User privileges Configuring | HP Manager Software specs

											INDEX 503
troubleshooting			30					MAP (Managed Access Point)
unpacking files			23					adding connections			257
user privileges 22								configuring 251
using the wizard			24					modifying attributes			252
IP aliases		229						rebooting		348
configuring		229						Mobility Domains
creating	229							creating		92
IP services								definition		90
ARP 233		226						roaming behavior 90
configuring		226						traffic ports used by			91
DNS 230	229							Mobility Profiles
IP aliases	229							definition		306
NTP 231		226						monitoring service
static routes		226						starting	481

L								N
layer 0 122								named user groups
license key 22		225						creating		271
link redundancy		225						named users
load balancing					268, 269			configuring authentication 270, 271
RADIUS server group					268, 269			creating		270
load sharing, configuring					225			network changes
local changes	336, 339							accepting		336
deploying	336, 339							checking for 466
reviewing	335							reviewing		335
synchronizing 333								synchronizing 333
verifying	327							verifying			327
local configuration changes								troubleshooting			327
deploying	339							network configuration changes
undoing	337		269					undoing		337
local user database			269					Network Node Manager			463
location policies		299						starting 3WXM from			463
configuring		299						network plans
creating location policy rules 300								closing	86
log files		30						creating		81
installation		30						deleting		87
logging		215						managing 82
configuring		215				217		opening		84
setting up a syslog server						217		saving	82
setting up system logging						215		sharing	88
								network ports
								configuring 223
M								configuring 223
M			281, 282					network user access rules 286
MAC address globs			281, 282					network users 286
MAC address user groups								defined	286
creating	273			273				NTP (Network Time Protocol)
defining properties				273				configuring 231
MAC address users						272		creating servers 232
configuring authentication						272		setting properties 232
creating	272			286
MAC user access rules				286
managing access rules				280

Image 503

HP Manager Software manual User privileges Configuring

Contents

3CRWXR10095A, 3CRWX120695A, 3CRWX440095A Wireless LAN Mobility System United States Government Legend 3Com Corporation 350 Campus Drive Marlborough, MA USA Contents Starting 3WXM Site Objects Alerts Panel Content Panel Monitor Tab 130 Planning the 3COM Mobility System 210 Configuring WX System and Administrative Parameters 245 Configuring IP AliasesConfiguring DNS 230 Configuring NTP 231 Configuring ARP 233 226 300 268Creating and Managing Users in the Local User Database 285 Managing Certificates 397 361 Displaying 802.11 Coverage 362364 394 448 Generating a Radio Details Report 449 423430 Using 3WXM with HP Openview Register Your Product 497 Obtaining Support for Your ProductPage Icon Description ConventionsList conventions that are used throughout this guide This manual uses the following text and syntax conventions Including new features and bug fixes3WXM for advanced configuration and management Documentation Pddtechpubscomments@3com.com Comments Example Requirements for HardwareRequirements Hardware Number Radios WX Switches 50+ WX Switches Hardware Requirements for 3WXM Monitoring ServiceHardware Requirements for Running 3WXM Monitoring Service Hard drive space Available Monitor resolution Preparing for InstallationSoftware Installing 3WXM If Autorun is disabled, follow these steps Wizard Using the Installation To use the installation wizard Installing 3WXM Installing 3WXM OpenView Plug-In Installing the HP To install the HP OpenView plug-in Installing 3WXM Click Get Activation Key Installing 3WXM Click Uninstall Click Continue Manager 3WXM interface Switches or monitor network dataOverview Working with the 3WXM User Interface View Object Details or View Alerts from the main toolbar Menu OptionsMain 3WXM Window Menu Menu Option Description 3WXM Menu Options To add a WX switch Devices Apply Auto-Tune Association failure rates Open the 3Com 3WXM Administrator’s Organizer Panel Working with the 3WXM User Interface Select an object Details are displayed here Object Settings for the following management services Location Policy Object Description Working with the 3WXM User Interface Mobility Domain Objects WX Switch Objects Ports/MAPs Third Party AP Objects Lists the object that can appear under Third Party APs Alerts Panel Content panel with more details Alert Category Description Lists the types of alerts displayed in the Alerts panel Toolbar option of the main 3WXM window Content PanelContent panel displays information for objects selected Monitor Tab Explore Window Working with the 3WXM User Interface „ Green Up Monitor Tab Status Summary Window Monitor Tab Client Monitor Window Monitor Tab RF Monitor Window Monitor Tab RF Trends Window Working with the 3WXM User Interface Resolutions Error/Warning Details Working with the 3WXM User Interface Content Panel Information panel Wizards Configuration Working with the 3WXM User