Full Text Searchable PDF User Manual

3Com
®
AirProtect Enterprise
Engine 6100
Quick Setup Guide
www.3Com.com
Part Number: 10015863 Rev. AA
June 2007

3Com Corporation
350 Campus Drive, Marlborough, MA USA 01752-3064
Copyright © 2003 – 2007 3Com Corporation and its Licensors. All Rights Reserved.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time to
time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied
or expressed, including, but not limited to, the implied warranties, terms, or conditions of merchantability,
satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the
product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license
agreement included with the product as a separate document, in the hardcopy documentation, or on the
removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,
please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGENDS:
If you are a United States government agency, then this documentation and the software described herein re
provided to you subject to the following:
United States Government Legend: All technical data and computer software is commercial in nature and
developed solely at private expense. Software is delivered as Commercial Computer Software as defined in
DFARS 252.227-7014 (June 1995) or as a commercial item as defined in FAR 2.101(a) and as such is provided
with only such rights as are provided in 3Com’s standard commercial license for the Software. Technical data is
provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987),
whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed
program or documentation contained in, or delivered to you in conjunction with guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may
not be registered in other countries.
3Com and the 3Com logo are registered trademarks of 3Com Corporation.
Linux is a trademark of Linus Torvalds and the Linux Mark Institute.
All other products and services are trademarks, registered trademarks, and service marks or registered service
marks of their respective owners.
Intellectual Property Notice: One or more features and components in this product have patents pending, which
are owned by AirTight Networks, Inc.

3Com AirProtect Enterprise Quick Setup Guide
1
Step
1:
3Com
AirProtect
Enterprise
Appliance
and
3Com
AirProtect
Sensor
Overview
The
front
panel
of
the
appliance
has
a
power
switch
and
status
LEDs
as
shown
in
the
figure
below.
The
rear
panel
of
the
appliance
has
power
and
port
connectors
as
shown
in
the
figure
below.
The
front
panel
of
3Com
AirProtect
Sensor
has
status
LEDs
as
shown
in
the
figure
below.
The
rear
panel
of
3Com
AirProtect
Sensor
has
ports
that
enable
you
to
power
up
the
sensor
and
connect
it
to
the
network
and
a
computer
as
shown
in
the
figure
below.

3Com AirProtect Enterprise Quick Setup Guide
2
Step
2:
Mount
the
Appliance
Place
the
appliance
on
the
rack
and
mount
the
appliance
using
the
rack
mounting
accessories.

3Com AirProtect Enterprise Quick Setup Guide
3
Step
3:
Power
up
the
Appliance
Connect
the
power
cable
as
shown
in
the
figure
below
and
press
the
power
switch
on
the
front
panel
of
the
appliance.
Important!
On
connecting
the
Power
cable,
the
Power
LED
should
turn
solid
green.
If
this
does
not
happen,
refer
to
the
3Com
AirProtect
Enterprise
Installation
Guide.
Step
4:
Connect
the
Appliance
to
the
Network
Connect
the
appliance
to
the
network
using
the
network
interface
cable
as
shown
in
the
figure
below.
Warning!
The
default
IP
address
of
the
appliance
is
192.168.1.246
.
Please
ensure
that
no
other
device
on
your
network
uses
the
same
IP
address
as
the
appliance.
Connect
the
network
interface
port
on
the
appliance
to
the
desired
subnet
using
the
network
interface
cable
provided
to
you.
Do
not
connect
the
High
Availability
(HA)
Interface
port
to
the
subnet.
110-240V 50/60
Hz AC Connection

3Com AirProtect Enterprise Quick Setup Guide
4
Step
5:
Access
3Com
AirProtect
Enterprise
A.
Connect
your
computer
to
the
same
subnet
where
the
Server
is
connected.
B.
Change
your
computer
IP
address
to
192.168.1.XXX.
For
example,
192.168.1.244.
C.
Access
3Com
AirProtect
Enterprise
using
SSH
as
shown
in
the
figure
below.
D.
Login
using
the
Username:
config
and
Password:
password
.

