Allied-telesis AT-WA7400/EU User Manual

613-001319 Rev.AManagement SoftwareAT-WA7400/EUUser’s Guide

Contents10

Chapter 9: Configuring the Wireless Settings100The channel defines the portion of the radio spectrum the radio uses for transmitting and receiving. Ea

AT-WA7400 Management Software User’s Guide101Configuring Internal Wireless LAN SettingsThe Internal Settings describe the MAC address (read-only) and

Chapter 9: Configuring the Wireless Settings102Configuring the Guest Network Wireless SettingsThe guest settings describe the MAC address (read-only)

103Chapter 10Configuring SecurityThe AT-WA7400 Management Software provides a number of authentication and encryption schemes to ensure that your wire

Chapter 10: Configuring Security104Understanding Security Issues on Wireless Networks Wireless mediums are inherently less secure than wired mediums.

AT-WA7400 Management Software User’s Guide105Comparison ofSecurity Modesfor KeyManagement,Authenticationand EncryptionAlgorithmsThree major factors th

Chapter 10: Configuring Security106Key for data encryption, as described in Table 1.Static WEP was designed to provide security equivalent of sending

AT-WA7400 Management Software User’s Guide107IEEE 802.1x mode is a better choice than Static WEP because keys are dynamically generated and changed pe

Chapter 10: Configuring Security108When to Use WPA/WPA2 Personal (PSK)Wi-Fi Protected Access 2 (WPA2) Personal Pre-Shared Key (PSK) is an implementati

AT-WA7400 Management Software User’s Guide109When to Use WPA/WPA2 Enterprise (RADIUS)Wi-Fi Protected Access 2 (WPA2) with Remote Authentication Dial-I

11Figure 1. AT-WA7400 CD Main Page...

Chapter 10: Configuring Security110 The best security you can have on a wireless network is WPA/WPA2 Enterprise (RADIUS) mode using CCMP (AES) encryp

AT-WA7400 Management Software User’s Guide111For information on how to configure this security mode, see “WPA/WPA2 Enterprise (RADIUS)” on page 123.Do

Chapter 10: Configuring Security112Configuring Security SettingsThe following section explains how to configure security modes on the access point. Ke

AT-WA7400 Management Software User’s Guide1132. Configure the following settings. NoteNote you can also allow or prohibit the Broadcast SSID and enabl

Chapter 10: Configuring Security114Wireless Access Point is not encrypted.There are no further options for plain text mode.Plain text mode can be usef

AT-WA7400 Management Software User’s Guide115Client stations can use different keys to transmit data to the access point. (Or they can all use the sam

Chapter 10: Configuring Security116If you selected ASCII, enter any combination of integers and letters 0-9, a-z, and A-Z. If you selected HEX, enter

AT-WA7400 Management Software User’s Guide117Rules to Remember for Static WEP All client stations must have the wireless LAN (WLAN) security set to W

Chapter 10: Configuring Security118Figure 35 illustrates setting the WEP key 1 on a Windows client.Figure 35. Providing a Wireless Client with a WEP K

AT-WA7400 Management Software User’s Guide119Figure 36. Example of Using Multiple WEP Keys and Transfer Key Index on Client StationsIEEE 802.1x IEEE 8

Figures12Figure 51. WDS Bridge...

Chapter 10: Configuring Security120Figure 37. IEEE 802.1x Security Mode Settings1. Configure the following settings:Authentication ServerSelect one of

AT-WA7400 Management Software User’s Guide121For information on setting up user accounts, see Chapter 4, “Managing User Accounts” on page 57.RADIUS Po

Chapter 10: Configuring Security122Figure 38. WPA/WPA2 Personal (PSK) Security Mode Settings1. Configure the following settings:WPA VersionsSelect the

AT-WA7400 Management Software User’s Guide123mode (CBC-CTR) and Cipher Block Chaining Message Authentication Code (CBC-MAC) for encryption and message

Chapter 10: Configuring Security124Figure 39. WPA/WPA2 Enterprise (RADIUS) Security Mode Settings1. Configure the following settings:WPA VersionsSelec

AT-WA7400 Management Software User’s Guide125Cipher SuitesSelect the cipher you want to use:Temporal Key Integrity Protocol (TKIP) - This is the defau

Chapter 10: Configuring Security126NoteThe RADIUS server is identified by its IP address and UDP port numbers for the different services it provides.

AT-WA7400 Management Software User’s Guide127Configuring the IAPP Mapping TableThe Inter-Access-Point Protocol (IAPP) enforces a unique association th

Chapter 10: Configuring Security1284. To remove a station from the map table:a. In map table, select the station you want to remove.b. Click Remove.c.

AT-WA7400 Management Software User’s Guide129Configuring SNMPSimple Network Management Protocol (SNMP) is another way for you to manage the access poi

13Table 1. Static WEP Configuration ...

Chapter 10: Configuring Security130LocationThe physical location of the access point.ContactThe contact person for the access point.System NameA uniqu

131Chapter 11Setting Up Guest AccessThe guest interface features allow you to configure the AT-WA7400 Wireless Access Point for controlled guest acces

Chapter 11: Setting Up Guest Access132Understanding the Guest InterfaceYou can define unique parameters for guest connectivity and isolate guest clien

AT-WA7400 Management Software User’s Guide133Configuring the Guest InterfaceTo configure the guest interface on the AT-WA7400 Wireless Access Point, p

Chapter 11: Setting Up Guest Access1345. Configure the guest splash screen as described in “Configuring the Welcome Screen (Captive Portal),” next.Co

AT-WA7400 Management Software User’s Guide135Using the Guest Network as a ClientAfter the guest network is configured, a client can access the guest n

Chapter 11: Setting Up Guest Access136

137Chapter 12VLANsThis chapter describes how to configure Virtual LANs (VLANs) for multiple wireless networks and management and includes the followin

Chapter 12: VLANs138Configuring VLANsNoteTo configure additional networks on VLANs, you must first enable virtual wireless networks on the Ethernet (w

AT-WA7400 Management Software User’s Guide139Virtual Wireless NetworkChoose one of the following from the list to identify an additional network to co

Tables14

Chapter 12: VLANs140NoteThe Broadcast SSID you set here is specifically for this Virtual Network (One or Two). Other networks continue to use the secu

