English dropdown-ico

Manual Allied Telesis AT-TQ2403

292 pages 3.52 mb
Download

Go to site of 292

Summary
  • Allied Telesis AT-TQ2403 - page 1

    AT-TQ2403 Management Software User's Guide PN 613-001156 Rev. B ...

  • Allied Telesis AT-TQ2403 - page 2

    2 AT-TQ2403 - Ma nagement Software - User's Guide Copyright © 2011 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc. Microsoft and Internet Explorer are re gistered trademarks of Microsoft Co rporation. Netscape Navigator is a registered trademark ...

  • Allied Telesis AT-TQ2403 - page 3

    AT-TQ2403 Ma nagement Software User's Gu ide 3 S AFETY N OTICE  Do not open service or change any component.  Only qualified technicians are allo wed to service the equipment.  Observe safety precautions to avoid electric shock  Check voltage before connecti ng to the power supply. Connecting to the wrong voltage will damage the eq ...

  • Allied Telesis AT-TQ2403 - page 4

    4 AT-TQ2403 - Ma nagement Software - User's Guide E LECTRICAL S AFETY AND E MISSIONS S TANDARDS This product meets the fo llowing standards. U.S. Federal Communications Comm ission Interference Statement This equipment has been test ed and found to comply with the limits for a Class B digital device, pursuant to Part 15 of t he FCC Rules. Thes ...

  • Allied Telesis AT-TQ2403 - page 5

    AT-TQ2403 Ma nagement Software User's Gu ide 5 Electromagnetic compatibility and Radio spectrum Matters (ERM); Wideband transmission systems ; Data transmission equipment operating in the 2,4 GH z ISM band and using wide band mo dulati o n techniques; Harmonized EN covering es sential requirements under article 3.2 of the R&TTE Directive E ...

  • Allied Telesis AT-TQ2403 - page 6

    6 AT-TQ2403 - Ma nagement Software - User's Guide C ONTENTS Preface ............................................................................................................................... .....................................15 Purpose of This Guide ....................................................................................... ...

  • Allied Telesis AT-TQ2403 - page 7

    AT-TQ2403 Ma nagement Software User's Gu ide 7 Navigating to Configuration Information for a Specific AP and Managing Standalone APs ........... 37 Navigating to an AP by Us ing its IP Address in a URL ..........................................................................38 Chapter 5: Managing User Accounts ................................ ...

  • Allied Telesis AT-TQ2403 - page 8

    8 AT-TQ2403 - Ma nagement Software - User's Guide Ethernet (Wir ed) Settings ...........................................................................................................................79 Wireless Settings ............................................................................................................................ ...

  • Allied Telesis AT-TQ2403 - page 9

    AT-TQ2403 Ma nagement Software User's Gu ide 9 Chapter 17: Load Balancing ............................................................................................................................ 116 Understanding Load Balancing ................................................................................................................ ...

  • Allied Telesis AT-TQ2403 - page 10

    10 AT-TQ2403 - Ma nagement Software - User's Guide Appendix A: Security Settings on Wi reless Clients and RADIUS Server Setup ................................. 151 Network Infrastructure a nd Choosing Between Built-in or Externa l Authentication S erver ... 152 Make Sure the Wireless Client Software is Up-to -Date ............................. ...

  • Allied Telesis AT-TQ2403 - page 11

    AT-TQ2403 Ma nagement Software User's Gu ide 11 Keyboard Shortcuts ............................................................................................................................... .2 6 8 Tab Completion and Help ..................................................................................................................... 2 ...

  • Allied Telesis AT-TQ2403 - page 12

    12 AT-TQ2403 - Ma nagement Software - User's Guide F IGURES Figure 1: Kick Start Welcome Dialog Box ............................................................................................................... 22 Figure 2: Kick Start Se arch Results Dialog Box .................................................................................. ...

  • Allied Telesis AT-TQ2403 - page 13

    AT-TQ2403 Ma nagement Software User's Gu ide 13 Figure 38: Ethernet (Wired) Settings Page ............................................................................................................... 89 Figure 39: Wireless Settings Page .......................................................................................................... ...

  • Allied Telesis AT-TQ2403 - page 14

    14 AT-TQ2403 - Ma nagement Software - User's Guide Figure 78: Radius Server Setti ng – Input New Radius Clie nt ............................................................................. 178 Figure 79: Radius Server Setting – New Radius Client Sett ing .......................................................................... 179 Figure ...

  • Allied Telesis AT-TQ2403 - page 15

    AT-TQ2403 Ma nagement Software User's Gu ide 15 Pr eface Purpose of This Guide This guide is intended for customers and/or networ k adminis trators who are re sponsible for installing and maintaining the AT-TQ 2403 Management S oftware. Ho w This Guide is Organiz ed This guide contains instr uctions on how to install AT-T Q2403 Management Soft ...

  • Allied Telesis AT-TQ2403 - page 16

    16 AT-TQ2403 - Ma nagement Software - User's Guide Contacting Allied T elesis This section provides Allied Telesis contact informatio n for technical support as well as sales and corporate information. Online Suppor t You can request technical support onl ine by accessing the Allied Telesis Knowledge Base: http://www.alliedtelesis.com/support/ ...

  • Allied Telesis AT-TQ2403 - page 17

    AT-TQ2403 Ma nagement Software User's Guide 17 Chapter 1: Pr eparing to Set Up the A T -TQ2403 Wir eless Access P oint Before you plug in and boo t a new AT-TQ2403 Ma nagement Software, review the fol lowing sections fo r a quick check of required hard ware components, softwa re, client conf igurations, and compatibility issues . Make sure you ...

  • Allied Telesis AT-TQ2403 - page 18

    18 AT-TQ2403 - Ma nagement Software - User's Guide The administration web browser must have JavaScript e nabled to support the interactive features of the administrati on interface. It mu st also support HTTP uploads to use the firmware upgrade feature.  AT-TQ2403 Software and Documentation CD This CD contains the Kick Start utility and the ...

  • Allied Telesis AT-TQ2403 - page 19

    AT-TQ2403 Ma nagement Software User's Guide 19 username and password, certificate, or similar user identity proof. Security modes are Static WEP, IEEE 802.1x, WPA with RADI US server, and WPA-PSK. For information on configuri ng security on the access point, see “ Configuring S ecurity ”. Understanding Dynamic and Static IP Addr essing on ...

  • Allied Telesis AT-TQ2403 - page 20

    20 AT-TQ2403 - Ma nagement Software - User's Guide Recovering an IP Address If you experience trouble communicati ng with the access point, you can recover a static IP address by resetting the access point c onfiguration to the factory defaults (see “ Backing up and Restoring a Configuration ”), or you can get a dynamically assigned addres ...

  • Allied Telesis AT-TQ2403 - page 21

    AT-TQ2403 Ma nagement Software User's Guide 21 Chapter 2: Setting up the A T -TQ2403 Mana gement Softwar e Setting up and deploying on e or more AT-TQ2403 Ma nagement Software is in effect creating and launching a wireless n etwork. The Kick Start utility and correspondin g AT-TQ2403 Management Software Basic Settings web page simpli fy this p ...

  • Allied Telesis AT-TQ2403 - page 22

    22 AT-TQ2403 - Ma nagement Software - User's Guide 2. Insert the AT-TQ2403 Wireless Access Point CD into the CD-ROM drive on your computer. The Kick S tart Welcome dialog box is displaye d, as shown in Figure 1 Figure 1: Kick Start Welcome Dialog Box 3. Click Next to search for access points Wait for the search to complete, or until Kick St ar ...

  • Allied Telesis AT-TQ2403 - page 23

    AT-TQ2403 Ma nagement Software User's Guide 23 4. Review the list of access points found Kick S tart d etects the IP addresses of AT-TQ 2 403 Management Software. Access po ints are listed with their locations, me dia acc ess control (MAC) addresses, and IP addresses, as shown in Figure 2. If you are inst alling the first access po int on a si ...

  • Allied Telesis AT-TQ2403 - page 24

    24 AT-TQ2403 - Ma nagement Software - User's Guide Password: friend Figure 4: Log-in Dialog Box  Note: The user name can n ot be modified. 8. Enter the username and password and click OK When you log in for the first time, the Basic Settings page is displayed, as shown in Figure 5. This page displays the global settings for all access po in ...

  • Allied Telesis AT-TQ2403 - page 25

    AT-TQ2403 Ma nagement Software User's Guide 25 Configuring the Basic Settings and Starting the Wireless Netw ork Provide a minimal set of conf iguration information by defi ning the basic settings for your wire less network. These settings are all available on t he Basic Settings p age in the AT-TQ2403 Management Software, and are categorized ...

  • Allied Telesis AT-TQ2403 - page 26

    26 AT-TQ2403 - Ma nagement Software - User's Guide prevent others from seeing your password as you type. Confirm New Password Rety pe the new administrato r password to confirm that you typed it as you intended. Network Name (SSID) En ter a name for the wireless network as a character string. This name will apply to all access points on this n ...

  • Allied Telesis AT-TQ2403 - page 27

    AT-TQ2403 Ma nagement Software User's Guide 27 Chapter 3: Configuring Basic Settings The basic configuration tasks are desc ribed in the f ollowing sectio ns:  Navigating to Basic Settings  Review / Describe the Access Point  Provide Network Settings  Update Basic Settings  Basic Settings for a Standalone Access Point  Settin ...

  • Allied Telesis AT-TQ2403 - page 28

    28 AT-TQ2403 - Ma nagement Software - User's Guide Re view / Describe the Access P oint Figure 7: Basic Settings Page Step 1 Field Description IP Address Shows IP address assigned to this acce ss point. This field is not editable because the IP address is already assigned (either via DHCP, or statically through the Ethernet Settings page as de ...

  • Allied Telesis AT-TQ2403 - page 29

    AT-TQ2403 Ma nagement Software User's Guide 29 Pr o vide Netw ork Settin gs Figure 8: Basic Settings Step 2 Field Description Current Password Enter the current administrator passw ord. You must correctly e n ter the current password before you a re able to change it. New Password Enter a new administrator password. The characters you enter w ...

  • Allied Telesis AT-TQ2403 - page 30

    30 AT-TQ2403 - Ma nagement Software - User's Guide Update Basic Settings Figure 9: Basic Settings Page Step 3 Whe n you have reviewed the new configuration, click U pdate to apply the setti ngs and deploy the access points as a wireless network. Basic Settings for a Standalone Access P oint The Basic Settings tab for a standalo ne access point ...

  • Allied Telesis AT-TQ2403 - page 31

    AT-TQ2403 Ma nagement Software User's Guide 31 Chapter 4: Managing Access P oints and Clusters The AT-TQ2403 Manageme nt Software shows current basic configuration settings for clus tered access points (location, IP address, MAC address, status, and availability) and provides a way of navigating to the full configuration for spec ific APs if t ...

  • Allied Telesis AT-TQ2403 - page 32

    32 AT-TQ2403 - Ma nagement Software - User's Guide Na vigating to Access P oints Manag ement To view or edit information on access poin ts in a cluster, click the Cluster > Access Points tab. Figure 11: Access Points Setting Pa ge Understanding Clusteri ng A key feature of the AT-TQ2403 Management Sof t ware is the ability to form a dynamic ...

  • Allied Telesis AT-TQ2403 - page 33

    AT-TQ2403 Ma nagement Software User's Guide 33 What Kinds of APs Can Cluster Together? A single AT-TQ2403 Wireless Access Point can form a cl uster with itself (a "cluster of one") and with other AT-TQ2403 Wireless Access Points of the same model. In order to be members of the same cluster, access points must be :  Of the same Cou ...

  • Allied Telesis AT-TQ2403 - page 34

    34 AT-TQ2403 - Ma nagement Software - User's Guide When Channel Pl anning is enab led, the radio Channel is not synced across the cl uster.  Security settings  MAC address filtering Settings Not Shared by the Cluster The few exceptions (settings not shared among cluste red access poin ts) are the following, most of which by nature must b ...

  • Allied Telesis AT-TQ2403 - page 35

    AT-TQ2403 Ma nagement Software User's Guide 35 Intra-Cluster Security For purposes of ease-of- use, the clustering component is designed to let new devices join a c luster without strong authentication. Howev er, communications of all data betw een access points in a cluster is protected against casual eavesdropping us ing Secure Sockets Layer ...

  • Allied Telesis AT-TQ2403 - page 36

    36 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Mac Address Media Access Control (MAC) address of the access point. A MAC address is a permanent, unique hardware address for any device that represents an interface to the networ k. The MAC address is assigned by the manufacturer. You cannot change the MAC address. It is pro ...

  • Allied Telesis AT-TQ2403 - page 37

    AT-TQ2403 Ma nagement Software User's Guide 37 Stopping Clustering To stop clustering and remove a partic ular access point from a cluster, do the following . 1. Go to the Administration Web pages for the access point yo u want to remove from the cluster. 2. Click the Cluster > Access Points tab. 3. Click the Stop Clustering button to remov ...

  • Allied Telesis AT-TQ2403 - page 38

    38 AT-TQ2403 - Ma nagement Software - User's Guide All clustered access points are shown on the Cluster > Access Points page. To navigate to clustered access points, you can simply click on the IP addre ss for a specific cluster member show n in the list. Na vigating to an AP b y Using its IP Addr ess in a URL You can also link to the Admin ...

  • Allied Telesis AT-TQ2403 - page 39

    AT-TQ2403 Ma nagement Software User's Guide 39 Chapter 5: Managing User Accounts The AT-TQ2403 M anagement Sof tware includes user manageme nt capabilities for controlling c lient access to access points. User management and authen tication must always be used in conjunc tion with the following two securit y modes, which require use of a RADIU ...

  • Allied Telesis AT-TQ2403 - page 40

    40 AT-TQ2403 - Ma nagement Software - User's Guide Figure 13: User Manage ment Page Vie wing User Accounts User accounts are shown at the top of the screen under " User Accounts". The Username, Real name and Status (enabled or disabled) of the user are shown. You make modifica tions to an existing user account by first selecting the ...

