User ManualTable of ContentsPreface15Purpose of This Guide15How This Guide is Organized15Document Conventions15Contacting Allied Telesis16Online Support16Email and Telephone Support16Warranty16Where to Find Web-based Guides16Returning Products16Sales or Corporate Information16Management Software Updates16Tell Us What You Think16Chapter 1: Preparing to Set Up the AT-TQ2403 Wireless Access Point17Setting Up the Administrator’s Computer17Setting Up the Wireless Client Computers18Understanding Dynamic and Static IP Addressing on the AT-TQ2403 Management Software19How Does the Access Point Obtain an IP Address at Start-up?19Dynamic IP Addressing19Static IP Addressing19Recovering an IP Address20Chapter 2: Setting up the AT-TQ2403 Management Software21Running Kick Start to Find Access Points on the Network21Logging in to the AT-TQ2403 Management Software23Configuring the Basic Settings and Starting the Wireless Network25Configuring the Basic Settings25Chapter 3: Configuring Basic Settings27Navigating to Basic Settings27Review / Describe the Access Point28Provide Network Settings29Update Basic Settings30Basic Settings for a Standalone Access Point30Setting User Interface Scheme Preferences30Navigation30Chapter 4: Managing Access Points and Clusters31Navigating to Access Points Management32Understanding Clustering32What is a Cluster?32How Many APs Can a Cluster Support?32Only the same country domain setting can be clustered.32What Kinds of APs Can Cluster Together?33Which Settings are Shared as Part of the Cluster Configuration and Which Are Not?33Settings Shared in the Cluster Configuration33Settings Not Shared by the Cluster34Cluster Formation34Cluster Size and Membership34Intra-Cluster Security35Understanding Access Point Settings35Modifying the Location Description36Setting the Cluster Name36Stopping Clustering37Starting Clustering37Navigating to Configuration Information for a Specific AP and Managing Standalone APs37Navigating to an AP by Using its IP Address in a URL38Chapter 5: Managing User Accounts39Navigating to User Management for Clustered Access Points39Viewing User Accounts40Adding a User40Editing a User Account41Enabling and Disabling User Accounts41Enabling a User Account41Disabling a User Account42Removing a User Account42Backing Up and Restoring a User Database42Backing Up the User Database42Restoring a User Database from a Backup File42Chapter 6: Session Monitoring43Navigating to Session Monitoring43Understanding Session Monitoring Information43Sorting Session Information45Refreshing Session Information45Chapter 7: Channel Management46Navigating to Channel Management46Understanding Channel Management47How it Works in a Nutshell47For the Curious: More About Overlapping Channels47Example: A Network Before and After Channel Management47Configuring and Viewing Channel Management Settings48Stopping/Starting Automatic Channel Assignment48Viewing Current Channel Assignments and Setting Locks49Update Current Channel Settings (Manual Setting)49Viewing Last Proposed Set of Changes50Configuring Advanced Settings (Customizing and Scheduling Channel Plans)50Update Advanced Settings51Chapter 8: Wireless Neighborhood52Navigating to Wireless Neighborhood52Understanding Wireless Neighborhood Information53Viewing Wireless Neighborhood53Viewing Details for a Cluster Member55Chapter 9: Configuring Security57Understanding Security Issues on Wireless Networks57How Do I Know Which Security Mode to Use?57Comparison of Security Modes for Key Management, Authentication and Encryption Algorithms58When to Use Unencrypted (No Security)58Recommendations58See Also58When to Use Static WEP58Recommendations59See Also59When to Use IEEE 802.1x59Recommendations59See Also60When to Use WPA Personal60Recommendations60See Also60When to Use WPA Enterprise60Recommendations61See Also61Does Prohibiting the Broadcast SSID Enhance Security?62Navigating to Security Settings62Configuring Security Settings62Broadcast SSID, Station Isolation, and Security Mode63None (Plain-text)64Guest Network64Static WEP65Rules to Remember for Static WEP67Example of Using Static WEP68Static WEP with Transfer Key Indexes on Client Stations69IEEE 802.1x69WPA Personal71WPA Enterprise73Updating Settings77Chapter 10: Maintenance and Monitoring78Interfaces78Ethernet (Wired) Settings79Wireless Settings79Event Logs79Enabling or Disabling Persistence80Severity80Depth81Log Relay Host for Kernel Messages81Understanding Remote Logging81Setting Up the Log Relay Host82Enabling or Disabling the Log Relay Host on the Status > Events