AT-WA7400 Management Software User’s Guide141Configuring the Management VLANWhen you configure a management VLAN, only those users who have the requir

Chapter 12: VLANs142

143Chapter 13Configuring Radio SettingsThis chapter describes how to configure radio settings on the AT-WA7400 Wireless Access Point, and includes the

Chapter 13: Configuring Radio Settings144Understanding Radio SettingsRadio settings directly control the behavior of the radio device in the access po

AT-WA7400 Management Software User’s Guide145Configuring Radio SettingsTo configure the radio settings, perform the following procedure:1. From the ma

Chapter 13: Configuring Radio Settings146ModeThe Mode defines the Physical Layer (PHY) standard being used by the radio.NoteWith a two-radio access po

AT-WA7400 Management Software User’s Guide147The 802.11g and 802.11b channels that are allowed in a given country may change without notice. Be sure y

Chapter 13: Configuring Radio Settings148you set this to 2, clients check on every other beacon. If you set this to 10, clients check on every 10th be

AT-WA7400 Management Software User’s Guide149Transmit PowerProvide a percentage value to set the transmit power for this access point.The default is t

15PrefaceThis guide contains instructions on how to configure and maintain an AT-WA7400 Wireless Access Point using its management software and contai

Chapter 13: Configuring Radio Settings150Configuring the Rate SetsWhy do the different radios have different rate sets???Rate sets specify the transmi

AT-WA7400 Management Software User’s Guide151To configure the rate sets, perform the following procedure:1. From the main menu, select Advanced > R

Chapter 13: Configuring Radio Settings152

153Chapter 14Load BalancingThe AT-WA7400 Management Software allows you to balance the distribution of wireless client connections across multiple acc

Chapter 14: Load Balancing154Understanding Load BalancingLike most configuration settings on the AT-WA7400 Wireless Access Point, load balancing setti

AT-WA7400 Management Software User’s Guide155Configuring Load BalancingTo configure load balancing, you enable load balancing and set limits and behav

Chapter 14: Load Balancing156The Load Balancing page is shown in Figure 48.Figure 48. Load Balancing Page2. Configure the following settings as requir

AT-WA7400 Management Software User’s Guide157for disassociation. If the number of client stations associated with the access point at any one time is

Chapter 14: Load Balancing158

159Chapter 15Configuring Quality of Service (QoS)Quality of Service (QoS) provides you with the ability to specify parameters on multiple queues for i

Preface16Where to Find Web-based GuidesThe installation and user guides for all Allied Telesis products are available in portable document form (PDF)

Chapter 15: Configuring Quality of Service (QoS)160Understanding QoSA primary factor that affects QoS is network congestion due to an increased number

AT-WA7400 Management Software User’s Guide161critical applications, and rely on best-effort parameters for traditional IP data. For example, time-sens

Chapter 15: Configuring Quality of Service (QoS)162 Data 2 (Best Effort). Medium priority queue, medium throughput and delay. Most traditional IP dat

AT-WA7400 Management Software User’s Guide163NoteA frame is similar in concept to a packet. The difference is that a packet operates on the network la

Chapter 15: Configuring Quality of Service (QoS)164would occur if multiple access points got access to the medium at the same time and tried to transm

AT-WA7400 Management Software User’s Guide165Configuring QoS QueuesConfiguring Quality of Service (QoS) on the AT-WA7400 Wireless Access Point consist

Chapter 15: Configuring Quality of Service (QoS)166The Quality of Service page is shown in Figure 49.Figure 49. Quality of Service PageThe Quality of

AT-WA7400 Management Software User’s Guide167Data 2 (best effort) - Medium priority queue, medium throughput and delay. Most traditional IP data is se

Chapter 15: Configuring Quality of Service (QoS)168When the Maximum Contention Window size is reached, retries will continue until a maximum number of

AT-WA7400 Management Software User’s Guide169ConfiguringStation EDCAParametersStation Enhanced Distributed Channel Access (EDCA) parameters affect tra

AT-WA7400 Management Software User’s Guide17Contacting Allied Telesis This section provides Allied Telesis contact information for technical support a

Chapter 15: Configuring Quality of Service (QoS)170backoff value reaches the number defined in the Maximum Contention Window.For more information, see

171Chapter 16Configuring the Wireless Distribution System (WDS)The AT-WA7400 Management Software lets you connect multiple access points using a wirel

Chapter 16: Configuring the Wireless Distribution System (WDS)172Understanding the Wireless Distribution SystemA wireless distribution system (WDS) is

AT-WA7400 Management Software User’s Guide173Ethernet cabling. You can solve this problem by placing a second access point closer to second group of s

Chapter 16: Configuring the Wireless Distribution System (WDS)174You can enable Static WEP on the WDS link (bridge). When WEP is enabled, all data exc

AT-WA7400 Management Software User’s Guide175 If you can trace more than one path between any pair of access points going through any combination of

Chapter 16: Configuring the Wireless Distribution System (WDS)176Configuring WDS SettingsYou must configure the WDS settings for each access point int

AT-WA7400 Management Software User’s Guide177Figure 52. Wireless Distribution System Page2. Configure the following settings as necessary:

Chapter 16: Configuring the Wireless Distribution System (WDS)178RadioFor each WDS link, select Radio One or Radio Two. The rest of the settings for t

AT-WA7400 Management Software User’s Guide17964-bit (40-bit secret key + 24-bit initialization vector (IV)) or 128-bit (104-bit secret key + 24-bit IV

Preface18Management Software UpdatesNew releases of management software for our managed products are available from either of the following Internet s

Chapter 16: Configuring the Wireless Distribution System (WDS)180The MAC address for MyAP1 (the access point you are currently viewing) are displayed

181Chapter 17Maintenance and MonitoringThe maintenance and monitoring tasks described here all pertain to viewing and modifying settings on specific a

Chapter 17: Maintenance and Monitoring182Monitoring Wired and Wireless LAN SettingsTo monitor wired LAN and wireless LAN (WLAN) settings, perform the

AT-WA7400 Management Software User’s Guide183The guest Interface includes the MAC address, VLAN ID, and Associated Network Wireless Name (SSID).2. To

Chapter 17: Maintenance and Monitoring184Viewing the Event LogsTo view system events and the kernel log for a particular access point, perform the fol

AT-WA7400 Management Software User’s Guide185For information on setting the network time protocol, see Chapter 18, “Enabling the Network Time Protocol

Chapter 17: Maintenance and Monitoring186Consult the man pages to get more information on syslog.conf command options. (Type man syslog.conf at the co

AT-WA7400 Management Software User’s Guide187events log is always shown on the Status > Events page for the access point you are monitoring.

