u might need to ch[...]

18 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES Rogue Detection Active Scan Interval Is Longer During a SpectraLink SVP Call. (23317) The active scan feature can be used during SVP calls. However , when a call is acti ve, the interval at which active scan goe s off-channel to look for rogues in- creases fr om once a s[...]

System Parameter Support 19 Network Parameter Supported V alue Forwar ding databas e entries WX4400: 16383 WX2200: 16383 WX1200: 8192 WXR100: 8192 Statically co nfigured VLANs 100 Virtual po rts (sum of al l statica lly con- figured VLAN physical port member- ships) 256 Spanning t rees (STP/PVST + instances ) 64 ACLs and Locati on Policie s ACEs pe[...]

20 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES Known Problems System Configuration Issues Adding a static VLAN with the same name as a VLAN whose traff ic is being tunneled through the switch can cause the switch to re start. (18367) MSS can tunnel traff ic for a VLAN through a WX switch that does not have that VLAN [...]

Known Problems 21 Static IP settings do not work on the 8x50 or AP7250 Access Po ints. (28529) The configuration of static settings includin g VLAN tag, WX IP , WX n ame, AP IP and AP IP mask are not supported on the AP87 50, AP8250, or AP7250. Switching and Port Issues Port Mirroring is not active after the switch is reboot ed. (29684) Port mirro [...]

22 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES Mesh Issues The Ethernet port is not brought up on the bridge link if it was not up when the mesh link is established . (46037) If the mesh AP is brough t up without the Ethernet port connect ed, after the mesh link is established, the bridge link will not come up and no[...]

Known Problems 23 WebView Issu es Unless otherwise noted, the workar ound for Web- View issues is to use the CLI or 3WXM. WebView does not display more than 32 service pr ofiles. (18374) WebView allows configuration of duplicate SSID names in the same service pr ofile. (18375) In WebView, self-signed certificat e for network user is not accepted wi[...]

24 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES The pass-through and local AAA methods ar e mutually exclusive. Even if a serv er gr oup named local exists, MSS does not use the gr oup. In either case, the EAP session fails and the 802.11 session is deauthenticated when the client responds to the first identity reques[...]

Known Problems 25 ACL Issues ACE names that begin with CLI keywor ds are not supported. (17521) When configuring an access control entry (ACE), if the name you specify for the ACE begins with a word that is also a keyword used by the CLI, the CLI r ejects the ACE name. In the follo wing e xamples, the ACE names that begin with port and vlan ar e re[...]

26 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES Local Switching Issues In some instances, an error message cont aining “SSR setup failed.mac ” and a multicast address can be ignore d. (44605) Windows VIST A Issues Windows Vista clients cannot connect to “hidden” SSIDs. In its default configuration, Windows Vis[...]

Upgrading MSS 27 If you choose not to pur chase a signed certificate from a third-party CA, you ma y choose to install the self-signed certificate into the trusted certificate store on every client that uses Web-Portal. IE 7 must be run with administrative p rivileges to perform this change, and it must be performed on each client who will use We b[...]

28 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES during the upgrade, you can resto re your switch to its previous state. Use this command to back up the switch’ s files: backup system [ tftp:// ip-addr / ] filename [ all | critical ] T o restore a switch that ha s been backed up, use the following command: restore sy[...]

Upgrading MSS 29 switch was restarted. For example, if the switch booted from boot partition 1, copy the new imag e into boot partition 0. T o see boot partition informa- tion, type th e display boot command . WX1200# save config success: configuration saved. WX1200# back up syste m tft p://10 .1.1. 107/sy sa_ba k success: sent 28263 bytes in 0.324[...]

30 W IRELESS LAN S WITCH AND C ONTR OLLER MSS V ERSION 6.0.4.6 R ELEASE N OTES switch, enter the save config command as soon the switch finishes restarting. For complete syntax informatio n about the new com- mands and options, see the Wireless Switch Manager Command Reference . Installing Upgrade Activation Keys on a WX4400 or WX2200 The WX4400 an[...]