Allied-telesis AT-WA7400/NA User Manual

613-000486 Rev. BManagement SoftwareAT-WA7400/NAUser’s Guide

Contents10

Chapter 9: Configuring the Wireless Settings100Configuring the Radio InterfaceThe radio interface allows you to set the radio channel and 802.11 mode

AT-WA7400 Management Software User’s Guide101The channel defines the portion of the radio spectrum the radio uses for transmitting and receiving. Each

Chapter 9: Configuring the Wireless Settings102Configuring Internal Wireless LAN SettingsThe Internal Settings describe the MAC address (read-only) an

AT-WA7400 Management Software User’s Guide103Configuring the Guest Network Wireless SettingsThe guest settings describe the MAC address (read-only) an

Chapter 9: Configuring the Wireless Settings104

105Chapter 10Configuring SecurityThe AT-WA7400 Management Software provides a number of authentication and encryption schemes to ensure that your wire

Chapter 10: Configuring Security106Understanding Security Issues on Wireless Networks Wireless mediums are inherently less secure than wired mediums.

AT-WA7400 Management Software User’s Guide107Comparison ofSecurity Modesfor KeyManagement,Authenticationand EncryptionAlgorithmsThree major factors th

Chapter 10: Configuring Security108Key for data encryption, as described in Table 1.Static WEP was designed to provide security equivalent of sending

AT-WA7400 Management Software User’s Guide109IEEE 802.1x mode is a better choice than Static WEP because keys are dynamically generated and changed pe

11Figure 1. AT-WA7400 CD Main Page...

Chapter 10: Configuring Security110When to Use WPA/WPA2 Personal (PSK)Wi-Fi Protected Access 2 (WPA2) Personal Pre-Shared Key (PSK) is an implementati

AT-WA7400 Management Software User’s Guide111When to Use WPA/WPA2 Enterprise (RADIUS)Wi-Fi Protected Access 2 (WPA2) with Remote Authentication Dial-I

Chapter 10: Configuring Security112 The best security you can have on a wireless network is WPA/WPA2 Enterprise (RADIUS) mode using CCMP (AES) encryp

AT-WA7400 Management Software User’s Guide113For information on how to configure this security mode, see “WPA/WPA2 Enterprise (RADIUS)” on page 125.Do

Chapter 10: Configuring Security114Configuring Security SettingsThe following section explains how to configure security modes on the access point. Ke

AT-WA7400 Management Software User’s Guide1152. Configure the following settings. NoteNote you can also allow or prohibit the Broadcast SSID and enabl

Chapter 10: Configuring Security116Wireless Access Point is not encrypted.There are no further options for plain text mode.Plain text mode can be usef

AT-WA7400 Management Software User’s Guide117Client stations can use different keys to transmit data to the access point. (Or they can all use the sam

Chapter 10: Configuring Security118If you selected ASCII, enter any combination of integers and letters 0-9, a-z, and A-Z. If you selected HEX, enter

AT-WA7400 Management Software User’s Guide119Rules to Remember for Static WEP All client stations must have the wireless LAN (WLAN) security set to W

Figures12Figure 51. WDS Bridge...

Chapter 10: Configuring Security120Figure 35 illustrates setting the WEP key 1 on a Windows client.Figure 35. Providing a Wireless Client with a WEP K

AT-WA7400 Management Software User’s Guide121Figure 36. Example of Using Multiple WEP Keys and Transfer Key Index on Client StationsIEEE 802.1x IEEE 8

Chapter 10: Configuring Security122Figure 37. IEEE 802.1x Security Mode Settings1. Configure the following settings:Authentication ServerSelect one of

AT-WA7400 Management Software User’s Guide123For information on setting up user accounts, see Chapter 4, “Managing User Accounts” on page 57.RADIUS Po

Chapter 10: Configuring Security124Figure 38. WPA/WPA2 Personal (PSK) Security Mode Settings1. Configure the following settings:WPA VersionsSelect the

AT-WA7400 Management Software User’s Guide125mode (CBC-CTR) and Cipher Block Chaining Message Authentication Code (CBC-MAC) for encryption and message

Chapter 10: Configuring Security126Figure 39. WPA/WPA2 Enterprise (RADIUS) Security Mode Settings1. Configure the following settings:WPA VersionsSelec

AT-WA7400 Management Software User’s Guide127Cipher SuitesSelect the cipher you want to use:Temporal Key Integrity Protocol (TKIP) - This is the defau

Chapter 10: Configuring Security128NoteThe RADIUS server is identified by its IP address and UDP port numbers for the different services it provides.

AT-WA7400 Management Software User’s Guide129Configuring the IAPP Mapping TableThe Inter-Access-Point Protocol (IAPP) enforces a unique association th

13Table 1. Static WEP Configuration ...

Chapter 10: Configuring Security1304. To remove a station from the map table:a. In map table, select the station you want to remove.b. Click Remove.c.

AT-WA7400 Management Software User’s Guide131Configuring SNMPSimple Network Management Protocol (SNMP) is another way for you to manage the access poi

Chapter 10: Configuring Security132LocationThe physical location of the access point.ContactThe contact person for the access point.System NameA uniqu

133Chapter 11Setting Up Guest AccessThe guest interface features allow you to configure the AT-WA7400 Wireless Access Point for controlled guest acces

Chapter 11: Setting Up Guest Access134Understanding the Guest InterfaceYou can define unique parameters for guest connectivity and isolate guest clien

AT-WA7400 Management Software User’s Guide135Configuring the Guest InterfaceTo configure the guest interface on the AT-WA7400 Wireless Access Point, p

Chapter 11: Setting Up Guest Access1365. Configure the guest splash screen as described in “Configuring the Welcome Screen (Captive Portal),” next.Co

AT-WA7400 Management Software User’s Guide137Using the Guest Network as a ClientAfter the guest network is configured, a client can access the guest n

Chapter 11: Setting Up Guest Access138

139Chapter 12VLANsThis chapter describes how to configure Virtual LANs (VLANs) for multiple wireless networks and management and includes the followin

Tables14

Chapter 12: VLANs140Configuring VLANsNoteTo configure additional networks on VLANs, you must first enable virtual wireless networks on the Ethernet (w