Page82Update Settings82Events Log83Transmit/Receive Statistics83Associated Wireless Clients84Link Integrity Monitoring85Neighboring Access Points85Chapter 11: Setting the Ethernet (Wired) Interface88Navigating to Ethernet (Wired) Settings88Setting the DNS HostName89Enabling or Disabling Guest Access90Configuring an Internal LAN and a Guest Network90Enabling or Disabling Guest Access and Choosing a Virtual Network90Enabling or Disabling Virtual Wireless Networks on the AP90Enabling or Disabling Standby Power Saving91Configuring LAN or Internal Interface Ethernet Settings91Configuring Guest Interface Ethernet (Wired) Settings94Updating Settings94Chapter 12: Setting the Wireless Interface95Navigating to Wireless Settings95Configuring 802.11d Regulatory Domain Support96802.11h Regulatory Domain Control96Configuring the Radio Interface97Configuring "Internal" LAN Wireless Settings98Configuring "Guest" Network Wireless Settings99Updating Settings99Chapter 13: Setting up Guest Access100Understanding the Guest Interface100Configuring the Guest Interface101Configuring a Guest Network on a Virtual LAN101Configuring the Welcome Screen (Captive Portal)101Using the Guest Network as a Client102Deployment Example102Chapter 14: Configuring Virtual Wireless Networks104Navigating to Virtual Wireless Network Settings104Configuring VLANs105Updating Settings106Chapter 15: Configuring Radio Settings107Understanding Radio Settings107Navigating to Radio Settings107Updating Settings113Chapter 16: Controlling Access by MAC Address Filtering114Navigating to MAC Filtering Settings114Using MAC Filtering114Updating Settings115Chapter 17: Load Balancing116Understanding Load Balancing116Identifying the Imbalance: Overworked or Under-utilized Access Points116Specifying Limits for Utilization and Client Associations116Load Balancing and QoS117Navigating to Load Balancing Settings117Configuring Load Balancing117Updating Settings118Chapter 18: Pre-Config Rogue AP119Navigating to Pre-Config Rogue AP Settings119Using Pre-Config Rogue AP120Updating Settings120Chapter 19: Configuring Quality of Service (QoS)121Understanding QoS121QoS and Load Balancing121802.11e and WMM Standards Support122QoS Queues and Parameters to Coordinate Traffic Flow122QoS Queues and Diff-Serv Code Point (DSCP) on Packets122EDCA Control of Data Frames and Arbitration Interframe Spaces123Random Backoff and Minimum / Maximum Contention Windows124Packet Bursting for Better Performance124Transmission Opportunity (TXOP) Interval for Client Stations124802.1q and DSCP tags125Navigating to QoS Settings126Configuring QoS Queues126Configuring AP EDCA Parameters127Enabling/Disabling Wi-Fi Multimedia129Configuring Station EDCA Parameters129Updating Settings131Chapter 20: Configuring the Wireless Distribution System (WDS)132Understanding the Wireless Distribution System132Using WDS to Bridge Distant Wired LANs132Using WDS to Extend the Network Beyond the Wired Coverage Area133Security Considerations Related to WDS Links133Understanding Static (WEP) Data Encryption133Understanding WPA (PSK) Data Encryption134Navigating to WDS Settings134Configuring WDS Settings135Example of Configuring a WDS Link136Updating Settings137Chapter 21: Configuring Simple Network Management Protocol (SNMP) on the AP138Understanding SNMP138Supported MIBs139Navigating to SNMP Settings140Configuring SNMP Settings140Configuring SNMP Traps142Updating SNMP Settings143Chapter 22: Enabling the Network Time Protocol Server144Navigating to Time Protocol Settings144Enabling or Disabling a Network Time Protocol (NTP) Server145Updating Settings145Chapter 23: Backing up and Restoring a Configuration146Navigating to the Access Point’s Configuration Settings146Resetting Factory Default Configuration147Saving the Current Configuration to a Backup File147Restoring the Configuration from a Previously Saved File148Rebooting the Access Point148Upgrading the Firmware149Update150Verifying the Firmware Upgrade150Appendix A: Security Settings on Wireless Clients and RADIUS Server Setup151Network Infrastructure and Choosing Between Built-in or External Authentication Server152I Want to Use the Built-in Authentication Server (EAP-PEAP)152I Want to Use an External RADIUS Server with EAP-TLS Certificates or EAP-PEAP152Make Sure the Wireless Client Software is Up-to-Date152Accessing the Microsoft Windows Wireless Client Security Settings153Configuring a Client to Access an Unsecure Network (No Security)154Configuring Static WEP Security on a Client155Connecting to the Wireless Network