3Com Corporation reserves the right to revise this documentation and to make changes in
content from time to time without obligation on the part of 3Com Corporation to provide
notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any
kind, either implied or expressed, including, but not limited to, the implied warranties, terms or
conditions of merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may
make improvements or changes in the product(s) and/or the program(s) described in this
documentation at any time.
If there is any software on removable media described in this documentation, it is furnished
under a license agreement included with the product as a separate document, in the hard copy
documentation, or on the removable media in a directory file named LICENSE.TXT or
!LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be
provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software
described herein are provided to you subject to the following:
All technical data and computer software are commercial in nature and developed solely at
private expense. Software is delivered as “Commercial Computer Software” as defined in DFARS
252.227-7014 (June 1995) or as a “commercial item” as defined in FAR
provided with only such rights as are provided in 3Com’s standard commercial license for the
Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015
(November
remove or deface any portion of any legend provided on any licensed program or
documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and
may or may not be registered in other countries.
3Com, the 3Com logo, and SuperStack are registered trademarks of 3Com Corporation.
Wi-Fi is a trademark of the Wireless Ethernet Compatibility Alliance.
All other company and product names may be trademarks of the respective companies with
which they are
EXPORT RESTRICTIONS: This product contains Encryption and may require US and/or Local
Government authorization prior to export or import to another country.
1995) or FAR 52.227-14 (June 1987), whichever is applicable. You agree not to
How to setup the access point for RADIUS authentication .........................57
How to setup the access point for WPA with 802.1x Session keys..............58
How to setup the access point for WPA with Pre-Shared (PSK) Key ............59
WPA Configuration for Windows XP .........................................................60
4Troubleshooting
Regulatory Compliance Information
Index
1INTRODUCTION
The 3Com® Wireless LAN Access Point 7250 supports 802.11g and 802.11b
wireless users.
With their flexibility and unfettered access, wireless LANs are changing the way
people work. Now with 3Com’s enterprise-class wireless access points, you can
build a cost-effective, reliable, secure wireless network that provides users with
seamless connectivity to the Internet, company intranet, and the wired corporate
network from anywhere they happen to be—conference room, cafeteria or
office.
Industry-leading security features and comprehensive management and
performance features combine to make these enterprise class wireless access
points an ideal choice for organizations ready to serve their increasingly mobile
workforce.
PRODUCT FEATURES
The single wireless interface 802.11g 2.4 GHz, 54 Mbps access point creates an
enterprise-class wireless LAN supporting up to 250 simultaneous users.
SECURITY
3Com offers one of the most robust suite of standards-based security on the
market today.
To protect sensitive data broadcast over the wireless LAN, 3Com supports the
Advanced Encryption Standard (AES). 3Com strengthens this basic security
mechanism with additional security features, including:
MAC address access control lists
IEEE 802.1x per-port user authentication with RADIUS server authentication
3Com wireless access point performance features ensure reliable and seamless
connections for users wherever they roam:
Automatic channel selection automatically finds the least loaded channel for
interference-free communication.
Auto network connect and dynamic rate shifting keep users connected
through a wide variety of conditions by changing to the optimum connection
speed as they move through the network.
Virtual Access Point (VAP) support provides flexibility by allowing a single
access point radio to operate as two separate access points.
Wireless Distribution System (WDS) Bridging support allows you to create
large wireless networks in areas where pulling wires is restricted or
cost-prohibitive by linking several wireless access points together with WDS
links.
Virtual Access Point (VAP) Support
Virtual Access Point (VAP) support allows an access point radio to operate as two
separate access points, providing multiple wireless services to clients in a network.
Each VAP can be configured to provide access to different network resources and
can support different levels of security.
For example, in a university network, an AP could be used to offer two services:
The first service provides access to protected data for authenticated university
staff members, while the second service provides open access to the Internet for
unauthenticated users, such as students or visitors.
Two VAPs per radio are available, and each VAP can be configured with its own
security settings.