AT-WA7400 Management Software User’s Guide141Virtual Wireless NetworkChoose one of the following from the list to identify an additional network to co

Chapter 12: VLANs142NoteThe Broadcast SSID you set here is specifically for this Virtual Network (One or Two). Other networks continue to use the secu

AT-WA7400 Management Software User’s Guide143Configuring the Management VLANWhen you configure a management VLAN, only those users who have the requir

Chapter 12: VLANs144

145Chapter 13Configuring Radio SettingsThis chapter describes how to configure radio settings on the AT-WA7400 Wireless Access Point, and includes the

Chapter 13: Configuring Radio Settings146Understanding Radio SettingsRadio settings directly control the behavior of the radio device in the access po

AT-WA7400 Management Software User’s Guide147Configuring Radio SettingsTo configure the radio settings, perform the following procedure:1. From the ma

Chapter 13: Configuring Radio Settings148ModeThe Mode defines the Physical Layer (PHY) standard being used by the radio.NoteWith a two-radio access po

AT-WA7400 Management Software User’s Guide149The 802.11g and 802.11b channels that are allowed in a given country may change without notice. Be sure y

15PrefaceThis guide contains instructions on how to configure and maintain an AT-WA7400 Wireless Access Point using its management software and contai

Chapter 13: Configuring Radio Settings150you set this to 2, clients check on every other beacon. If you set this to 10, clients check on every 10th be

AT-WA7400 Management Software User’s Guide151Transmit PowerProvide a percentage value to set the transmit power for this access point.The default is t

Chapter 13: Configuring Radio Settings152Configuring the Rate SetsWhy do the different radios have different rate sets???Rate sets specify the transmi

AT-WA7400 Management Software User’s Guide153To configure the rate sets, perform the following procedure:1. From the main menu, select Advanced > R

Chapter 13: Configuring Radio Settings154

155Chapter 14Load BalancingThe AT-WA7400 Management Software allows you to balance the distribution of wireless client connections across multiple acc

Chapter 14: Load Balancing156Understanding Load BalancingLike most configuration settings on the AT-WA7400 Wireless Access Point, load balancing setti

AT-WA7400 Management Software User’s Guide157Configuring Load BalancingTo configure load balancing, you enable load balancing and set limits and behav

Chapter 14: Load Balancing158The Load Balancing page is shown in Figure 48.Figure 48. Load Balancing Page2. Configure the following settings as requir

AT-WA7400 Management Software User’s Guide159for disassociation. If the number of client stations associated with the access point at any one time is

Preface16Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in portable document format (PDF

Chapter 14: Load Balancing160

161Chapter 15Configuring Quality of Service (QoS)Quality of Service (QoS) provides you with the ability to specify parameters on multiple queues for i

Chapter 15: Configuring Quality of Service (QoS)162Understanding QoSA primary factor that affects QoS is network congestion due to an increased number

AT-WA7400 Management Software User’s Guide163critical applications, and rely on best-effort parameters for traditional IP data. For example, time-sens

Chapter 15: Configuring Quality of Service (QoS)164 Data 2 (Best Effort). Medium priority queue, medium throughput and delay. Most traditional IP dat

AT-WA7400 Management Software User’s Guide165NoteA frame is similar in concept to a packet. The difference is that a packet operates on the network la

Chapter 15: Configuring Quality of Service (QoS)166would occur if multiple access points got access to the medium at the same time and tried to transm

AT-WA7400 Management Software User’s Guide167Configuring QoS QueuesConfiguring Quality of Service (QoS) on the AT-WA7400 Wireless Access Point consist

Chapter 15: Configuring Quality of Service (QoS)168The Quality of Service page is shown in Figure 49.Figure 49. Quality of Service PageThe Quality of

AT-WA7400 Management Software User’s Guide169Data 2 (best effort) - Medium priority queue, medium throughput and delay. Most traditional IP data is se

AT-WA7400 Management Software User’s Guide17Contacting Allied Telesyn This section provides Allied Telesyn contact information for technical support a

Chapter 15: Configuring Quality of Service (QoS)170When the Maximum Contention Window size is reached, retries will continue until a maximum number of

AT-WA7400 Management Software User’s Guide171ConfiguringStation EDCAParametersStation Enhanced Distributed Channel Access (EDCA) parameters affect tra

Chapter 15: Configuring Quality of Service (QoS)172backoff value reaches the number defined in the Maximum Contention Window.For more information, see

173Chapter 16Configuring the Wireless Distribution System (WDS)The AT-WA7400 Management Software lets you connect multiple access points using a wirel

Chapter 16: Configuring the Wireless Distribution System (WDS)174Understanding the Wireless Distribution SystemA wireless distribution system (WDS) is

AT-WA7400 Management Software User’s Guide175Ethernet cabling. You can solve this problem by placing a second access point closer to second group of s

Chapter 16: Configuring the Wireless Distribution System (WDS)176You can enable Static WEP on the WDS link (bridge). When WEP is enabled, all data exc

AT-WA7400 Management Software User’s Guide177 If you can trace more than one path between any pair of access points going through any combination of

Chapter 16: Configuring the Wireless Distribution System (WDS)178Configuring WDS SettingsYou must configure the WDS settings for each access point int

AT-WA7400 Management Software User’s Guide179Figure 52. Wireless Distribution System Page2. Configure the following settings as necessary:

Preface18

Chapter 16: Configuring the Wireless Distribution System (WDS)180RadioFor each WDS link, select Radio One or Radio Two. The rest of the settings for t

AT-WA7400 Management Software User’s Guide18164-bit (40-bit secret key + 24-bit initialization vector (IV)) or 128-bit (104-bit secret key + 24-bit IV

Chapter 16: Configuring the Wireless Distribution System (WDS)182The MAC address for MyAP1 (the access point you are currently viewing) are displayed

183Chapter 17Maintenance and MonitoringThe maintenance and monitoring tasks described here all pertain to viewing and modifying settings on specific a

Chapter 17: Maintenance and Monitoring184Monitoring Wired and Wireless LAN SettingsTo monitor wired LAN and wireless LAN (WLAN) settings, perform the

AT-WA7400 Management Software User’s Guide185The guest Interface includes the MAC address, VLAN ID, and Associated Network Wireless Name (SSID).2. To

Chapter 17: Maintenance and Monitoring186Viewing the Event LogsTo view system events and the kernel log for a particular access point, perform the fol

AT-WA7400 Management Software User’s Guide187For information on setting the network time protocol, see Chapter 18, “Enabling the Network Time Protocol

Chapter 17: Maintenance and Monitoring188Consult the man pages to get more information on syslog.conf command options. (Type man syslog.conf at the co

AT-WA7400 Management Software User’s Guide189events log is always shown on the Status > Events page for the access point you are monitoring.