with a Static WEP Client157Configuring IEEE 802.1x Security on a Client157IEEE 802.1x Client Using EAP/PEAP158Logging on to the Wireless Network with an IEEE 802.1x PEAP Client161IEEE 802.1x Client Using EAP/TLS Certificate161Connecting to the Wireless Network with an IEEE 802.1x Client Using a Certificate164Configuring WPA/WPA2 Enterprise (RADIUS) Security on a Client165WPA/WPA2 Enterprise (RADIUS) Client Using EAP/PEAP165Logging on to the Wireless Network with a WPA PEAP Client168WPA/WPA2 Enterprise (RADIUS) Client Using EAP-TLS Certificate169Logging on to the Wireless Network with a WPA Client Using a Certificate172WPA/WPA2 Enterprise (RADIUS) Client Using EAP-SIM Certificate172Logging on to the Wireless Network with a WPA Client Using SIM card174Configuring WPA/WPA2 Personal (PSK) Security on a Client175Connecting to the Wireless Network with a WPA-PSK Client176Configuring an External RADIUS Server to Recognize the AT-TQ2403 Wireless Access Point176Obtaining a TLS-EAP Certificate for a Client180Configuring RADIUS Server for VLAN tags183Configuring a RADIUS server183Appendix B: Troubleshooting185Wireless Distribution System (WDS) Problems and Solutions185Cluster Recovery185Reboot or Reset Access Point185BootLoader Recovery186Appendix C: Command Line Interface (CLI) for AP Configuration187Comparison of Settings Configurable with the CLI and Web UI188How to Access the CLI for an Access Point190Telnet Connection to the AP190SSH Connection to the AP191Quick View of Commands and How to Get Help192Commands and Syntax192Getting Help on Commands at the CLI195Ready to Get Started?197Command Usage and Configuration Examples197Understanding Interfaces as Presented in the CLI197Understanding CLI Validation of Configuration Settings198Saving Configuration Changes198Basic Settings199Get the IP Address for an Access Point200Get the MAC Address for an Access Point200Get Both the IP Address and MAC Address200Get Common Information on All Interfaces for an AP201Get the Firmware Version for the Access Point202Get the Location of the Access Point202Set the Location for an Access Point202Get the Current Password202Set the Password202Get the Wireless Network Name (SSID)203Set the Wireless Network Name (SSID)203Access Point and Cluster Settings203Determine if the AP is a Cluster Member or in Standalone Mode (whilst obtaining all cluster properties)203Determine only whether an AP is clustered or not204Determine the name of the cluster your AP is part of204Determine the location of the AP that is part of the cluster204User Accounts204Get All User Accounts205Add Users205Remove a User Account206Status206Get Information on the Management Interface for the AP208Get Current Settings for the Ethernet (Wired) Management Interface209Get All Wired Settings for the Wired Management Interface209Get Current Settings for the Ethernet (Wired) Guest Interface209Get the MAC Address for the Wireless Internal Interface209Get the Network Name (SSID) for the Wireless Internal Interface210Get current Wireless (Radio) Settings210Get the Current IEEE 802.11 Radio Mode210Get the Channel the AP is Currently Using210Get Common Radio Settings for the First Radio210Get All Radio Settings on the First Radio210Get Status on Events211Get Status on Persistence211Enable or Disable Persistence211Specify the Severity of Messages to be Displayed in the Event Log211Specify the Depth of the Event Log212Enable Remote Logging and Specify the Log Relay Host for the Log212Prerequisites for Remote Logging212View Log Settings212Enable / Disable Log Relay Host213Specify the Relay Host213Specify the Relay Port214Review Log Settings After Configuring Log Relay Host214Get Transmit / Receive Statistics214Get Client Associations214Get Neighboring APs215Ethernet (Wired) Interface216Get the DNS Name217Set the DNS Name217Get/Change the Connection Type (DHCP or Static IP)217To get the connection type:218To reset the connection type from DHCP to Static IP:218To reset the connection type from Static IP to DHCP:218To view the new settings:218Re-Configure Static IP Addressing Values219Set the Static IP Address219Set the Static Subnet Mask Address219Set the IP Address for the Default Gateway219Set DNS Nameservers to Use Static IP Addresses (Dynamic to Manual Mode)219Set DNS Nameservers to Use DHCP IP Addressing (Manual to Dynamic Mode)220Wireless Interface220Guest Access220Find out if Guest Access is Enabled221Enable or Disable Guest Access221Find out if Guest Access is set up on a VLAN or the second Ethernet Port221Enable / Configure Guest