Chapter 17: Maintenance and Monitoring188Viewing the Transmit/Receive StatisticsTo view transmit/receive statistics for a particular access point, per

AT-WA7400 Management Software User’s Guide189MAC AddressMedia access control (MAC) address for the specified interface.A MAC address is a permanent, u

19Chapter 1Preparing to Set Up the AT-WA7400 Wireless Access PointBefore you plug in and boot a new AT-WA7400 Wireless Access Point, review the follow

Chapter 17: Maintenance and Monitoring190Viewing the Associated Wireless ClientsTo view the client stations associated with a particular access point,

AT-WA7400 Management Software User’s Guide191Viewing the Status of Neighboring Access PointsThe status page for neighboring access points provides rea

Chapter 17: Maintenance and Monitoring192 wlan0 (radio one) wlan1 (radio two)One-Radio Access Points - This field is not included on the Neighboring

AT-WA7400 Management Software User’s Guide193For more information on security settings, see Appendix B, “Configuring Security on Wireless Clients” on

Chapter 17: Maintenance and Monitoring194access point will always be the rates currently specified for that access point in its Radio Settings.

AT-WA7400 Management Software User’s Guide195Viewing System InformationYou can view information about a particular access point, such as its hardware

Chapter 17: Maintenance and Monitoring196System Up TimeThe length of time that the access point has been running since it was installed or last booted

AT-WA7400 Management Software User’s Guide197Setting the Administrator PasswordThe administrator password controls access to the AT-WA7400 Management

Chapter 17: Maintenance and Monitoring198The Basic Settings page is shown in Figure 59.Figure 59. Basic Settings Page2. In the Provide Network Setting

AT-WA7400 Management Software User’s Guide1993. In the New Password field, enter the new password. (The default is “friend.”)The Administrator passwor

Copyright © 2010 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied

Chapter 1: Preparing to Set Up the AT-WA7400 Wireless Access Point20Setting Up the Administrator’s ComputerYou configure and administer the AT-WA7400

Chapter 17: Maintenance and Monitoring200Enabling the Network Time Protocol (NTP) ServerThe Network Time Protocol (NTP) is an Internet standard protoc

AT-WA7400 Management Software User’s Guide201Enabled Daylight saving time is automatically adjusted.DiabledNo adjustment is made for daylight saving t

Chapter 17: Maintenance and Monitoring202Setting the HTTP TimeoutYou can set the length of time that an HTTP session is available before it times out

AT-WA7400 Management Software User’s Guide203Rebooting the Access PointFor maintenance purposes or as a troubleshooting measure, you can reboot the AT

Chapter 17: Maintenance and Monitoring204Resetting the Configuration to Factory DefaultsIf the AT-WA7400 Wireless Access Point is not functioning corr

AT-WA7400 Management Software User’s Guide205Upgrading the FirmwareAs new versions of the AT-WA7400 Wireless Access Point firmware become available, y

Chapter 17: Maintenance and Monitoring206The Upgrade Firmware page is shown in Figure 64.Figure 64. Upgrade Firmware PageInformation about the current

AT-WA7400 Management Software User’s Guide207SNMP Firmware UpgradeTo upgrade the firmware using SNMP, perform the following procedure:1. From the main

Chapter 17: Maintenance and Monitoring208

209Chapter 18Backing Up and Restoring a ConfigurationYou can save a copy of the current settings on the AT-WA7400 Wireless Access Point to a backup co

AT-WA7400 Management Software User’s Guide21that is connected to the access point (via wired or wireless connection). It detects AT-WA7400 Wireless Ac

Chapter 18: Backing Up and Restoring a Configuration210Backing up the Configuration Settings for an Access PointTo save a copy of the current settings

AT-WA7400 Management Software User’s Guide211Restoring Access Point Settings to a Previous ConfigurationTo restore the configuration on an access poin

Chapter 18: Backing Up and Restoring a Configuration212

213Appendix AManagement Software Default SettingsTable 1 lists the management software default settings.Table 1. Management Software Default SettingsS

Appendix A: Management Software Default Settings214Rate Sets Supported (Mbps) IEEE 802.1a: 54, 48, 36, 24, 18, 12, 9, 6 (Upgrade required)IEEE 802.1g:

215Appendix BConfiguring Security on Wireless ClientsUsers will typically configure security on their wireless clients for access to many different ne

Appendix B: Configuring Security on Wireless Clients216security modes on wireless clients of a network served by the AT-WA7400 Wireless Access Point.

AT-WA7400 Management Software User’s Guide217Network Infrastructure and Choosing Between the Built-in or External Authentication ServerNetwork securit

Appendix B: Configuring Security on Wireless Clients218Make Sure the Wireless Client Software is Up to DateBefore starting out, please keep in mind th

AT-WA7400 Management Software User’s Guide219Accessing the Microsoft Windows Wireless Client Security SettingsTo access the Microsoft Windows wireless

Chapter 1: Preparing to Set Up the AT-WA7400 Wireless Access Point22Setting Up the Wireless Client ComputersThe AT-WA7400 Wireless Access Point provid

Appendix B: Configuring Security on Wireless Clients220Figure 1. Wireless Network Connections Properties Dialog Box2. From the list of Available netwo

AT-WA7400 Management Software User’s Guide221The Wireless Network Connection Properties dialog box (Figure 2) opens with the Association and Authentic

Appendix B: Configuring Security on Wireless Clients222a. For Network Authentication, choose Open.b. For Data encryption, choose Disabled.Figure 3. Wi

AT-WA7400 Management Software User’s Guide223shown in Figure 4.Figure 4. Security Settings Page2. Configure WEP security on each client as shown in Fi