For information on setting up and configuring VAPs, see “Enabling Virtual Access
Point (VAP)” on page 50.
2
WDS Bridging and Spanning Tree Protocol (STP) Support
A Distribution System (DS) is a network (typically a wired network) that
interconnects separate access points into a single LAN. With WDS, the
interconnection no longer needs to be physically wired. WDS
medium to interconnect separate access points, thereby eliminating the cost and
inconvenience that may hinder wire installations.
A WDS link can be used in a simple point-to-point link, a complex
point-to-multipoint link, or a multilayer topology.
Point-to-Point WDS Link. The following example shows a point-to-point WDS
link configured between two access points.
Wireless DesktopsWireless Desktops
WDS Link
Point-to-Multipoint WDS Link. The following example shows
point-to-multipoint WDS links configured between multiple access points.
Point-to-Point WDS Link
uses the wireless
Wireless Desktops
Wireless Desktops
WDS Link
Wireless Desktops
WDS Link
3
Additionally, Spanning Tree Protocol (STP) support prevents loops from being
formed on the network. For more information on these items, see the Wireless LAN Access Points User Guide.
For WDS and STP configuration instructions, see “WDS/STP Settings” on page 45.
MANAGEABILITY
3Com offers a wide range of standards-based management support, from SNMP
to 3Com Network Supervisor and HP OpenView for seamless integration with
your wired network.
Wireless Infrastructure Device Manager and Wireless LAN Device Discovery tools
let you configure parameters, run diagnostics, backup and restore configurations,
and monitor performance from anywhere on the network using an embedded
web server browser. You can also update wireless device software on multiple
devices using 3Com Network Supervisor to simplify bulk updates.
With Power over Ethernet (PoE) support, the same Category 5 cable that connects
your access point to the data network also provides its power. A single cable
installation dramatically improves your choice of mounting configurations
because you no longer need to consider AC power outlet locations. PoE support
makes it easier than ever to overcome installation problems with difficult-to-wire
or hard-to-reach locations.
802.11G WIRELESS NETWORK STANDARD
802.11g operates in the 2.4 GHz band at up to 54Mbps, and supports the widest
coverage—up to 100 meters (328 feet). However, is subject to a greater risk of
radio interference because it operates in the more popular 2.4 GHz band.
Consider 802.11g when you need wider coverage and vendor compatibility and
you are:
Maintaining support for existing 802.11b users and the existing wireless
investment while providing for expansion into 802.11g.
Implementing a complete wireless LAN solution, including bridges, gateways,
access points and clients; Wi-Fi certification guarantees compatibility
among
Providing access to hot spots in public spaces such as coffee shops or
university cafeterias
vendors
4
STANDARD NETWORK CONFIGURATIONAND PLANNING
The wireless solution supports a stand-alone wireless network configuration as
well as an integrated configuration with 10/100
The wireless network cards, adapters, and access point can be configured as:
Ad hoc for departmental or SOHO LAN
Infrastructure for wireless LAN
Infrastructure wireless LAN for roaming wireless PCs
AD HOC WIRELESS LAN
An ad hoc wireless LAN consists of a group of computers, each equipped with a
wireless adapter, connected via radio signals as an independent wireless LAN.
Computers in a specific ad hoc wireless LAN must therefore be configured to the
same radio channel. An ad hoc wireless LAN can be used for a branch office or
SOHO operation.
Ad Hoc Wireless LAN
Notebook with
Wireless USB Adapter
Mbps Ethernet LANs.
Notebook with
Wireless PC Card
PC with Wireless
PCI Adapter
INFRASTRUCTURE WIRELESS LAN
The access point can also provide access to a wired LAN for wireless workstations.
An integrated wired/wireless LAN is called an infrastructure configuration. A Basic
Service Set (BSS) consists of a group of wireless PC users, and an access point that
is directly connected to the wired LAN. Each wireless PC in this BSS can talk to any
computer in its wireless group via a radio link, or access other computers or
network resources in the wired LAN infrastructure via the access point.