  • Allied Telesis AT-TQ2403 - page 41

    AT-TQ2403 Ma nagement Software User's Guide 41 Field Description Password Specify a password for this user. Passwords are strings of 4 to 256 charac ters. Please do not include '<' and '&'. 2. When you have filled in the fields, cli ck Add Account to add the account. The new user is then displayed in "User Acc o ...

  • Allied Telesis AT-TQ2403 - page 42

    42 AT-TQ2403 - Ma nagement Software - User's Guide A user with an account that is enabled can log on to the wireless access points in your netw ork as a client. Disabling a User Account To disable a user account, click the chec kbox next to the username and click Disable . A user with an account that is disabled cannot log on to the wireless a ...

  • Allied Telesis AT-TQ2403 - page 43

    AT-TQ2403 Ma nagement Software User's Guide 43 Chapter 6: Session Monitoring The AT-TQ2403 Ma nagement Software provides real-time session monitori ng information including which clients a re associated with a particular access po int, data rates, transmit/receive statistics, signal strength, and idle time. The following Se ssion Monitoring to ...

  • Allied Telesis AT-TQ2403 - page 44

    44 AT-TQ2403 - Ma nagement Software - User's Guide  Note: A sessio n is not the same as an association , which describes a client connection to a particular access point. A client network conn ection can shift from one clustered AP to another within the context of the same session. A client station can roam between APs and maintain th e ses ...

  • Allied Telesis AT-TQ2403 - page 45

    AT-TQ2403 Ma nagement Software User's Guide 45 Field Description Rx Total Ind icates number of total packets receiv ed by the client during the current session. Tx Total Indicates number of total packets trans m itted to the client during this session. Error Rate Indicates the percentage of time frames dropp ed during transmission on this acce ...

  • Allied Telesis AT-TQ2403 - page 46

    46 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 7: Channel Manag ement The following Channel Management to pics are covered here:  Navigating to Channel Management  Understanding Channel M anagement  How it Works in a Nutshell  For the Curious: More About Overlap ping Channels  Example: A Network Before and After Cha ...

  • Allied Telesis AT-TQ2403 - page 47

    AT-TQ2403 Ma nagement Software User's Guide 47 Understanding Channel Mana ge ment When Channel M anagement is enabled, the A T-TQ2403 AP automatically assigns radio channels used by clustered access points to reduce mutual interfere n ce (or interference with other acces s points outside of its cluster). This ma ximizes Wi-Fi bandwidth and hel ...

  • Allied Telesis AT-TQ2403 - page 48

    48 AT-TQ2403 - Ma nagement Software - User's Guide With automated channel management, APs in the cluster are automatica lly re-assigned to non-inte rfering channels as shown in below figure. Figure 18: After Channel Management Enable Configuring and Viewing Channel Mana gement Settings The Channel M anagement page shows pre vious, current, and ...

  • Allied Telesis AT-TQ2403 - page 49

    AT-TQ2403 Ma nagement Software User's Guide 49 Figure 19: After Channel Management Enable Whe n automatic channel assignm ent is enabled, the Channel Manager periodically maps radio channels used by clustered a ccess points and, if necessary, re-assigns channels on clustered APs to reduce interference (with cluster memb ers or other APs outsid ...

  • Allied Telesis AT-TQ2403 - page 50

    50 AT-TQ2403 - Ma nagement Software - User's Guide Viewing Last Propos ed Set of Changes The Proposed Channel Assignments show s the last channel pla n . The plan lists all access points in th e cluster by IP Address, and shows the proposed cha nnels for each AP. Locked channels will not be re-assigned and the optimizatio n of channel distribu ...

  • Allied Telesis AT-TQ2403 - page 51

    AT-TQ2403 Ma nagement Software User's Guide 51 Field Description Change channels if interference is reduced by at least Specify the minimum percentage of interference reductio n a proposed plan must achieve in order to be applied. The default is 25 percent. Use the drop-down menu to choose percentages ranging fr om 5% to 75%. This setting lets ...

  • Allied Telesis AT-TQ2403 - page 52

    52 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 8: Wir eless Neighborhood The Wireless Neighborhood view shows those access points within range of any access point in the cluster. This page provides a detailed view of neigh boring access points including identifying informa tion (SSIDs and MAC addresses) for each, cluster stat us (w ...

  • Allied Telesis AT-TQ2403 - page 53

    AT-TQ2403 Ma nagement Software User's Guide 53 Understanding Wir eless Ne ighborhood Information The Wireless Neighborhood shows all access points wit h in range of every member of the cluster, shows which access points are within range of which cl uster members, and distinguishes between clus ter members and non-members. For each neighbor acc ...

  • Allied Telesis AT-TQ2403 - page 54

    54 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Cluster The Cluster list at the top of the table s hows IP addresses for all access points in the cluster. (This is the same list of cluster members show n on the Cluster > Access Points tab described in “ Navigating to Acce ss Points Management ”.) If there is only on ...

  • Allied Telesis AT-TQ2403 - page 55

    AT-TQ2403 Ma nagement Software User's Guide 55 Vie wing Details for a Cluster Member To view details on a cluster member AP, click on the IP address of a cluster member a t the top of the page. Figure 21: Cluster Member Setting Detail The fo llowing table e xplains the details shown about the selected AP. Field Description SSID The Service Set ...

  • Allied Telesis AT-TQ2403 - page 56

    56 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Channel Shows the channel on whic h the access point is currently broadcasting. The Channel defines t he portion of the radio spectrum t hat the radio uses for transmitting and receiving. The channel is set in Manage > Radio . (See “ Configuring Radio Sett ings ”.) Rat ...

  • Allied Telesis AT-TQ2403 - page 57

    AT-TQ2403 Ma nagement Software User's Guide 57 Chapter 9: Configuring Security The following sectio ns describe how to configur e Securit y settings on the AT-TQ 2403 Management Software:  Understanding Security Issues on Wireless Networks  How Do I Know Which Security Mode to U se?  Comparison of Security Modes for Key Ma nagement, A ...

  • Allied Telesis AT-TQ2403 - page 58

    58 AT-TQ2403 - Ma nagement Software - User's Guide and also may be the right convenience trade-off for other scenarios whe re the priority is making it as easy as possible for clients to connec t. (See “ Does Prohibiting the Broadc ast SSID Enhance Security? ”) Following is a brief discussion of what factors make one mode more secure than ...

  • Allied Telesis AT-TQ2403 - page 59

    AT-TQ2403 Ma nagement Software User's Guide 59 + 2 4-bit initiali zation vector (IV)) or 128-bit (104-bit secret key + 24-bit IV) Sh ared Key for data encryption. Key Management Encryption A lgorithm User Authentication Static WEP uses a fixed key that is provided by the administrator. WEP keys are indexed in different slots (up to four on the ...

  • Allied Telesis AT-TQ2403 - page 60

    60 AT-TQ2403 - Ma nagement Software - User's Guide Additionally, compa tibility issues may be cumbersome because of the variety of authe ntication methods supported and the lack of a st andard implementati on method. Therefore, IEEE 802.1x mode is not as secure a so lution as Wi-Fi Protected Access (WPA) or WPA2. If, you cannot use WPA because ...

  • Allied Telesis AT-TQ2403 - page 61

    AT-TQ2403 Ma nagement Software User's Guide 61 Th is security mode also provides backwards-compa ti bility for wireless clients that support only th e original WPA. Key Management Encryption A lgorithm User Authenticatio n WPA Enterprise mode provides dynamically-generated keys that are periodically refreshed. There are different Unicast keys ...

  • Allied Telesis AT-TQ2403 - page 62

    62 AT-TQ2403 - Ma nagement Software - User's Guide Does Prohibiting the Broadc ast SSID Enhance Security? You can suppress (prohibit) this broadcast to discou rage stations from automatically d iscovering your access point. When th e AP’s broadcast SSID i s suppressed, the net work name will not be displayed in the List of Available Networks ...

  • Allied Telesis AT-TQ2403 - page 63

    AT-TQ2403 Ma nagement Software User's Guide 63 Broadcast SSID, Station Isol ation, and Security Mode To configure security on the access point, select a secu rity mode and fill in the relat ed fields as described in the following tabl e. (Note you can also allow or pr ohibit the Broadcast S SID and enable/disable Station Isolation as extra pre ...

  • Allied Telesis AT-TQ2403 - page 64

    64 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Security Mode Select the Security Mode . Select one of the following:  None (Pla in-text )  Static WEP  IEEE 802.1x  WPA Personal  WPA Enterprise For a Guest network, the only security mode that can be applied is None (Plain-text) . (For more info rmation, see ...

  • Allied Telesis AT-TQ2403 - page 65

    AT-TQ2403 Ma nagement Software User's Guide 65 For a minimum leve l of protection on a guest netw ork, you can choose to suppress (prohibit) the broadcast of the SSID (network name) to discourage cl ient stations from automatically discovering your access point. (See also “ Does Prohibiting t he Broadcast SSID Enhance Security? ”). For mor ...

  • Allied Telesis AT-TQ2403 - page 66

    66 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Transfer Key Index Select a key index from the drop-down menu. Key inde xes 1 through 4 are available. The default is 1. The Transfer Key Index indica tes which W EP key the access point will use to encrypt the data it transmits. Key Length Specify the length of the key by cl ...

  • Allied Telesis AT-TQ2403 - page 67

    AT-TQ2403 Ma nagement Software User's Guide 67 Field Description Authentication The authenticatio n algo rithm defines the method used to d etermine whether a client station is allowed to associate with an access point wh en static WEP is the security m ode. Specify th e authenti cation algorith m you want to use by choosing one of the followi ...

  • Allied Telesis AT-TQ2403 - page 68

    68 AT-TQ2403 - Ma nagement Software - User's Guide Example of Using Static WEP For a simple example, su ppose you configure three WEP keys on the access point. In our example, t he Transfer Key Index for the AP is set to "3". This me ans tha t the WEP key in slot "3" is the key the access point will use to encrypt the data ...

  • Allied Telesis AT-TQ2403 - page 69

    AT-TQ2403 Ma nagement Software User's Guide 69 If you have a second client s tation, that station also needs to have o ne of the WEP keys defined on the AP. You could give it the sam e WEP key you gave to the first station. Or for a more secure solutio n, you could give the second station a different WEP key (key 2, for example) so that the tw ...

  • Allied Telesis AT-TQ2403 - page 70

    70 AT-TQ2403 - Ma nagement Software - User's Guide If you selected IEEE 802.1x Security Mode, provide t h e following: Figure 28: Security Setting Page – IEE E802.1x Setting Page Field Description Use internal radius server You can choose whether to use the bui lt-in authentication server provided with the AT-TQ2403 Management Software, or y ...

  • Allied Telesis AT-TQ2403 - page 71

    AT-TQ2403 Ma nagement Software User's Guide 71 Field Description Radius IP Enter the Radius IP in the tex t box. The Radius IP is the IP address of the RADIUS server. You can configure two RADIUS servers. The secondary server only when the first server is not available. If the IP a ddress of secondary server is “0.0.0.0”, it implies to dis ...

  • Allied Telesis AT-TQ2403 - page 72

    72 AT-TQ2403 - Ma nagement Software - User's Guide If you selected WPA Personal S ecurity Mode, provide the following: Figure 29: Security Setting Page – WPA Personal Setting Pa ge Field Description WPA Versions Select the types of client stations you want to support:  WPA  WPA2  Both WPA: If al l client stations on the network supp ...

  • Allied Telesis AT-TQ2403 - page 73

    AT-TQ2403 Ma nagement Software User's Guide 73 Field Description Cipher Suites Select the cipher suite you want to use:  TKIP  CCMP (AES)  Both Temporal Key Integrity Protocol (TKIP) is the default. TKIP: It provides a more secure encr yption solut i on than WEP keys. The TKIP process more frequently changes the encry p tion key used ...

  • Allied Telesis AT-TQ2403 - page 74

    74 AT-TQ2403 - Ma nagement Software - User's Guide Figure 30: Security Setting Page – WPA Enterprise Setting Page Field Description WPA Ve rsions Select the type s of client st ations you want to su pport:  WPA  WPA2  Both WPA: If all client stations on the network support the original WPA but none support the newer WPA2, t h en sel ...

  • Allied Telesis AT-TQ2403 - page 75

    AT-TQ2403 Ma nagement Software User's Guide 75 Field Description Cipher Suites Select the cipher you want to use:  TKIP  CCMP (AES)  Both Temporal Key Integrity Protocol (TKIP) is the default. TKIP: It provides a more secure encr yption solut ion than WEP keys. The TKIP process more frequently changes the encry p tion key used and bet ...

  • Allied Telesis AT-TQ2403 - page 76

    76 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Use internal radius server You can choose whether to use the b uilt-in authenticatio n server provided with the AT-TQ2403 Man agement Soft ware, or you can use an external radius server.  To use the authen tication server provided with the AT-TQ2403 Management Software, en ...

  • Allied Telesis AT-TQ2403 - page 77

    AT-TQ2403 Ma nagement Software User's Guide 77 Field Description Require VLAN ID in Dynamic VLAN Dynamic mode is enabled when you click the checkbox. If you have enabled dynamic mode and try to establish wir eless connection between wireless client and AP, the AP must receive VLAN ID information from Radius server in authentication proc ess. O ...

  • Allied Telesis AT-TQ2403 - page 78

    78 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 10: Maintenance and Monitoring The maintenan ce and monitoring tasks described here all pertain to viewing a n d modifying settings o n specific access points; not o n a cluster configurat io n that is automatically shared by multiple access points. Theref ore, it is important to ensur ...

  • Allied Telesis AT-TQ2403 - page 79

    AT-TQ2403 Ma nagement Software User's Guide 79 Th is page displays the current settings of the AT-TQ 2403 M anagement Software. It displays the Et hernet (Wired) Settings and the Wireless Sett ings. Ethernet (Wir ed) Settings The Internal interface includes the Ethernet MAC Address, IP Addre ss, Subnet Mask, and Associate d Network Wireless Na ...

  • Allied Telesis AT-TQ2403 - page 80

    80 AT-TQ2403 - Ma nagement Software - User's Guide  Note: The AT-TQ2403 Manageme nt Software acquires its date a n d time information using the network time proto col (NTP). This data is reported in UTC format (also known as Greenwich Mean Time). Y ou need to convert the repo rted time to your local time. For information on setting th e net ...