Interface Configuration Wizards Reports Reports Pasting Objects Copying Replace New switch appears under the Mobility Domain Windows XP Only Enabling KeyboardShortcut Mnemonics Enabling Keyboard Shortcut Mnemonics Windows XP Only Working with the 3WXM User Interface Managing network plans, and defining a Mobility Domain Switch Manager 3WXM, restricting access to 3WXM, creatingFollowing steps describe how to start 3WXM Starting 3WXM Getting Started To 3WXM Restricting Access Getting Started Accounts Monitor AccountsMonitor accounts To create a provision or monitor account Plans CreatingManaging Network You must select a country code before continuing Plan Saving a Network Plan Creating and Managing Network Plans Saving a Network Plan with a New Name Creating and Managing Network Plans Getting Started Plan Getting Started To override another user’s lock Getting Started Defining a Mobility Domain Protocol Port Function DomainTraffic Ports Used for AAA Servers and Management Servers Do one of the following „ To close the wizard, click Finish Getting Started Live network Provide about your wireless coverage needsBuilding Wizard Network design information Planning the 3COM Mobility System OptionDescription Building Wizard SetupToolbar Options on Setup Building Wizard Edit Content Lists the toolbar icons at the top of the floor display area Toolbar Options on Edit Content Building Wizard Plan RF Coverage Toolbar Options on Plan RF Coverage Building Wizard Optimize RF Coverage Toolbar Options on Optimize RF Coverage Toolbar Options on Report Building Wizard Report Campus Creating a Site Planning the 3COM Mobility System Modifying Buildings in a Site Creating or Planning the 3COM Mobility System Creating or Modifying Buildings in a Site Details Importing orDrawing Floor File Recommendations To prepare a drawing before importing it into 3WXM Preparing a Drawing Before Importing It Importing or Drawing Floor Details Planning the 3COM Mobility System Common AutoCAD Layer Names Useful AutoCAD Operations and Naming-ConventionsImporting the Drawing Operating Tips Click Import Floor Layout Importing or Drawing Floor Details To crop the paper space Importing or Drawing Floor Details Origin point To adjust the origin point New location of origin point Hiding Layers To adjust the scale Adding or removing a layer Moving an object from one layer to another To clean up a drawing Planning the 3COM Mobility System Importing or Drawing Floor Details ObjectAction To draw an objectClick Finish to save the changes and close the wizard Properties Floor Characteristics of aSpecifying the RF To create RF obstacles by grouping objects Go to To use the Create RF Obstacle Dialog box onTo create RF obstacles for an area in a drawing To use the Create RF Obstacle Dialog box ObjectAction Planning the 3COM Mobility System Coverage To create a wiring closet Shared Coverage Areas Area Drawing a Coverage Area Coverage Area Choices wizard appears Go to Specifying the Wireless Technology for a Coverage Area Specifying the Wireless Technology for a Coverage Area Specifying Coverage Area Properties Planning the 3COM Mobility System Specifying Association Information Go to Specifying Association Information Planning the 3COM Mobility System Defining Wireless Coverage Areas WX4400 switches support distributed MAP connections only Setting Attributes for a Third-Party Access Point Planning the 3COM Mobility System Configuring Radio Attributes Moving the AP Icon to its Floor Location Computing MAP Placement To specify design constraints Computing MAP Placement WX4400 switches support indirect MAP connections only To compute and place MAP access points To review coverage area computation Go to To review coverage area computation Computing MAP Placement Planning the 3COM Mobility System To unlock a coverage area Locking and Unlocking Coverage Areas To lock a MAP Locking and Unlocking MAP Access Points To assign channels Planning the 3COM Mobility System To compute optimal power Planning the 3COM Mobility System To resolve optimal power computation problems Resolving coverage gaps Verifying the Wireless Network To place an RF measurement point „ To list disabled access points, select Show Disabled MAPs To use the RF interactive measurement mode Signal strengths for any location on the floor Value Shows the information available in the RF measurement tableRF Measurement Information Generating RF Network Design Information Information Reviewing Layout To see the floor layout, click View Layout Click Generate Work Order To generate a work order Applying RF Auto-Tuning Settings to the Network Plan Click Next. The progress is displayed Click Finish Planning the 3COM Mobility System Following figure shows an example of the wizard WX Switch Wizard „ AAA WX Switch Wizard Overview Settings, and so on. This page is shown above WX Switch Wizard Overview Configuring WX System and Administrative Parameters WX Switch Wizard Overview Network Plan Switch toInsert Wireless Switch Adding a WX See Adding a WX Switch to the Network Plan on Accessing the WXSwitch Wizard Configuration file WX Properties Configuring VLANs Configuring WX System and