Access on VLANs221Enable/Configure Guest Login Welcome Page222View Guest Login Settings222Enable/Disable the Guest Welcome Page223Set Guest Welcome Page Text223Review Guest Login Settings223Configuring Virtual Wireless Networks (VWNs)223Find out whether VWNs are enabled or not225Enable or Disable a VWN225Get the VLAN ID of a VWN225Set the VLAN ID of a VWN225Get the SSID of a VWN226Set the SSID for a VWN226Determine whether Broadcast SSID is enabled226Enable or Disable the Broadcast SSID226Configure Security on the VWN226Example: Configuring VWNs227Configuring VWN "One" on a Single Radio AP227Configuring VWN "Seven" on a Dual Radio AP227Security228Get the Current Security Mode229Get Detailed Description of Current Security Settings229Set the Broadcast SSID (Allow or Prohibit)230Enable / Disable Station Isolation230Set Security to Plain Text230Set Security to Static WEP2311. Set the Security Mode2312. Set the Transfer Key Index2313. Set the Key Length2314. Set the Key Type2325. Set the WEP Keys2326. Set the Authentication Algorithm2327. Get Current Security Settings After Re-Configuring to Static WEP Security Mode233Set Security to IEEE 802.1x2341. Set the Security Mode2352. Set the Authentication Server2353. Set the RADIUS Key (For External RADIUS Server Only)2354. Enable RADIUS Accounting (External RADIUS Server Only)2355. Get Current Security Settings After Re-Configuring to IEEE 802.1x Security Mode236Set Security to WPA/WPA2 Personal (PSK)2361. Set the Security Mode2362. Set the WPA Versions2373. Set the Cipher Suites2374. Set the Pre-shared Key2385. Get Current Security Settings After Re-Configuring to WPA/WPA2 Personal (PSK)238Set Security to WPA/WPA2 Enterprise (RADIUS)2391. Set the Security Mode2392. Set the WPA Versions2403. Enable Pre-Authentication2404. Set the Cipher Suites2415. Set the Authentication Server2426. Set the RADIUS Key (For External RADIUS Server Only)2427. Enable RADIUS Accounting (External RADIUS Server Only)2428. Allow Non-WPA Clients2439. Get Current Security Settings After Re-Configuring to WPA/WPA2 Enterprise (RADIUS)243Radio Settings244Get IEEE 802.11 Radio Mode245Get Radio Channel246Get Basic Radio Settings246Get All Radio Settings246Get Supported Rate Set247Get Basic Rate Set247Configure Radio Settings2471. Turn the Radio On or Off2482. Set the Radio Mode2483. Enable or Disable Super AG2494. Set the Channel Policy2495. Set the Radio Channel2496. Configure Basic and Supported Rate Sets2507. Set the Beacon Interval2528. Set the DTIM Period2529. Set the Fragmentation Threshold25310. Set the RTS Threshold253MAC Filtering2531. Specify an Accept or Deny List2542. Add MAC Addresses of Client Stations to the Filtering List2543. Remove a Client Station’s MAC Address from the Filtering List2544. Getting Current MAC Filtering Settings255Load Balancing255Quality of Service256Enable/Disable Wi-Fi Multimedia257About AP and Station EDCA Parameters257Understanding the Queues for AP and Station258Distinguishing between AP and Station Settings in QoS Commands258Get QoS Settings on the AP258Get QoS Settings on the Client Station258Set Arbitration Interframe Spaces (AIFS)259Set AIFS on the AP259Set AIFS on the Client Station259Setting Minimum and Maximum Contention Windows (cwmin, cwmax)260Set cwmin and cwmax on the AP260Set cwmin and cwmax on the Station260Set the Maximum Burst Length (burst) on the AP261Set Transmission Opportunity Limit (txop-limit) for WMM client stations262Wireless Distribution System (WDS)262Configuring a WDS Link262Setting Security for a WDS link to WPA-Personal263Getting Details on a WDS Configuration263Simple Network Management Protocol (SNMP)2641. Enable/Disable SNMP2642. Set the read-only community name for permitted GETs2643. Set the Port number on which the SNMP agent will listen2644. Allow/Prohibit SNMP SET Commands2655. Set the read-write community name for permitted SETs2656. Restrict the source of SNMP requests to only the designated hosts or subnets2657. Specify hosts or subnets that can make SNMP requests to the AP265Time Protocol2651. Enable the NTP Server2652. Provide the Host Name or Address of an NTP Server2653. Synchronize Automatically2654. Interval to Synchronize2665. Time zone2666. Get Current Time Protocol Settings266Pre-Config Rogue AP266Reboot the AP266Reset the AP to Factory Defaults267Upgrade the Firmware267Keyboard Shortcuts and Tab Completion Help268Keyboard Shortcuts268Tab Completion and Help269CLI Classes and Properties Reference272Glossary274Size: 3.54 MBPages: 292Language: EnglishOpen manual