Appendix B: Configuring Security on Wireless Clients224Figure 5. Wireless Network Properties Dialog BoxNetwork AuthenticationChoose Open or Shared, de

AT-WA7400 Management Software User’s Guide225Static WEP clients should now be able to associate and authenticate with the access point. As a client, y

Appendix B: Configuring Security on Wireless Clients226802.1x security mode as shown in Figure 6, Figure 6. Security Settings Page633Then configure IE

AT-WA7400 Management Software User’s Guide2272. Configure the following settings on the Association tab in the Network Properties dialog box:Network A

Appendix B: Configuring Security on Wireless Clients228Figure 8. Protected EAP Properties Dialog Box and EAP Properties Dialog Box4. Click Properties

AT-WA7400 Management Software User’s Guide2297. Click OK on all dialog boxes (starting with the EAP MSCHAP v2 Properties dialog box) to close and save

AT-WA7400 Management Software User’s Guide23Understanding Dynamic and Static IP Addressing on the AT-WA7400 Management SoftwareVery little setup is re

Appendix B: Configuring Security on Wireless Clients2305. Verify that you configured the AT-WA7400 Wireless Access Point to use IEEE 802.1x security m

AT-WA7400 Management Software User’s Guide231Figure 10. Association and Authentication Tabs7. Configure the following settings on the Association tab

Appendix B: Configuring Security on Wireless Clients232Enable IEEE 802.1x authentication for this networkEnable (click to check) this option.EAP TypeC

AT-WA7400 Management Software User’s Guide233certificate is automatically sent to the RADIUS server for authentication and authorization.

Appendix B: Configuring Security on Wireless Clients234Configuring WPA/WPA2 Enterprise (RADIUS) Security on a ClientWi-Fi Protected Access 2 (WPA2) wi

AT-WA7400 Management Software User’s Guide235NoteThe following example assumes that you are using the built-in authentication server that is shipped w

Appendix B: Configuring Security on Wireless Clients2362. Set up user accounts on the access point (Cluster > User Management) as shown in Figure 1

AT-WA7400 Management Software User’s Guide237Figure 14. Wireless Network Properties Dialog Box4. Configure the following settings on the Association a

Appendix B: Configuring Security on Wireless Clients238Click Properties to open the Protected EAP Properties dialog box as shown in Figure 15.Figure 1

AT-WA7400 Management Software User’s Guide2399. Click OK in all dialog boxes (starting with the EAP MSCHAP v2 Properties dialog) to close and save you

Chapter 1: Preparing to Set Up the AT-WA7400 Wireless Access Point24Recovering an IPAddressIf you experience trouble communicating with the access poi

Appendix B: Configuring Security on Wireless Clients2405. Verify that you configured the AT-WA7400 Wireless Access Point to use WPA/WPA2 Enterprise (R

AT-WA7400 Management Software User’s Guide241Figure 17. Association and Authentication Tabs7. Configure the following settings on the Association tab

Appendix B: Configuring Security on Wireless Clients2429. Click Properties to open the Smart Card or other Certificate Properties dialog and enable th

AT-WA7400 Management Software User’s Guide243Configuring WPA/WPA2 Personal (PSK) Security on a ClientWi-Fi Protected Access (WPA) with Pre-Shared Key

Appendix B: Configuring Security on Wireless Clients2442. Configure WPA/WPA2 Personal (PSK) security on each client as shown in Figure 20.Figure 20. A

AT-WA7400 Management Software User’s Guide245The key is provided for me automaticallyThis box should be disabled automatically based on other settings

Appendix B: Configuring Security on Wireless Clients246Configuring an External RADIUS Server to Recognize the AT-WA7400 Wireless Access PointAn extern

AT-WA7400 Management Software User’s Guide247To configure an external RADIUS server, perform the following procedure:1. On the Security Settings page,

Appendix B: Configuring Security on Wireless Clients2482. Log on to the system hosting your RADIUS server and open the Internet Authentication Service

AT-WA7400 Management Software User’s Guide249Figure 23. New RADIUS Client Dialog Box, Name and Address Dialog Box5. Click Next.6. For the Shared secre

Section I: Basic Features 25Chapter 2Setting up the AT-WA7400 Management SoftwareSetting up and deploying one or more AT-WA7400 Wireless Access Points

Appendix B: Configuring Security on Wireless Clients250The access point is now displayed as a client of the Authentication Server (Figure 25).Figure 2

AT-WA7400 Management Software User’s Guide251Obtaining a TLS-EAP Certificate for a ClientNoteIf you want to use IEEE 802.1x mode with EAP-TLS certific

Appendix B: Configuring Security on Wireless Clients252Where IPAddressOfServer is the IP address of your external RADIUS server, or of the Certificate

AT-WA7400 Management Software User’s Guide253The login window for the RADIUS server opens, as shown in Figure 28.Figure 28. RADIUS Server Login Window

Appendix B: Configuring Security on Wireless Clients254The Security Warning dialog box opens, as shown in Figure 30.Figure 30. Security Warning Dialog

AT-WA7400 Management Software User’s Guide255The Certificate Issued dialog box opens, as shown in Figure 33.Figure 33. Certificate Issued Dialog Box9.

Appendix B: Configuring Security on Wireless Clients256A success message (Figure 36) is displayed indicating the certificate is now installed on the c

257Appendix CTroubleshootingThis appendix provides information about how to solve common problems you might encounter in the course of updating networ

Appendix C: Troubleshooting258Wireless Distribution System (WDS) Problems and SolutionsIf you are having trouble configuring a WDS link, read the foll

AT-WA7400 Management Software User’s Guide259Cluster RecoveryIn cases where the access points in a cluster become out of sync or an access point canno

Chapter 2: Setting up the AT-WA7400 Management Software26Running KickStart to Find Access Points on the NetworkKickStart is an easy-to-use utility for

Appendix C: Troubleshooting260The Stop Clustering page for this access point is displayed, as shown in Figure 37.Figure 37. Stop Clustering Page2. Cli

AT-WA7400 Management Software User’s Guide261The Reset Configuration page is shown in Figure 38.Figure 38. Reset Configuration Page5. Click Reset to r

Appendix C: Troubleshooting262All previous cluster members are displayed in the list.Before proceeding to the last step, verify that the cluster has r