The infrastructure configuration not only extends the accessibility of wireless PCs
to the wired LAN, but also increases the effective wireless transmission range for
wireless PCs by passing their signal through one or more access points.
5
A wireless infrastructure can be used for access to a central database, or for
connection between mobile workers, as shown in the following figure.
Wired LAN Extension
to Wireless Adapters
File
Server
Desktop PC
Switch
Access Point
PC with Wireless
PCI Adapter
Notebook with Wireless
PC Card Adapter
INFRASTRUCTURE WIRELESS LAN FOR ROAMING WIRELESS PCS
The Basic Service Set (BSS) is the communications domain for each access point.
For wireless PCs that do not need to support roaming, set the domain identifier
(SSID) for the wireless card to the SSID of the access point to which you want
connect. A wireless infrastructure can also support roaming for mobile
to
workers. More than one access point can be configured to create an Extended
Service Set (ESS). By placing the access points so that a continuous coverage area
is created, wireless users within this ESS can roam freely.
Desktop PC
Switch
PC with Wireless
PCI Adapter
Access Point
File
Server
Notebook with Wireless
PC Card Adapter
<BSS1>
Switch
Access Point
<ESS>
Seamless Roaming
6
Notebook with Wireless
PC Card Adapter
<BSS2>
ADVANCED NETWORK CONFIGURATIONAND PLANNING
Virtual Access Point (VAP) and WDS Bridging capabilities allow the access point to
be integrated into many new network configurations. Some common
configurations are explained briefly in this section:
Public/private access point service
Remote building wireless access with the AP8250 and 802.11a Bridging Kit
Remote building wireless access with the AP8250 and 802.11g Upgrade Kit
PUBLIC/PRIVATE ACCESS POINT SERVICE
The public/private access point service configuration allows the access point to
provide public Internet access while simultaneously providing secure access to the
enterprise network.
In this configuration, an AP7250 access point is configured with two Virtual
Access Points:
The first Virtual Access Point is configured to support one SSID that is
broadcast with no security.
The second Virtual Access Point is configured with a different, private SSID
that is not broadcast.
The private SSID should be assigned to a separate VLAN and use 802.1x
authentication with either TKIP or AES encryption to a RADIUS server.
7
TERMINOLOGY
Access Point—An internetworking device that seamlessly connects wired and
wireless networks.
Ad Hoc—An ad hoc wireless LAN is a group of computers, each with LAN
adapters, connected as an independent wireless LAN.
Backbone—The core infrastructure of a network. The portion of the network
that transports information from one central location to another central location
where it is unloaded onto a local system.
Base Station—In mobile telecommunications, a base station is the central radio
transmitter/receiver that maintains communications with the mobile
radiotelephone sets within its range. In cellular and personal communications
applications, each cell or micro-cell has its own base station; each base station in
turn is interconnected with other cells’ bases.
BSS—Basic Service Set. It is an access point and all the LAN PCs that are
associated with it.
CSMA/CA—Carrier Sense Multiple Access with Collision Avoidance.
EAP—Extensible Authentication Protocol, which provides a generalized
framework for several different authentication methods.
ESS—Extended Service Set. More than one BSS is configured to become an ESS.
LAN mobile users can roam between different BSSs in an ESS (ESS-ID, SSID).
Ethernet—A popular local area data communications network, which accepts
transmission from computers and terminals.
Infrastructure—An integrated wireless and wired LAN is called an
infrastructure
RADIUS—Remote Access Dial-In User Server is an authentication method used in
conjunction with EAP for 802.1x authentication and session based keys.
Roaming—A wireless LAN mobile user moves around an ESS and maintains a
continuous connection to the infrastructure network.
RTS Threshold—Transmitters contending for the medium may not be aware of
each other (they are “hidden nodes”). The RTS/CTS mechanism can solve this
problem. If the packet size is smaller than the preset RTS Threshold size, the
RTS/CTS mechanism will not be enabled.
configuration.