3Com AirProtect Enterprise Quick Setup Guide
5
Step
6:
Complete
the
Server
Initialization
and
Setup
Wizard
Follow
the
steps
in
the
Server
Initialization
and
Setup
Wizard
to
configure
the
3Com
AirProtect
Enterprise
Server.
Important!
On
the
Date
and
Time
settings
screen
‐
Step
3,
if
the
day
exceeds
31
and
the
month
exceeds
12,
3Com
AirProtect
Enterprise
automatically
sets
the
day
to
31
and
month
to
12.
Important!
You
need
to
reboot
the
Server
on
completion
of
the
Initialization
and
Setup
Wizard
before
you
access
the
Server
Console
(“GUI”).
Initialization
and
Configuration
Wizard
Welcome
Screen
Step
1:
Change
the
config
shell
password,
password
Step
3:
Set
the
Time
Zone,
Date
and
Time
Settings
Step
2:
Change
the
Network
Settings
Step
4:
Set
Server
ID
Settings
Initialization
and
Configuration
Wizard
Completion
Screens
On
logging
into
the
Server
Config
Shell,
type
the
command
help
to
view
the
list
of
available
commands

3Com AirProtect Enterprise Quick Setup Guide
6
Step
7:
Set
up
the
Server
DNS
Entry
Add
a
DNS
entry
‘wifi
‐
security
‐
server’
in
your
organization’s/enterprise
DNS
server.
This
entry
should
point
to
the
IP
Address
of
the
Server
configured
in
Step
6
(Complete
Server
Initialization
and
Setup
Wizard)—Sub
step
2
(Change
the
Network
Settings).
Adding
this
entry
serves
two
purposes:
A.
Sensors
can
connect
to
the
Server
with
“zero
configuration”
if
they
are
connected
to
a
DHCP
enabled
subnet.
B.
You
can
access
the
Server
using
the
address
‘https://
wifi
‐
security
‐
server’.
Step
8:
Access
the
3Com
AirProtect
Enterprise
Console
(GUI)
Important!
The
minimum
system
requirements
to
access
the
3Com
AirProtect
Enterprise
GUI
Console
are
a
laptop
with
Intel
P4
X86
1.4
GHz
Processor,
512
MB
RAM,
,Windows
2000
or
XP
Operating
System,
IE
5.5
or
higher,
and
JRE
1
4.2
only.
A.
Type
‘https://
wifi
‐
security
‐
server’
to
access
the
3Com
AirProtect
Enterprise
Console.
The
3Com
AirProtect
Enterprise
Console
can
take
up
to
2
minutes
to
load.
Important!
Pop
‐
up
blockers
(if
any)
must
be
disabled
on
the
Web
browser.
The
Reuse
windows
for
launching
shortcuts
option
in
Tools
‐
>
Internet
Options
‐
>
Advanced
shoul
be
deselected
in
the
Internet
Explorer
Web
browser.
B.
Click
Yes
on
each
of
the
Security
Alert/Warning
pop
‐
up
screens.

3Com AirProtect Enterprise Quick Setup Guide
7
C.
Type
the
default
username:
admin
and
password:
password
on
the
Login
screen.
Important!
If
you
see
a
blank
screen
instead
of
the
3Com
AirProtect
Enterprise
Console
Login
screen
in
the
pop
‐
up
window,
despite
having
Sun
JRE
1.4.2,
then
Sun
JRE
1.4.2
may
not
be
the
default
plug
‐
in
for
your
Web
browser.
To
ensure
that
Sun
JRE
1.4.2
is
the
default
plug
‐
in
for
your
Web
browser,
do
the
following:
1.
If
you
see
a
“Java
Cup”
icon
in
the
system
tray,
right
click
it
and
select
“Open
Control
Panel”.
2.
If
you
do
not
see
the
icon,
click
Start
Æ
Settings
Æ
Control
Panel
and
double
‐
click
the
Java
Plug
‐
in
icon.
3.
Once
the
Java
™
Plug
‐
in
Control
Panel
dialog
is
open,
go
to
the
Browser
tab
and
select
the
checkbox
Microsoft
Internet
Explorer
.
D.
On
the
End
User
License
Agreement
(EULA)
screen,
read
the
agreement
carefully
and
select
I
have
read
and
agree
to
the
Licensing
Agreement
above
.
Click
<
Next>
.
Login
Information

3Com AirProtect Enterprise Quick Setup Guide
8
E.
If
you
see
the
Welcome
screen,
close
the
window.
You
are
done
with
the
Server
Setup.
You
will
revisit
the
Welcome
screen
later.