263Appendix DCommand Line Interface (CLI) for Access Point ConfigurationIn addition to the web-based user interface, the AT-WA7400 Wireless Access Poi

Appendix D: Command Line Interface (CLI) for Access Point Configuration264Comparison of Settings Configurable with the CLI and Web UIThe command line

AT-WA7400 Management Software User’s Guide265Wireless Neighborhood No Yes, as described in Chapter 7, “Wireless Neighborhoods” on page 79.Displaying

Appendix D: Command Line Interface (CLI) for Access Point Configuration266Back Up and Restore No Yes, as described in Chapter 18, “Backing Up and Rest

AT-WA7400 Management Software User’s Guide267Accessing the CLI for an Access PointYou can use any of these methods to access the CLI for the access po

Appendix D: Command Line Interface (CLI) for Access Point Configuration268Enter after each. (The password is masked, so it will not be displayed on th

AT-WA7400 Management Software User’s Guide269Figure 40. PuTTY Configuration Dialog Box2. Enter the IP address of access point and click Open.(If your

AT-WA7400 Management Software User’s Guide272. Insert the AT-WA7400 Wireless Access Point CD into the CD-ROM drive on your computer.The CD’s main page

Appendix D: Command Line Interface (CLI) for Access Point Configuration270Quick View of Commands and How to Get HelpCautionSettings you update from th

AT-WA7400 Management Software User’s Guide271Table 3. Commands and SyntaxCommand Descriptionget The get command allows you to get the field values of

Appendix D: Command Line Interface (CLI) for Access Point Configuration272set The set command allows you to set the field values of existing instances

AT-WA7400 Management Software User’s Guide273Getting Help onCommands at theCLITo get help on commands, at the CLI prompt, use the TAB key. This is a q

Appendix D: Command Line Interface (CLI) for Access Point Configuration274 Example 2: Type get TAB TAB (including a space after get) to see a list of

AT-WA7400 Management Software User’s Guide275For detailed examples on getting help, see “Keyboard Shortcuts and Tab Completion Help” on page 347.

Appendix D: Command Line Interface (CLI) for Access Point Configuration276Command Usage and Configuration ExamplesThe following sections provide examp

AT-WA7400 Management Software User’s Guide277Table 4. Interfaces in the CLIInterface DescriptionloLocal loopback for data meant for the access point i

Appendix D: Command Line Interface (CLI) for Access Point Configuration278brvwn2This is for the second virtual wireless network (VWN) 2.On a one-radio

AT-WA7400 Management Software User’s Guide279SavingConfigurationChangesThe AT-WA7400 Wireless Access Point maintains three different configurations.

Chapter 2: Setting up the AT-WA7400 Management Software28For information about installing KickStart, refer to “Installing KickStart on the Administrat

Appendix D: Command Line Interface (CLI) for Access Point Configuration280Basic SettingsNoteBefore configuring this feature, make sure you are familia

AT-WA7400 Management Software User’s Guide281Get the IP Address for the Internal Interface on an Access PointIn the following example, the IP address

Appendix D: Command Line Interface (CLI) for Access Point Configuration282Field Value---------------------ip 10.10.55.216mac 00:a0:c9:8c:c4:7e

AT-WA7400 Management Software User’s Guide283AT-WA7400# get cluster locationnot setSet the Location for an Access PointTo set the location for an acce

Appendix D: Command Line Interface (CLI) for Access Point Configuration284links to detailed examples.Determine if the Access Point is a Cluster Member

AT-WA7400 Management Software User’s Guide285Configure the Access Point as a Standalone Deviceset cluster clusterable 0User Accounts The following com

Appendix D: Command Line Interface (CLI) for Access Point Configuration286To view all user accounts:Add UsersIn this example, four new users are added

AT-WA7400 Management Software User’s Guide287name username disabled password realname---------------------------------------------------------

Appendix D: Command Line Interface (CLI) for Access Point Configuration288examples.Table 8. Status CommandsFunction CommandUnderstanding Interfaces as

AT-WA7400 Management Software User’s Guide289Get Common Information on the Internal Interface for the Access PointThe following command obtains all in

AT-WA7400 Management Software User’s Guide29NoteThe KickStart utility only finds other AT-WA7400 Wireless Access Points.If KickStart does not find the

Appendix D: Command Line Interface (CLI) for Access Point Configuration290Get All Wired Settings for the Wired Internal InterfaceAT-WA7400# get interf

AT-WA7400 Management Software User’s Guide291NoteYou can get specifics on the guest interface by using the same types of commands as for the internal

Appendix D: Command Line Interface (CLI) for Access Point Configuration292rts-threshold 2347ap-detection onbeacon-interval

AT-WA7400 Management Software User’s Guide293Get Status on EventsAT-WA7400# get log-entry allNumber Time Priority Daemon Messag

Appendix D: Command Line Interface (CLI) for Access Point Configuration294To view the current log settings:AT-WA7400# get logField Value-----

AT-WA7400 Management Software User’s Guide295set log relay-host Host_Name_Of_LogRelayHostWhere Host_Name_Of_LogRelayHost is the a DNS name for the Log

Appendix D: Command Line Interface (CLI) for Access Point Configuration296AT-WA7400# get interface all ip mac ssid tx-packets tx-bytes tx-errors rx-pa

AT-WA7400 Management Software User’s Guide297Get Client AssociationsGet Neighboring Access PointsThe Neighboring access point view shows wireless netw

Appendix D: Command Line Interface (CLI) for Access Point Configuration298rate Ratesignal Signal strengthssid Ser

AT-WA7400 Management Software User’s Guide299type APprivacy Offssid domanichannel 6signal 3Field Value---------------------------------

3Preface ...