19Chapter 1Preparing to Set Up the AT-WA7400 Wireless Access PointBefore you plug in and boot a new AT-WA7400 Wireless Access Point, review the follow

Chapter 17: Maintenance and Monitoring190Viewing the Transmit/Receive StatisticsTo view transmit/receive statistics for a particular access point, per

AT-WA7400 Management Software User’s Guide191MAC AddressMedia access control (MAC) address for the specified interface.A MAC address is a permanent, u

Chapter 17: Maintenance and Monitoring192Viewing the Associated Wireless ClientsTo view the client stations associated with a particular access point,

AT-WA7400 Management Software User’s Guide193Viewing the Status of Neighboring Access PointsThe status page for neighboring access points provides rea

Chapter 17: Maintenance and Monitoring194 wlan0 (radio one) wlan1 (radio two)One-Radio Access Points - This field is not included on the Neighboring

AT-WA7400 Management Software User’s Guide195For more information on security settings, see Appendix B, “Configuring Security on Wireless Clients” on

Chapter 17: Maintenance and Monitoring196access point will always be the rates currently specified for that access point in its Radio Settings.

AT-WA7400 Management Software User’s Guide197Viewing System InformationYou can view information about a particular access point, such as its hardware

Chapter 17: Maintenance and Monitoring198System Up TimeThe length of time that the access point has been running since it was installed or last booted

AT-WA7400 Management Software User’s Guide199Setting the Administrator PasswordThe administrator password controls access to the AT-WA7400 Management

Copyright © 2007 Allied Telesynsyn, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Alli

Chapter 1: Preparing to Set Up the AT-WA7400 Wireless Access Point20Setting Up the Administrator’s ComputerYou configure and administer the AT-WA7400

Chapter 17: Maintenance and Monitoring200The Basic Settings page is shown in Figure 59.Figure 59. Basic Settings Page2. In the Provide Network Setting

AT-WA7400 Management Software User’s Guide2013. In the New Password field, enter the new password. (The default is “friend.”)The Administrator passwor

Chapter 17: Maintenance and Monitoring202Enabling the Network Time Protocol (NTP) ServerThe Network Time Protocol (NTP) is an Internet standard protoc

AT-WA7400 Management Software User’s Guide203Enabled Daylight saving time is automatically adjusted.DiabledNo adjustment is made for daylight saving t

Chapter 17: Maintenance and Monitoring204Setting the HTTP TimeoutYou can set the length of time that an HTTP session is available before it times out

AT-WA7400 Management Software User’s Guide205Rebooting the Access PointFor maintenance purposes or as a troubleshooting measure, you can reboot the AT

Chapter 17: Maintenance and Monitoring206Resetting the Configuration to Factory DefaultsIf the AT-WA7400 Wireless Access Point is not functioning corr

AT-WA7400 Management Software User’s Guide207Upgrading the FirmwareAs new versions of the AT-WA7400 Wireless Access Point firmware become available, y

Chapter 17: Maintenance and Monitoring208The Upgrade Firmware page is shown in Figure 64.Figure 64. Upgrade Firmware PageInformation about the current

AT-WA7400 Management Software User’s Guide209SNMP Firmware UpgradeTo upgrade the firmware using SNMP, perform the following procedure:1. From the main

AT-WA7400 Management Software User’s Guide21that is connected to the access point (via wired or wireless connection). It detects AT-WA7400 Wireless Ac

Chapter 17: Maintenance and Monitoring210

211Chapter 18Backing Up and Restoring a ConfigurationYou can save a copy of the current settings on the AT-WA7400 Wireless Access Point to a backup co

Chapter 18: Backing Up and Restoring a Configuration212Backing up the Configuration Settings for an Access PointTo save a copy of the current settings

AT-WA7400 Management Software User’s Guide213Restoring Access Point Settings to a Previous ConfigurationTo restore the configuration on an access poin

Chapter 18: Backing Up and Restoring a Configuration214

215Appendix AManagement Software Default SettingsTable 1 lists the management software default settings.Table 1. Management Software Default SettingsS

Appendix A: Management Software Default Settings216Rate Sets Supported (Mbps) IEEE 802.1a: 54, 48, 36, 24, 18, 12, 9, 6 (Upgrade required)IEEE 802.1g:

217Appendix BConfiguring Security on Wireless ClientsUsers will typically configure security on their wireless clients for access to many different ne

Appendix B: Configuring Security on Wireless Clients218security modes on wireless clients of a network served by the AT-WA7400 Wireless Access Point.