8
VAP—Virtual Access Point. An access point radio capable of operating as two
separate access points.
VLAN—Virtual Local Area Network. A LAN consisting of groups of hosts that are
on physically different segments but that communicate as though they were on
the same segment.
WEP—Wired Equivalent Privacy is based on the use of security keys and the
popular RC4 encryption algorithm. Wireless devices without a valid WEP key will
be excluded from network traffic.
WDS—Wireless Distribution System.
WPA—Wi-Fi Protected Access.
9
10
2INSTALLINGTHE ACCESS POINT
This equipment must be installed in compliance with local and national building
codes, regulatory restrictions, and FCC rules. For the safety of people and
equipment, this product must be installed by a professional technician/installer.
CAUTION: Before installing, see the important warnings and cautions in “Safety
Information” on page 12.
!
INSTALLATION REQUIREMENTS
The following items are required for installation:
Access Point 7250
Standard detachable antennas
3Com installation CD.
Wall-mount installation hardware (supplied): mounting plate,
mounting
If you do not have IEEE 802.3af power-over-Ethernet LAN equipment, use the
3Com Integrated Power-over-Ethernet power supply that comes with
the
If your LAN equipment complies with the IEEE 802.3af power-over-Ethernet
standard, you can connect directly to the equipment, and the 3Com power
supply is not needed.
Standard category 5 straight (8-wire) Ethernet cable.
The cable must be long enough to reach the power supply or the
power-over-Ethernet LAN port.
If you use the 3Com power supply, you need an additional Ethernet cable to
connect the access point to the LAN.
screws, and plastic anchors for drywall mounting.
access point.
11
To access and use the Web configuration management system, you need a
computer that is running Internet Explorer 5.0 or newer and one of the
following operating systems: Windows 98, Windows ME, Windows NT 4.0
Service Pack 6, Windows 2000, or Windows XP. It is recommended that this
computer become the dedicated workstation for managing and configuring
the access point and the wireless network.
POWER REQUIREMENTS
The access point complies with the IEEE 802.3af power-over-Ethernet standard. It
receives power over standard category 5 straight (8-wire) Ethernet cable.
Installation requires the use of either the 3Com power supply provided or
802.3af compliant power supply equipment (output power rated 48 V dc @
IEEE
350 mA maximum). Such equipment must be safety certified according to UL,
CSA, IEC or other applicable national or international safety requirements for the
country of use. All references to the power supply in this document refer to
equipment that meets these
Because the power supply plug is the only means of disconnecting the access
point from power, make sure the power outlet is accessible.
See “Using an Optional Power-Over Ethernet Injector” on page 17 and “Using a
Power-Over-Ethernet LAN Port” on page 18.
requirements.
Note for use of the 3Com power supply (part number 61-0107-000) in Norway:
This product is also designed for use on an IT power system with phase-to-phase
voltage of 230 V.
SAFETY INFORMATION
This equipment must be installed in compliance with local and national building
codes, regulatory restrictions, and FCC rules. For the safety of people and
equipment, only professional network personnel should install the access point,
cables, and antennas.
CAUTION: If you supply your own Ethernet cable for connecting power, be sure
that it is category 5 straight-through (8-wire) cable that has not been altered in
!
any way. Use of nonstandard cable could damage the
CAUTION: To comply with FCC radio frequency (RF) exposure limits, a minimum
body-to-antenna distance of 1 meter (3 feet) must be maintained when the access
!
point is
operational.
access point.
12
CAUTION: To avoid possible injury or damage to equipment, you must use either
the provided power supply or IEEE 802.3af compliant power supply equipment
!
that is safety certified according to UL, CSA, IEC, or other applicable national or
international safety requirements for the country of use. All references to power
supply in this document refer to equipment meeting these requirements.
CAUTION: The 3Com power supply input relies on a 16A rated building fuse or
circuit protector for short circuit protection of the line to neutral conductors.
!
