3Com® AirConnect® 9550 11n 2.4+5GHz PoE Access Point 3Com® AirConnect® 9150 11n 2.4GHz PoE Access Point User Guide www.3com.com Part number: 10016853 USER GUIDE,AIRCONNECT 9550/9150 11N 2.
Com Corporation 350 Campus Drive Marlborough, MA 01752-3064 Copyright © 2008, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation.
ENVIRONMENTAL STATEMENT It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we are committed to: Establishing environmental performance standards that comply with national legislation and regulations. Conserving energy, materials and natural resources in all operations. Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental standards. Maximizing the recyclable and reusable content of all products.
INTRODUCTION Key Product Features ......................................................................... 7 Security ....................................................................................... 7 Performance and Reliability.......................................................... 8 Manageability.............................................................................. 8 Wireless Network Standards ........................................................ 9 802.11a............................
Event Log List............................................................................. System Configuration ...................................................................... Setup Wizard ............................................................................. System Properties....................................................................... Access Point mode ............................................................... Wireless Bridge Mode..............................................
Profile (SSID) Isolation .......................................................... WDS Link Settings ..................................................................... WDS Security Settings................................................................ Wireless Advanced Settings ....................................................... Transmit Power .................................................................... Beacon Interval ....................................................................
Syslog Function................................................................................ System Log ................................................................................ Syslog Server.............................................................................. Syslog Port ................................................................................. Syslog Level................................................................................ Management ..................................
OBTAINING SUPPORT FOR YOUR 3COM PRODUCT Telephone Technical Support and Repair .......................................... 68 END-USER LICENSE AGREEMENT APPENDIX Antennas Used per Mode ................................................................ 72 Console Cable Pin-out .....................................................................
1 INTRODUCTION The 3Com AirConnect 9550 11n 2.4+5GHz PoE Access Point and the 3Com AirConnect 9150 11n 2.4GHz PoE Access Point are high performance access points that allow you to join isolated wired Ethernet networks into a unified wireless local area network (WLAN). The Access Point (AP) supports Wi-Fi Protected Access security standards to provide a higher level of security for network data and communications. The AP is also fully compatible with IEEE 802.11a (the 9550 AP only), 802.11b, 802.
8 Key Product Features 3Com strengthens this basic security mechanism with additional security features, including MAC address access control lists, IEEE 802.1x per-port user authentication with RADIUS server authentication support, Temporal Key Integrity Protocol (TKIP), Advanced Encryption Standard (AES), Wireless Protected Access (WPA) and Extensible Authentication Protocol (EAP) support: EAP-MD5, EAP-TLS, EAP-TTLS, and PEAP.
Key Product Features 9 With Power over Ethernet (PoE) support, the same Category 5 cable that connects your access point to the data network also provides its power. A single cable installation dramatically improves your choice of mounting configurations because you no longer need to consider AC power outlet locations. PoE support makes it easier than ever to overcome installation problems with difficult-to-wire or hard-to-reach locations.
10 Key Product Features ■ Transferring large files like computer-aided design files, preprint publishing documents or graphics files, such as MRI scans for medical applications that demand additional bandwidth. ■ Supporting a dense user base confined to a small coverage area. Because 802.11a has a greater number of non-overlapping channels, you can pack more wireless devices in a tighter space. 802.11b/g 802.11b, 802.11g and 802.11n all operate in the 2.4GHz band. 802.
Key Product Features ■ 11 Providing access to hot spots in public spaces such as coffee shops or university cafeterias. IEEE 802.3af The IEEE 802.3af-2003 Power over Ethernet (PoE) standard defines terminology to describe a port that acts as a power source (PSE) to a powered device (PD). The IEEE 802.3af standard states that power may be delivered by an end-point PSE, using either the active data wires of an Ethernet port or the spare wires, to a powered device.
12 Key Product Features Installing Your 3com Wireless Access Point To set up and install your 3Com Wireless Access Point, please refer to the 3Com® AirConnect® 9550 11n 2.4+5GHz PoE Access Point 3CRWE955075 / WL-605 3Com® AirConnect® 9150 11n 2.4GHz PoE Access Point 3CRWE915075 / WL-604 Quick Start Guide (Part Number 10016854).