User ManualTable of ContentsPreface15Purpose of This Guide15How This Guide is Organized15Document Conventions15Contacting Allied Telesis16Online Support16Email and Telephone Support16Warranty16Where to Find Web-based Guides16Returning Products16Sales or Corporate Information16Management Software Updates16Tell Us What You Think16Chapter 1: Preparing to Set Up the AT-TQ2403 Wireless Access Point17Setting Up the Administrator’s Computer17Setting Up the Wireless Client Computers18Understanding Dynamic and Static IP Addressing on the AT-TQ2403 Management Software19How Does the Access Point Obtain an IP Address at Start-up?19Dynamic IP Addressing19Static IP Addressing19Recovering an IP Address20Chapter 2: Setting up the AT-TQ2403 Management Software21Running Kick Start to Find Access Points on the Network21Logging in to the AT-TQ2403 Management Software23Configuring the Basic Settings and Starting the Wireless Network25Configuring the Basic Settings25Chapter 3: Configuring Basic Settings27Navigating to Basic Settings27Review / Describe the Access Point28Provide Network Settings29Update Basic Settings30Basic Settings for a Standalone Access Point30Setting User Interface Scheme Preferences30Navigation30Chapter 4: Managing Access Points and Clusters31Navigating to Access Points Management32Understanding Clustering32What is a Cluster?32How Many APs Can a Cluster Support?32Only the same country domain setting can be clustered.32What Kinds of APs Can Cluster Together?33Which Settings are Shared as Part of the Cluster Configuration and Which Are Not?33Settings Shared in the Cluster Configuration33Settings Not Shared by the Cluster34Cluster Formation34Cluster Size and Membership34Intra-Cluster Security35Understanding Access Point Settings35Modifying the Location Description36Setting the Cluster Name36Stopping Clustering37Starting Clustering37Navigating to Configuration Information for a Specific AP and Managing Standalone APs37Navigating to an AP by Using its IP Address in a URL38Chapter 5: Managing User Accounts39Navigating to User Management for Clustered Access Points39Viewing User Accounts40Adding a User40Editing a User Account41Enabling and Disabling User Accounts41Enabling a User Account41Disabling a User Account42Removing a User Account42Backing Up and Restoring a User Database42Backing Up the User Database42Restoring a User Database from a Backup File42Chapter 6: Session Monitoring43Navigating to Session Monitoring43Understanding Session Monitoring Information43Sorting Session Information45Refreshing Session Information45Chapter 7: Channel Management46Navigating to Channel Management46Understanding Channel Management47How it Works in a Nutshell47For the Curious: More About Overlapping Channels47Example: A Network Before and After Channel Management47Configuring and Viewing Channel Management Settings48Stopping/Starting Automatic Channel Assignment48Viewing Current Channel Assignments and Setting Locks49Update Current Channel Settings (Manual Setting)49Viewing Last Proposed Set of Changes50Configuring Advanced Settings (Customizing and Scheduling Channel Plans)50Update Advanced Settings51Chapter 8: Wireless Neighborhood52Navigating to Wireless Neighborhood52Understanding Wireless Neighborhood Information53Viewing Wireless Neighborhood53Viewing Details for a Cluster Member55Chapter 9: Configuring Security57Understanding Security Issues on Wireless Networks57How Do I Know Which Security Mode to Use?57Comparison of Security Modes for Key Management, Authentication and Encryption Algorithms58When to Use Unencrypted (No Security)58Recommendations58See Also58When to Use Static WEP58Recommendations59See Also59When to Use IEEE 802.1x59Recommendations59See Also60When to Use WPA Personal60Recommendations60See Also60When to Use WPA Enterprise60Recommendations61See Also61Does Prohibiting the Broadcast SSID Enhance Security?62Navigating to Security Settings62Configuring Security Settings62Broadcast SSID, Station Isolation, and Security Mode63None (Plain-text)64Guest Network64Static WEP65Rules to Remember for Static WEP67Example of Using Static WEP68Static WEP with Transfer Key Indexes on Client Stations69IEEE 802.1x69WPA Personal71WPA Enterprise73Updating Settings77Chapter 10: Maintenance and Monitoring78Interfaces78Ethernet (Wired) Settings79Wireless Settings79Event Logs79Enabling or Disabling Persistence80Severity80Depth81Log Relay Host for Kernel Messages81Understanding Remote Logging81Setting Up the Log Relay Host82Enabling or Disabling the Log Relay Host on the Status > Events