  • Allied Telesis AT-TQ2403 - page 81

    AT-TQ2403 Ma nagement Software User's Guide 81 all messages wit h a severity level between 4 and 0 will appear in the Event log. Theref ore, less severe messages and notices will be ignored. Severity Level Description 0 Emergency : system is unusable 1 Alert : action must be take n immediately 2 Critical : critic al condition 3 Error : error c ...

  • Allied Telesis AT-TQ2403 - page 82

    82 AT-TQ2403 - Ma nagement Software - User's Guide Setting Up the Log Relay Host To use Kernel Log relaying, you m ust configure a re mote server to rec eive the syslog messages. This procedure will vary depending on th e ty pe of machine you use as the remote log host . Following is an example of how to configure a remote Linux server using t ...

  • Allied Telesis AT-TQ2403 - page 83

    AT-TQ2403 Ma nagement Software User's Guide 83 Events Log The Events Log shows system events on the access point such as stations associating, being authenticated, and other occ urrences. The real-time Events Log is always shown o n the Status > Events Administration We b UI page for the access poin t you are monitori ng. To clear all curre ...

  • Allied Telesis AT-TQ2403 - page 84

    84 AT-TQ2403 - Ma nagement Software - User's Guide Field Description IP Address IP Address for the access point. MAC Address Media Access Control (MAC) address for the specified interface. A MAC address is a permanent, unique hardware address for any device that represents an interface to the network. The MAC a ddress is assigned by the manufa ...

  • Allied Telesis AT-TQ2403 - page 85

    AT-TQ2403 Ma nagement Software User's Guide 85 The associated statio ns are disp layed along with informatio n about packet traffic transmit ted and received for each station.  Note: The Authenticated and Associated Status shows only the und erlying IEEE 802.11 authenticatio n/association, which will be present in all Securi ty modes. It do ...

  • Allied Telesis AT-TQ2403 - page 86

    86 AT-TQ2403 - Ma nagement Software - User's Guide Information provided on n eighboring access points is described in the following ta ble. Field Description MAC Address Shows the MAC address of th e neighboring access point. A MAC address is a hardware address that uniquely identifies each node of a network. Radio If the access point that is ...

  • Allied Telesis AT-TQ2403 - page 87

    AT-TQ2403 Ma nagement Software User's Guide 87 Field Description Band This indicates the IEEE 802.11 mode being used on this access point . (For example, IEEE 802.11a, IEE E 802.11b, IEEE 802.11g. ) The number shown ind i cates the mode according to the fo llowing map:  2.4 indicates IEE E 802.11b mode or IEEE 802.11g mode  5 indicates I ...

  • Allied Telesis AT-TQ2403 - page 88

    88 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 11: Setting the Ethernet (Wir ed) Interface Ethernet (Wir ed) Settings describe the co nfiguration of your Ether n et local area network (LAN ).  Note: The Ethernet Set tings, including guest a ccess, are not shared across the cluster. These settings must be configured ind ividually ...

  • Allied Telesis AT-TQ2403 - page 89

    AT-TQ2403 Ma nagement Software User's Guide 89 Figure 38: Ethernet (Wired) Settings Page Setting the DNS HostName Field Description DNS Hostname Enter the DNS name for the access point i n the text box. This is the host name. It may be provided by your ISP or network administrator, or you can provide your ow n. The rules for system names are: ...

  • Allied Telesis AT-TQ2403 - page 90

    90 AT-TQ2403 - Ma nagement Software - User's Guide Enabling or Disab ling Guest Access You can provide controlled guest access over an isol at ed network and a secure internal LAN on the same AT-TQ2403 Managem ent Software. Configuring an Internal LAN and a Guest Network A Local Area Network (LAN) is a communicatio ns ne twork covering a limit ...

  • Allied Telesis AT-TQ2403 - page 91

    AT-TQ2403 Ma nagement Software User's Guide 91 Field Description Virtual Wireless Networks  Select Enabled to enable VLANs for the Internal network and for additional networks. (If you choose this option, you can run the Inter nal network on a VLAN whether or not you have Guest Access configured and you can set up additional networks on VLA ...

  • Allied Telesis AT-TQ2403 - page 92

    92 AT-TQ2403 - Ma nagement Software - User's Guide Field Description VLAN ID If you have enabled VWNs or Guest a ccess via VLAN, this field will be enabled. Provide a number between 1 and 4094 for the Internal VLAN. This VLAN ID must not be the same as the Guest VLA N ID or a VWN VLAN ID. Check with the Network Administra tor regarding the VLA ...

  • Allied Telesis AT-TQ2403 - page 93

    AT-TQ2403 Ma nagement Software User's Guide 93 Field Description Secure Management You can restrict access to ma nagement IP interface to the specified client. Select Enabled to ena ble Secure Management feature. Only the s p ecified client can access the management IP i nterface (Web pages, telnet) of t his access point. Select Disabled to di ...

  • Allied Telesis AT-TQ2403 - page 94

    94 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Static IP Address If you chose Sta tic IP as the Connection T ype, these fields will be enabled. Enter the Static IP Address in the text boxes. Subnet Mask Enter the Subnet Mask in the text box es. You must obtain t his information from your ISP or network administrator. Defa ...

  • Allied Telesis AT-TQ2403 - page 95

    AT-TQ2403 Ma nagement Software User's Guide 95 Chapter 12: Setting the Wir eless Interface Wireless settings describe as pects of the local area network (LAN) r elated specifically to the radio device in the access point (802.11 Mode and Chan nel) and to the network interface to the access point (MAC address for access point and Wireless Netwo ...

  • Allied Telesis AT-TQ2403 - page 96

    96 AT-TQ2403 - Ma nagement Software - User's Guide Configuring 802.11d Regulator y Domain Suppor t You can enable or disable IE EE 802.11d Regulatory Do main Support to broadcast the access point country code information as described belo w. Field Description 802.11d Regulatory Domain Support Enabling suppo rt for IEEE 802.11d on the access po ...

  • Allied Telesis AT-TQ2403 - page 97

    AT-TQ2403 Ma nagement Software User's Guide 97  I f you are operatin g in an 802 .11h enable d domain, then the channel sele ction of the BSS will always be "Auto". Even if ano ther channel has been has been configured, th is will be ignored and auto- channel selection will occur.  When 802.11h is en abled, the initi al boot-up ...

  • Allied Telesis AT-TQ2403 - page 98

    98 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Channel Select the Channel . The range of channels and the default is determined b y the Mode of the radio interface. The Channel defines the por tion of the radi o spectrum the radio uses for t ransmitting and receiving. Each mode off ers a number of channels, dependent on h ...

  • Allied Telesis AT-TQ2403 - page 99

    AT-TQ2403 Ma nagement Software User's Guide 99 Field Description Wireless Network Name (SSID) Enter the SSID for t he internal WLAN. The Service Set Identifier (SS ID) is a string of up to 32 characters tha t uniquely id entifies a wireless local area network. I t is also referred to as the Network Name. Two SSIDs are shown: one for each Radio ...

  • Allied Telesis AT-TQ2403 - page 100

    100 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 13: Setting up Guest Access Out-of -the -box Guest Interface features allow you to configure th e AT-TQ2403 Man agement Software for controlled guest access to an iso lated network. You can configure the sa me access point to broadcast and function as two different wire less netw orks ...

  • Allied Telesis AT-TQ2403 - page 101

    AT-TQ2403 Ma nagement Software User's Guide 101 Configuring the Guest Interface To configure the Gues t interface on the AT-TQ 2403 Management Software, perform t hese configuration steps: 1. Configure the access point to represe nt two virtually separate networks as described in the section below, “ Config uring a Guest Network on a Virtual ...

  • Allied Telesis AT-TQ2403 - page 102

    102 AT-TQ2403 - Ma nagement Software - User's Guide 1. Navigate to the Manage > Guest Login tab. Figure 40: Guest Login Setting P age 2. Choose Enabled to activate the W elcome screen. 3. In the Welcome Screen Text field, type the text message you would like guest clie nts to see on the captive portal. The ma ximum length of this text is 1, ...

  • Allied Telesis AT-TQ2403 - page 103

    AT-TQ2403 Ma nagement Software User's Guide 103 Figure 41: Guest Network Diagram Example ...

  • Allied Telesis AT-TQ2403 - page 104

    104 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 14: Configuring Vir tual Wir eless Netw orks The following sectio ns describe how to configure mu ltiple wireless networks on Virtual LANs (VLANs):  Navigating to Virtual Wireless Network Sett ings  Configuring VLAN s  Updating Settin gs Na vigating to Vir tual Wir eless Netw ...

  • Allied Telesis AT-TQ2403 - page 105

    AT-TQ2403 Ma nagement Software User's Guide 105 Configuring VLANs  Note:  To configure additional netw orks on VLANs, you m ust first enable Virtual Wireless Networks on the Ethernet Settings page. S ee “ Enabling or Disabling Virtual Wireless Networks on the AP ”.  If you configure VLANs, you may lose connectivity to the access p ...

  • Allied Telesis AT-TQ2403 - page 106

    106 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Broadcast SSID Select the Broadc as t SSI D setting by selecting the Broadcast SSI D checkbox. By default, t h e access point br oadcasts (allows) the Servic e Set Identifier (SSID) in its beacon frames. You can suppress (prohib it) this broa dcast to discourage stations fr ...

  • Allied Telesis AT-TQ2403 - page 107

    AT-TQ2403 Ma nagement Software User's Guide 107 Chapter 15: Configuring Radio Settings The following sectio ns describe how to config ure Radio Setti ngs on the AT-TQ2403 Management Software:  Understanding Radio Settings  Navigating to Radio Settings  Updating Settin gs Understanding Radio Settings Radio settings directly control the ...

  • Allied Telesis AT-TQ2403 - page 108

    108 AT-TQ2403 - Ma nagement Software - User's Guide Figure 43: Radio Setting Page Field Description Radio Specify Radio One or Radio Two. The rest of the settings on this tab apply to the radio selected in this field . Be sure to configure settings for bot h radios. Note: Radio One (5GHz ba nd) might not be available in the specific co untry d ...

  • Allied Telesis AT-TQ2403 - page 109

    AT-TQ2403 Ma nagement Software User's Guide 109 Field Description Mode The Mode defines the Physical Layer (PHY) standard being used by the radio. The AT-TQ2403 is available as a dual band access point. Select one of these modes: For Radio Interface 1  IEEE 802.11a  Atheros Turbo 5 GHz  Atheros Dynamic Turbo 5 GHz For Radio Interface ...

  • Allied Telesis AT-TQ2403 - page 110

    110 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Broadcast/Multicast Rate Limit Burst Setting a rate limit burst de termines how much traffic bursts can be before all traffic exceeds the rate limit. This burst limit allows intermittent bursts of traffic on a network above the set rate limit. The default and maximu m rate l ...

  • Allied Telesis AT-TQ2403 - page 111

    AT-TQ2403 Ma nagement Software User's Guide 111 Field Description DTIM Period All Beacon frames include a Traffic In formation Map informatio n element (TIM IE). In some beacon frames, the TIM IE includes a Delivery Traffic Information Map (DTIM) message. These special DTIM be acons are sent at an interval specified in the DTIM period. Another ...

  • Allied Telesis AT-TQ2403 - page 112

    112 AT-TQ2403 - Ma nagement Software - User's Guide Field Description RTS Threshold Specify an RTS Threshold value between 0 and 2347. The RTS thres hold specifies the packet size at which packe t transmission is governed by the RTS/CTS transaction. If you specify a low threshold value , RTS packets will be sent more fre q uently. This will co ...

  • Allied Telesis AT-TQ2403 - page 113

    AT-TQ2403 Ma nagement Software User's Guide 113 Field Description Rate Sets Check t h e transmissio n rate sets you want the access point to sup p ort and the basic rate sets you want the access point to advertise. Rates are expressed in megabits per second. Supported Rate Sets indicate rates that the access point supports . Y ou can check mul ...

  • Allied Telesis AT-TQ2403 - page 114

    114 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 16: Contr olling Access b y MA C Addr ess Filtering A Media Access Control (MAC) address is a hardware address that uniquely identifies each node of a network. All IEEE 802 network devices share a commo n 48-bit MAC address format, usually displayed as a string of 12 hexadecimal digit ...

  • Allied Telesis AT-TQ2403 - page 115

    AT-TQ2403 Ma nagement Software User's Guide 115 For the G uest interface, MAC Filtering sett ings apply to both BSSes. MAC Filtering settings apply to bot h radios. Note: Only 1024 MAC addresses are allowed. Field Description Filter To set the MAC Address Filter , click one of the following radio button s:  Allow only stations in the list ? ...

  • Allied Telesis AT-TQ2403 - page 116

    116 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 17: Load Balancing The AT-TQ2403 Ma nagement Software allows you to bala nce the distribution of wireless clien t connections across multiple access points . Using lo ad balancing , you can prevent scenarios where a single access point in your network shows perf orman ce degradation b ...

  • Allied Telesis AT-TQ2403 - page 117

    AT-TQ2403 Ma nagement Software User's Guide 117 Load Balancing and QoS Load balancing also plays a part in contributing to Quality of Service (QoS) for Voice Over IP (VoIP) and other such time-sensi tive applicatio ns competing for bandwidth and timely access to the air waves on a wireless network. For more information a bou t configuring your ...

  • Allied Telesis AT-TQ2403 - page 118

    118 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Load Balancing To enable load balancing on t his access point, click Enable . To disable load balancing o n this access point, click Disable . Utilization for No New Associations Utilization rate limits re late to wireless bandwidth utilization. Provide a bandwidth utilizati ...

  • Allied Telesis AT-TQ2403 - page 119

    AT-TQ2403 Ma nagement Software User's Guide 119 Chapter 18: Pr e-Config Ro gue AP Pre-config Rogue Configurat ion notifies you when access points are not in the Access Points list. Access points are filtered by MAC address, a hard ware ID number that uniquely ide n tifies each node of a network. A MAC address consists of a string of twel ve (1 ...

