3com 6.0.4.6 Manual De Usuario

Descargar
Página de 30
16
W
IRELESS
 LAN S
WITCH
 
AND
 C
ONTROLLER
 MSS V
ERSION
 6.0.4.6 R
ELEASE
 N
OTES
3WXM
By default, access to 3WXM and the 3WXM monitor-
ing service do not require passwords. To secure 
access, configure user accounts within each instance 
of 3WXM and the monitoring service.
The monitoring service uses a signed certificate for 
authentication. The service has a self-signed certifi-
cate by default. For added security, used a certificate 
signed by a CA instead. To use a CA-signed certifi-
cate, install the certificate in a key store file on the 
machine where the monitoring service is installed, 
and change the name of the key store file used by the 
monitoring service from its default to the one where 
you installed the certificate signed by the CA.
Guest Access (unencrypted SSIDs)
If you need to prevent all guest access (access to 
unencrypted SSIDs):
Do not create any service profiles for SSID type 
clear.
Delete any existing service profiles for a clear SSID. 
WebAAA Best Practices
If you plan to use WebAAA, see the “Configuring 
WebAAA” section in the “Configuring AAA for Net-
work Users” chapter of the Wireless LAN Switch and 
Controller Configuration Guide
. The section has con-
figuration requirements and recommendations, in 
addition to an overview of the WebAAA process.
If you are upgrading from MSS Version 3.2, 3Com 
recommends that you read the manual even if the 
switch already uses WebAAA. The WebAAA imple-
mentation and its configuration requirements 
changed in MSS Version 4.0.
Communication Between the WX Switch and 3WXM 
or WebView
Administration certificate requirement (11974)
Before the WX switch can communicate successfully 
with 3WXM, you must create an administrative 
encryption certificate on the WX switch. For details, 
see the Wireless LAN Switch and Controller Installa-
tion and Basic Configuration Guide
.
Mobility Domain
 (Multiple WX Switch) Best Practices
3Com recommends that you run the same MSS 
version on all WX switches in a Mobility Domain.
Helpful commands
Use the following commands to verify the proper 
operation of a Mobility Domain in support of features 
such as subnet roaming:
display mobility-domain status — In a func-
tioning Mobility Domain, the output on every WX 
switch displays every WX switch in the Mobility 
Domain.
display roaming vlan — In a functioning Mobility 
Domain, the output on every WX switch displays 
the network-attached VLAN of every other WX 
switch in the Mobility Domain.
Other useful commands, documented in the Wireless 
LAN Switch and Controller Command Reference

include display tunnel and display roaming station