HP ProCurve 700wl Series - Secure Access Configuration Guide for Wireless Clients (April 2005) Part One: Browser-Based Logons

Software Versions

The table below details the software versions used for the ProCurve network equipment in this

guide. For the latest software versions or more info, visit the ProCurve Networking by HP Web

site (

http://www.procurve.com).

Device Version

Switch 5300xl E.09.21

Access Control xl Module 4.1.3.93

Access Control Server 740wl 4.1.3.93

Access Point 420 2.0.38

Getting Started

Getting started with the configuration scenarios in this guide requires completion of steps 1

through 4 below to get the infrastructure prepared.

To get started, refer to the Basic Setup and Topology (Figure A) and complete the following

tasks:

• Step 1: Configuring the Switch 5300xl

• Step 2: Configuring the Access Control Server 740wl

• Step 3: Configuring the Access Control xl Module

• Step 4: Configuring the Access Point 420

After completing Steps 1-4, then proceed to the desired Configuration Scenario.

Step 1: Configuring the Switch 5300xl

In this example configuration, the Access Control xl Module (ACM) is inserted into slot D of

the Switch 5300xl. However, any open 5300xl switch slot may be used. For example, if the

ACM is inserted in slot A, the uplink port designation would be “aup”.

Power up the switch, insert the ACM, connect a serial console cable and configure the

following at the Switch 5300xl CLI:

1. Configure the default gateway on the switch.

2. Configure an uplink VLAN (vlan 3), IP address and subnet mask

3. Add a port (a1) to the uplink VLAN.

4. Add the ACM uplink port (dup) to the uplink VLAN (vlan 3).

5. Add a port (b1) to VLAN 2000.

Note: Upon insertion of the ACM into the Switch 5300xl, VLAN 2000 is automatically

created by default and the downlink port (ddp) is added to this VLAN as a tagged

member.

5300xl> en

5300xl# config term

5300xl(config)# ip default-gateway 10.24.3.1

5300xl(config)# vlan 3

5300xl(vlan-3)# ip address 10.24.3.65/24

5300xl(vlan-3)# untag a1

5300xl(vlan-3)# untag dup

5300xl(vlan-3)# vlan 2000

5300xl(vlan-2000)# untag b1