  • Allied Telesis AT-TQ2403 - page 120

    120 AT-TQ2403 - Ma nagement Software - User's Guide Using Pr e-Config Ro gue AP Field Description AP Detection To set AP Detection, click Enabled . Detection Interval Use the drop-down me nu to specify the schedule for AP Detection. A range of intervals is provided, from "15 Minutes" to "4 Weeks". The default is "15 Mi ...

  • Allied Telesis AT-TQ2403 - page 121

    AT-TQ2403 Ma nagement Software User's Guide 121 Chapter 19: Configuring Quality of Ser vice (QoS) Quality of Service (QoS) provides you with the ability to specify param eters on multip le queues for increased throughput and better performance of diffe rentiated wireless traffic like Voice-over-IP (VoIP), other types of audio, video, and strea ...

  • Allied Telesis AT-TQ2403 - page 122

    122 AT-TQ2403 - Ma nagement Software - User's Guide 802.11e and WMM Standards Support QoS describes a range of technologies for controllin g data streams on shared network co nnections. The IEEE 802.1 1e task group has defined a QoS st andard for transmission quality and availability of service on wir eless networ ks. QoS i s des igned to prov ...

  • Allied Telesis AT-TQ2403 - page 123

    AT-TQ2403 Ma nagement Software User's Guide 123 is sent to this queue.  Data 3 (Background). Lowest priority queue, high throughput. Bulk data that re quires maximum throughput and is not time-s ensitive is sent to this queue (FTP data, for example). Using the QoS settings on the Administration UI, you can config ure Enhanced Distributed Ch ...

  • Allied Telesis AT-TQ2403 - page 124

    124 AT-TQ2403 - Ma nagement Software - User's Guide is based on CSMA/CA protocol, defines the interframe space (IFS) between data frames. Data frames wait for an amount of time defined as the a rbitration interframe space (AIFS) before transmitti ng. This parameter is configurabl e. Random Backoff and Minimum / Maximum Contention Windows If an ...

  • Allied Telesis AT-TQ2403 - page 125

    AT-TQ2403 Ma nagement Software User's Guide 125 802.1q and DSCP tags IEEE 802.1q is an extension of the IE EE 802 standard and is responsible for QoS provision. One purpose of 802.1q is to prioritize net work traffic at the data link/ MAC layer. The 802.1q tag includes a three-b it field for prioriti zation, whic h allows packets to be grouped ...

  • Allied Telesis AT-TQ2403 - page 126

    126 AT-TQ2403 - Ma nagement Software - User's Guide The table belo w outlines the VLAN priority and DSCP values. Table 1 VLAN Priority VLAN Priority Priority DSCP value 0 Best Effort 0 1 Background 16 2 Background 8 3 Best Effort 24 4 Video 32 5 Video 40 6 Voice 48 7 Voice 56 Na vigating to QoS Settings To set up queues for QoS, navigate to th ...

  • Allied Telesis AT-TQ2403 - page 127

    AT-TQ2403 Ma nagement Software User's Guide 127  Note:  For the G uest interface or VWNs (Virtual APs), Qo S queue settings apply to the access point load as a whole (all BSS s together).  These settings apply to both radios bu t the traffic for each radio is queue d independently. Configuring Qual ity of Service includes :  Config ...

  • Allied Telesis AT-TQ2403 - page 128

    128 AT-TQ2403 - Ma nagement Software - User's Guide Field Description AIFS (Inter-Frame Space) The Arbitration Inter-Frame Spacing (AIFS) specifies a wait time ( in milliseconds) for data frames. Valid values for AIFS are 1 through 255. For more information , see “ EDCA Control of Data Frames and Arbitration Interframe Spaces ”. cwMin (Min ...

  • Allied Telesis AT-TQ2403 - page 129

    AT-TQ2403 Ma nagement Software User's Guide 129 Field Description Max. Burst Length AP EDCA Parameter Only (The Max. Burst Leng th applies only to traffic flowing from the access point to the cl ient station.) This value specifies (in milliseconds) the Maximu m Burst Length allowed for packet bursts on the wireless ne twork. A packet burst is ...

  • Allied Telesis AT-TQ2403 - page 130

    130 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Queue Queues are defined for differ ent types of data transmitted from station-to-AP: Data 0 (Voice) Low latency and guaranteed b andwidth. Time-sensitiv e data such as VoIP should be sent to this queue . Data 1(Video) Guaranteed bandwid th. Time-sensitiv e video data and an ...

  • Allied Telesis AT-TQ2403 - page 131

    AT-TQ2403 Ma nagement Software User's Guide 131 Field Description cwMax (Maximum Contention Window) The value specified here in the Maximum Contentio n Window is the upper limit (in milliseconds) f or the do ubling of the random backoff value. This doubling contin ues until either the data frame is sent or the Maximum Contentio n Window size i ...

  • Allied Telesis AT-TQ2403 - page 132

    132 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 20: Configuring the Wir eless Distribution System (WDS) The AT-TQ2403 Ma nagement Software lets you connect multipl e access points using a Wireless Distribution System (WDS ). WDS allows access points to communicat e with one another wirelessly. This capability is critica l in provid ...

  • Allied Telesis AT-TQ2403 - page 133

    AT-TQ2403 Ma nagement Software User's Guide 133 Figure 50: Bridge Distant Wired LA N by WDS Diagram Using WDS to Extend the Network Beyond the Wired Coverage Area An ESS can extend the reach of the ne twork into areas where cabling would be difficult, costly, or ineffi cient. For example, suppose you have an access point whic h is connected to ...

  • Allied Telesis AT-TQ2403 - page 134

    134 AT-TQ2403 - Ma nagement Software - User's Guide For more information a bout the effectiv en ess of different security modes, see “ Configuring Security ”. This topic also covers use o f the unencrypted secu rity mode for AP-to-statio n traffic on the Guest network, which is intended f or less sensitive data traffic. Understanding WPA ( ...

  • Allied Telesis AT-TQ2403 - page 135

    AT-TQ2403 Ma nagement Software User's Guide 135 Configuring WDS Settings The following notes summarize some critical guidelines regarding WDS conf iguration. Please read all the notes before proceeding with WDS configuration.  Note:  Whe n using WDS, be sure to conf igure WDS settings on both access points participating in the WDS li nk. ...

  • Allied Telesis AT-TQ2403 - page 136

    136 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Remote Address Specify the MAC address of the destina tion access point; that is, the access point to which data will be sent or "ha n ded-off" and from which data will be received, in other words the AP to whic h you are creating the WDS bridge. Click the arrow to ...

  • Allied Telesis AT-TQ2403 - page 137

    AT-TQ2403 Ma nagement Software User's Guide 137 http://IPAddressOfAccessPoint where IPAddressOfAccessPoint is the address of MyAP1. 2. Navigate to the WDS tab on MyAP1 A dministration Web pages. The MAC addr ess for MyAP1 (the access point you are curr ently viewing) wi ll s h o w a s t h e Local Address at the top of the page. 3. Conf igure a ...

  • Allied Telesis AT-TQ2403 - page 138

    138 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 21: Configuring Simple Netw ork Mana gement Pr otocol (SNMP) on the AP The following sections descri be supported SNMP MIBs, and show how to con figure SNMP settings on the AT-TQ2403 Management Software:  Understanding SNMP  Supported MIBs  Navigating to SNMP Settings  Con ...

  • Allied Telesis AT-TQ2403 - page 139

    AT-TQ2403 Ma nagement Software User's Guide 139 Figure 52: SNMP Setting Diagram Suppor ted MIBs MIBs are a collection of objects or files tha t exist in a virtual database on a network . SNMP uses a specific set of commands and queries to obta in information fro m the MIB. The AT-TQ2403 Management Soft ware supports stan dard and proprietary S ...

  • Allied Telesis AT-TQ2403 - page 140

    140 AT-TQ2403 - Ma nagement Software - User's Guide C ategory MIB Le vel of Su pport Standard IEEE M IB Bridge-MIB Partial, read-only support includ ing root bridge We do not impl ement th e optional StaticTable. - dot1dStatic - dot1dPortPair The following OIDs are not implemented: - dot1dSr (Because TQ2403 does not support routing func tion) ...

  • Allied Telesis AT-TQ2403 - page 141

    AT-TQ2403 Ma nagement Software User's Guide 141 Field Description SNMP Enabled/Disabled You can choose whether or not you want to enable SNMP on your network. By default SN MP is Enabled.  To enable SNMP, click Enabled .  To disable SNMP, click Disabled . You must click Update to save your settings. Note : If you do not enable S NMP, all ...

  • Allied Telesis AT-TQ2403 - page 142

    142 AT-TQ2403 - Ma nagement Software - User's Guide Field Description Restrict the source of SNMP requests to only the designated hosts or subnets You can restrict the source of perm itted SNMP requests.  To restrict the source of permitted S NMP requests, click Enabled .  To permit any source submitt i ng an SNMP request, click Disabled ...

  • Allied Telesis AT-TQ2403 - page 143

    AT-TQ2403 Ma nagement Software User's Guide 143 by send ing a trap of the event. After recei ving the event in formation, th e manager can choose what action, if any, to take. Field Description Community name for traps Enter the global community s tring associated with SNMP traps. T ra ps sent from the device will provide th is string as a co ...

  • Allied Telesis AT-TQ2403 - page 144

    144 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 22: Enabling the Netw ork Time Pr otocol Ser v er The Network Time Protocol (NTP) is an Internet st andard protoco l that synchronizes computer cloc k times on your network. NTP servers transmit Coo rdinated Universal Time (UTC, also known as Greenwich Mean Time ) to their client syst ...

  • Allied Telesis AT-TQ2403 - page 145

    AT-TQ2403 Ma nagement Software User's Guide 145 Enabling or Disab ling a Network Time Protocol (NTP) Ser v er To configure your access point to use a network time pr otocol (NTP) server, first enable the use of NTP, and then select the NTP server you want to use. ( To shut down NTP service on the network, disa ble NTP on the access point.) Fie ...

  • Allied Telesis AT-TQ2403 - page 146

    146 AT-TQ2403 - Ma nagement Software - User's Guide Chapter 23: Backing up and Restoring a Configuration You can save a copy of the current s e t t i n g s o n t h e A T - T Q 2 4 0 3 M a n a g e m e n t S o f t w a r e t o a b a c k u p configuration file. The backup fil e can be used at a la ter date to restore the access poi n t to the prev ...

  • Allied Telesis AT-TQ2403 - page 147

    AT-TQ2403 Ma nagement Software User's Guide 147 Resetting F actor y Default Configuration If you are experiencing problems wit h the AT-TQ2403 Manageme nt Software and have tried all other troubleshooting measures, us e the Reset Configuratio n function. Th is will restore factory defaults and clear all settin gs, inclu ding settings such as a ...

  • Allied Telesis AT-TQ2403 - page 148

    148 AT-TQ2403 - Ma nagement Software - User's Guide Y ou can keep the default file name (config.cbk) or re name the backup file, but be sure to save the file with a .cbk extension. Restoring the Configuration fr om a Pre viously Sa v ed File To restore the configuration on an access point to prev iously saved settings: 1. Select the backup co ...

  • Allied Telesis AT-TQ2403 - page 149

    AT-TQ2403 Ma nagement Software User's Guide 149 Figure 57: Configuration Setting Page 2. Click the Reboot butto n. The AP will reboot. Upgrading the Firmwar e As new versions of the AT-TQ2403 Management Soft ware firmware become available, you can upgrade the firmware on your devices to take adva ntages of new features and enhanceme nts. Cauti ...

  • Allied Telesis AT-TQ2403 - page 150

    150 AT-TQ2403 - Ma nagement Software - User's Guide Figure 58: Upgrade Page Information about the current firmware version is di splaye d and an option to upgrade a new firmware image is provided. 2. If you know the path t o the New Firmware Image file, enter it in the New Firmware Image textbox. Ot herwise, click th e Browse button and locate ...

  • Allied Telesis AT-TQ2403 - page 151

    AT-TQ2403 Ma nagement Software User's Guide 151 Appendix A: Security Settings on Wir eless Clients and RADIUS Ser v er Setup Typically, users wil l configure security on their wireless clients for access to many different ne tworks (access points). The list of "Available Netwo rks" will ch ange depending o n the location of the clien ...

  • Allied Telesis AT-TQ2403 - page 152

    152 AT-TQ2403 - Ma nagement Software - User's Guide Netw ork Infrastructure and Choosing Betw een Built-in or External Authentication Ser ver Network security configurati ons including Public Key I n frastructures (PKI), Remote Authentication Dial-in User Server (RADIUS) servers, and Certificate Authority (CA) can vary a great deal from one or ...

  • Allied Telesis AT-TQ2403 - page 153

    AT-TQ2403 Ma nagement Software User's Guide 153 Accessing the Micr osoft Windo ws Wireless Client Security Settings Generally, on Windows XP there are two ways to get to the sec urity properties for a wireless client: 1. From the wireless connection icon on the Windows task bar:  Right-click on the Wireless co nnection icon in your Windows ...

  • Allied Telesis AT-TQ2403 - page 154

    154 AT-TQ2403 - Ma nagement Software - User's Guide List of available networks will ch ange depending on client locatio n. Each network (or access point) that that is detected by t h e client shows up in this list. (" Refresh " updates the list with c u rrent information .) For each network you want to connect to, configure se curity ...

  • Allied Telesis AT-TQ2403 - page 155

    AT-TQ2403 Ma nagement Software User's Guide 155 If you do have security configured on a client for proper ties of an unsecure networ k, the security settings actually can prevent successf ul access to the network because of t he mismatch between cli ent and access point security configurations. To configure the client to not use any security, ...

  • Allied Telesis AT-TQ2403 - page 156

    156 AT-TQ2403 - Ma nagement Software - User's Guide Figure 62: Security Setting P a ge – Static WEP Setti ng Page . . . then configure WEP security on eac h client as follows. Figure 63: Client Side Security Setting - Static WEP Setting Detail Associati on Tab ...