AT-WA7400 Management Software User’s Guide219Network Infrastructure and Choosing Between the Built-in or External Authentication ServerNetwork securit

Chapter 1: Preparing to Set Up the AT-WA7400 Wireless Access Point22Setting Up the Wireless Client ComputersThe AT-WA7400 Wireless Access Point provid

Appendix B: Configuring Security on Wireless Clients220Make Sure the Wireless Client Software is Up to DateBefore starting out, please keep in mind th

AT-WA7400 Management Software User’s Guide221Accessing the Microsoft Windows Wireless Client Security SettingsTo access the Microsoft Windows wireless

Appendix B: Configuring Security on Wireless Clients222Figure 1. Wireless Network Connections Properties Dialog Box2. From the list of Available netwo

AT-WA7400 Management Software User’s Guide223The Wireless Network Connection Properties dialog box (Figure 2) opens with the Association and Authentic

Appendix B: Configuring Security on Wireless Clients224a. For Network Authentication, choose Open.b. For Data encryption, choose Disabled.Figure 3. Wi

AT-WA7400 Management Software User’s Guide225shown in Figure 4.Figure 4. Security Settings Page2. Configure WEP security on each client as shown in Fi

Appendix B: Configuring Security on Wireless Clients226Figure 5. Wireless Network Properties Dialog BoxNetwork AuthenticationChoose Open or Shared, de

AT-WA7400 Management Software User’s Guide227Static WEP clients should now be able to associate and authenticate with the access point. As a client, y

Appendix B: Configuring Security on Wireless Clients228802.1x security mode as shown in Figure 6, Figure 6. Security Settings Page633Then configure IE

AT-WA7400 Management Software User’s Guide2292. Configure the following settings on the Association tab in the Network Properties dialog box:Network A

AT-WA7400 Management Software User’s Guide23Understanding Dynamic and Static IP Addressing on the AT-WA7400 Management SoftwareVery little setup is re

Appendix B: Configuring Security on Wireless Clients230Figure 8. Protected EAP Properties Dialog Box and EAP Properties Dialog Box4. Click Properties

AT-WA7400 Management Software User’s Guide2317. Click OK on all dialog boxes (starting with the EAP MSCHAP v2 Properties dialog box) to close and save

Appendix B: Configuring Security on Wireless Clients2325. Verify that you configured the AT-WA7400 Wireless Access Point to use IEEE 802.1x security m

AT-WA7400 Management Software User’s Guide233Figure 10. Association and Authentication Tabs7. Configure the following settings on the Association tab

Appendix B: Configuring Security on Wireless Clients234Enable IEEE 802.1x authentication for this networkEnable (click to check) this option.EAP TypeC

AT-WA7400 Management Software User’s Guide235certificate is automatically sent to the RADIUS server for authentication and authorization.

Appendix B: Configuring Security on Wireless Clients236Configuring WPA/WPA2 Enterprise (RADIUS) Security on a ClientWi-Fi Protected Access 2 (WPA2) wi

AT-WA7400 Management Software User’s Guide237NoteThe following example assumes that you are using the built-in authentication server that is shipped w

Appendix B: Configuring Security on Wireless Clients2382. Set up user accounts on the access point (Cluster > User Management) as shown in Figure 1

AT-WA7400 Management Software User’s Guide239Figure 14. Wireless Network Properties Dialog Box4. Configure the following settings on the Association a

Chapter 1: Preparing to Set Up the AT-WA7400 Wireless Access Point24Recovering an IPAddressIf you experience trouble communicating with the access poi

Appendix B: Configuring Security on Wireless Clients240Click Properties to open the Protected EAP Properties dialog box as shown in Figure 15.Figure 1

AT-WA7400 Management Software User’s Guide2419. Click OK in all dialog boxes (starting with the EAP MSCHAP v2 Properties dialog) to close and save you

Appendix B: Configuring Security on Wireless Clients2425. Verify that you configured the AT-WA7400 Wireless Access Point to use WPA/WPA2 Enterprise (R

AT-WA7400 Management Software User’s Guide243Figure 17. Association and Authentication Tabs7. Configure the following settings on the Association tab

Appendix B: Configuring Security on Wireless Clients2449. Click Properties to open the Smart Card or other Certificate Properties dialog and enable th

AT-WA7400 Management Software User’s Guide245Configuring WPA/WPA2 Personal (PSK) Security on a ClientWi-Fi Protected Access (WPA) with Pre-Shared Key

Appendix B: Configuring Security on Wireless Clients2462. Configure WPA/WPA2 Personal (PSK) security on each client as shown in Figure 20.Figure 20. A

AT-WA7400 Management Software User’s Guide247The key is provided for me automaticallyThis box should be disabled automatically based on other settings

Appendix B: Configuring Security on Wireless Clients248Configuring an External RADIUS Server to Recognize the AT-WA7400 Wireless Access PointAn extern

AT-WA7400 Management Software User’s Guide249To configure an external RADIUS server, perform the following procedure:1. On the Security Settings page,

Section I: Basic Features 25Chapter 2Setting up the AT-WA7400 Management SoftwareSetting up and deploying one or more AT-WA7400 Wireless Access Points

Appendix B: Configuring Security on Wireless Clients2502. Log on to the system hosting your RADIUS server and open the Internet Authentication Service

AT-WA7400 Management Software User’s Guide251Figure 23. New RADIUS Client Dialog Box, Name and Address Dialog Box5. Click Next.6. For the Shared secre

Appendix B: Configuring Security on Wireless Clients252The access point is now displayed as a client of the Authentication Server (Figure 25).Figure 2

AT-WA7400 Management Software User’s Guide253Obtaining a TLS-EAP Certificate for a ClientNoteIf you want to use IEEE 802.1x mode with EAP-TLS certific

Appendix B: Configuring Security on Wireless Clients254Where IPAddressOfServer is the IP address of your external RADIUS server, or of the Certificate

AT-WA7400 Management Software User’s Guide255The login window for the RADIUS server opens, as shown in Figure 28.Figure 28. RADIUS Server Login Window

Appendix B: Configuring Security on Wireless Clients256The Security Warning dialog box opens, as shown in Figure 30.Figure 30. Security Warning Dialog

AT-WA7400 Management Software User’s Guide257The Certificate Issued dialog box opens, as shown in Figure 33.Figure 33. Certificate Issued Dialog Box9.