Networks with a DHCP Server 2 13 CONFIGURING THE WIRELESS ACCESS POINT If the default AP configuration does not meet your network requirements, or if you want to customize the settings for your own network, you can use these tools to change the configuration: ■ Launch the 3Com Wireless Infrastructure Device Manager (Widman) utility ■ Directly connect to the device through its Ethernet port or console port Networks with a DHCP Server If your network has a DHCP server, an IP address is automatically a
14 Networks without a DHCP Server After you determine the AP’s IP address, you can enter that IP address into a web browser on a computer on the same subnet to view the Access Point’s system status or change its configuration. Networks without a DHCP Server If your network does not have a DHCP server, the Access Point uses a factory assigned IP address (169.254.2.111). You can use that IP address to configure the Access Point, or you can assign a new IP address to the Access Point.
Networks without a DHCP Server 15 Launch the 3Com Wireless Infrastructure Device Manager (Widman) utility 1 Turn on the computer. 2 Insert the 3Com Installation CD into the CD-ROM drive. The CD will Autorun. If it does not Autorun, you can start the setup menu from the Windows Start menu. For example: Start > Run > d\:setup.exe. 3 In the menu click Tools and Utilities. 4 In the next screen, click the software you want to install. 5 Follow the on screen instructions to complete the installation.
16 Networks without a DHCP Server If the device is working correctly the following screen should be seen.
Networks without a DHCP Server Click on the Properties button to see the following screen: Figure 2 Wireless Infrastructure Device Properties 17
18 Networks without a DHCP Server Directly connect to the device through its Ethernet port or console port. Follow the instructions below to log into the AP Configuration screen: 1 Load a web browser and enter http://169.254.2.111 2 The Log On screen appears Figure 3 Logon Screen To log on to the Web interface: 1 Username, type admin (case sensitive) 2 Password, type password 3 Click Log On.
System Status 19 First Time Only After you have logged on for the first time you will be asked to select your country from the drop down menu. Figure 4 Country Selection System Status The Web interface has been designed to enable you to easily perform advanced configuration tasks and view information about the AP. System Summary After you click Log On from the Log On Screen, you’ll see the system status page on the screen.
20 System Status The system summary page shows all the configuration information about your AP, as shown in Figure 5.
System Status 21 Wireless Station List Through the Wireless Station List page, you can easily identify the adjacent wireless stations. It will automatically observe the adjacent wireless station’s ID (if specified), MAC address, SSID and current status.
22 System Status Event Log List The event log list stores a record of all the events within this designated WLAN.
System Configuration 23 System Configuration In this section, you will learn how to configure the basic functions of your AP. Setup Wizard The Setup Wizard will walk you through setting up the AP. To start the Setup Wizard, click Setup Wizard. 1 Figure 8 allows you to set up the following information: ■ SSID (Service Set Identifier) – This is the name of wireless network. Input 1-32 characters ■ Wireless Mode – Choose the required network mode from the drop down menu.
24 System Configuration Figure 8 2.4G Radio Wireless Network 2 Click Next to continue the configuration or click Cancel to start again. 3 Figure 9 allows you to set up the following information: ■ IP Network Setting – Check to either obtain an IP address via DHCP or specify an IP Address manually. ■ IP Address – Enter the IP address that you want to assign. ■ IP Subnet Mask – Enter your networks subnet address.
System Configuration 25 Figure 9 IP Settings 4 Figure 10 allows you choose the security settings.
26 System Configuration Figure 10 2.4G Wireless Security Settings 5 Click Cancel to close without saving, click Finish to save the settings, or click Back to return to Figure 9. System Properties The System properties page allows you to define Device name, location, operation modes and Load Type.
System Configuration 27 Access Point mode A Wireless LAN data transceiver that uses radio waves to connect a wired network with wireless station. Wireless Bridge Mode A wireless bridge connects two separate networks operating on the 802.11 standard.
28 System Configuration IP Settings This setting must match the network’s method of IP address assignment. Choose Dynamic Host Configuration Protocol (DHCP) or Static IP. With DHCP, IP addresses are assigned for predetermined periods of time. Choose Static IP if your network does not have an automatic system for IP address assignment.
System Configuration 29 Wireless Network The Wireless Access Point supports Multiple SSIDs which allows it to act as multiple APs appearing in a Wireless LAN network. You can configure up to 4 SSIDs on the device.
30 System Configuration Wireless Mode You can select your desired wireless operating mode from the drop-down box. Standard Channel Select the channel for your wireless LAN in Standard Channel block. The default setting is SmartSelect. It selects the channel which provides the best transmission quality. The available frequencies vary depending on which wireless mode you select. Current Profiles A maximum of four profiles can be configured. Check the Enable button to activate a profile.