  • Allied Telesis AT-TQ2403 - page 157

    AT-TQ2403 Ma nagement Software User's Guide 157 Field Setting Network Authentication "Open" or "Shared", depending on how you configur ed this option on the access point. Note : When the Authe ntication Algorithm on the access point is set to "Both", clients set to either Shared or Open can associate with the A P. ...

  • Allied Telesis AT-TQ2403 - page 158

    158 AT-TQ2403 - Ma nagement Software - User's Guide IEEE 802.1x Client Using EAP/PEAP The Built-In Authenti cation Server on the AT -TQ2403 Management Sof tware uses Protected Extensible Authentication Protocol (EAP) referred to here as "EAP/PEAP".  If you are using th e Built-in Auth entication server wi th "IEEE 802.1 x&quo ...

  • Allied Telesis AT-TQ2403 - page 159

    AT-TQ2403 Ma nagement Software User's Guide 159 Figure 65: Client Side Security Setting - IEEE802.1x Security Setting Detail ...

  • Allied Telesis AT-TQ2403 - page 160

    160 AT-TQ2403 - Ma nagement Software - User's Guide 1. Configure the following set tings on the Ass ociation tab on the Network Properties dialog. Association Tab Field Setting Network Authentication Open Data Encryption WEP Note: An RC4 stream cipher is used to encrypt the fram e body and cyclic redundancy checking (CRC) of each IEEE 802.11 f ...

  • Allied Telesis AT-TQ2403 - page 161

    AT-TQ2403 Ma nagement Software User's Guide 161 Logging on to the Wireless Network with an IEEE 802.1x PEAP Client IEEE 802.1x PEAP clie nts should now be able to a ssociate with the access point. Client users will be prompted for a user name and password to authenticate w ith the network. IEEE 802.1x Client Using EAP/TLS Certificate Extensibl ...

  • Allied Telesis AT-TQ2403 - page 162

    162 AT-TQ2403 - Ma nagement Software - User's Guide Figure 66: Security Setting Page – IEEE802.1x Setting Page . . . then configure IEEE 802.1x secur ity with certificate authentication on each client as follows . ...

  • Allied Telesis AT-TQ2403 - page 163

    AT-TQ2403 Ma nagement Software User's Guide 163 Figure 67: Client Side Security Setting - IEEE802.1x Security Setting Detail ...

  • Allied Telesis AT-TQ2403 - page 164

    164 AT-TQ2403 - Ma nagement Software - User's Guide 1. Configure the following set tings on the Ass ociation tab on the Network Properties dialog. Association Tab Field Setting Network Authentication Open Data Encryption WEP Note : An RC4 stream cipher is u sed to encrypt the frame body and cyclic redundancy checking (CRC) of each IEEE 802.11 ...

  • Allied Telesis AT-TQ2403 - page 165

    AT-TQ2403 Ma nagement Software User's Guide 165 Configuring WP A/WP A2 Enterprise (RADIUS) Security on a Client Wi-Fi Protected Access 2 (WPA2) with Remote Authentic ation Dial-In User Service (RADIUS) is an implementa tion of the Wi-Fi Alliance IEEE 8 02.11i standard, which includ es Advanced Encryption Standard (AES), Counter mode/CBC-MAC Pr ...

  • Allied Telesis AT-TQ2403 - page 166

    166 AT-TQ2403 - Ma nagement Software - User's Guide Figure 68: Security Setting Page – WPA Enterprise Setting Page First set up user accounts on the access point ( User Management tab)… Figure 69: User Manage ment Page . . . then configure WPA security with PEAP authentication on each client as follows. ...

  • Allied Telesis AT-TQ2403 - page 167

    AT-TQ2403 Ma nagement Software User's Guide 167 Figure 70: Client Side Security Setting – WPA Enterprise Setting Detail ...

  • Allied Telesis AT-TQ2403 - page 168

    168 AT-TQ2403 - Ma nagement Software - User's Guide 1. Configure the following settings on the Associ ation and Authentication tabs on the Network Properties dialog. Association Tab Field Setting Network Authentication WPA Data Encryption TKIP or A E S depending on h ow th is option is configured on the access point. Note : When the Cipher Sui ...

  • Allied Telesis AT-TQ2403 - page 169

    AT-TQ2403 Ma nagement Software User's Guide 169 WPA/WPA2 Enterprise (RADIUS) Client Using EAP-TLS Certificate Extensible Authenticatio n Protocol (EAP) Transport Layer Security (TLS), or EAP-TLS, is an authentication protocol that supports the use of smart cards and certificates. You have the option of using EAP-TLS with both W PA/WPA2 Enterpr ...

  • Allied Telesis AT-TQ2403 - page 170

    170 AT-TQ2403 - Ma nagement Software - User's Guide Figure 71: Security Setting Page – WPA Enterprise Setting Page . . . then configure WPA security with certifi cate authentication on each client as follows. ...

  • Allied Telesis AT-TQ2403 - page 171

    AT-TQ2403 Ma nagement Software User's Guide 171 Figure 72: Client Side Security Setting – WPA Setting Detail ...

  • Allied Telesis AT-TQ2403 - page 172

    172 AT-TQ2403 - Ma nagement Software - User's Guide 1. Configure the following set tings on the Ass ociation tab on the Network Properties dialog. Association Tab Field Setting Network Authentication WPA Data Encryption TKIP or A E S depending on h ow th is option is configured on the access point. Note: When the Cipher Suit e on the access po ...

  • Allied Telesis AT-TQ2403 - page 173

    AT-TQ2403 Ma nagement Software User's Guide 173 To use t his type of security, you m u st do the following: 1. Add the AT-TQ2403 Wirele ss Access Point to the list of RADIUS server clients. (There are some kind of Radius server support EAP-SIM, such as : FreeRadius) 2. Configure the AT-TQ24 03 Wireless Access Point to use your RADIUS server (b ...

  • Allied Telesis AT-TQ2403 - page 174

    174 AT-TQ2403 - Ma nagement Software - User's Guide Figure 74: Client Side Security Setting – WPA Setting Detail Configure the following sett ings on the “Security Settings” of the Intel PROSet dialog. Field Setting Network Authentication WPA2 – Enterprise Data Encryption TKIP or A E S–CCMP depending on ho w this option is configured ...

  • Allied Telesis AT-TQ2403 - page 175

    AT-TQ2403 Ma nagement Software User's Guide 175 Configuring WP A/WP A2 P ersonal (PSK) Security on a Client Wi-Fi Protected Access (WPA) with Pre-Shared Key (P SK) is a Wi-F i Alliance subset of IEEE 802.1 1i, which includes Temporal Key Integrity Protocol (T KIP), Advanced Encryptio n Algorithm (AES), and Counter mode/CBC-MAC Protocol (CCMP) ...

  • Allied Telesis AT-TQ2403 - page 176

    176 AT-TQ2403 - Ma nagement Software - User's Guide Association Tab Field Setting Network Authentication WPA – PSK Data Encryption TKIP or A E S depending on h ow th is option is configured on the access point. Note: When the Cipher Suit e on the access point is set to "Both", then TKIP clients with a valid TKIP key and AES clients ...

  • Allied Telesis AT-TQ2403 - page 177

    AT-TQ2403 Ma nagement Software User's Guide 177 proced ures will vary depending on the RADIUS serv er you use and how you configure it. For this example, we use the Internet Auth entication Service that comes wi th Microsoft Windows 200 3 server.  Note: This document does not describe ho w to set up Administrative users on the RADIUS server ...

  • Allied Telesis AT-TQ2403 - page 178

    178 AT-TQ2403 - Ma nagement Software - User's Guide Figure 77: Radius Server – In ternet Authentication Service 2. In the left panel, right clic k on " RADIUS Clients " node and choose New > Radius Client from the popup menu. 3. On the first screen of the New RADIUS Client wizard provide informat ion about the AT-TQ2 403 Wireles ...

  • Allied Telesis AT-TQ2403 - page 179

    AT-TQ2403 Ma nagement Software User's Guide 179 4. For the "S hared secret" enter the RADIUS Key you provided to the access point (on the Security page). Re-type the key to confirm. Figure 79: Radius Server Setting – New Radius Client Setting 5. Click Finish Figure 80: Radius Server The access point is now displayed as a client of ...

  • Allied Telesis AT-TQ2403 - page 180

    180 AT-TQ2403 - Ma nagement Software - User's Guide Obtaining a TLS-EAP Cer tificate for a Clie n t  Note: If you want to use IEEE 802 . 1x mode with EAP-TLS certi ficates for authentication and authorization of clients, you mus t ha ve an external RADIUS server and a Public Key Authority Infrastructure (PKI), including a Certificate Author ...

  • Allied Telesis AT-TQ2403 - page 181

    AT-TQ2403 Ma nagement Software User's Guide 181 Figure 82: Welcome Message from Certification Server 3. Click Request a certificate to get the login pro m pt for the RADIUS server. 4. Provide a valid user name and password to access the RADIUS server. Figure 83: Radius Server Log-in Pa ge  Note: The user name and password you need to provid ...

  • Allied Telesis AT-TQ2403 - page 182

    182 AT-TQ2403 - Ma nagement Software - User's Guide 6. Click Yes on the dialog displayed to install the certificate. Figure 85: User Certification Inst allation – Identifying Information 7. Click Submit to complete and click Yes to confirm the submit tal on the popup dialog. Figure 86: User Certification Installation – Submit 8. Click Inst ...

  • Allied Telesis AT-TQ2403 - page 183

    AT-TQ2403 Ma nagement Software User's Guide 183 Figure 87: User Certification Inst allation – Certification Issued A success message is displayed indicating the certificate is now installed on t h e client. Figure 88: User Certification Inst allation – Certification Installed Configuring RADIUS Ser ver f or VLAN tags A VLAN is a grouping o ...

  • Allied Telesis AT-TQ2403 - page 184

    184 AT-TQ2403 - Ma nagement Software - User's Guide In the case of FreeRADIUS se rver, the following options may be set in the users f ile to add the necessary attributes. example-userAuth-Type :=EAP, User-Password =="password" Tunnel-Tyep = 13, Tunnel-Medium-Ty pe = 6, Tunnel-Private-Gro up-ID = 7 Tunnel-Type and Tunnel-Medium-Type ...

  • Allied Telesis AT-TQ2403 - page 185

    AT-TQ2403 Ma nagement Software User's Guide 185 Appendix B: T r oubleshooting This section provides informa tion about how to solve common pro blems you might encounter in the course of updating network c onfigurations on netw orks served by multi p le, clustered access points.  Wireless Distribution System (WDS) Problems and Solutions  ...

  • Allied Telesis AT-TQ2403 - page 186

    186 AT-TQ2403 - Ma nagement Software - User's Guide  Reset the access point from its Administrati on UI. To do this, go to http://IPAddressOfAccessPoint , navigate to Reset Config uration , and click the Reset button. (IP addresses for APs are on the Clu ster > Access Points page for any cluster member .)  Physically reset the access ...

  • Allied Telesis AT-TQ2403 - page 187

    AT-TQ2403 Ma nagement Software User's Guide 187 Appendix C: Command Line Interface (CLI) for AP Configuration In addition to the W eb based user interface, the AT-TQ240 3 Management Software includes a command line interface (CLI) for administering the access po int. The CLI lets you view and modify status and configuration information. From t ...

  • Allied Telesis AT-TQ2403 - page 188

    188 AT-TQ2403 - Ma nagement Software - User's Guide  Upgrade the Firmware  Keyboard Shortcuts and Tab Completion Help  CLI Classes and Properties Reference Comparison of Settings Configurab le with the CLI and We b U I The command line interface (CLI) and the Web user interface (UI) to the AT-TQ2403 Management Software are designed to ...

  • Allied Telesis AT-TQ2403 - page 189

    AT-TQ2403 Ma nagement Software User's Guide 189 Feature or Setting Configurable from CLI Configurable from Web UI User Accounts Yes Yes User Database Backup and Restore You cannot backup or restore a user database from the CLI. Please use the Web UI to do this as described in Backing Up and Restoring a User Database . Yes Sessions The CLI does ...

  • Allied Telesis AT-TQ2403 - page 190

    190 AT-TQ2403 - Ma nagement Software - User's Guide Feature or Setting Configurable from CLI Configurable from Web UI Time Protocol Yes Yes Reboot the AP Yes Yes Reset the AP to Factory Defaults Ye s Yes Upgrade the Firmware Ye s Yes Ho w to Access the CLI for an Access P oint You can use any of these methods to access the co mmand line i n te ...

  • Allied Telesis AT-TQ2403 - page 191

    AT-TQ2403 Ma nagement Software User's Guide 191 Software (ma nager, friend), a n d press " Enter " after each. (The password is masked, so it will not be displayed on the screen.) When the user name and password is accepted, the screen displays the AT-TQ2403 Management Software help comma nd prompt. AT-TQ2403 login: manager Password: ...

  • Allied Telesis AT-TQ2403 - page 192

    192 AT-TQ2403 - Ma nagement Software - User's Guide This brings up the SSH comma nd window and establish es a connection t o the access point. Th e login prompt is displayed . login as: 3. Enter the defaul t Administrator user name and password for the AT-TQ2 403 Management Software (manager, friend), and press " Enter " after each. ...

  • Allied Telesis AT-TQ2403 - page 193

    AT-TQ2403 Ma nagement Software User's Guide 193 CLI Command Description get The "get" command allows you to get the property values of existing instances of a class. Classes can be "named" or "unnamed". T he command syntax is: get unnamed-class [ property ... | detail ] get named-class [ instance | all [ pro p ert ...

  • Allied Telesis AT-TQ2403 - page 194

    194 AT-TQ2403 - Ma nagement Software - User's Guide CLI Command Description set The "set" command allows you to set the proper ty values of existing ins tances of a class. set unnamed-class [ with qualifier-pro perty qualifier-value ... to ] prop erty value . . . The first argument is an unnamed class in the configu ration. After thi ...

  • Allied Telesis AT-TQ2403 - page 195

    AT-TQ2403 Ma nagement Software User's Guide 195 CLI Command Description Add The "add" command allows you to add a new in stance or group of instances of a class. add unique-named-class i nstance [ property value . .. ] add group-named-class instance [ property v alue ... ] add anonymous-class [ property value ... ] For example: add r ...