Chapter 2: Setting up the AT-WA7400 Management Software30The AT-WA7400 management software is a centralized management tool that you can access throug

Appendix D: Command Line Interface (CLI) for Access Point Configuration300Get Summary View of Internal and Guest InterfacesGet the DNS NameAT-WA7400#

AT-WA7400 Management Software User’s Guide301Set DNS Nameservers to Use Static IP Addresses (Dynamic to Manual Mode)This example shows how to reconfig

Appendix D: Command Line Interface (CLI) for Access Point Configuration302AT-WA7400# get host dns-via-dhcpupSetting Up theWirelessInterfaceTo set up a

AT-WA7400 Management Software User’s Guide303Get the Current Security ModeAT-WA7400# get interface wlan0 securityplain textGet Detailed Description of

Appendix D: Command Line Interface (CLI) for Access Point Configuration304radius-ip 127.0.0.1radius-key secretopen-

AT-WA7400 Management Software User’s Guide305channel 6tx-power 100tx-rx-status

Appendix D: Command Line Interface (CLI) for Access Point Configuration306NoteThe Key Length values used by the CLI do not include the initialization

AT-WA7400 Management Software User’s Guide307If Key Length is 40 bits and Key Type is “Hex,” then each WEP key must be 10 characters long.If Key Lengt

Appendix D: Command Line Interface (CLI) for Access Point Configuration308command gets the security mode in use on the internal network:AT-WA7400# get

AT-WA7400 Management Software User’s Guide309Key settings, specifically.AT-WA7400# get interface wlan0 detailField Value------------------

AT-WA7400 Management Software User’s Guide31The Select Installation Folder dialog box is shown in Figure 7. Figure 7. Select Installation Folder Dialo

Appendix D: Command Line Interface (CLI) for Access Point Configuration310bss wlan0bssInternalsecurity static-wepwpa-personal-k

AT-WA7400 Management Software User’s Guide311The following example sets the access point to use the built-in server:AT-WA7400# set bss wlan0bssInterna

Appendix D: Command Line Interface (CLI) for Access Point Configuration312Get Current Security Settings After Re-Configuring to IEEE 802.1x Security M

AT-WA7400 Management Software User’s Guide313wpa-allowed offwpa2-allowed offrsn-preauthentication offSet Security

Appendix D: Command Line Interface (CLI) for Access Point Configuration314Set the cipher suite you want to use. The options are shown in Table 17.The

AT-WA7400 Management Software User’s Guide3155. Get Current Security Settings After Reconfiguring to WPA/WPA2 Personal (PSK)Now use the get command ag

Appendix D: Command Line Interface (CLI) for Access Point Configuration316wpa-allowed onwpa2-allowed onrsn-preauthentic

AT-WA7400 Management Software User’s Guide317authentication for WPA2 clients, as shown in Table 19..This option does not apply if you set the WPA Vers

Appendix D: Command Line Interface (CLI) for Access Point Configuration318In this example, the cipher suite is set to TKIP Only:AT-WA7400# set bss wla

AT-WA7400 Management Software User’s Guide319This command sets the RADIUS key to KeepSecret for an external RADIUS server.AT-WA7400# set bss wlan0bssI

Chapter 2: Setting up the AT-WA7400 Management Software32The KickStart Setup confirmation dialog box is shown in Figure 9.Figure 9. KickStart Installa

Appendix D: Command Line Interface (CLI) for Access Point Configuration320and see the results of our new settings.The following command gets the secur

AT-WA7400 Management Software User’s Guide321rsn-preauthentication offEnabling andConfiguring theGuest LoginWelcome PageThe guest login and welc

Appendix D: Command Line Interface (CLI) for Access Point Configuration322welcome-screen-text Thank you for using wireless Guest Access as provided b

AT-WA7400 Management Software User’s Guide323ConfiguringMultiple BSSIDson VirtualWirelessNetworksNoteBefore you configure this feature, make sure you

Appendix D: Command Line Interface (CLI) for Access Point Configuration324Use the CLI to set the Network Name (SSID) for the New Virtual Wireless Netw

AT-WA7400 Management Software User’s Guide325(The radio in the example is using IEEE 802.11g mode.)Get Radio ChannelTo get the current setting for rad

Appendix D: Command Line Interface (CLI) for Access Point Configuration326mode gstatic-channel

AT-WA7400 Management Software User’s Guide327wlan0 6wlan0 5.5wlan0 2wlan0 1Get Basic Rate SetThe Basic Rate Set is what the access point will adve

Appendix D: Command Line Interface (CLI) for Access Point Configuration328how you would use the CLI to set each one are shown in Table 27.The followin

AT-WA7400 Management Software User’s Guide329AT-WA7400# set bss wlan0bssInternal dtim-period 3To get the updated value for DTIM interval after you hav

AT-WA7400 Management Software User’s Guide33When the installation is complete, the Installation Complete dialog box is displayed, as shown in Figure 1

Appendix D: Command Line Interface (CLI) for Access Point Configuration330The following command adds “48” as a basic rate to wlan0 (the internal, wire

AT-WA7400 Management Software User’s Guide331125.56111218243648549NoteYou can use the get command to view current rate sets from the CLI as described

Appendix D: Command Line Interface (CLI) for Access Point Configuration332to configure. The commands are shown in Table 29.Add MAC Addresses of Client

AT-WA7400 Management Software User’s Guide333Getting Current MAC Filtering SettingsGet the Type of MAC Filtering List Currently Set (Accept or Deny)Th

Appendix D: Command Line Interface (CLI) for Access Point Configuration334AT-WA7400# get radio wlan0 load-balance-disassociation-stations2AT-WA7400# s

AT-WA7400 Management Software User’s Guide335Table 30 provides a quick view of QOS commands.Table 30. QoS CommandsFunction CommandEnable/Disable Wi-Fi

Appendix D: Command Line Interface (CLI) for Access Point Configuration336Enable/Disable Wi-Fi MultimediaBy default, Wi-Fi MultiMedia (WMM) is enabled

AT-WA7400 Management Software User’s Guide337Understanding the Queues for Access Point and StationThe same types of queues are defined for different k

Appendix D: Command Line Interface (CLI) for Access Point Configuration338wlan0 data3 7 15 1023 0Get QoS Settings on the Client StationTo

AT-WA7400 Management Software User’s Guide339wlan0 data1 1 7 15 3.0wlan0 data2 3 15 63 0wlan0 data3 7 15 1023

Chapter 2: Setting up the AT-WA7400 Management Software34Logging in to the AT-WA7400 Management SoftwareTo access the AT-WA7400 management software, p

Appendix D: Command Line Interface (CLI) for Access Point Configuration340detailed field description for this value in that topic.)Valid values for th