Appendix B: Configuring Security on Wireless Clients258A success message (Figure 36) is displayed indicating the certificate is now installed on the c

259Appendix CTroubleshootingThis appendix provides information about how to solve common problems you might encounter in the course of updating networ

Chapter 2: Setting up the AT-WA7400 Management Software26Running KickStart to Find Access Points on the NetworkKickStart is an easy-to-use utility for

Appendix C: Troubleshooting260Wireless Distribution System (WDS) Problems and SolutionsIf you are having trouble configuring a WDS link, read the foll

AT-WA7400 Management Software User’s Guide261Cluster RecoveryIn cases where the access points in a cluster become out of sync or an access point canno

Appendix C: Troubleshooting262The Stop Clustering page for this access point is displayed, as shown in Figure 37.Figure 37. Stop Clustering Page2. Cli

AT-WA7400 Management Software User’s Guide263The Reset Configuration page is shown in Figure 38.Figure 38. Reset Configuration Page5. Click Reset to r

Appendix C: Troubleshooting264All previous cluster members are displayed in the list.Before proceeding to the last step, verify that the cluster has r

265Appendix DCommand Line Interface (CLI) for Access Point ConfigurationIn addition to the web-based user interface, the AT-WA7400 Wireless Access Poi

Appendix D: Command Line Interface (CLI) for Access Point Configuration266Comparison of Settings Configurable with the CLI and Web UIThe command line

AT-WA7400 Management Software User’s Guide267Wireless Neighborhood No Yes, as described in Chapter 7, “Wireless Neighborhoods” on page 79.Displaying

Appendix D: Command Line Interface (CLI) for Access Point Configuration268Back Up and Restore No Yes, as described in Chapter 18, “Backing Up and Rest

AT-WA7400 Management Software User’s Guide269Accessing the CLI for an Access PointYou can use any of these methods to access the CLI for the access po

AT-WA7400 Management Software User’s Guide272. Insert the AT-WA7400 Wireless Access Point CD into the CD-ROM drive on your computer.The CD’s main page

Appendix D: Command Line Interface (CLI) for Access Point Configuration270Enter after each. (The password is masked, so it will not be displayed on th

AT-WA7400 Management Software User’s Guide271Figure 40. PuTTY Configuration Dialog Box2. Enter the IP address of access point and click Open.(If your

Appendix D: Command Line Interface (CLI) for Access Point Configuration272Quick View of Commands and How to Get HelpCautionSettings you update from th

AT-WA7400 Management Software User’s Guide273Table 3. Commands and SyntaxCommand Descriptionget The get command allows you to get the field values of

Appendix D: Command Line Interface (CLI) for Access Point Configuration274set The set command allows you to set the field values of existing instances

AT-WA7400 Management Software User’s Guide275Getting Help onCommands at theCLITo get help on commands, at the CLI prompt, use the TAB key. This is a q

Appendix D: Command Line Interface (CLI) for Access Point Configuration276 Example 2: Type get TAB TAB (including a space after get) to see a list of

AT-WA7400 Management Software User’s Guide277For detailed examples on getting help, see “Keyboard Shortcuts and Tab Completion Help” on page 349.

Appendix D: Command Line Interface (CLI) for Access Point Configuration278Command Usage and Configuration ExamplesThe following sections provide examp

AT-WA7400 Management Software User’s Guide279Table 4. Interfaces in the CLIInterface DescriptionloLocal loopback for data meant for the access point i

Chapter 2: Setting up the AT-WA7400 Management Software28For information about installing KickStart, refer to “Installing KickStart on the Administrat

Appendix D: Command Line Interface (CLI) for Access Point Configuration280brvwn2This is for the second virtual wireless network (VWN) 2.On a one-radio

AT-WA7400 Management Software User’s Guide281SavingConfigurationChangesThe AT-WA7400 Wireless Access Point maintains three different configurations.

Appendix D: Command Line Interface (CLI) for Access Point Configuration282Basic SettingsNoteBefore configuring this feature, make sure you are familia

AT-WA7400 Management Software User’s Guide283Get the IP Address for the Internal Interface on an Access PointIn the following example, the IP address

Appendix D: Command Line Interface (CLI) for Access Point Configuration284Field Value---------------------ip 10.10.55.216mac 00:a0:c9:8c:c4:7e

AT-WA7400 Management Software User’s Guide285AT-WA7400# get cluster locationnot setSet the Location for an Access PointTo set the location for an acce

Appendix D: Command Line Interface (CLI) for Access Point Configuration286links to detailed examples.Determine if the Access Point is a Cluster Member

AT-WA7400 Management Software User’s Guide287Configure the Access Point as a Standalone Deviceset cluster clusterable 0User Accounts The following com

Appendix D: Command Line Interface (CLI) for Access Point Configuration288To view all user accounts:Add UsersIn this example, four new users are added

AT-WA7400 Management Software User’s Guide289name username disabled password realname---------------------------------------------------------

AT-WA7400 Management Software User’s Guide29NoteThe KickStart utility only finds other AT-WA7400 Wireless Access Points.If KickStart does not find the

Appendix D: Command Line Interface (CLI) for Access Point Configuration290examples.Table 8. Status CommandsFunction CommandUnderstanding Interfaces as

AT-WA7400 Management Software User’s Guide291Get Common Information on the Internal Interface for the Access PointThe following command obtains all in

Appendix D: Command Line Interface (CLI) for Access Point Configuration292Get All Wired Settings for the Wired Internal InterfaceAT-WA7400# get interf

AT-WA7400 Management Software User’s Guide293NoteYou can get specifics on the guest interface by using the same types of commands as for the internal

Appendix D: Command Line Interface (CLI) for Access Point Configuration294rts-threshold 2347ap-detection onbeacon-interval

AT-WA7400 Management Software User’s Guide295Get Status on EventsAT-WA7400# get log-entry allNumber Time Priority Daemon Messag

Appendix D: Command Line Interface (CLI) for Access Point Configuration296To view the current log settings:AT-WA7400# get logField Value-----

AT-WA7400 Management Software User’s Guide297set log relay-host Host_Name_Of_LogRelayHostWhere Host_Name_Of_LogRelayHost is the a DNS name for the Log

Appendix D: Command Line Interface (CLI) for Access Point Configuration298AT-WA7400# get interface all ip mac ssid tx-packets tx-bytes tx-errors rx-pa

AT-WA7400 Management Software User’s Guide299Get Client AssociationsGet Neighboring Access PointsThe Neighboring access point view shows wireless netw

3Preface ...