System Configuration Figure 14 SSID Profile Settings 31
32 System Configuration SSID Service Set Identifier. This is the assigned name for a wireless Wi-Fi network. Stations must use this unique identifier to communicate with an Access Point. The SSID can be any alphanumeric entry up to a maximum of 32 characters. BSSID Basic Service Set Identifier. This is the assigned MAC address of the station in the access point. This unique identifier is in Hex format.
System Configuration 33 Security There are four levels of security available and all have differing properties: WEP Wired Equivalent Privacy data encryption provides data security. WEP Share Key authentication and WEP data encryption will block all but the most determined hacker.
34 System Configuration 1 To add WEP, from the drop down list choose open-system or shared key authentication. 2 Select the desired input method (HEX or ASCII) 3 From the drop down list choose from 40/64, 104/128, 128/152 key lengths. WPA Only Wi-Fi Protected Access was constructed to provide improved data encryption, (which was weak in WEP), and to provide user authentication.
System Configuration 35 Only allows WPA clients to connect to the VAP. You can choose TKIP or AES as the encryption method The Group key update interval is configurable; the default value is 1800 seconds You can choose personal mode (PSK) or enterprise mode (802.1X) authentication The default is PSK. If you choose PSK, you will need to enter a pass phrase of 8-63 ASCII characters or 64 hexadecimal digits. If you choose 802.1X, you will need access to a RADIUS server, port and secret.
36 System Configuration WPA2-Mixed Only allows WPA and WPA2 clients to connect to the VAP. You can choose TKIP or AES as the encryption method. The Group key update interval is configurable, with a default value of 1800 seconds. You can choose personal mode (PSK) or enterprise mode (802.1X) authentication. The default setting is PSK. If you choose PSK, you will need to enter a pass phrase of 8-63 ASCII characters or 64 hexadecimal digits. If you choose 802.
System Configuration 37 Figure 17 WDS Link Settings Supports up to 8 point to multipoint WDS links. Check Enable WDS and then Enable on the MAC addresses want to link to. Enter the MAC addresses of any other APs you want to link to.
38 System Configuration WDS Security Settings Figure 18 WDS Security Settings Choose the required security level from: ■ None ■ WEP ■ WPA-PSK (TKIP) ■ WPA-PSK (AES) If using WEP security, enter the WEP key. If using WPA, enter the pass phrase.
System Configuration 39 Wireless Advanced Settings To configure advanced wireless settings, click Wireless Advanced Settings. The toolbar and Wireless Advanced Settings menu appears. Figure 19 Wireless Advanced Settings Transmit Power Choose one of the following power levels: Full, Half (-3dB), Quarter (-6dB), Eighth (-9dB) or Minimum. The default is Full.
40 System Configuration Beacon Interval Choose an interval time between 25ms and 1000ms for each beacon transmission. The default is 100ms. Data Beacon Rate The Delivery Traffic Indication Message (DTIM). Specify the data beacon rate between 1 and 255. The default is 1. Association Timeout Set the value for the maximum time allowed for a wireless association to be established. When this time is exceeded, the connection is lost. The default value is 5 mins.
System Configuration 41 802.11d support 802.1d allows the device to communicate in areas where the 802.11 standard is not allowed. It adds features and restrictions to ensure compliance. Distance The maximum distance between client or AP and device. The default value is 1km. Antenna Type If you would like to use external antennas (to replace the original internal antennas), check External Antenna.
42 System Configuration QoS This section provides the administrator with the Quality of Service (QoS) data. The QoS setting is only available in AP Mode. The QoS Setting should be modified with caution because radio behavior is affected. These parameters can be modified when QoS service is Enabled.
Service 43 Service Management VLAN If you reconfigure the Management VLAN ID, you may lose connectivity to the access point. Verify that the switch and DHCP server can support the reconfigured VLAN ID, and then re-connect to the new IP address.
44 Service IAPP Inter-Access Point Protocol (IAPP) Figure 21 IAPP 802.11F (IAPP) Support Choose either Enable or Disable IAPP allows multiple access points to communicate and pass location information about their associated stations. If you enable 802.11F support you should manually add BSSID/IP mapping: 1 Enter the BSSID and IP addresses of the AP.
Service 2 45 Click Add Only stations roaming from one of the listed APs to this AP are allowed to re-associate with this AP. Others will be requested to go through the full association process.
46 Service Ack-Policy When the Ack-Policy is checked. The device will not send ACK frames. The default value is disabled. Setting Min Contention Window Max Contention Window Fixed Slot Time Transmit Opportunity Limit Description For each access category, enter the minimum contention window value. Channel access is prioritized by assigning smaller contention window values to a higher priority traffic class.