  • Allied Telesis AT-TQ2403 - page 196

    196 AT-TQ2403 - Ma nagement Software - User's Guide Hitting TAB once will attem pt to complete the curr ent command. If multiple completions exist, a beep will sound and no results will be displayed. Enter TAB again to display all available completio ns.  Example 1: At a blank command line , hit TAB twice to get a list of all commands. AT-T ...

  • Allied Telesis AT-TQ2403 - page 197

    AT-TQ2403 Ma nagement Software User's Guide 197 prop erty , " get system version ". Hit ENTER to display the output results of the command. For detailed examples on getting help, see “ Key board Shortcuts and Tab Completion Help ”. Ready to Get Started? If you know the four basic commands show n above (get, set, remove, and add) ...

  • Allied Telesis AT-TQ2403 - page 198

    198 AT-TQ2403 - Ma nagement Software - User's Guide Interface Description br vw nx The bridge interface for Virtual W ireless Network (VWN) where "x" indicates the number of the VWN. wlan0 The wireless (radio) interface for the Interna l network. wlan0guest The wireless (radio) interface for the Guest network. wlan0vw nx The wireless ...

  • Allied Telesis AT-TQ2403 - page 199

    AT-TQ2403 Ma nagement Software User's Guide 199  Running Configuration - The runnin g configurati on contains the settin gs with whi ch the AP is currently running. When you view or update configuration settings throug h the command line interface (CLI) using get , set , add , and remove commands, you are viewing and cha n ging values on th ...

  • Allied Telesis AT-TQ2403 - page 200

    200 AT-TQ2403 - Ma nagement Software - User's Guide Feature or Setting CLI Comm and Get the Firmware Version for the Access Point get system version Get the Location of the Access Point get cluster locatio n Set the Location for an Access Point set system location NewLoc ation For example: set system location hallway or set system location &qu ...

  • Allied Telesis AT-TQ2403 - page 201

    AT-TQ2403 Ma nagement Software User's Guide 201 -------- ------------- ip 10.10.55. 216 mac 00:a0:c9:8c:c4:7e Get Common Information on All Interfaces for an AP The fo llowing example show s common information (including IP addresses) for all inter faces. AT-TQ2403# get interface all name type status mac ip mask ------------------------------- ...

  • Allied Telesis AT-TQ2403 - page 202

    202 AT-TQ2403 - Ma nagement Software - User's Guide brvwn12 bridge down 00:00:00:00:0 0:00 brvwn1 bridge down 00:00:00:00:00: 00 brvwn4 bridge down 00:00:00:00:00: 00 brvwn14 bridge down 00:00:00:00:0 0:00 lo loopback up 00:00: 00:00:00:00 127.0.0.1 255.0. 0.0 eth0 ethern et up 00:5C:0 0:1C:00:1C Get the Firmware Version for the Access Point I ...

  • Allied Telesis AT-TQ2403 - page 203

    AT-TQ2403 Ma nagement Software User's Guide 203 Get the Wireless Network Name (SSID) AT-TQ2403# get interface wlan0 ssid allied Set the Wireless Network Name (SSID) AT-TQ 2403# set interface wlan0 ssid "Vicky’s AP" AT-TQ2403# get interface wlan0 ssid Vicky’s AP Access Point and Cluster Settings The command exampl es in this secti ...

  • Allied Telesis AT-TQ2403 - page 204

    204 AT-TQ2403 - Ma nagement Software - User's Guide cluster-name vicky-cluster Determine only whether an AP is clustered or not The get cluster clustered co mmand returns a value of 0 or 1. If the com mand returns a value o f 1, then the AP is a member of a cluster. If the AP returns a value of 0, then the AP is in standa lone mode. AT-TQ2403# ...

  • Allied Telesis AT-TQ2403 - page 205

    AT-TQ2403 Ma nagement Software User's Guide 205 Feature or Setting CLI Command To set the user’s real name: set radius-user UserName RealName For example: set radius-user samantha realname "Elizabeth Montgomer y " or set radius-user samantha realname Elizabeth Montgomer y To set user’s password: set radius-user UserName password ...

  • Allied Telesis AT-TQ2403 - page 206

    206 AT-TQ2403 - Ma nagement Software - User's Guide AT-TQ2403# set radius-user samantha password bewitched 4. Repeat this process to add some othe r users (end ora, darren, and w ally) AT-TQ2403# add radius-user endora AT-TQ2403# set radius-user endora realname "Agnes Moorhead" AT-TQ2403# set radius-user endora password scotch AT-TQ2 ...

  • Allied Telesis AT-TQ2403 - page 207

    AT-TQ2403 Ma nagement Software User's Guide 207 Feature or Setting CLI Comm and Global comma nds to get details on all Basic Service Sets (BSSs). This is a useful command to use to get a comprehensive picture of how the AP is currently configured. get bss all detail get access-point get vwn Get Information on t he Management Interface for the ...

  • Allied Telesis AT-TQ2403 - page 208

    208 AT-TQ2403 - Ma nagement Software - User's Guide Feature or Setting CLI Comm and Enable Remote Logging and Specify the Log Relay Host for the Log As a prerequisite to remote logging, the Log Relay Host must be configured firs t as described in “ Setting Up the Log Relay Host ”. See complete explanation of CLI commands at “ Enable Remo ...

  • Allied Telesis AT-TQ2403 - page 209

    AT-TQ2403 Ma nagement Software User's Guide 209 Get Current Settings for the Ethernet (Wired) Management Interface The following example sho ws how to use the CLI to get the Ethernet (Wired) sett ings for the Management interface for an access point. You can see by the o utput results of the comma nd that the MAC address is 00:01:02:03:02:00, ...

  • Allied Telesis AT-TQ2403 - page 210

    210 AT-TQ2403 - Ma nagement Software - User's Guide Get the Network Name (SSID) for the Wi reless Internal Interface The following exampl e shows how to get the SSID of a Wireless Internal Interface. You can see from the value that is returned, tha t the SSID of this AP is "allied ". AT-TQ2403# get interface wlan0 ssid allied Get cur ...

  • Allied Telesis AT-TQ2403 - page 211

    AT-TQ2403 Ma nagement Software User's Guide 211 static-c hanne l 36 channel 36 Property Value --------------------------------- ------------------------------------------------ tx-power 100 tx-rx-status up beacon-interval 100 rts-threshold 2347 fragmentation-thres hold 2346 super-ag no atheros-xr no load-balance-disassociation-u tilization 0 l ...

  • Allied Telesis AT-TQ2403 - page 212

    212 AT-TQ2403 - Ma nagement Software - User's Guide You can set a Severity of between 0 (most severe) and 7 (l east severe). Setting a Severit y of 7 will result in all persistent messages bein g sent to the Event Log. However, if you se t a Severity of 4, only messages with a Severity between 0 and 4 will be sent to the Ev en t Log. To find o ...

  • Allied Telesis AT-TQ2403 - page 213

    AT-TQ2403 Ma nagement Software User's Guide 213 AT-TQ240 3# get log Property Value --------------------------------- - depth 128 persistence no severity 7 relay-enabled 0 relay-host relay-port 514 When you start a new AP, the Log Relay Host is di sabled . From the above output for the "get log " command, you can identify the follow i ...

  • Allied Telesis AT-TQ2403 - page 214

    214 AT-TQ2403 - Ma nagement Software - User's Guide AT-TQ2403# set log relay-host myserver Specify the Relay Port To specify the Relay Port for the syslog server: set log relay-port Number_Of_LogRelayP ort Where Number_Of_LogRelayPort is the po rt number fo r the Log Relay Host. For example: AT-TQ2403# set log relay-port 51 4 Review Log Settin ...

  • Allied Telesis AT-TQ2403 - page 215

    AT-TQ2403 Ma nagement Software User's Guide 215 tx- packets --------------------------------- --------------------------------------------------- -------------------------------- wlan1 00:0 e:35:48:a7:ea Yes Yes 98 1 wlan1 00:1 1:95:df:83:b1 Yes Yes 3 20 27 AT-TQ2403# get association detail Property Value --------------------------------- - in ...

  • Allied Telesis AT-TQ2403 - page 216

    216 AT-TQ2403 - Ma nagement Software - User's Guide ssid Service Set IDentifier (a.k.a., Network Name) supported-rates Supported rate s list type Type (AP, Ad hoc, or Other) wpa WPA security enabled To get the neighbor ing access points, type get detected-ap . AT-TQ2403# get dete cted-ap mac type privacy ssid channel signal ------------------- ...

  • Allied Telesis AT-TQ2403 - page 217

    AT-TQ2403 Ma nagement Software User's Guide 217 Feature or Setting CLI Command Deny Management via WLAN Enable: set management deny-w lan-management-enabled 1 Ping Telnet HTTP SNMP TFTP Deny: set management deny-w lan-management-ping 1 set management deny-w lan-management-telnet 1 set management deny-w lan-management-http 1 set management deny ...

  • Allied Telesis AT-TQ2403 - page 218

    218 AT-TQ2403 - Ma nagement Software - User's Guide  Note: For more information on DHCP and S ta tic IP conn ection ty pes, see the topic “ Understanding Dynamic and Static IP A ddressing on the AT-TQ2403 Manage ment Software ”. To get the connection type: AT-TQ2403# get management dhcp-statu s up In order to re-set the conn ection type ...

  • Allied Telesis AT-TQ2403 - page 219

    AT-TQ2403 Ma nagement Software User's Guide 219 Re-Configure Static IP Addressing Values  Note: This section assumes y ou have already set the AP to use Static IP Addressing and set some in itial values as described in “ Get/Change the Connection Type (DH CP or Static IP) ”. If you are using static IP addressing on the access poin t (in ...

  • Allied Telesis AT-TQ2403 - page 220

    220 AT-TQ2403 - Ma nagement Software - User's Guide 2. T u rn off Dyna mic DNS Name servers and re-check the settings: AT-TQ2403# set host dns-via-dhcp down AT-TQ2403# get host dns-via-dh cp down 3. Get the current IP addresses for the DNS Nameservers: AT-TQ240 3# get host stat ic-dns-1 10.10.3.9 AT-TQ2403# get host stat ic-dns-2 10.10.3 .11 4 ...

  • Allied Telesis AT-TQ2403 - page 221

    AT-TQ2403 Ma nagement Software User's Guide 221  Note:  Before config uring this feature, make sure y ou are familiar with the names of the interfaces as described in “ Understanding Inter faces as Presented in the CLI ”. The interface name you referenc e in a command determines whether a setting app lies to a wired or wireless inter ...

  • Allied Telesis AT-TQ2403 - page 222

    222 AT-TQ2403 - Ma nagement Software - User's Guide Caution:  You cannot use a ssh or telnet connection to configure VLANs, because you will lose network connectivity to the access point when you remove the bridge-port. Therefore, you must use a serial port connect i on to configure VLANs through the CLI.  Be sure to verify that the swit ...

  • Allied Telesis AT-TQ2403 - page 223

    AT-TQ2403 Ma nagement Software User's Guide 223 welcome-scre en-text Thank you for using wireless Guest Access as provided by this AT-TQ2403. Upon clicking "Acce pt", you will gain access to our wireless guest ne twork. This network allows complete acc ess to the Internet but is external to the corporate network. Please note that thi ...

  • Allied Telesis AT-TQ2403 - page 224

    224 AT-TQ2403 - Ma nagement Software - User's Guide Feature or Setting CLI Command Enable or Disable a VWN set vwn vwnx status up This will enable VWN x . set vwn vwnx status down This will disable VWN x. Where x is the VWN number. The VWN number can be between 1 and 14. Get the VLAN ID of a VWN get vwn vwnx vlan-id Where x is the VWN number. ...

  • Allied Telesis AT-TQ2403 - page 225

    AT-TQ2403 Ma nagement Software User's Guide 225 Feature or Setting CLI Command Configure Security on the VWN Configuring security on a VWN is the same process as configuring security on an ac cess point. The same options are available. For more information, see “ Config ure Security on the VWN ”. Find out whether VWNs are enabled or not Us ...

  • Allied Telesis AT-TQ2403 - page 226

    226 AT-TQ2403 - Ma nagement Software - User's Guide Get the SSID of a VWN In this example, su ppose you want to determine the SSID of VWN 14 on an AP. AT-TQ2403# get interface wl an0vwn14 ssid myoffice Set the SSID for a VWN The SSID for a wireless network can be any alphan umeric string, up to a maximum of 32 c haracters. The SSID you set for ...

  • Allied Telesis AT-TQ2403 - page 227

    AT-TQ2403 Ma nagement Software User's Guide 227 use wlan 1vwn<x>. For infor mation on the options for configuring security on an access point, see “ Security ”. When configuring Security on a VWN, use the same commands as setting Secu rity on an access point, remembering to make the foll owing substitutes:  In the CLI commands, re ...

  • Allied Telesis AT-TQ2403 - page 228

    228 AT-TQ2403 - Ma nagement Software - User's Guide suite: AT-TQ2403# set bss wlan0bssvwn7 open-system-auth entication on AT-TQ2403# set bss wlan1bssvwn7 open-system-auth entication on AT-TQ2403# set bss wlan0bssvwn7 shared-key-authentication on AT-TQ2403# set bss wlan1bssvwn7 shared-key-authentication on AT-TQ2403# set bss wlan0bssvwn7 wpa-al ...

  • Allied Telesis AT-TQ2403 - page 229

    AT-TQ2403 Ma nagement Software User's Guide 229 Feature or Setting CLI Command Get Detailed Description of Current Security get bss wlan0bssInternal detail g et interface wlan0 detail Set the Broadcast SSID (Allow or Prohibit) set bss wlan0bssInternal ignore-broadcast-s sid on set bss wlan0bssInternal ignore-broadcast-s sid off Enable / Disabl ...

  • Allied Telesis AT-TQ2403 - page 230

    230 AT-TQ2403 - Ma nagement Software - User's Guide wpa-cipher-ccmp off wpa-allowed on wpa2-allowed on rsn-preauthent ication off Set the Broadcast SSID (Allow or Prohibit) To set the Broadcast SSID to on (allow): AT-TQ2403# set bss wlan0bssInter nal ignore-broadcast-ssid on To set the Broadcast SSID to off (prohibit): AT-TQ2403# set bss wlan0 ...