Chapter 2: Setting up the AT-WA7400 Management Software30The AT-WA7400 management software is a centralized management tool that you can access throug

Appendix D: Command Line Interface (CLI) for Access Point Configuration300rate Ratesignal Signal strengthssid Ser

AT-WA7400 Management Software User’s Guide301type APprivacy Offssid domanichannel 6signal 3Field Value---------------------------------

Appendix D: Command Line Interface (CLI) for Access Point Configuration302Get Summary View of Internal and Guest InterfacesGet the DNS NameAT-WA7400#

AT-WA7400 Management Software User’s Guide303Set DNS Nameservers to Use Static IP Addresses (Dynamic to Manual Mode)This example shows how to reconfig

Appendix D: Command Line Interface (CLI) for Access Point Configuration304AT-WA7400# get host dns-via-dhcpupSetting Up theWirelessInterfaceTo set up a

AT-WA7400 Management Software User’s Guide305Get the Current Security ModeAT-WA7400# get interface wlan0 securityplain textGet Detailed Description of

Appendix D: Command Line Interface (CLI) for Access Point Configuration306radius-ip 127.0.0.1radius-key secretopen-

AT-WA7400 Management Software User’s Guide307channel 6tx-power 100tx-rx-status

Appendix D: Command Line Interface (CLI) for Access Point Configuration308NoteThe Key Length values used by the CLI do not include the initialization

AT-WA7400 Management Software User’s Guide309If Key Length is 40 bits and Key Type is “Hex,” then each WEP key must be 10 characters long.If Key Lengt

AT-WA7400 Management Software User’s Guide31The Select Installation Folder dialog box is shown in Figure 7. Figure 7. Select Installation Folder Dialo

Appendix D: Command Line Interface (CLI) for Access Point Configuration310command gets the security mode in use on the internal network:AT-WA7400# get

AT-WA7400 Management Software User’s Guide311Key settings, specifically.AT-WA7400# get interface wlan0 detailField Value------------------

Appendix D: Command Line Interface (CLI) for Access Point Configuration312bss wlan0bssInternalsecurity static-wepwpa-personal-k

AT-WA7400 Management Software User’s Guide313The following example sets the access point to use the built-in server:AT-WA7400# set bss wlan0bssInterna

Appendix D: Command Line Interface (CLI) for Access Point Configuration314Get Current Security Settings After Re-Configuring to IEEE 802.1x Security M

AT-WA7400 Management Software User’s Guide315wpa-allowed offwpa2-allowed offrsn-preauthentication offSet Security

Appendix D: Command Line Interface (CLI) for Access Point Configuration316Set the cipher suite you want to use. The options are shown in Table 17.The

AT-WA7400 Management Software User’s Guide3175. Get Current Security Settings After Reconfiguring to WPA/WPA2 Personal (PSK)Now use the get command ag

Appendix D: Command Line Interface (CLI) for Access Point Configuration318wpa-allowed onwpa2-allowed onrsn-preauthentic

AT-WA7400 Management Software User’s Guide319authentication for WPA2 clients, as shown in Table 19..This option does not apply if you set the WPA Vers

Chapter 2: Setting up the AT-WA7400 Management Software32The KickStart Setup confirmation dialog box is shown in Figure 9.Figure 9. KickStart Installa

Appendix D: Command Line Interface (CLI) for Access Point Configuration320In this example, the cipher suite is set to TKIP Only:AT-WA7400# set bss wla

AT-WA7400 Management Software User’s Guide321This command sets the RADIUS key to KeepSecret for an external RADIUS server.AT-WA7400# set bss wlan0bssI

Appendix D: Command Line Interface (CLI) for Access Point Configuration322and see the results of our new settings.The following command gets the secur

AT-WA7400 Management Software User’s Guide323rsn-preauthentication offEnabling andConfiguring theGuest LoginWelcome PageThe guest login and welc

Appendix D: Command Line Interface (CLI) for Access Point Configuration324welcome-screen-text Thank you for using wireless Guest Access as provided b

AT-WA7400 Management Software User’s Guide325ConfiguringMultiple BSSIDson VirtualWirelessNetworksNoteBefore you configure this feature, make sure you

Appendix D: Command Line Interface (CLI) for Access Point Configuration326Use the CLI to set the Network Name (SSID) for the New Virtual Wireless Netw

AT-WA7400 Management Software User’s Guide327(The radio in the example is using IEEE 802.11g mode.)Get Radio ChannelTo get the current setting for rad

Appendix D: Command Line Interface (CLI) for Access Point Configuration328mode gstatic-channel

AT-WA7400 Management Software User’s Guide329wlan0 6wlan0 5.5wlan0 2wlan0 1Get Basic Rate SetThe Basic Rate Set is what the access point will adve

AT-WA7400 Management Software User’s Guide33When the installation is complete, the Installation Complete dialog box is displayed, as shown in Figure 1

Appendix D: Command Line Interface (CLI) for Access Point Configuration330how you would use the CLI to set each one are shown in Table 27.The followin

AT-WA7400 Management Software User’s Guide331AT-WA7400# set bss wlan0bssInternal dtim-period 3To get the updated value for DTIM interval after you hav

Appendix D: Command Line Interface (CLI) for Access Point Configuration332The following command adds “48” as a basic rate to wlan0 (the internal, wire

AT-WA7400 Management Software User’s Guide333125.56111218243648549NoteYou can use the get command to view current rate sets from the CLI as described

Appendix D: Command Line Interface (CLI) for Access Point Configuration334to configure. The commands are shown in Table 29.Add MAC Addresses of Client

AT-WA7400 Management Software User’s Guide335Getting Current MAC Filtering SettingsGet the Type of MAC Filtering List Currently Set (Accept or Deny)Th

Appendix D: Command Line Interface (CLI) for Access Point Configuration336AT-WA7400# get radio wlan0 load-balance-disassociation-stations2AT-WA7400# s

AT-WA7400 Management Software User’s Guide337Table 30 provides a quick view of QOS commands.Table 30. QoS CommandsFunction CommandEnable/Disable Wi-Fi

Appendix D: Command Line Interface (CLI) for Access Point Configuration338Enable/Disable Wi-Fi MultimediaBy default, Wi-Fi MultiMedia (WMM) is enabled

AT-WA7400 Management Software User’s Guide339Understanding the Queues for Access Point and StationThe same types of queues are defined for different k