3Com AirProtect Enterprise Quick Setup Guide
9
Step
9:
Connect
3Com
AirProtect
Sensors
to
the
Network
Power
and
Connect
to
the
Network
A.
Ensure
that
the
3Com
AirProtect
Enterprise
Server
is
already
running
on
your
network.
Note:
Make
sure
that
a
DNS
entry
‘wifi
‐
security
‐
server’
is
set
up
on
all
DNS
Servers.
This
entry
should
point
to
the
IP
address
of
the
Server.
Otherwise,
configure
the
Sensor
manually.
Please
refer
to
the
3Com
AirProtect
Enterprise
Installation
Guide
for
details.
B.
Use
network
interface
cables
to
connect
3Com
AirProtect
Sensors
to
all
the
network
segments
(subnets)
that
need
to
be
protected.
Make
sure
that
the
network
segment
is
DHCP
enabled.
Otherwise,
configure
the
IP
address
of
the
3Com
AirProtect
Sensor
manually.
Note:
Log
in
to
the
Server
using
SSH.
Run
the
command
‘get
sensor
list’
to
check
if
all
the
Sensors
added
have
been
detected
by
the
Server.
If
all
the
Sensors
are
connected,
go
to
the
next
step.
If
some
Sensors
are
not
connected,
then
you
may
need
to
configure
the
Sensors
manually.
C.
Wait
for
the
status
of
the
LEDs
to
stabilize.
This
process
may
take
up
to
2
minutes.
D.
If
all
LEDs
glow
green,
then
the
3Com
AirProtect
Sensor
is
operational
and
connected
to
the
3Com
AirProtect
Enterprise
Server.
E.
If
Step
D
succeeds,
the
Sensor
is
now
fully
operational
and
is
ready
to
protect
your
network.
LED1
Solid
Green
LED2
Solid
Green
LED3
Solid
Green
LED4
Solid
Green

3Com AirProtect Enterprise Quick Setup Guide
10
Important!
If
the
LED
status
at
the
end
of
Step
D
does
not
match
the
status
shown
in
this
Quick
Setup
Guide,
refer
to
the
3Com
AirProtect
Enterprise
Installation
Guide
for
more
details.
Step
10:
Begin
the
System
Setup
Wizard
and
Select
Installation
Type
A.
Log
in
to
the
3Com
AirProtect
Enterprise
Console
with
the
default
username:
admin
and
password:
password
.
B.
Click
Start
on
the
‘System
Setup
Wizard
Welcome’
screen
and
then
select
one
of
the
installation
types
listed
below
the
figure
on
the
‘Select
your
Installation
Type’
screen.
C.
Select
Typical
Installation
and
click
Next
.
Note
:
Selecting
Typical
Installation
generally
satisfies
most
of
the
desired
requirements
such
as:
a
typical
setup
with
Wi
‐
Fi
already
installed,
automatic
AP
movement
to
Rogue
and
External
folders,
automatic
classification
only
for
Uncategorized
Clients,
Intrusion
Prevention
Policy
enabled
for
Rogue
APs,
Mis
‐
configured
APs,
Client
Mis
‐
association,
Unauthorized
Associations,
Ad
hoc
connections,
and
Honeypot/Evil
Twin
APs,
and
so
on.
You
can
change
the
policies
later
as
per
your
needs
from
the
Administration
tab.

3Com AirProtect Enterprise Quick Setup Guide
11
Step
11:
Complete
the
3Com
AirProtect
Enterprise
System
Setup
Wizard
Follow
the
steps
in
the
System
Setup
Wizard
to
specify
the
802.11
Security,
Device
Classification,
and
Intrusion
Prevention
Policies.
Click
the
icon
to
view
details.

3Com AirProtect Enterprise Quick Setup Guide
12
Step
12:
Enable
Global
Flags
Event
generation
and
intrusion
prevention
activation
flags
are
turned
off
globally
on
completion
of
the
System
Setup
Wizard
to
avoid
spurious
generation
of
events.
The
Activation
of
Intrusion
Prevention
and
Event
Generation
icon
appears
on
the
Navigation
bar
as
shown
in
the
figure
below.
Once
your
deployment
is
stable
and
fully
configured,
turn
these
flags
on
to
activate
event
generation
and
intrusion
prevention
activity
by
selecting
the
check
the
boxes
on
the
Administration
Æ
Deployment
Æ
Activation
screen
as
shown
in
the
figure
below.
The
icon
then
does
not
appear
on
the
Navigation
bar.
The
3Com
AirProtect
Enterprise
Server
is
installed
and
configured!
Intrusion
Prevention
and
Event
Generation
turned
OFF
globally