Administrative Parameters Roaming and VLANs Vlan Names Configuring Vlan Basic Properties To configure Vlan basic properties Adding Ports to a Vlan Configuring Spanning Tree Protocol Configuring WX System and Administrative Parameters Configuring Spanning Tree Port Information Configuring Igmp „ To close the wizard and save the changes, click Finish Configuring Static Multicast Ports Configuring STP Fast Convergence Features Configuring the MSS Dhcp Server Select Spanning Tree Properties Select Config Edit Configuring WX Management Services Setting System To set system information Configuring WX System and Administrative Parameters Configuring WX Management Services Reenabling WebAAA To configure Snmp Do one of the following V1 or V2c Community String Configuring an Snmp To configure an Snmp community string V3 User Configuring an Snmp To configure an SNMPv3 user Configuring WX System and Administrative Parameters To configure a notification target Do one of the following Configuring a Notification ProfileConfiguring a Notification Target For SNMPv3, select the USM user Setting Up System Logging Configuring WX System and Administrative Parameters To set up a syslog server Setting Up a Syslog Server Expand Management Services Configuring Tracing Deleting Traces To delete a trace Organizer pane, expand the WX switch To set summertime information To set up a time zone Configuring WX Management Services Wired users is not encrypted after they are authenticated Configuring WiredAuthentication Wired authentication port is an Ethernet port that has Network Ports ConfiguringOther networking devices such as switches and routers WX1200 ports support full-duplex mode only Configuring Load Sharing Configuring IP Services Creating Static Routes To close the Create Static Route dialog box, click Finish Configuring Default Routes To create an IP alias Do one of the following Creating IP Aliases Setting Up DNS Basic Properties Adding DNS Servers Click New NTP Server Setting NTP PropertiesCreating NTP Servers Adding ARP Entries Configuring WX System and Administrative Parameters Parameters Configuring Wireless Parameters RSN Service Profile Configuring a Mycorp/mycorp-login.htm Encryption Configuring To configure encryption, follow these stepsConfiguring WEP Configuring a Service Profile WPA and RSN Cipher Suites Configuring WPA or RSNWPA and RSN Authentication Methods To configure WPA or RSN authentication To configure WPA or RSN encryption choices Profile To map a service profile to a radio Configuring Wireless Parameters Configuring a Radio Profile RF Auto-Tuning Configuring a Radio Profile To apply a radio profile to radios Connected and Distributed MAPs combined MAP Access PointsConfigure a MAP port for each directly connected MAP Directly Connected Configuring Wireless Parameters „ 112233445566778899aabbccddeeff00 Configuring Wireless Parameters Transmit Power box, specify the transmit power for the radio Configuring Wireless Parameters Configuring Directly Connected MAP Access Points Indirectly connected MAP Access PointsWX Switch Model Maximum Maximum Booted Configured Distributed MAP Configuring Distributed MAP Access Points „ 112233445566778899aabbccddeeff00 Configuring Distributed MAP Access Points Configuring Wireless Parameters Authorization , Overview on Connecting toServer Groups To change default values for Radius parameters To define a Radius server Connecting to Radius Servers and Server Groups To define a Radius server group Changing the Order in a Radius Server Group Managing UsersLocal User Database Database To configure user authentication propertiesYou can create two types of users in the local database Click Choose Available To configure user group authentication properties Local database To configure MAC address user authentication properties Click Choose Available To configure user authorization attributes Start-date,end-date, or both Authentication Attributes for Local UsersAttribute Description Valid Values Encryption-type End-date Attribute Description Valid Values Filter-id Idle-timeout Attribute Description Valid Values Mobility-profile Start-date Attribute Description Valid Values Session-timeoutSsid Url Attribute Description Valid Values Time-of-day Attribute Description Valid Values Vlan-name User Globs Accept user globs and MAC address globs Vlan Globs MAC Address Globs To set the authentication method for administrator access To set the accounting method for administrator access Console Access Rules Managing Administrator Authentication Configuring and Managing Access Rules for Network Users MSS provides the following types of authentication Authentication Types Authentication Algorithm To 802.1X? Yes Last-Resort Processing Ssid Name Any User Credential Requirements Page Authentication To configure authentication rules Page To configure authentication settings Page Accounting Page Policy To change the order of access rulesLocation Policies About the Location To create a location policy rule „ Ports Configuring Location Policies Click Close To create a proxy authentication rule Configuring AAA for Clients of Third-Party APs To create a Radius proxy client