Service Setting Admission Control Description Note: In this release, clients are blocked from using an access category when they select Enable for Admission Control. The Admission Control check box controls client use of the access categories. When you enable admission control for an access category, clients associated to the access point must complete the WMM admission control procedure before they can use that access category.
48 Service SNTP Simple Network Time Protocol (SNTP) allows the administrator to configure the network time settings.
Service 49 The following settings can be configured. SNTP client enable/disable Set Time Timezone selection Daylight Saving Primary and Secondary SNTP server/port setting Click enable or disable. If it is disabled, the user has to input time manually. If it is enabled, the device will try to fetch time from configured SNTP servers. Specify Year, Month, Day, Hour, and Minute. These fields are grayed out and un-configurable if SNTP is enabled.
50 Syslog Function Syslog Function In the event of an error the device can send a message to a specified server. Figure 24 SysLog System Log Click either Enable or Disable to activate or deactivate the system log function.
Syslog Function 51 Syslog Server Enter the IP address of the server that receives the error information. The default IP address is 0.0.0.0 Syslog Port Enter the port number that your server can be accessed by. The default port number is 514. Syslog Level Choose from the following levels, listed in order of severity of the detail to be recorded. The default setting is Error.
52 Management Management This section describes how to use the management and information features of your Wireless Access Point. Administration In this section, you can change the user administrator name and password. The default Administrator name is admin (case sensitive), and password is password. Click Apply to save changes.
Management 53 SNMP Figure 26 SNMP The Simple Network Management Protocol (SNMP) administrative functions are changed through this screen.
54 Management MAC Filtering Figure 27 Access Control List MAC filtering allows the administrator to filter MAC addresses of network cards that can access the access point. On this screen you can: ■ Enable/Disable filter ■ Change filter rule to allow or deny ■ Add/delete MAC addresses in the filter table This function is only available in AP mode.
Management 55 Rogue AP Detection Figure 28 Rogue AP Detection Unspecified Access Points may try to access the network through this device. Rogue AP detection can prevent this. ■ Change Rogue AP definition. ■ Legal AP list - The list of allowed access points. ■ Detect rogue AP – All channels are scanned and Access Points without security, or not in legal AP, are considered rogue. This function is only available in AP mode.
56 Management Backup/ Restore Settings This screen allows the user to backup the Access Point’s current settings and restore back to the factory default. Once you have the Access Point working properly you should backup the information to have it available if something goes wrong.
Management 57 Firmware Auto Upgrade The Wireless Access Point can auto upgrade the firmware if there is a newer version available. If you enable the Auto Upgrade function, the Wireless Access Point will automatically check for an updated version of firmware in the assigned FTP server for each time interval assigned. Remember to insert the correct FTP server IP address, username, password, and path to the FTP server.
58 Management Firmware Manual Upgrade On this screen, you can see the current firmware version of your AP. You can also manually upgrade your firmware by entering the path to your new firmware file. Figure 31 Firmware Upgrade Once you have chosen the upgrade file click Upgrade.
Management Figure 32 Result 59
60 Management Rebooting You can reboot the Wireless access point from the browser interface. After you click reboot, the following window displays. Figure 33 Reboot After rebooting, the login page automatically displays.
Connecting Through the Com Port 61 Connecting Through the Com Port Instead of using an IP address to configure the Access Point a Null modem cable, connected to the RJ-45 Console Port, can be used. In your terminal settings ensure that the following configuration is met: ■ Bits per Second – 15200 ■ Data Bits – 8 ■ Parity – None ■ Stop bits – 1 ■ Flow Control - none Once connected enter the user name and password.
62 Restoring Factory Settings Restoring Factory Settings The Access Point can be reset to the default factory settings either through the web browser (see “Backup/ Restore Settings” on page 56) or manually. To restore the settings manually, insert a pointed object (such as the end of a straightened paper clip) into the reset hole on the side of the Access Point, and hold for five seconds.
Diagnosing Problems A 63 TROUBLESHOOTING Diagnosing Problems If you have difficulty with the Access point, try the following solutions. Symptom After you change the IP address, restore a backup configuration, or reset the Access Point to factory defaults, the Configuration Management System stops responding and you cannot continue configuring the Access point. If you change the IP address and click Apply, you cannot continue to configure the device using the old IP address.
64 Diagnosing Problems 2 Return to the 3Com Wireless Infrastructure Device Manager and click Refresh. 3 Select the device and click Configure to start a new configuration session and set its IP address. Symptom The Wireless Network Tree does not appear in the 3Com Wireless Infrastructure Device Manager window. Solution Verify that you are using the correct network adapter. In the device manager window, click Choose NIC. Select the network adapter for the network you want to scan, and click OK.