Page82Update Settings82Events Log83Transmit/Receive Statistics83Associated Wireless Clients84Link Integrity Monitoring85Neighboring Access Points85Chapter 11: Setting the Ethernet (Wired) Interface88Navigating to Ethernet (Wired) Settings88Setting the DNS HostName89Enabling or Disabling Guest Access90Configuring an Internal LAN and a Guest Network90Enabling or Disabling Guest Access and Choosing a Virtual Network90Enabling or Disabling Virtual Wireless Networks on the AP90Enabling or Disabling Standby Power Saving91Configuring LAN or Internal Interface Ethernet Settings91Configuring Guest Interface Ethernet (Wired) Settings94Updating Settings94Chapter 12: Setting the Wireless Interface95Navigating to Wireless Settings95Configuring 802.11d Regulatory Domain Support96802.11h Regulatory Domain Control96Configuring the Radio Interface97Configuring "Internal" LAN Wireless Settings98Configuring "Guest" Network Wireless Settings99Updating Settings99Chapter 13: Setting up Guest Access100Understanding the Guest Interface100Configuring the Guest Interface101Configuring a Guest Network on a Virtual LAN101Configuring the Welcome Screen (Captive Portal)101Using the Guest Network as a Client102Deployment Example102Chapter 14: Configuring Virtual Wireless Networks104Navigating to Virtual Wireless Network Settings104Configuring VLANs105Updating Settings106Chapter 15: Configuring Radio Settings107Understanding Radio Settings107Navigating to Radio Settings107Updating Settings113Chapter 16: Controlling Access by MAC Address Filtering114Navigating to MAC Filtering Settings114Using MAC Filtering114Updating Settings115Chapter 17: Load Balancing116Understanding Load Balancing116Identifying the Imbalance: Overworked or Under-utilized Access Points116Specifying Limits for Utilization and Client Associations116Load Balancing and QoS117Navigating to Load Balancing Settings117Configuring Load Balancing117Updating Settings118Chapter 18: Pre-Config Rogue AP119Navigating to Pre-Config Rogue AP Settings119Using Pre-Config Rogue AP120Updating Settings120Chapter 19: Configuring Quality of Service (QoS)121Understanding QoS121QoS and Load Balancing121802.11e and WMM Standards Support122QoS Queues and Parameters to Coordinate Traffic Flow122QoS Queues and Diff-Serv Code Point (DSCP) on Packets122EDCA Control of Data Frames and Arbitration Interframe Spaces123Random Backoff and Minimum / Maximum Contention Windows124Packet Bursting for Better Performance124Transmission Opportunity (TXOP) Interval for Client Stations124802.1q and DSCP tags125Navigating to QoS Settings126Configuring QoS Queues126Configuring AP EDCA Parameters127Enabling/Disabling Wi-Fi Multimedia129Configuring Station EDCA Parameters129Updating Settings131Chapter 20: Configuring the Wireless Distribution System (WDS)132Understanding the Wireless Distribution System132Using WDS to Bridge Distant Wired LANs132Using WDS to Extend the Network Beyond the Wired Coverage Area133Security Considerations Related to WDS Links133Understanding Static (WEP) Data Encryption133Understanding WPA (PSK) Data Encryption134Navigating to WDS Settings134Configuring WDS Settings135Example of Configuring a WDS Link136Updating Settings137Chapter 21: Configuring Simple Network Management Protocol (SNMP) on the AP138Understanding SNMP138Supported MIBs139Navigating to SNMP Settings140Configuring SNMP Settings140Configuring SNMP Traps142Updating SNMP Settings143Chapter 22: Enabling the Network Time Protocol Server144Navigating to Time Protocol Settings144Enabling or Disabling a Network Time Protocol (NTP) Server145Updating Settings145Chapter 23: Backing up and Restoring a Configuration146Navigating to the Access Point’s Configuration Settings146Resetting Factory Default Configuration147Saving the Current Configuration to a Backup File147Restoring the Configuration from a Previously Saved File148Rebooting the Access Point148Upgrading the Firmware149Update150Verifying the Firmware Upgrade150Appendix A: Security Settings on Wireless Clients and RADIUS Server Setup151Network Infrastructure and Choosing Between Built-in or External Authentication Server152I Want to Use the Built-in Authentication Server (EAP-PEAP)152I Want to Use an External RADIUS Server with EAP-TLS Certificates or EAP-PEAP152Make Sure the Wireless Client Software is Up-to-Date152Accessing the Microsoft Windows Wireless Client Security Settings153Configuring a Client to Access an Unsecure Network (No Security)154Configuring Static WEP Security on a Client155Connecting to the Wireless Network