CAUTION: It is the responsibility of the installer to ensure that the
Power-over-Ethernet (POE) power supply is properly connected. Connection to any
!
other device, such as a standard Ethernet card or another POE supply, may result
in permanent damage to equipment, electric shock, or fire. Refer to the
installation instructions for proper installation.
DECIDING WHERETO PLACE EQUIPMENTAND
PERFORMING A SITE SURVEY
The access point is ideally designed for vertical installation on a wall surface, but
can also be flat-surface mounted in an elevated location where it will not
disturbed. Ceiling installation is not recommended.
be
Whether you choose to mount the access point on a wall or place it on a flat
surface, make sure to select a clean, dry location that is elevated enough to
provide good reception and network coverage. Do not mount the access point on
any type of metal surface. Do not install the access point in wet or dusty areas.
The site should not be close to transformers, heavy-duty motors, fluorescent
lights, microwave ovens, refrigerators or any other electrical equipment that can
interfere with radio signals.
If you are connecting the access point to a wired network, the location must
provide an Ethernet connection. You will need to run an Ethernet cable from the
power supply to the access point.
An access point provides coverage at distances of up to 100 Meters (300 Feet).
Signal loss can occur if metal, concrete, brick, walls, floors or other architectural
barriers block transmission. If your location includes these kinds of obstructions,
you may need to add additional access points to improve coverage
13
Configuring a wireless LAN can be as easy as placing a 3Com Wireless Access
Point in a central area and making the necessary connections to the AP and the
clients. However, installing multiple Access Points may require more planning.
Using the 3Com Site Survey tool (located on the installation CD) can help you
determine if your wireless LAN connectivity and throughput is adequate and all
users are covered by an Access Point.
If you plan to use an optional antenna instead of the standard detachable
antennas that are supplied, review
Antenna Model” on page 21 before selecting the final location and be sure to
allow for routing the antenna cable as required.
For optimal performance, ensure the access point operates in temperature ranges
between –10° C to 40° C (14° F to 104° F).
Caution: Regulatory restrictions dictate that when this device is operational, the
minimal body-to-antenna distance is 1 Meter (3 Feet).
!
BEFORE YOU BEGIN
Record the access point MAC address in a safe place before the access point is
installed in a hard-to-reach location. The MAC address is printed on the back of
the access point housing.
“Selecting and Connecting a Different
The following illustration shows the front and rear views of the access point,
including the LEDs and connecting ports.
14
Caution: Do not connect a telephone cable into the Console port; doing so can
!
cause serious damage to the access point.
CONNECTINGTHE STANDARD ANTENNAS
The Access Point 7250 is supplied with standard detachable antennas. These
should be attached before the access point is installed. If using an alternate
antenna, see
page 21.
1Carefully unpack the standard detachable antennas.
CAUTION: Do not handle the antenna tips, especially after they are connected
to the access point, as this could lead to electrostatic discharge (ESD), which
!
could damage the
2Screw an antenna into each of the sockets in the access point housing.
3Hand-tighten the antennas at the very base of the SMA connectors without
handling the antenna tips.
4Position the antennas so they turn out and away from the access point at a
45-degree angle. After network startup, you may need to adjust the
antennas to fine-tune coverage in your area.
“Selecting and Connecting a Different Antenna Model” on
equipment.
Depending on the coverage required for your site, you may want to replace
the standard detachable antennas with one of the external antennas available
for use with the access point. See
Antenna Model” on page 21.
15
“Selecting and Connecting a Different
CONNECTING POWER
It is advisable to connect the power and check the Ethernet cables and LEDs
before installing the unit in a hard-to-reach location.
The access point complies with the IEEE 802.3af power-over-Ethernet standard. It
receives power over a standard category 5 straight (8-wire) Ethernet cable.
There are three ways to supply power to the access point:
Use the AC adapter included with the Access Point 7250.
Use the 3Com Integrated Power-over-Ethernet power supply. In this case, you
need to supply a second Ethernet cable to connect to the wired LAN.