Diagnosing Problems 4 65 Make sure the subnet address matches that of the computer. Symptom Two Access Points cannot communicate in ad-hoc mode. Solution Adjust the positions of the Access Points to improve reception. To ensure correct operation in ad-hoc mode, the settings on the two Access Points must match exactly.
66 Diagnosing Problems should also obtain its IP settings from the DHCP server, make sure this is configured properly on the IP Network page and applied just before ending the session. Symptom Disconnecting the Access Point Solution To disconnect the Access Point: CAUTION: Disconnecting the Access Point ends the network association. To avoid possible data loss, exit all networking applications on connected devices before you disconnect the Access Point.
Diagnosing Problems 67 From the Windows Start menu, select Start > Programs > 3Com Wireless > Uninstall 3Com Wireless Infrastructure Device Manager. When prompted to confirm, click OK. Symptom Upgrading Access Point Firmware. Solution Firmware is the software that is installed on the Access Point at the factory. Some problems can be solved by installing a new version of the firmware.
68 B Telephone Technical Support and Repair OBTAINING SUPPORT FOR YOUR 3COM PRODUCT Telephone Technical Support and Repair To obtain telephone support as part of your warranty and other service benefits, you must first register your product at: http://eSupport.3Com.
Telephone Technical Support and Repair 69 and under warranty, you can obtain an RMA number online at http://eSupport.3Com.com/. First-time users must apply for a user name and password. Telephone numbers are correct at the time of publication. Find a current directory of 3Com resources by region at: http://csoweb4.3Com.
70 C Telephone Technical Support and Repair END-USER LICENSE AGREEMENT Customer shall take all steps necessary to protect Wind River's and its licensors' proprietary rights in the Run-Time Module and to ensure that each Run-Time Module distributed by Customer will be accompanied by a localized copy of an End-User License Agreement.
Telephone Technical Support and Repair 71 without limitation the implied warranties of merchantability, fitness for a particular purpose, title and non-infringement; (iii) exclude liability for any special, indirect, punitive, incidental and consequential damages; and (iv) require that any further distribution of the Run-Time Module be subject to the same restrictions set forth herein.
72 D Antennas Used per Mode APPENDIX Antennas Used per Mode The AP has three external antenna connectors, labelled A, B and C, as shown below.
Antennas Used per Mode 73 In some modes, not all of the connectors are in use. The following table defines which external antenna connectors are used in which mode: Mode 2x3 2x2 1x1 Antennas Used A,B,C A,C A Note: When using 1x1 mode, either in WDS mode or in AP mode using the 3CWE591 Omni antenna, only connector A is active. This is the connector on the far right, looking at the AP with the 3Com logo facing you. No other connectors are active in this mode.
74 Console Cable Pin-out Console Cable Pin-out 8 1 P1 5 1 P2 9 6
Console Cable Pin-out 75 Figure 36 RJ45 to D-SUB 9 pin cable P1 Pin no. 8 6 2 1 5 3 4 7 WIRE COLOR YELLOW BROWN GRAY GREEN RED BLUE BLACK WHITE P2 Pin no. 1 2 3 4 5 6 7 8 For part numbers and purchasing information, visit the 3COM Web site (http://www.3com.com).
76 Console Cable Pin-out
INDEX Numerics D 802.11a ...................................9 802.11b/g ..............................10 802.11d .................................41 Data Beacon Rate ...................40 default IP address ............ 14, 51 Delivery Traffic Indication Message (DTIM) ............................40 Device Manager ... 8, 13, 15, 67 DHCP Server ...........................13 A Access Point mode .................27 Administration .......................52 Advanced Settings ..................
L login ................................ 14, 18 M MAC Filtering ........................ 54 Management VLAN ............... 43 P Password ............ 14, 18, 52, 61 Power over Ethernet (PoE) ....... 9 Q Quality of Service (QoS) ......... 42 R Rebooting ............................. 60 Restore .................................. 56 Rogue AP Detection .............. 55 RTS Threshold ........................ 40 S Security ................................... 7 Setting Up .............................
Wireless Network Standards .....9 WPA ......................................34 WPA2 .............................
Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
If this device is going to be operated in 5.15 ~ 5.25GHz frequency range, then it is restricted in indoor environment only. FCC NOTICE: To comply with FCC part 15 rules in the United States, the system must be professionally installed to ensure compliance with the Part 15 certification. It is the responsibility of the operator and professional installer to ensure that only certified systems are deployed in the United States.