with a Static WEP Client157Configuring IEEE 802.1x Security on a Client157IEEE 802.1x Client Using EAP/PEAP158Logging on to the Wireless Network with an IEEE 802.1x PEAP Client161IEEE 802.1x Client Using EAP/TLS Certificate161Connecting to the Wireless Network with an IEEE 802.1x Client Using a Certificate164Configuring WPA/WPA2 Enterprise (RADIUS) Security on a Client165WPA/WPA2 Enterprise (RADIUS) Client Using EAP/PEAP165Logging on to the Wireless Network with a WPA PEAP Client168WPA/WPA2 Enterprise (RADIUS) Client Using EAP-TLS Certificate169Logging on to the Wireless Network with a WPA Client Using a Certificate172WPA/WPA2 Enterprise (RADIUS) Client Using EAP-SIM Certificate172Logging on to the Wireless Network with a WPA Client Using SIM card174Configuring WPA/WPA2 Personal (PSK) Security on a Client175Connecting to the Wireless Network with a WPA-PSK Client176Configuring an External RADIUS Server to Recognize the AT-TQ2403 Wireless Access Point176Obtaining a TLS-EAP Certificate for a Client180Configuring RADIUS Server for VLAN tags183Configuring a RADIUS server183Appendix B: Troubleshooting185Wireless Distribution System (WDS) Problems and Solutions185Cluster Recovery185Reboot or Reset Access Point185BootLoader Recovery186Appendix C: Command Line Interface (CLI) for AP Configuration187Comparison of Settings Configurable with the CLI and Web UI188How to Access the CLI for an Access Point190Telnet Connection to the AP190SSH Connection to the AP191Quick View of Commands and How to Get Help192Commands and Syntax192Getting Help on Commands at the CLI195Ready to Get Started?197Command Usage and Configuration Examples197Understanding Interfaces as Presented in the CLI197Understanding CLI Validation of Configuration Settings198Saving Configuration Changes198Basic Settings199Get the IP Address for an Access Point200Get the MAC Address for an Access Point200Get Both the IP Address and MAC Address200Get Common Information on All Interfaces for an AP201Get the Firmware Version for the Access Point202Get the Location of the Access Point202Set the Location for an Access Point202Get the Current Password202Set the Password202Get the Wireless Network Name (SSID)203Set the Wireless Network Name (SSID)203Access Point and Cluster Settings203Determine if the AP is a Cluster Member or in Standalone Mode (whilst obtaining all cluster properties)203Determine only whether an AP is clustered or not204Determine the name of the cluster your AP is part of204Determine the location of the AP that is part of the cluster204User Accounts204Get All User Accounts205Add Users205Remove a User Account206Status206Get Information on the Management Interface for the AP208Get Current Settings for the Ethernet (Wired) Management Interface209Get All Wired Settings for the Wired Management Interface209Get Current Settings for the Ethernet (Wired) Guest Interface209Get the MAC Address for the Wireless Internal Interface209Get the Network Name (SSID) for the Wireless Internal Interface210Get current Wireless (Radio) Settings210Get the Current IEEE 802.11 Radio Mode210Get the Channel the AP is Currently Using210Get Common Radio Settings for the First Radio210Get All Radio Settings on the First Radio210Get Status on Events211Get Status on Persistence211Enable or Disable Persistence211Specify the Severity of Messages to be Displayed in the Event Log211Specify the Depth of the Event Log212Enable Remote Logging and Specify the Log Relay Host for the Log212Prerequisites for Remote Logging212View Log Settings212Enable / Disable Log Relay Host213Specify the Relay Host213Specify the Relay Port214Review Log Settings After Configuring Log Relay Host214Get Transmit / Receive Statistics214Get Client Associations214Get Neighboring APs215Ethernet (Wired) Interface216Get the DNS Name217Set the DNS Name217Get/Change the Connection Type (DHCP or Static IP)217To get the connection type:218To reset the connection type from DHCP to Static IP:218To reset the connection type from Static IP to DHCP:218To view the new settings:218Re-Configure Static IP Addressing Values219Set the Static IP Address219Set the Static Subnet Mask Address219Set the IP Address for the Default Gateway219Set DNS Nameservers to Use Static IP Addresses (Dynamic to Manual Mode)219Set DNS Nameservers to Use DHCP IP Addressing (Manual to Dynamic Mode)220Wireless Interface220Guest Access220Find out if Guest Access is Enabled221Enable or Disable Guest Access221Find out if Guest Access is set up on a VLAN or the second Ethernet Port221Enable / Configure Guest