Chapter 2: Setting up the AT-WA7400 Management Software34Logging in to the AT-WA7400 Management SoftwareTo access the AT-WA7400 management software, p

Appendix D: Command Line Interface (CLI) for Access Point Configuration340wlan0 data3 7 15 1023 0Get QoS Settings on the Client StationTo

AT-WA7400 Management Software User’s Guide341wlan0 data1 1 7 15 3.0wlan0 data2 3 15 63 0wlan0 data3 7 15 1023

Appendix D: Command Line Interface (CLI) for Access Point Configuration342detailed field description for this value in that topic.)Valid values for th

AT-WA7400 Management Software User’s Guide343AT-WA7400# set wme-queue wlan0 with queue vi cwmin 7 cwmax 15View the results of this configuration updat

Appendix D: Command Line Interface (CLI) for Access Point Configuration344wlan0 data2 3 15 63 0.5wlan0 data3 7 15 1023 0Set

AT-WA7400 Management Software User’s Guide345Table 32 provides a list of the WDS commands.Configure a WDS LinkTo set up a wireless distribution system

Appendix D: Command Line Interface (CLI) for Access Point Configuration346static-ipstatic-masknatrx-bytes 0rx-packets 0rx-errors

AT-WA7400 Management Software User’s Guide347wep-key-3wep-key-4vlan-interfacevlan-idradio wlan0remote-mac 00:E0:B8:76:1B:14Time Pro

Appendix D: Command Line Interface (CLI) for Access Point Configuration348Rebooting theAccess PointTo reboot the access point, type reboot at the comm

AT-WA7400 Management Software User’s Guide349Keyboard Shortcuts and Tab Completion HelpThe CLI provides keyboard shortcuts to help you navigate the co

AT-WA7400 Management Software User’s Guide35Figure 13. Basic Settings Page

Appendix D: Command Line Interface (CLI) for Access Point Configuration350Tab Completionand HelpYou can get help on commands in the command line inter

AT-WA7400 Management Software User’s Guide351bridge-port Bridge ports of bridge interfacesbss Basic Service Set of radioscluster

Appendix D: Command Line Interface (CLI) for Access Point Configuration352AT-WA7400# get system version Example 4: Type set TAB TAB (including a spac

AT-WA7400 Management Software User’s Guide353AT-WA7400# set clustercluster Clustering-based configuration settingscluster-member Member of

Appendix D: Command Line Interface (CLI) for Access Point Configuration354CLI Classes and Fields ReferenceThe following is an introduction to the CLI

AT-WA7400 Management Software User’s Guide355field with a value of 255.0.0.0.Figure 41. CLI Class Relationships

Appendix D: Command Line Interface (CLI) for Access Point Configuration356

357Appendix ERadio BandsThe Allied Telesyn AT-WA7400 Wireless Access Point is capable of operating in the 2.4GHZ (IEEE 802.11g/b) AND in the 5GHZ band

Appendix E: Radio Bands358

359IndexAaccess pointadding to cluster 50clustering 44factory default configuration 281navigating to 52removing from cluster 49running configuration 2

Chapter 2: Setting up the AT-WA7400 Management Software36Navigating the Web PagesThe web pages provide several ways that you can navigate through the

Index360session, definition 65See also stationsclient workstations, setting up 22clusteradding access point 50adding an access point to 50auto-synch 4

AT-WA7400 Management Software User’s Guide361Kkey management, security 107KickStart 26KickStart utility, running to find access points 26Llink integri

Index362on WDS bridge 175station isolationconfiguring 114described 113stationsconfiguring maximum allowed 147See also clientStop Clustering page 262su

AT-WA7400 Management Software User’s Guide37Configuring the Basic Settings and Starting the Wireless NetworkProvide a minimal set of configuration inf

Chapter 2: Setting up the AT-WA7400 Management Software38Telesyn recommends that you change the administrator password from the default which is “frie

AT-WA7400 Management Software User’s Guide39If you choose “are ignored,” new access points will not join the cluster; they will be considered standalo

Contents4Modifying the Location Description...

Chapter 2: Setting up the AT-WA7400 Management Software40A summary of the settings is shown in Figure 15.Figure 15. Summary of Settings PageAt initial

AT-WA7400 Management Software User’s Guide41Next StepsTo make sure the access point is connected to the LAN, bring up some wireless clients and connec

Chapter 2: Setting up the AT-WA7400 Management Software42Logging in After the Initial SetupWhen you log in again after you complete the initial setup,

43Chapter 3Managing Access Points and ClustersThe AT-WA7400 Management Software shows current basic configuration settings for clustered access points

Chapter 3: Managing Access Points and Clusters44Understanding ClusteringA key feature of the AT-WA7400 Management Software is the ability to form a dy

AT-WA7400 Management Software User’s Guide45Which Settingsare Shared asPart of theClusterConfigurationand Which AreNot?Most configuration settings tha

Chapter 3: Managing Access Points and Clusters46Settings that are not shared must be configured individually on the AT-WA7400 Management Software web

AT-WA7400 Management Software User’s Guide47ClusterFormationA cluster is formed when the first AT-WA7400 Wireless Access Point is configured. (See “Co

Chapter 3: Managing Access Points and Clusters48Understanding and Changing Access Point SettingsThe Access Points page provides information about all

AT-WA7400 Management Software User’s Guide49A MAC address is a permanent, unique hardware address for any device that represents an interface to the n

AT+WA7400 Management Software User’s Guide5When to Use IEEE 802.1x ...

Chapter 3: Managing Access Points and Clusters50NoteIn some situations it is possible for the cluster to become out of sync. If after removing an acce

AT-WA7400 Management Software User’s Guide51The access point is now a cluster member. Its Status (Mode) on the Cluster > Access Points page now ind

Chapter 3: Managing Access Points and Clusters52Navigating to Configuration Information for a Specific Access Point and Managing Standalone Access Poi

AT-WA7400 Management Software User’s Guide53Configuring MAC Address FilteringA media access control (MAC) address is a hardware address that uniquely

Chapter 3: Managing Access Points and Clusters542. Configure the following settings:FilterClick one of the following radio buttons: Allow only statio

AT-WA7400 Management Software User’s Guide55MAC Filtering of Rogue Access PointsWhen an access point is not listed in the access points list, the MAC

Chapter 3: Managing Access Points and Clusters56b. Click Add.c. Click Update.

