Manuals / 3Com / Computer Equipment / Switch

3Com WXR100 3CRWXR10095A, WX4400 3CRWX440095A manual Configuring and Managing Security Acls

Models: WX1200 3CRWX120695A WX4400 3CRWX440095A WXR100 3CRWXR10095A WX2200 3CRWX220095A

1 728
Download 728 pages 48.88 Kb
Page 408
Image 408

408CHAPTER 19: CONFIGURING AND MANAGING SECURITY ACLS

WX1200# set security acl ip SVP permit cos 7 119 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255

WX1200# set security acl ip SVP permit 0.0.0.0 255.255.255.255

WX1200# set security acl map SVP vlan v1 in WX1200# set security acl map SVP vlan v1 out WX1200# commit security acl SVP

The first ACE is needed only if the active-scan feature is enabled in the radio profile. The ACE ensures that active-scan reduces its off-channel time in the presence of FTP traffic from the TFTP server, by setting the CoS of the server traffic to 7. This ACE gives CoS 7 to UDP traffic from TFTP server 10.2.4.69 to any IP address, to or from any UDP port other than 0. (For more information, see “RF Detection Scans” on page 571.)

The second ACE sets CoS to 7 for all SVP traffic.

The third ACE matches on all traffic that does not match on either of the previous ACEs.

Reason the ACL Needs To Be Mapped to Both Traffic Directions If the ACL is not also mapped to the inbound direction on the voice VLAN, CoS will not be marked in the traffic if the path to the SVP handset is over a tunnel. MSS does not support mapping an ACL to a tunneled VLAN.

When configured in a Mobility Domain, WX switches dynamically create tunnels to bridge clients to non-local VLANs. A non-local VLAN is a VLAN that is not configured on the WX that is forwarding the client's traffic. MSS does not support mapping an ACL to a non-local VLAN. The CLI accepts the configuration command but the command is not saved in the configuration.

Consider switch-1 with VLAN_A and switch-2 with VLAN_B. If a handset connected to switch-2 is placed in VLAN_A, a tunnel is created between switch-1 and switch-2. If an ACL is mapped to VLAN_A-out on switch-1, it will affect local clients but not clients using the same VLAN on switch-2. Also, if an ACL is mapped to VLAN_A-in on switch-1, it will affect remote clients on switch-2, but not local clients. 3Com recommends mapping ACLs both vlan-in and vlan-out to ensure proper CoS marking in both directions.

Page 407 Page 409
Page 408
Image 408
3Com WXR100 3CRWXR10095A, WX4400 3CRWX440095A, WX1200 3CRWX120695A manual Configuring and Managing Security Acls
Page 407 Page 409

WX1200 3CRWX120695A, WX4400 3CRWX440095A, WXR100 3CRWXR10095A, WX2200 3CRWX220095A specifications

The 3Com WX2200 (3CRWX220095A), WX4400 (3CRWX440095A), WX1200 (3CRWX120695A), and WXR100 (3CRWXR10095A) are part of a robust suite of wireless networking solutions offered by 3Com, designed to meet the needs of modern enterprise environments. These devices provide reliable connectivity, flexibility, and scalability, making them ideal for businesses of all sizes.

The 3Com WX2200 is a high-performance wireless switch that supports up to 64 access points, making it suitable for medium to large deployments. It boasts advanced features such as dynamic RF management, which optimizes channel selection and power levels based on real-time network conditions. This ensures maximum coverage and minimizes interference, leading to improved user experiences. Additionally, it supports dual-band operation and can seamlessly integrate with various wireless access points, providing enhanced throughput and robust performance.

The WX4400 is designed for high-density environments and offers extensive scalability. It supports up to 128 access points and is equipped with advanced security features, including WPA2 enterprise encryption and role-based access control. This switch also features intelligent load balancing, allowing it to dynamically distribute user traffic across available access points, thus enhancing overall network efficiency.

The WX1200, positioned as an entry-level solution, is well-suited for small to medium-sized businesses. It offers a user-friendly management interface, allowing IT staff to quickly configure and monitor the network. This device supports a variety of deployment scenarios and can be easily integrated into existing infrastructure. It also comes equipped with essential security features to protect the network from unauthorized access.

The WXR100 complements the series by providing simplified management for access points, ensuring that businesses can easily deploy and maintain their wireless networks. It supports various management protocols and integrates with a variety of third-party systems, enhancing inter-operability. With Power over Ethernet (PoE) support, the WXR100 can deliver power to connected access points, reducing the complexity and costs associated with additional power infrastructure.

Together, these solutions embody 3Com's commitment to delivering high-quality networking products that enhance connectivity and performance. With features such as scalability, advanced security, dynamic load balancing, and centralized management, the WX2200, WX4400, WX1200, and WXR100 form a comprehensive wireless networking ecosystem tailored for today’s enterprise challenges.