16WIRELESS LAN SWITCH AND CONTROLLER MSS VERSION 6.0.4.6 RELEASE NOTES

3WXM

By default, access to 3WXM and the 3WXM monitoring service do not require passwords. To secure access, configure user accounts within each instance of 3WXM and the monitoring service.

The monitoring service uses a signed certificate for authentication. The service has a self-signed certificate by default. For added security, used a certificate signed by a CA instead. To use a CA-signed certifi- cate, install the certificate in a key store file on the machine where the monitoring service is installed, and change the name of the key store file used by the monitoring service from its default to the one where you installed the certificate signed by the CA.

Guest Access (unencrypted SSIDs)

If you need to prevent all guest access (access to unencrypted SSIDs):

■Do not create any service profiles for SSID type clear.

■Delete any existing service profiles for a clear SSID.

WebAAA Best Practices

If you plan to use WebAAA, see the “Configuring WebAAA” section in the “Configuring AAA for Network Users” chapter of the Wireless LAN Switch and Controller Configuration Guide. The section has configuration requirements and recommendations, in addition to an overview of the WebAAA process.

If you are upgrading from MSS Version 3.2, 3Com recommends that you read the manual even if the switch already uses WebAAA. The WebAAA imple-

mentation and its configuration requirements changed in MSS Version 4.0.

Communication Between the WX Switch and 3WXM or WebViewAdministration certificate requirement (11974)

Before the WX switch can communicate successfully with 3WXM, you must create an administrative encryption certificate on the WX switch. For details, see the Wireless LAN Switch and Controller Installation and Basic Configuration Guide.

Mobility Domain™ (Multiple WX Switch) Best Practices

3Com recommends that you run the same MSS version on all WX switches in a Mobility Domain.

Helpful commands

Use the following commands to verify the proper operation of a Mobility Domain in support of features such as subnet roaming:

■display mobility-domain status — In a func- tioning Mobility Domain, the output on every WX switch displays every WX switch in the Mobility Domain.

■display roaming vlan — In a functioning Mobility Domain, the output on every WX switch displays the network-attached VLAN of every other WX switch in the Mobility Domain.

Other useful commands, documented in the Wireless LAN Switch and Controller Command Reference, include display tunnel and display roaming station.