AT-WA7400 Management Software User’s Guide341AT-WA7400# set wme-queue wlan0 with queue vi cwmin 7 cwmax 15View the results of this configuration updat

Appendix D: Command Line Interface (CLI) for Access Point Configuration342wlan0 data2 3 15 63 0.5wlan0 data3 7 15 1023 0Set

AT-WA7400 Management Software User’s Guide343Table 32 provides a list of the WDS commands.Configure a WDS LinkTo set up a wireless distribution system

Appendix D: Command Line Interface (CLI) for Access Point Configuration344static-ipstatic-masknatrx-bytes 0rx-packets 0rx-errors

AT-WA7400 Management Software User’s Guide345wep-key-3wep-key-4vlan-interfacevlan-idradio wlan0remote-mac 00:E0:B8:76:1B:14Time Pro

Appendix D: Command Line Interface (CLI) for Access Point Configuration346Rebooting theAccess PointTo reboot the access point, type reboot at the comm

AT-WA7400 Management Software User’s Guide347Keyboard Shortcuts and Tab Completion HelpThe CLI provides keyboard shortcuts to help you navigate the co

Appendix D: Command Line Interface (CLI) for Access Point Configuration348Tab Completionand HelpYou can get help on commands in the command line inter

AT-WA7400 Management Software User’s Guide349bridge-port Bridge ports of bridge interfacesbss Basic Service Set of radioscluster

AT-WA7400 Management Software User’s Guide35Figure 13. Basic Settings Page

Appendix D: Command Line Interface (CLI) for Access Point Configuration350AT-WA7400# get system version Example 4: Type set TAB TAB (including a spac

AT-WA7400 Management Software User’s Guide351AT-WA7400# set clustercluster Clustering-based configuration settingscluster-member Member of

Appendix D: Command Line Interface (CLI) for Access Point Configuration352CLI Classes and Fields ReferenceThe following is an introduction to the CLI

AT-WA7400 Management Software User’s Guide353field with a value of 255.0.0.0.Figure 41. CLI Class Relationships

Appendix D: Command Line Interface (CLI) for Access Point Configuration354

355Appendix ERadio BandsAllied Telesis’s AT-WA7400 Wireless Access Point is capable of operating in the 2.4GHZ (IEEE 802.11g/b) AND in the 5GHZ band (

Appendix E: Radio Bands356

357CE StatementsSafety and Electromagnetic Emissions CertificationsEMI/RFI and Immunity FCC Part 15 Class B; FCC Part 15B, 15C, and 15E Certified; EN

358CE Marking WarningThis device complies with the essential requirements of the R&TTE Directive 1999/5/EC. The following test methods have been a

AT-WA7400 Management Software User’s Guide359EN 301 489-1 V1.8.1 (2008-04)Electromagnetic compatibility and Radio Spectrum Matters (ERM); ElectroMagne

Chapter 2: Setting up the AT-WA7400 Management Software36Navigating the Web PagesThe web pages provide several ways that you can navigate through the

360Translated Safety StatementsImportant: The  indicates that a translation of the safety statement is available in a PDF document titled “Translated

361IndexAaccess pointadding to cluster 50clustering 44factory default configuration 279navigating to 52removing from cluster 49running configuration 2

Index362session, definition 65See also stationsclient workstations, setting up 22clusteradding access point 50adding an access point to 50auto-synch 4

AT-WA7400 Management Software User’s Guide363Kkey management, security 105KickStart 26KickStart utility, running to find access points 26Llink integri

Index364station isolationconfiguring 112described 111stationsconfiguring maximum allowed 145See also clientStop Clustering page 260subnet mask, defaul

AT-WA7400 Management Software User’s Guide37Configuring the Basic Settings and Starting the Wireless NetworkProvide a minimal set of configuration inf

Chapter 2: Setting up the AT-WA7400 Management Software38Telesis recommends that you change the administrator password from the default which is “frie

AT-WA7400 Management Software User’s Guide39access points manually using KickStart and the AT-WA7400 management software residing on the standalone ac

Contents4Modifying the Location Description...

Chapter 2: Setting up the AT-WA7400 Management Software40A summary of the settings is shown in Figure 15.Figure 15. Summary of Settings PageAt initial

AT-WA7400 Management Software User’s Guide41Next StepsTo make sure the access point is connected to the LAN, bring up some wireless clients and connec

Chapter 2: Setting up the AT-WA7400 Management Software42Logging in After the Initial SetupWhen you log in again after you complete the initial setup,

43Chapter 3Managing Access Points and ClustersThe AT-WA7400 Management Software shows current basic configuration settings for clustered access points

Chapter 3: Managing Access Points and Clusters44Understanding ClusteringA key feature of the AT-WA7400 Management Software is the ability to form a dy

AT-WA7400 Management Software User’s Guide45Which Settingsare Shared asPart of theClusterConfigurationand Which AreNot?Most configuration settings tha

Chapter 3: Managing Access Points and Clusters46Settings that are not shared must be configured individually on the AT-WA7400 Management Software web

AT-WA7400 Management Software User’s Guide47ClusterFormationA cluster is formed when the first AT-WA7400 Wireless Access Point is configured. (See “Co

Chapter 3: Managing Access Points and Clusters48Understanding and Changing Access Point SettingsThe Access Points page provides information about all

AT-WA7400 Management Software User’s Guide49A MAC address is a permanent, unique hardware address for any device that represents an interface to the n

AT+WA7400 Management Software User’s Guide5When to Use IEEE 802.1x ...

Chapter 3: Managing Access Points and Clusters50NoteIn some situations it is possible for the cluster to become out of sync. If after removing an acce

AT-WA7400 Management Software User’s Guide51The access point is now a cluster member. Its Status (Mode) on the Cluster > Access Points page now ind

Chapter 3: Managing Access Points and Clusters52Navigating to Configuration Information for a Specific Access Point and Managing Standalone Access Poi

AT-WA7400 Management Software User’s Guide53Configuring MAC Address FilteringA media access control (MAC) address is a hardware address that uniquely

Chapter 3: Managing Access Points and Clusters542. Configure the following settings:FilterClick one of the following radio buttons: Allow only statio

AT-WA7400 Management Software User’s Guide55MAC Filtering of Rogue Access PointsWhen an access point is not listed in the access points list, the MAC

Chapter 3: Managing Access Points and Clusters56b. Click Add.c. Click Update.