57Chapter 4Managing User AccountsThe AT-WA7400 Management Software includes user management capabilities for controlling client access to access point

Chapter 4: Managing User Accounts58Adding a UserTo add a new user, perform the following procedure:1. From the main menu, select Cluster > User Man

AT-WA7400 Management Software User’s Guide59PasswordSpecify a password for this user. Passwords are alphanumeric strings of up to 256 characters. Do n

Contents6Security Considerations Related to WDS Bridges...

Chapter 4: Managing User Accounts60Editing a User AccountAfter you create a user account, it is displayed in the User Accounts section at the top of t

AT-WA7400 Management Software User’s Guide612. In the User Accounts section, click the checkbox next to the user name you want to enable.3. Click Enab

Chapter 4: Managing User Accounts62Backing Up and Restoring a User DatabaseYou can save a copy of the current set of user accounts to a backup configu

AT-WA7400 Management Software User’s Guide63Restoring a UserDatabase from aBackup FileTo restore a user database from a backup file, perform the follo

Chapter 4: Managing User Accounts64

65Chapter 5Session MonitoringThe AT-WA7400 Management Software provides real-time session monitoring information including which clients are associate

Chapter 5: Session Monitoring66Viewing Sessions InformationTo view session monitoring information, perform the following procedure:1. From the main me

AT-WA7400 Management Software User’s Guide67A station is considered to be idle when it is not receiving or transmitting data.Data RateThe speed at whi

Chapter 5: Session Monitoring68Sorting SessionInformationTo sort the information in the session list, perform the following procedure:1. On the Sessio

69Chapter 6Channel ManagementThis chapter contains the following sections: “Understanding Channel Management” on page 70 “Displaying the Channel Man

AT+WA7400 Management Software User’s Guide7SSH Connection to the Access Point ...

Chapter 6: Channel Management70Understanding Channel ManagementWhen channel management is enabled, the AT-WA7400 Management Software automatically ass

AT-WA7400 Management Software User’s Guide71Example: ANetwork Beforeand AfterChannelManagementWithout automated channel management, channel assignment

Chapter 6: Channel Management72Displaying the Channel Management SettingsTo view channel management information, perform the following procedure:1. Fr

AT-WA7400 Management Software User’s Guide73Configuring the Channel Management SettingsThis section contains the following procedures: “Stopping or S

Chapter 6: Channel Management74BandIndicates the band (b/g or a) on which the access point is broadcasting.CurrentIndicates the radio channel on which

AT-WA7400 Management Software User’s Guide75ConfiguringAdvancedSettings(Customizing andSchedulingChannel Plans)If you use channel management as provid

Chapter 6: Channel Management76Change channels if interference is reduced by at leastSpecify the minimum percentage of interference reduction a propos

AT-WA7400 Management Software User’s Guide774. Click Update to apply these settings.Advanced settings take effect when they are applied, and influence

Chapter 6: Channel Management78

79Chapter 7Wireless NeighborhoodsThe wireless neighborhood view shows those access points within range of any access point in the cluster. This page p

Contents8Setting Up Security...

Chapter 7: Wireless Neighborhoods80Understanding Wireless Neighborhood InformationThe wireless neighborhood shows all access points within range of ev

AT-WA7400 Management Software User’s Guide81Displaying the Wireless Neighborhood InformationTo view the Wireless Neighborhood page, perform the follow

Chapter 7: Wireless Neighborhoods82Both - Shows all neighbor access points (cluster members and nonmembers)ClusterThe Cluster list at the top of the t

AT-WA7400 Management Software User’s Guide83Neighbor seen by the access point whose IP address is listed above that column. Lighter Blue Bar - A ligh

Chapter 7: Wireless Neighborhoods84Viewing Details of a Cluster MemberTo view details on a cluster member access point, perform the following procedur

AT-WA7400 Management Software User’s Guide85ChannelShows the channel on which the access point is currently broadcasting. The channel defines the port

Chapter 7: Wireless Neighborhoods86

87Chapter 8Configuring Ethernet (Wired) SettingsEthernet (wired) settings describe the configuration of your Ethernet local area network (LAN).NoteThe

Chapter 8: Configuring Ethernet (Wired) Settings88Setting the DNS NameTo set the DNS name, perform the following procedure:1. From the main menu, sele

AT-WA7400 Management Software User’s Guide89 The name can be up to 20 characters long. Only letters, numbers and dashes are allowed. The name must

AT+WA7400 Management Software User’s Guide9Specify an Accept or Deny List ...

Chapter 8: Configuring Ethernet (Wired) Settings90Enabling or Disabling Guest AccessYou can provide controlled guest access over a secure internal LAN

AT-WA7400 Management Software User’s Guide912. For the Virtual Wireless Networks setting, select one of the following: Select Enabled to enable VLANs

Chapter 8: Configuring Ethernet (Wired) Settings92Enabling or Disabling Spanning TreeThe AT-WA7400 Management Software allows you to enable or disable

AT-WA7400 Management Software User’s Guide93Configuring the Internal Interface Ethernet SettingsTo configure Ethernet (wired) settings for the interna

Chapter 8: Configuring Ethernet (Wired) Settings94wireless client associated with the AP, even if its IP address is defined in the Management IP Addre

AT-WA7400 Management Software User’s Guide95www.alliedtelesyn.com) to its numeric IP address (for example, 66.93.138.219). A DNS server is called a Na

Chapter 8: Configuring Ethernet (Wired) Settings96Configuring the Guest Interface SettingsThe guest interface settings allows a wireless client limite

97Chapter 9Configuring the Wireless SettingsWireless settings describe aspects of the local area network (LAN) related specifically to the radio devic

Chapter 9: Configuring the Wireless Settings98Configuring 802.11d Regulatory Domain SupportYou can enable or disable IEEE 802.11d regulatory domain su

AT-WA7400 Management Software User’s Guide993. Click Update to save your settings