  • Allied Telesis AT-TQ2403 - page 231

    AT-TQ2403 Ma nagement Software User's Guide 231 Set Security to Static WEP 1. Set the Security Mode 2. Set the Transfer Key Index 3. Set the Key Length 4. Set the Key T ype 5. Set the WEP Keys 6. Set the Authen tication Algorithm 7. Get Current Security Sett ings After Re-Conf i guring to S tatic WEP Security Mode 1. Set the Security Mode AT-T ...

  • Allied Telesis AT-TQ2403 - page 232

    232 AT-TQ2403 - Ma nagement Software - User's Guide 4. Set the Key Typ e Valid values for Key Type are ASCII or Hex. The follow ing commands set the Key Type. Feature or Setting CLI Command To set the Key Type to ASCII: set interface wlan0 wep-key-ascii yes To set the Key Type to Hex: set interface wlan0 wep-key-a scii no For our example, we? ...

  • Allied Telesis AT-TQ2403 - page 233

    AT-TQ2403 Ma nagement Software User's Guide 233 Feature or Setting CLI Command To set Authentication Algorit h m to Both : set bss wlan0bssInternal open -system-authentication on set bss wlan0bssInternal s h ared-key-authentication on For this example, we’ll set the authentication algorit h m to Shared Key: AT-TQ2403# set bss wlan0bssInt ern ...

  • Allied Telesis AT-TQ2403 - page 234

    234 AT-TQ2403 - Ma nagement Software - User's Guide status up description Wireless - Internal mac 00:01:02:03:02:00 ip 0.0.0.0 mask static-ip 0.0.0.0 static-mask rx-bytes 0 rx-packets 0 rx-errors 0 rx-drop 0 rx-fifo 0 rx-frame 0 rx-compressed 0 rx-multicast 0 tx-bytes 0 tx-packets 0 tx-errors 0 tx-drop 0 tx-fifo 0 tx-colls 0 tx-carrier 0 tx-co ...

  • Allied Telesis AT-TQ2403 - page 235

    AT-TQ2403 Ma nagement Software User's Guide 235 5. Get C urrent Security Sett ings After Re-Conf iguring to IEEE 802.1x Security Mode 1. Set the Security Mode AT-TQ 2403# set interface w l an0 security dot1x 2. Set the Authentication Server You can use the built-in authe n tication server on the access point or an e xternal RADIUS server.  ...

  • Allied Telesis AT-TQ2403 - page 236

    236 AT-TQ2403 - Ma nagement Software - User's Guide For our example, we’ll disable RADIUS accounting since we’re us ing the built-in server : AT-TQ2403# set bss wlan0bssI nternal radius-accounting off 5. Get Current Security Settings After Re-C onfiguring to IEEE 802.1x Security Mod e Now we can use the "get" command again to vie ...

  • Allied Telesis AT-TQ2403 - page 237

    AT-TQ2403 Ma nagement Software User's Guide 237 2. Set the WPA Versions Select the WPA version based on what types of client stations you want to support. Feature or Setting CLI Comma nd To support WPA clients: WPA: If all client statio ns on the network support the origin al WPA but none supp ort the newer WPA2, then use WPA. set bss wlan0bss ...

  • Allied Telesis AT-TQ2403 - page 238

    238 AT-TQ2403 - Ma nagement Software - User's Guide Feature or Setting CLI Command To set the cipher suite to CCMP (AES) only: CCMP (AES) - Counter mode/CBC- MAC Protocol (CCMP) is an encryption method for IEEE 802.11i that uses the Advanced Encryption Algorithm (AES). set bss wlan0bssInternal wpa-cipher-tkip off set bss wlan0bssInternal wpa-c ...

  • Allied Telesis AT-TQ2403 - page 239

    AT-TQ2403 Ma nagement Software User's Guide 239 wpa- personal The following command gets details on how the in ternal network is configured, including details on Security. AT-TQ2403# get bss wlan0bssInt ernal detail Property Value --------------------------------- ----------------------------------------------- status up description Internal r ...

  • Allied Telesis AT-TQ2403 - page 240

    240 AT-TQ2403 - Ma nagement Software - User's Guide 2. Set the WPA Versions Select the WPA version based on what types of client stations you want to support. Feature or Setting CLI Command To support WPA clients: WPA: If all client statio ns on the network support the original WPA but none support th e newer WPA2, then use WPA. set bss wlan0b ...

  • Allied Telesis AT-TQ2403 - page 241

    AT-TQ2403 Ma nagement Software User's Guide 241 Feature or Setting CLI Command To enable pre -authentication for WPA2 clients: Enable pre-a uthentication if you want WPA2 wireless clients to send pre-authenticatio n packet. The pre-authe ntication informatio n will be relayed from the access point the client is currently using to the target ac ...

  • Allied Telesis AT-TQ2403 - page 242

    242 AT-TQ2403 - Ma nagement Software - User's Guide To set the cipher suite to Both: Both - When the authen tication algorithm is set to "Both", both TKIP and AES clie nts can associate with the access point. WPA clients must ha ve either a valid TKIP key or a valid CCMP (AES) key to be able to associate with the AP. set bss wlan0bss ...

  • Allied Telesis AT-TQ2403 - page 243

    AT-TQ2403 Ma nagement Software User's Guide 243  Note: RADIUS accounting is not supported by the bu ilt-in server, so if you are using the built-in server make sure that RADIUS accounting is off. Feature or Setting CLI Command To enable RADIUS accounting: set b ss wlan0bssInternal radius-accounting on To disable RADIUS accounting: set b ss ...

  • Allied Telesis AT-TQ2403 - page 244

    244 AT-TQ2403 - Ma nagement Software - User's Guide mac-acl-name default radius-accounting on radius-ip 142.77.1.1 radius-key KeepSecret radius-port 1812 radius-accounting-port 1813 vlan-tagged-interface br0 open-system-authen tication on shared-key-authent ication off wpa-allow-non-wpa-stations on wpa-cipher-tkip on wpa-cipher-ccmp off wpa-al ...

  • Allied Telesis AT-TQ2403 - page 245

    AT-TQ2403 Ma nagement Software User's Guide 245 Th is table shows a quick view of Radio S ettings commands and links to detai led examples. Feature or Setting CLI Comma nd Get Radio Settings get radio get radio wlan0 get radio wlan0 detail Get IEEE 802.11 Radio Mode get radio wlan0 mode Get Radio Channel get radio wlan0 channel Get Basic Radio ...

  • Allied Telesis AT-TQ2403 - page 246

    246 AT-TQ2403 - Ma nagement Software - User's Guide Get Radio Channel To get the current setting for radio Channel: AT-TQ2403# get radio wlan0 ch annel 36 (The radio in this example is on Cha nnel 36.) Get Basic Radio Settings To get basic current Radio settings: AT-TQ2403# get radio wlan0 Property Value --------------------------------- ----- ...

  • Allied Telesis AT-TQ2403 - page 247

    AT-TQ2403 Ma nagement Software User's Guide 247 rate-limit-en able off rate-limit 50 rate-limit-burst 75 Get Supported Rate Set The Supported Rate Set is what the access poin t supports. The AP will automatical ly choose the most efficient rate based on factors like error rates and dist ance of client statio ns from the AP. For a list the reco ...

  • Allied Telesis AT-TQ2403 - page 248

    248 AT-TQ2403 - Ma nagement Software - User's Guide  Note: To get a list of all properties you can set on t h e A P r a d i o , t y p e t h e f o l l o w i n g a t t h e CLI prompt: set radio wlan0 [Space] [Tab ] [Tab] 1. T urn the Radio On or Off 2. Set the Radio Mode 3. Enable or Disable S uper AG 4. Set the Channel Policy 5. Set the Radi ...

  • Allied Telesis AT-TQ2403 - page 249

    AT-TQ2403 Ma nagement Software User's Guide 249 Feature or Setting CLI Command Atheros Turbo 2.4 GHz set radio wlan0 mode turbo-g Atheros Dynamic Turbo 2.4 GHz set radio wlan0 mode dynamic-tur bo-g The following comma nd sets the Wireless Mode to IEEE 802 .11g: AT-TQ2403# set radio wlan0 mode g When you change the radio mode, typica lly you mu ...

  • Allied Telesis AT-TQ2403 - page 250

    250 AT-TQ2403 - Ma nagement Software - User's Guide Note that this setting for a "static -channel" only tak es effect if the Chann el Policy (channel-po licy) is set to static. The channels available will depend on the radio mode of your access point and the country in which the AP is operating. The followi ng mappings of modes to ch ...

  • Allied Telesis AT-TQ2403 - page 251

    AT-TQ2403 Ma nagement Software User's Guide 251 Radio Mode Basic Rates Supported Rates g (IEEE 802.11g) 11, 5.5, 2, 1 Mbps 54, 48, 36, 24 , 18, 12, 11, 9, 6, 5.5, 2, 1 Mbps Note : Including rates 24, 12, and 6 as Supported Rates for "g" mode will prevent "b" clients from connecti n g since they do not support these rates, b ...

  • Allied Telesis AT-TQ2403 - page 252

    252 AT-TQ2403 - Ma nagement Software - User's Guide AT-TQ2403# get b asic-rate name rate ------------------------- wlan1 5.5 wlan1 2 wlan1 1 wlan0 24 wlan0 12 wlan0 6 wlan0 48 The following comma nd adds "9" as a supported ra te to wlan0 (the internal, wireless interface): AT-TQ2403# add suppor t ed-rate wlan0 rate 9 To get the suppo ...

  • Allied Telesis AT-TQ2403 - page 253

    AT-TQ2403 Ma nagement Software User's Guide 253 mu lticast and broadcast packets b uffered at the AP will be tra n smitted immediately after the transmission of this beacon frame. T h e measurement is in beacon interva l s. Specify a DTIM period within a range of 1 - 255 beaco ns. For example, if you set this to "1" clie nts will che ...

  • Allied Telesis AT-TQ2403 - page 254

    254 AT-TQ2403 - Ma nagement Software - User's Guide 4. Getting Curren t MAC Filtering Set tings: 5. Get the T ype of MAC Filtering List Currently Set (Accept or Deny) 6. Get MAC Filtering List 1. Specify an Accept or Deny List To set u p MAC filtering you first need to specify wh ich type of list you want to co nfigure Feature or Setting CLI C ...

  • Allied Telesis AT-TQ2403 - page 255

    AT-TQ2403 Ma nagement Software User's Guide 255 AT-TQ240 3# remove mac-acl default mac 00:01:02: 03:04:04 4. Getting Current MAC Filtering Settings Get the Type of MAC Filtering List Currently Set (Accept or Deny) The following comma nd shows which type of MAC filter ing list is currently configured: AT-TQ2403# get bss wlan0bssIntern al mac-ac ...

  • Allied Telesis AT-TQ2403 - page 256

    256 AT-TQ2403 - Ma nagement Software - User's Guide Quality of Service  Note: Before configuring thi s feature from th e CL I, make sure you are familiar with the names of the interfaces as described in “ Understanding Interfaces as Presented i n the CLI ”. The interface name referenced in a command de termines if a setting applies to a ...

  • Allied Telesis AT-TQ2403 - page 257

    AT-TQ2403 Ma nagement Software User's Guide 257 Feature or Setting CLI Command Setting Minimum and Maximum Contention W indows (cwmin, cwmax) On the AP: set tx-queue wlan 0 with queue Q u eue_Name to cwmin cwmin_Value cwmax c wmax_Value On a client statio n: set wme-queue wlan0 with queue Queue_ Name to cwmin cwmin_Value cwmax c wmax_Value See ...

  • Allied Telesis AT-TQ2403 - page 258

    258 AT-TQ2403 - Ma nagement Software - User's Guide Station Enhanced Distrib uted Channel Access (EDCA) Pa rameters affect traffic flowing from the client station to the access point (s tation-to-AP). Keep in mi nd that station-to-AP parameters apply only w hen WMM is enabled as described in “Enable/D isable Wi-Fi Multimedia”. Understandin ...

  • Allied Telesis AT-TQ2403 - page 259

    AT-TQ2403 Ma nagement Software User's Guide 259 wl an1 be 3 15 1023 0 wlan1 bk 7 15 1023 0 wlan0 vo 2 3 7 47 wlan0 vi 2 7 15 94 wlan0 be 3 15 1023 0 wlan0 bk 7 15 1023 0 Set Arbitration Interframe Spaces (AIFS) Arbitration Inter-Frame Spacing (AIFS) specifies a wait time (in milliseco nds) for data frames. Valid values for AIFS are 1-255. Set ...

  • Allied Telesis AT-TQ2403 - page 260

    260 AT-TQ2403 - Ma nagement Software - User's Guide wlan1 vi 2 7 1 5 9 4 wlan1 be 3 15 1023 0 wlan1 bk 7 15 1023 0 wlan0 vo 14 3 7 4 7 wlan0 vi 2 7 15 94 wlan0 be 3 15 1023 0 wlan0 bk 7 15 1023 0 Setting Minimum and Maximum Conten tion Windows (cwmin, cwmax) The Minimum Contenti on Window (cwmin) sets the upper l imit (in millisecon ds) of the ...

  • Allied Telesis AT-TQ2403 - page 261

    AT-TQ2403 Ma nagement Software User's Guide 261 cwmax_ Value Where Queue_Name is the queue on the station to which you want the setting to apply a nd cwmin_Value and cwmax_V alue are the values (in mi lliseconds) you want to s pecify for contention back-off windows. For example, this command sets the c lient station Vi deo queue (vi) cwmin val ...

  • Allied Telesis AT-TQ2403 - page 262

    262 AT-TQ2403 - Ma nagement Software - User's Guide Set Transmission Opportunity Limit (t xop-limit) for WMM client stations The Transmission O pportunity Limit (txop- limit) specifies an interval of time ( i n milliseconds) wh en a WMM client station has the right to init iate transm issions on the wireless network. The txop-l imit applies on ...