Access on VLANs221Enable/Configure Guest Login Welcome Page222View Guest Login Settings222Enable/Disable the Guest Welcome Page223Set Guest Welcome Page Text223Review Guest Login Settings223Configuring Virtual Wireless Networks (VWNs)223Find out whether VWNs are enabled or not225Enable or Disable a VWN225Get the VLAN ID of a VWN225Set the VLAN ID of a VWN225Get the SSID of a VWN226Set the SSID for a VWN226Determine whether Broadcast SSID is enabled226Enable or Disable the Broadcast SSID226Configure Security on the VWN226Example: Configuring VWNs227Configuring VWN "One" on a Single Radio AP227Configuring VWN "Seven" on a Dual Radio AP227Security228Get the Current Security Mode229Get Detailed Description of Current Security Settings229Set the Broadcast SSID (Allow or Prohibit)230Enable / Disable Station Isolation230Set Security to Plain Text230Set Security to Static WEP2311. Set the Security Mode2312. Set the Transfer Key Index2313. Set the Key Length2314. Set the Key Type2325. Set the WEP Keys2326. Set the Authentication Algorithm2327. Get Current Security Settings After Re-Configuring to Static WEP Security Mode233Set Security to IEEE 802.1x2341. Set the Security Mode2352. Set the Authentication Server2353. Set the RADIUS Key (For External RADIUS Server Only)2354. Enable RADIUS Accounting (External RADIUS Server Only)2355. Get Current Security Settings After Re-Configuring to IEEE 802.1x Security Mode236Set Security to WPA/WPA2 Personal (PSK)2361. Set the Security Mode2362. Set the WPA Versions2373. Set the Cipher Suites2374. Set the Pre-shared Key2385. Get Current Security Settings After Re-Configuring to WPA/WPA2 Personal (PSK)238Set Security to WPA/WPA2 Enterprise (RADIUS)2391. Set the Security Mode2392. Set the WPA Versions2403. Enable Pre-Authentication2404. Set the Cipher Suites2415. Set the Authentication Server2426. Set the RADIUS Key (For External RADIUS Server Only)2427. Enable RADIUS Accounting (External RADIUS Server Only)2428. Allow Non-WPA Clients2439. Get Current Security Settings After Re-Configuring to WPA/WPA2 Enterprise (RADIUS)243Radio Settings244Get IEEE 802.11 Radio Mode245Get Radio Channel246Get Basic Radio Settings246Get All Radio Settings246Get Supported Rate Set247Get Basic Rate Set247Configure Radio Settings2471. Turn the Radio On or Off2482. Set the Radio Mode2483. Enable or Disable Super AG2494. Set the Channel Policy2495. Set the Radio Channel2496. Configure Basic and Supported Rate Sets2507. Set the Beacon Interval2528. Set the DTIM Period2529. Set the Fragmentation Threshold25310. Set the RTS Threshold253MAC Filtering2531. Specify an Accept or Deny List2542. Add MAC Addresses of Client Stations to the Filtering List2543. Remove a Client Station’s MAC Address from the Filtering List2544. Getting Current MAC Filtering Settings255Load Balancing255Quality of Service256Enable/Disable Wi-Fi Multimedia257About AP and Station EDCA Parameters257Understanding the Queues for AP and Station258Distinguishing between AP and Station Settings in QoS Commands258Get QoS Settings on the AP258Get QoS Settings on the Client Station258Set Arbitration Interframe Spaces (AIFS)259Set AIFS on the AP259Set AIFS on the Client Station259Setting Minimum and Maximum Contention Windows (cwmin, cwmax)260Set cwmin and cwmax on the AP260Set cwmin and cwmax on the Station260Set the Maximum Burst Length (burst) on the AP261Set Transmission Opportunity Limit (txop-limit) for WMM client stations262Wireless Distribution System (WDS)262Configuring a WDS Link262Setting Security for a WDS link to WPA-Personal263Getting Details on a WDS Configuration263Simple Network Management Protocol (SNMP)2641. Enable/Disable SNMP2642. Set the read-only community name for permitted GETs2643. Set the Port number on which the SNMP agent will listen2644. Allow/Prohibit SNMP SET Commands2655. Set the read-write community name for permitted SETs2656. Restrict the source of SNMP requests to only the designated hosts or subnets2657. Specify hosts or subnets that can make SNMP requests to the AP265Time Protocol2651. Enable the NTP Server2652. Provide the Host Name or Address of an NTP Server2653. Synchronize Automatically2654. Interval to Synchronize2665. Time zone2666. Get Current Time Protocol Settings266Pre-Config Rogue AP266Reboot the AP266Reset the AP to Factory Defaults267Upgrade the Firmware267Keyboard Shortcuts and Tab Completion Help268Keyboard Shortcuts268Tab Completion and Help269CLI Classes and Properties Reference272Glossary274Size: 3.54 MBPages: 292Language: EnglishOpen manual