Connect the access point directly to your own power-over-Ethernet hub or
switch, which must also comply with the IEEE
If you supply your own Ethernet cable for connecting power, be sure that it is
standard category 5 straight-through (8-wire) cable that has not been altered
in any way. Use of nonstandard cable could damage the access point.
USINGTHE INCLUDED AC ADAPTER
The power supply included with the Access Point 7250 is an AC adapter.
1Connect the power cord to the AC adapter and plug the cord into a power
outlet.
2Connect the DC power into the Access Point 7250.
802.3af standard.
16
USINGAN OPTIONAL POWER-OVER ETHERNET INJECTOR
CAUTION: To avoid damaging network equipment, make sure that the cables
are connected from access point to power supply to LAN as shown above and
!
described
The Power-Over-Ethernet Injector can be located at any point between the access
point and the LAN access port, wherever a convenient power outlet exists. If you
supply your own Ethernet cable for connecting power, be sure that it is standard
category 5 straight-through (8-wire) cable that has not been altered in any way.
Use of nonstandard cable could damage the access point.
Refer to the illustration below, and follow these steps:
1Connect one end of the Ethernet cable to the Ethernet port on the access
2Connect the other end of the Ethernet cable to the port labeled To Access
3Connect the power cord to the power supply and plug the cord into a power
4To link the access point to your Ethernet network, plug one end of another
below.
point.
Point on the power supply.
outlet.
Ethernet cable into the port labeled To Hub/Switch on the power supply, and
plug the other end into a LAN port (on a hub or in a wall).
17
USINGA POWER-OVER-ETHERNET LAN PORT
If your LAN equipment complies with the IEEE 802.3af power-over-Ethernet
standard, you can connect the access point directly to a LAN port. For example,
the illustration above right shows a connection through a 3Com Ethernet Power
Supply to a 3Com SuperStack
CHECKINGTHE LEDS
When power is connected, the access point LEDs light. The illustration and the
following table describe the LEDs and their functions.
®
Switch.
NameDescription
Radio
Ethernet
Power
LED blinks red to indicate radio activity. Faster
blinking indicates more activity.
LED lights yellow when a 10 Mbps Ethernet link
is established. LED lights green when a 100
Mbps Ethernet link is established. LED blinks to
indicate activity on the Ethernet. Faster blinking
indicates more activity.
LED lights green when operational code
is running.
MOUNTINGONA WALL
CAUTION: The mounting plate is designed for wall mount installation only. To
avoid equipment damage and possible injury, do not use the mounting plate for
!
a ceiling installation.
The access point comes equipped with all the necessary hardware for mounting
on a wall, including a mounting plate. For a secure installation, the mounting
plate should be placed perpendicular to the floor, with the arrow pointed up, as
indicated on the mounting plate, with the smooth side against the wall.
18
1Install the mounting plate as shown in the following illustration, on either a
stud (or other hard wall surface), or onto drywall.
If installing into a stud or other
secure vertical surface, use 2 screws.
Allow for a clearance of at least 25 cm (10 Inches) between the ceiling and
If installing into drywall, use
3 plastic anchors and 3 screws.
the top of the mounting plate.
Orient the bracket with the letter “B” at the top of the bracket.
For installation on a wall stud, install the top screw into the stud, as shown
at left in the illustration, and then vertically align the mounting plate before
installing the bottom screw.
For installation on to drywall, mark three screw holes using the mounting
plate as a template for vertical alignment, as shown at right in the
illustration above.
Use a 5-mm (3/16-in.) drill bit if using the plastic anchors provided.
For drywall mounts, you can route the cable through either a side or center
opening for a seamless appearance using one of the methods illustrated
below. Alternatively, you can simply attach the Ethernet cable to the side of
the unit, allowing it to trail along the wall.
If you have routed the Ethernet cable through the center opening, secure
the cable on the hook located on the mounting plate as shown in the
illustration below.
2Connect the Ethernet cable to the Ethernet port on the access point.
19
Loading...
+ 56 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.