  • Allied Telesis AT-TQ2403 - page 263

    AT-TQ2403 Ma nagement Software User's Guide 263 AT-TQ2403# set interface wlan0wds0 remote-mac MAC _Address_Of_Remote_AP For example: AT-TQ2403# set in terface wlan0wds0 remo te-mac 00:E0:B8: 76:1B:14 Setting Security for a WDS link to WPA-Personal The WPA (PSK) security setti ng can only be set on the W DS link if you have set security on both ...

  • Allied Telesis AT-TQ2403 - page 264

    264 AT-TQ2403 - Ma nagement Software - User's Guide priority port-isolation ssid bss security wpa-personal-key wep-key-ascii no wep-key-length 104 wep-default-key wep-key-1 ep-key-2 wep-key-3 wep-key-4 wep-key-mapping- length multicast-received-frame-co unt vlan-interface vlan-id radio wlan0 remote-mac 00:80:98:78 :18:50 wep-key wds-ssid wds-t ...

  • Allied Telesis AT-TQ2403 - page 265

    AT-TQ2403 Ma nagement Software User's Guide 265 4. Allow/Prohibit SNMP SET Commands set snmp rw-status up set snmp rw-status down 5. Set the read-write community name for permitted SETs set snm p rw-community <na me> 6. Restrict the source of SNMP requests to only the designated hosts or su bnets set snmp source-status up set snmp source ...

  • Allied Telesis AT-TQ2403 - page 266

    266 AT-TQ2403 - Ma nagement Software - User's Guide AT-TQ2403# set ntp auto-syn c up 4. Interval to Synchronize If S ynchronize Auto matically is enabled, the device will synchronize time with the NTP server at each specified interval. This interva l is set in minutes. AT-TQ2403# set ntp sync-int v 20 5. Time zone Specify the time zone wher e ...

  • Allied Telesis AT-TQ2403 - page 267

    AT-TQ2403 Ma nagement Software User's Guide 267 Reset the AP to Factory Defaults If you are experiencing extre me problems with the AT-TQ2403 Management Soft ware and have tried all other troubleshooting meas ures, you can reset the a ccess point. This will rest ore factory defaults and clear all settings, includ ing settings such as a new pas ...

  • Allied Telesis AT-TQ2403 - page 268

    268 AT-TQ2403 - Ma nagement Software - User's Guide 2. Set the upgrade URL from the CLI. This URL should be the URL of the upgrade file on the web server . AT-TQ2403# set firmware-upgrade upgrade-url http://10.10.28.2 49/upgrade.img 3. It is good practice to check the validity of the upgrade file. V alidate the file using the following command ...

  • Allied Telesis AT-TQ2403 - page 269

    AT-TQ2403 Ma nagement Software User's Guide 269 Action on CLI Keyboard Shortcut Move the cursor forward on the current line, one character at a time Ctrl-f Right Arrow Key Start over at a blan k command prompt (aban dons the input on the cu rrent line) Ctrl-c Remove one character on the current line. Ctrl-h Remove the last word in the current ...

  • Allied Telesis AT-TQ2403 - page 270

    270 AT-TQ2403 - Ma nagement Software - User's Guide add Add an instance to the running configuration factory-reset Reset the system to factory defaults get Get property values of t h e running configuration reboot Reboot the system remove Remove instances in the running configu ration save-running Save the running configuration set Set propert ...

  • Allied Telesis AT-TQ2403 - page 271

    AT-TQ2403 Ma nagement Software User's Guide 271 access-poi nt Guest, VLAN and VWN settings ap-list AP list for rogue AP detection bss Basic Service Set of radios channel-planne r Channel planner settings cluster Cluste ring-based confi guration set tings config Configuration settings dhcp-client DHCP client settings dot11 IEEE 802.11 (all radi ...

  • Allied Telesis AT-TQ2403 - page 272

    272 AT-TQ2403 - Ma nagement Software - User's Guide AT-TQ2403# remove ap-list AP list for rogue AP detection basic-rate Basic rates of radios bridge-port Bridge ports of bridge interfaces bss Basic Service Set of radios interface Network interface mac-acl MAC address access list item radius-user RADIUS user supported-rate Supp orted rates of r ...

  • Allied Telesis AT-TQ2403 - page 273

    AT-TQ2403 Ma nagement Software User's Guide 273 Figure 90: Kick Start Search Results Dialog Box ...

  • Allied Telesis AT-TQ2403 - page 274

    274 AT-TQ2403 - Ma nagement Software - User's Guide Glossar y 0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0-9 802 IE EE 802 ( IEEE S td. 802-2001) is a family of standards for peer-to- peer communication o ver a LAN. These technologies use a shared-medium, with inform ation broadcast for all st ations to receive. T he basic communi ...

  • Allied Telesis AT-TQ2403 - page 275

    AT-TQ2403 Ma nagement Software User's Guide 275 802.11a Turbo IEEE 802.11a Tur bo is a proprietary va riant of the 802.11a standard from Atheros Communications. It supports accelerated data rates ranging from 6 to 108Mbps. Atheros Turbo 5 GHz is IE EE 802.11a Tu rbo mode. Atheros Turbo 2.4 GHz is IEEE 802.11 g Turbo mode. 802.11b IEEE 802.1 1b ...

  • Allied Telesis AT-TQ2403 - page 276

    276 AT-TQ2403 - Ma nagement Software - User's Guide 802.11i IEEE 802.11i is a comprehen sive IEEE standard for secu rity in a wireless local area network (WLAN) that describes Wi-Fi Protected A ccess 2 (WPA2). It defines enhance m ents to the MAC Layer to coun ter the some of the weaknesses of WEP . It incorporates strong er encry p tion techn ...

  • Allied Telesis AT-TQ2403 - page 277

    AT-TQ2403 Ma nagement Software User's Guide 277 A A ccess Point An access point is the communication hub for the devices on a WLAN, providing a connection or br idge between wireless and wired network devices. It s upports a Wireless Networking Framework called Infrastructure Mode. When one access point is connected to a wired ne twork and sup ...

  • Allied Telesis AT-TQ2403 - page 278

    278 AT-TQ2403 - Ma nagement Software - User's Guide frequency hopping spread spectrum, d ire ct sequence spread spectrum, etc.).  The optional Traffic Indicatio n Map (TIM) identifies stations , using power saving mode, that have data frames queued for them. Bridge A connection betwee n two local area networks (LANs) us ing the same protoco ...

  • Allied Telesis AT-TQ2403 - page 279

    AT-TQ2403 Ma nagement Software User's Guide 279 trans national authorities su ch as the Federal Communications Commission (FCC), the European Telecommunicatio ns Standards Institute (ETSI), the Kore an Communications Commission, or the Telecom Engineering Center ( TELEC). CSMA/CA Carrier Sense Multiple Access with Collisio n Avoidance (CSMA/CA ...

  • Allied Telesis AT-TQ2403 - page 280

    280 AT-TQ2403 - Ma nagement Software - User's Guide The Document Object Model (DO M) is an interface that al lows programs and scripts to dynamically access and update the content, struc ture, an d style of documents. The DOM allows you to model the objects in an H T M L o r X M L d o c u m e n t ( t e x t , l i n k s , i m a g e s , t a b l e ...

  • Allied Telesis AT-TQ2403 - page 281

    AT-TQ2403 Ma nagement Software User's Guide 281 The Extended Rate Protocol refers to the protocol used by IEEE 802.11g stations (over 20 Mbps transmission rates at 2.4GHz) when paired with Ort h ogonal Frequency Division Multiplexing (OFDM). Built into ERP and the IEEE 8 02.11g standard is a scheme for effective interoperability of IEEE 802.11 ...

  • Allied Telesis AT-TQ2403 - page 282

    282 AT-TQ2403 - Ma nagement Software - User's Guide HTTPS The Secure Hypertext Transfer Protocol (HTTPS) is the secure version of HTTP, the communication protocol of the World Wide Web. HTTPS is buil t into the browser. If you are using HTTPS you will notice a closed lock icon at the bott om corner of your browser page. All data sent via HTTPS ...

  • Allied Telesis AT-TQ2403 - page 283

    AT-TQ2403 Ma nagement Software User's Guide 283 An IP address i s partitioned into two portions: the networ k prefix and a host number on that network. A Subnet Mask is used to define the por tions. There are two special host numbers:  The Network Address consists of a host number that is all zeroes (for example, 192.168.2.0).  The Broad ...

  • Allied Telesis AT-TQ2403 - page 284

    284 AT-TQ2403 - Ma nagement Software - User's Guide LAN A Local Area Network (LAN) is a communications ne twork covering a limited area, for example, the computers in your home that you want to network to gether or a couple of floors in a building. A LAN connects multiple com puters and other network devices such as st orage and prin ters. Eth ...

  • Allied Telesis AT-TQ2403 - page 285

    AT-TQ2403 Ma nagement Software User's Guide 285 MTU The Maxi mum Transmission Unit is the largest physica l packet size, measured in bytes, that a network can transmit. Any messages larger than the MT U are fr agmented into smaller packets before being sent. Multicast A Multicast sends the same message to a select group of recip ients. Sending ...

  • Allied Telesis AT-TQ2403 - page 286

    286 AT-TQ2403 - Ma nagement Software - User's Guide with low-level protoco ls for communication and a ddressing. For example , protocols such as CSMA/CA and components like MAC addresses, and Frames are all defined and dealt with as a part of the Data-Link layer.  Layer 3, the Network layer, defines the how to dete rmine the best path for i ...

  • Allied Telesis AT-TQ2403 - page 287

    AT-TQ2403 Ma nagement Software User's Guide 287 The Point-to-P oint Protocol is a stan dard for transmitting network layer datagrams (IP packets) over serial point-to-point links. PPP is designed to operate both over asynchronous connectio ns and bit-oriented synchronous systems. PPPoE Point-to-Point Protocol over Ether net (PPPoE) is a sp eci ...

  • Allied Telesis AT-TQ2403 - page 288

    288 AT-TQ2403 - Ma nagement Software - User's Guide In IEEE 802.11 parlance, roaming cl ients are mobile client st ations or devices on a wireless network (WL AN) that require use of more than one Access Point (AP) as they move out of and into range of different base station service areas. IEEE 802.11 f defines a standa rd by which APs can com ...

  • Allied Telesis AT-TQ2403 - page 289

    AT-TQ2403 Ma nagement Software User's Guide 289 SNM P Traps SNMP traps enable the asynchronous com munication from network devices to managed agents. Set t ing SNMP traps saves on network resources an d eliminates redundant SNMP requests. SSID The Service Set Ide ntifier (SSID) is a thirty-two character key that uniquely identifies a wireless ...

  • Allied Telesis AT-TQ2403 - page 290

    290 AT-TQ2403 - Ma nagement Software - User's Guide T TCP The Transmission Control Protocol (T CP) is built on top of Inter net Protocol (IP). It adds reliable communication (guarantees delivery of data), flow-c on trol, multiple xing (more than one simultane ous connection), and connection-oriented transmissio n (requires the receiver of a pa ...

  • Allied Telesis AT-TQ2403 - page 291

    AT-TQ2403 Ma nagement Software User's Guide 291 V VLAN A virt ual LAN (VLAN) is a software-based, logical grouping of devices o n a network that allow them to act as if they are connected to a single physical network, eve n though they may not be. The nodes in a VLAN share resources and bandwidth, and are isolated on that network. T he AT-TQ24 ...

  • Allied Telesis AT-TQ2403 - page 292

    292 AT-TQ2403 - Ma nagement Software - User's Guide  Stations communicate t hrough an Access Point in an I nfrastructure Mode network. A sing le access point creates an infrastructure basic service set (BSS ) whereas multiple access points are organized in an extended service set (ESS). WLAN Wireless Local Area Network (WLAN) is a LAN that ...

Manufacturer Allied Telesis Category Network Card

Documents that we receive from a manufacturer of a Allied Telesis AT-TQ2403 can be divided into several groups. They are, among others:
- Allied Telesis technical drawings
- AT-TQ2403 manuals
- Allied Telesis product data sheets
- information booklets
- or energy labels Allied Telesis AT-TQ2403
All of them are important, but the most important information from the point of view of use of the device are in the user manual Allied Telesis AT-TQ2403.

A group of documents referred to as user manuals is also divided into more specific types, such as: Installation manuals Allied Telesis AT-TQ2403, service manual, brief instructions and user manuals Allied Telesis AT-TQ2403. Depending on your needs, you should look for the document you need. In our website you can view the most popular manual of the product Allied Telesis AT-TQ2403.

Similar manuals

A complete manual for the device Allied Telesis AT-TQ2403, how should it look like?
A manual, also referred to as a user manual, or simply "instructions" is a technical document designed to assist in the use Allied Telesis AT-TQ2403 by users. Manuals are usually written by a technical writer, but in a language understandable to all users of Allied Telesis AT-TQ2403.

A complete Allied Telesis manual, should contain several basic components. Some of them are less important, such as: cover / title page or copyright page. However, the remaining part should provide us with information that is important from the point of view of the user.

1. Preface and tips on how to use the manual Allied Telesis AT-TQ2403 - At the beginning of each manual we should find clues about how to use the guidelines. It should include information about the location of the Contents of the Allied Telesis AT-TQ2403, FAQ or common problems, i.e. places that are most often searched by users in each manual
2. Contents - index of all tips concerning the Allied Telesis AT-TQ2403, that we can find in the current document
3. Tips how to use the basic functions of the device Allied Telesis AT-TQ2403 - which should help us in our first steps of using Allied Telesis AT-TQ2403
4. Troubleshooting - systematic sequence of activities that will help us diagnose and subsequently solve the most important problems with Allied Telesis AT-TQ2403
5. FAQ - Frequently Asked Questions
6. Contact detailsInformation about where to look for contact to the manufacturer/service of Allied Telesis AT-TQ2403 in a specific country, if it was not possible to solve the problem on our own.

Do you have a question concerning Allied Telesis AT-TQ2403?

Use the form below

If you did not solve your problem by using a manual Allied Telesis AT-TQ2403, ask a question using the form below. If a user had a similar problem with Allied Telesis AT-TQ2403 it is likely that he will want to share the way to solve it.

Copy the text from the picture

Captcha
New picture

Comments (0)