57Chapter 4Managing User AccountsThe AT-WA7400 Management Software includes user management capabilities for controlling client access to access point

Chapter 4: Managing User Accounts58Adding a UserTo add a new user, perform the following procedure:1. From the main menu, select Cluster > User Man

AT-WA7400 Management Software User’s Guide59PasswordSpecify a password for this user. Passwords are alphanumeric strings of up to 256 characters. Do n

Contents6Security Considerations Related to WDS Bridges...

Chapter 4: Managing User Accounts60Editing a User AccountAfter you create a user account, it is displayed in the User Accounts section at the top of t

AT-WA7400 Management Software User’s Guide612. In the User Accounts section, click the checkbox next to the user name you want to enable.3. Click Enab

Chapter 4: Managing User Accounts62Backing Up and Restoring a User DatabaseYou can save a copy of the current set of user accounts to a backup configu

AT-WA7400 Management Software User’s Guide63Restoring a UserDatabase from aBackup FileTo restore a user database from a backup file, perform the follo

Chapter 4: Managing User Accounts64

65Chapter 5Session MonitoringThe AT-WA7400 Management Software provides real-time session monitoring information including which clients are associate

Chapter 5: Session Monitoring66Viewing Sessions InformationTo view session monitoring information, perform the following procedure:1. From the main me

AT-WA7400 Management Software User’s Guide67A station is considered to be idle when it is not receiving or transmitting data.Data RateThe speed at whi

Chapter 5: Session Monitoring68Sorting SessionInformationTo sort the information in the session list, perform the following procedure:1. On the Sessio

69Chapter 6Channel ManagementThis chapter contains the following sections: “Understanding Channel Management” on page 70 “Displaying the Channel Man

AT+WA7400 Management Software User’s Guide7SSH Connection to the Access Point ...

Chapter 6: Channel Management70Understanding Channel ManagementWhen channel management is enabled, the AT-WA7400 Management Software automatically ass

AT-WA7400 Management Software User’s Guide71Example: ANetwork Beforeand AfterChannelManagementWithout automated channel management, channel assignment

Chapter 6: Channel Management72Displaying the Channel Management SettingsTo view channel management information, perform the following procedure:1. Fr

AT-WA7400 Management Software User’s Guide73Configuring the Channel Management SettingsThis section contains the following procedures: “Stopping or S

Chapter 6: Channel Management74BandIndicates the band (b/g or a) on which the access point is broadcasting.CurrentIndicates the radio channel on which

AT-WA7400 Management Software User’s Guide75ConfiguringAdvancedSettings(Customizing andSchedulingChannel Plans)If you use channel management as provid

Chapter 6: Channel Management76Change channels if interference is reduced by at leastSpecify the minimum percentage of interference reduction a propos

AT-WA7400 Management Software User’s Guide77Advanced settings take effect when they are applied, and influence how automatic channel management is per

Chapter 6: Channel Management78

79Chapter 7Wireless NeighborhoodsThe wireless neighborhood view shows those access points within range of any access point in the cluster. This page p

Contents8Setting Up Security...

Chapter 7: Wireless Neighborhoods80Understanding Wireless Neighborhood InformationThe wireless neighborhood shows all access points within range of ev

AT-WA7400 Management Software User’s Guide81Displaying the Wireless Neighborhood InformationTo view the Wireless Neighborhood page, perform the follow

Chapter 7: Wireless Neighborhoods82Both - Shows all neighbor access points (cluster members and nonmembers)ClusterThe Cluster list at the top of the t

AT-WA7400 Management Software User’s Guide83Neighbor seen by the access point whose IP address is listed above that column. Lighter Blue Bar - A ligh

Chapter 7: Wireless Neighborhoods84Viewing Details of a Cluster MemberTo view details on a cluster member access point, perform the following procedur

AT-WA7400 Management Software User’s Guide85ChannelShows the channel on which the access point is currently broadcasting. The channel defines the port

Chapter 7: Wireless Neighborhoods86

87Chapter 8Configuring Ethernet (Wired) SettingsEthernet (wired) settings describe the configuration of your Ethernet local area network (LAN).NoteThe

Chapter 8: Configuring Ethernet (Wired) Settings88Setting the DNS NameTo set the DNS name, perform the following procedure:1. From the main menu, sele

AT-WA7400 Management Software User’s Guide892. In the Ethernet (Wired) Settings page, enter the DNS name.The DNS name is the host name. It may be prov

AT+WA7400 Management Software User’s Guide9Specify an Accept or Deny List ...

Chapter 8: Configuring Ethernet (Wired) Settings90Enabling or Disabling Guest AccessYou can provide controlled guest access over a secure internal LAN

AT-WA7400 Management Software User’s Guide912. For the Virtual Wireless Networks setting, select one of the following: Select Enabled to enable VLANs

Chapter 8: Configuring Ethernet (Wired) Settings92Enabling or Disabling Spanning TreeThe AT-WA7400 Management Software allows you to enable or disable

AT-WA7400 Management Software User’s Guide93Configuring the Internal Interface Ethernet SettingsTo configure Ethernet (wired) settings for the interna

Chapter 8: Configuring Ethernet (Wired) Settings94wireless client associated with the AP, even if its IP address is defined in the Management IP Addre

AT-WA7400 Management Software User’s Guide95www.alliedTelesis.com) to its numeric IP address (for example, 66.93.138.219). A DNS server is called a Na

Chapter 8: Configuring Ethernet (Wired) Settings96Configuring the Guest Interface SettingsThe guest interface settings allows a wireless client limite

97Chapter 9Configuring the Wireless SettingsWireless settings describe aspects of the local area network (LAN) related specifically to the radio devic

Chapter 9: Configuring the Wireless Settings98Configuring 802.11d Regulatory Domain SupportYou can enable or disable IEEE 802.11d regulatory domain su

AT-WA7400 Management Software User’s Guide99Configuring the Radio InterfaceThe radio interface allows you to set the radio channel and 802.11 mode for