entry To configure a port as a Radius proxy for an Ssid To create a Mobility Profile Mobility ProfilesIncluded, or you can specify a list of ports to be included Attribute VSA Security Using AccessCreating Access Control Lists for Defining Access Control Entries Setting Up ACL Basic PropertiesGo to Defining Access Control Entries Creating an IP ACE Page Creating a TCP or UDP ACE Type box, specify the Icmp type used to filter Icmp packets Creating an Icmp ACETo define the action of the ACE Icmp Message Type Number Code Number Icmp Messages and Codes IP Protocol Number Creating a Layer 4 Protocol ACECommonly Used IP Protocol Numbers To add ACEs to an ACL and organize them For a complete list of IP protocol numbers, see Click Finish Mapping User-Based ACLs Mapping an ACL to a Vlan Mapping ACLs to Ports, VLANs, or Virtual PortsMapping an ACL to a Distributed MAP ACL Map page, click New Mapping an ACL to a Virtual Port Mapping an ACL to a Port Configuring 802.1X Parameters Attempts Click Finish Page WX File Management Options in 3WXM Chapter where the options are describedManaging WX System Files Network on Uploading a WX SwitchConfiguration into Not defined in 3WXM, uploading the WX configuration creates To upload a WX switch configuration Verifying Refresh Refreshes the data Options Toolbar Options on Verification Tab To resolve an error or warning To globally disable a warning or error To disable a specific instance of a warning or errorSelect the warning or error message Or for specific instances To disable or reenable a ruleTo change verification options Managing WX System Images and Configurations Changes Network Toolbar Options on Managed Devices Tab Changes To review changes To accept network changes To deploy local changesClick Deploy Now Options Alerts panel To undo changesNonmatching To modify configuration polling options Network Plan to Switches from aDeploying WX Files Distributing Image Click Distribute To distribute a system image Select Distribute Config Click Distribute Importing Exporting WX switch Configuration FilesDistributing WX Configuration Files To distribute a WX configuration file Importing and Exporting WX switch Configuration Files Managing WX System Images and Configurations Managed Applying PoliciesHow Changes Are For This Feature Area See Configuring a PolicyConfiguration Information Configuration Information Reviewing Applying Policy Settings Click Review Changes Rebooting WXSwitches or MAP Access Points Distributing PKS #12 files „ 802.1X-EAP certificate for a WX switch„ WebAAA certificate for a WX switch When 3WXM connects to 3WXM Services or a WX switch, To process a certificate ProcessingCertificates Select Tools Certificate Management ManagingCertificate that is stored in the 3WXM certificate store To review certificate details Managing Certificates Statistics and the event log Switches and shows information based on those traps Monitoring AccessingTo access monitored data Requirements for Using the Explore Window „ Green Up IconDescription Toolbar Options in Link View of Explore Window Toolbar Options in Floor View of Explore Window Lists the options on the toolbar in the floor view Toolbar Options in Floor View of Explore Window Monitoring the Network Using the Explore Window Monitoring the Network Display Option Coverage Display Options in Explore Window To take an RF measurement 3Com radio on the floor RF measurement point Rssi measurements Status Summary window shows the operational status of 3Com Using the StatusSummary Window Toolbar Options in Client Monitor Window Using the ClientMonitor Window Activity on the network To refresh the data automatically To refresh the data on demand Client Activity Columns When a Mobility Domain is Selected Data Displayed When a Mobility Domain or Site is Selected Number of times authentication for a client failed Client Activity Columns When a Mobility Domain is Selected Data Displayed When a Switch, MAP, or Radio is Selected Ssid Column Description Activity Details for Authentication FailureActivity Details for Association Failure Peap Activity Details for Authorization Failure ColumnDescription Activity Details for Authorization Successful DOT1X Activity Details for Disassociation Activity Details for Client Cleared Activity Details for Dot1x Failure Activity Details for Roam Data Displayed When a Mobility Domain is Selected Client Sessions Columns When a Mobility Domain is Selected Client Sessions Columns When Scope Is a Mobility Domain Data Displayed When the Scope is a Mobility Domain Data Displayed When a WX Switch, MAP, or Radio is Selected Session Properties Columns Displaying Session Details Authentication Server New location Session Statistics Columns Session Statistics Columns Location History Columns Adding a Client to the Watch List Clients on the watch list by MAC address „ natasha@example.com Using the Client Monitor Window Displaying the Client Watch List Removing a Client from the Watch List Details are displayed on the following tabs Session Displaying a Client’s Geographical LocationTerminating a Client’s To terminate a client’s session Ssid the radio can hear Using the RF„ RF Neighborhood lists the other transmitting devices that Radio can hear Window Displaying RF RF Monitor RF Neighborhood Columns MappingWindow RF Monitor Activity Log Columns RF Monitor Environment Columns Statistics Can indicate interference from a non-802.11 device As cordless phones and webcams, appear to generate RF Trends Columns Statistics To access performance statistics from the network Accessing Realtime Performance Statistics Monitoring the Network Accessing Realtime Performance Statistics Viewing Current Data „ Octets In/Out „ Packets In/Out „ Errors In/Out Viewing Historical Data Viewing Data in Percentages Accessing Realtime Performance Statistics To export data to a file Exporting Performance Data Event log Accessing the EventLog Displaying Toolbar Options on Event Tab Using Predefined Event Filters To filter messages by content Filtering Events by Content Monitoring the Network Saving Filters Filtering Events by SeverityFiltering Events by Facility Exporting Filtered Data Deleting Filters Accessing the Event Log Monitoring the Network Users Dynamic Frequency Selection DFS Both enabled radios and disabled radios perform these scans Notification Type Description Rogue Detection RequirementsSnmp Notifications for RF Detection Other than an associate request flood Rogue Detection Lists Detecting and Combatting Rogue Devices Using the Rogue Detection Tab Toolbar Options on Rogue Detection Tab To filter the rogue list Using the Rogue Detection Tab Current, Current Hour, Current Day, and History Tabs To change the scope of the rogue list Rogue Listener Details Columns Activity Log TabListeners Tab Rogue Details Columns Location Displaying aRogue’s Geographical They are present on the network Adding a Device toAttack List To add a device to the ignore list Into a Third Party Converting a Rogue List Configuring RFAdding a Rogue’s Clients to the Black Type the SSID. c Click Finish Click Permitted OUI List Configuring RF Detection Options from the Organizer Panel Detecting and Combatting Rogue Devices Generating Reports Site Survey Work orders Click Generate Generating anInventory Report To generate an inventory report Mobility Domain SwitchesMobility Domain Configuration Report dialog box appears Generating a WX Configuration Report Sections Configuration Report Summary Report Details Report Click Generate Errors Report Click Generate Network usage report lists network usage statistics Generating a Network Usage Report Summary Report Scope is always MAP Radio and cannot be changed Details Report Generating a Rogue Summary Report Click Generate Click View Work Order Generating Reports Importing Measurements Importing RFMeasurements RF obstacle data Optimizing a Network Plan Map name must match the name used in the site survey tool Applying the RF Measurements to Floor Plan Locating a Coverage Hole Locating and FixingCoverage Holes Coverage holes by displaying coverage Optimizing a Network Plan Installed to Network Plan Optimizing a Network Plan To start 3WXM from Network Node Manager Preparing to Use HP OpenView and 3WXMFrom Network Node Manager Chapter a Using 3WXM with HP Openview To change 3WXM preferences, in the main 3WXM window, select Change options for network synchronization, user interfaceLogging That system Synchronization ResettingPreferences Values Changing Network Changing Network Synchronization Options „ Multiple Show the topology in multiple windows Changing User Interface OptionsWithin Window Style, select one of the following Changing Tools Click the Certificate Handling tab ChangingCertificate Check on You can change the following RF planning options Typical Client’s Transmit PowerChanging Options For RF Planning Chapter B Changing 3WXM Preferences To Change a Color Defining a Color from the Palette Defining a Color by Changing HSB Properties Defining a Color by Changing RGB Properties Changing 3WXM Logging Options Chapter B Changing 3WXM Preferences Preferences Chapter C Changing 3WXM Services Preferences Stopping 3WXM ServicesServices Starting or To connect to 3WXM Services Connecting to 3WXM Services Verify that the service is running on the server Chapter C Changing 3WXM Services Preferences Verifying that Receiving ServiceChanging Service Settings Chapter C Changing 3WXM Services Preferences Changing WX WX connection settings control the timeout and retries forService will accept from the WX switches Click the WXs Connection Settings tab Chapter C Changing 3WXM Services Preferences Sources of Monitor Data Monitor tab and for the Performance Statistics windowWindows. lists the source of the data for each window Polling Interval is 5 minutes and cannot be changed Click the Monitoring Settings tab Changing Monitoring Settings Https//ip-addr Managing Network Plans Chapter C Changing 3WXM Services Preferences Backup Chapter C Changing 3WXM Services Preferences Value-Added Register YourProduct Purchase Technical Support Access SoftwareDownloads Telephone Contact Us US and Canada Telephone Technical Support and Repair Country Telephone NumberLatin America Telephone Technical Support and Repair Index Index User privileges Configuring SSH Index Index