462CHAPTER 21: CONFIGURING AAA FOR NETWORK USERS

 

If the WX does not receive a reply to a client’s DNS request, the WX

 

spoofs a reply to the browser by sending the WX switch’s own IP address

 

as the resolution to the browser’s DNS query. The WX also serves the web

 

login page. This behavior simplifies use of the WebAAA feature in

 

networks that do not have a DNS server. However, if the requested URL is

 

invalid, the behavior gives the appearance that the requested URL is valid,

 

since the browser receives a login page. Moreover, the browser might

 

cache a mapping of the invalid URL to the WX IP address.

 

If the user enters an IP address, most browsers attempt to contact the IP

 

address directly without using DNS. Some browsers even interpret

 

numeric strings as IP addresses (in decimal notation) if a valid address

 

could be formed by adding dots (dotted decimal notation). For example,

 

208194225132 would be interpreted as a valid IP address, when

 

converted to 208.194.225.132.

WebAAA

Use the following information to ensure operation of the WebAAA

Requirements and

feature.

Recommendations

 

 

MSS Version 5.0 does not require or support special user web-portal-ssid,

 

where ssid is the SSID the Web-Portal user associates with. Previous MSS

 

Versions required this special user for Web-Portal configurations. Any

 

web-portal-ssid users are removed from the configuration during

 

upgrade to MSS Version 5.0. However, the web-portal-wired user is still

 

required for Web Portal on wired authentication ports.

WX Switch Requirements

„WebAAA certificate—A WebAAA certificate must be installed on the switch. You can use a self-signed (signed by the WX) WebAAA certificate automatically generated by MSS, manually generate a self-signed one, or install one signed by a trusted third-party certificate authority (CA). (For more information, see Chapter 20, “Managing Keys and Certificates,” on page 413.)

„If you choose to install a self-signed WebAAA certificate, use a common name (a required field in the certificate), that resembles a web address and contains at least one dot. When MSS serves the login page to the browser, the page’s URL is based on the common name in the WebAAA certificate.

Page 461 Page 463
Page 462
Image 462
3Com WX1200 3CRWX120695A, WXR100 3CRWXR10095A, WX4400 3CRWX440095A, WX2200 3CRWX220095A manual WebAAA, WX Switch Requirements
Page 461 Page 463

WX1200 3CRWX120695A, WX4400 3CRWX440095A, WXR100 3CRWXR10095A, WX2200 3CRWX220095A specifications

The 3Com WX2200 (3CRWX220095A), WX4400 (3CRWX440095A), WX1200 (3CRWX120695A), and WXR100 (3CRWXR10095A) are part of a robust suite of wireless networking solutions offered by 3Com, designed to meet the needs of modern enterprise environments. These devices provide reliable connectivity, flexibility, and scalability, making them ideal for businesses of all sizes.

The 3Com WX2200 is a high-performance wireless switch that supports up to 64 access points, making it suitable for medium to large deployments. It boasts advanced features such as dynamic RF management, which optimizes channel selection and power levels based on real-time network conditions. This ensures maximum coverage and minimizes interference, leading to improved user experiences. Additionally, it supports dual-band operation and can seamlessly integrate with various wireless access points, providing enhanced throughput and robust performance.

The WX4400 is designed for high-density environments and offers extensive scalability. It supports up to 128 access points and is equipped with advanced security features, including WPA2 enterprise encryption and role-based access control. This switch also features intelligent load balancing, allowing it to dynamically distribute user traffic across available access points, thus enhancing overall network efficiency.

The WX1200, positioned as an entry-level solution, is well-suited for small to medium-sized businesses. It offers a user-friendly management interface, allowing IT staff to quickly configure and monitor the network. This device supports a variety of deployment scenarios and can be easily integrated into existing infrastructure. It also comes equipped with essential security features to protect the network from unauthorized access.

The WXR100 complements the series by providing simplified management for access points, ensuring that businesses can easily deploy and maintain their wireless networks. It supports various management protocols and integrates with a variety of third-party systems, enhancing inter-operability. With Power over Ethernet (PoE) support, the WXR100 can deliver power to connected access points, reducing the complexity and costs associated with additional power infrastructure.

Together, these solutions embody 3Com's commitment to delivering high-quality networking products that enhance connectivity and performance. With features such as scalability, advanced security, dynamic load balancing, and centralized management, the WX2200, WX4400, WX1200, and WXR100 form a comprehensive wireless networking ecosystem tailored for today’s enterprise challenges.
Top Page Image Contents