Allied Telesis AT-TQ2403 User manual

AT-TQ2403

Management Software

User's Guide

PN 613-001156 Rev. B

2 AT-TQ2403 - Management Software - User's Guide

Telesis, Inc.

Microsoft and Internet Explorer are registered trademarks of Microsoft Corporation. Netscape Navigator is a

registered trademark of Netscape Communications Corporation. All other product names, company names, logos

or other designations mentioned herein are trademarks or registered trademarks of their respective owners.

Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this

document without prior written notice. The information provided herein is subject to change without notice. In no

event shall Allied Telesis, Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever,

including but not limited to lost profits, arising out of or related to this manual or the information contained herein,

even if Allied Telesis, Inc. has been advised of, known, or should have known, the possibility of such damages.

AT-TQ2403 Management Software User's Guide 3

SAFETY NOTICE

 Do not open service or change any component.

 Only qualified technicians are allowed to service the equipment.

 Observe safety precautions to avoid electric shock

 Check voltage before connecting to the power supply.

Connecting to the wrong voltage will damage the equipment.

LIMITATION OF LIABILITY AND DAMAGES

THE PRODUCT AND THE SOFTWARES WITHIN ARE PROVIDED "AS IS," BASIS. THE

MANUFACTURER AND MANUFACTURER’S RESELLERS (COLLECTIVELY REFERRED TO AS

“THE SELLERS”) DISCLAIM ALL WARRANTIES, EXPRESS, IMPLIED OR STATUTORY,

INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF

NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE,

OR ANY WARRANTIES ARISING FROM COURSE OF DEALING, COURSE OF

PERFORMANCE, OR USAGE OF TRADE. IN NO EVENT WILL THE SELLERS BE LIABLE FOR

DAMAGES OR LOSS, INCLUDING BUT NOT LIMITED TO DIRECT, INDIRECT, SPECIAL

WILFUL, PUNITIVE, INCIDENTAL, EXEMPLARY, OR CONSEQUENTIAL, DAMAGES,

DAMAGES FOR LOSS OF BUSINESS PROFITS, OR DAMAGES FOR LOSS OF BUSINESS OF

ANY CUSTOMER OR ANY THIRD PARTY ARISING OUT OF THE USE OR THE INABILITY

TO USE THE PRODUCT OR THE SOFTWARES, INCLUDING BUT NOT LIMITED TO THOSE

RESULTING FROM DEFECTS IN THE PRODUCT OR SOFTWARE OR DOCUMENTATION,

OR LOSS OR INACCURACY OF DATA OF ANY KIND, WHETHER BASED ON CONTRACT,

TORT OR ANY OTHER LEGAL THEORY, EVEN IF THE PARTIES HAVE BEEN ADVISED OF

THE POSSIBILITY OF SUCH DAMAGES. THE ENTIRE RISK AS TO THE RESULTS AND

PERFORMANCE OF THE PRODUCT OR ITS SOFTWARE IS ASSUMED BY CUSTOMER.

BECAUSE SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY

FOR DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO THE PARTIES. IN NO

EVENT WILL THE SELLERS’ TOTAL CUMULATIVE LIABILITY OF EACH AND EVERY KIND IN

RELATION TO THE PRODUCT OR ITS SOFTWARE EXCEED THE AMOUNT PAID BY

CUSTOMER FOR THE PRODUCT.

4 AT-TQ2403 - Management Software - User's Guide

ELECTRICAL SAFETY AND EMISSIONS

STANDARDS

This product meets the following standards.

U.S. Federal Communications Commission Interference Statement

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC

Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This

equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions,

may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a

particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined

by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

- Reorient or relocate the receiving antenna.

- Increase the separation between the equipment and receiver.

- Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

- Consult the dealer or an experienced radio/TV technician for help.

FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the

user's authority to operate this equipment.

For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to indoor environment.

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not

cause harmful interference, and (2) this device must accept any interference received, including interference that may cause

undesired operation.

Radiation Exposure Statement: This equipment complies with FCC radiation exposure limits set forth for an

uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator &

your body.

This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.

The availability of some specific channels and/or operational frequency bands are country dependent and are firmware programmed

at the factory to match the intended destination. The firmware setting is not accessible by the end user.

Canadian Department of Communications

This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This

device may not cause harmful interference, and (2) this device must accept any interference received, including interference that

may cause undesired operation.

Radiation Exposure Statement: This equipment complies with IC radiation exposure limits set forth for an

uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator &

your body.

Caution: The device for the band 5150-5250 MHz is only for indoor usage to reduce potential for harmful interference to

co-channel mobile satellite systems.

High power radars are allocated as primary users (meaning they have priority) of 5250-5350 MHz and 5650-5850 MHz and these

radars could cause interference and/or damage to LE-LAN devices.

This device has been designed to operate with an antenna having a maximum gain of 2.43 dB. Antenna having a higher gain is strictly

prohibited per regulations of Industry Canada. The required antenna impedance is 50 ohms.

CE Marking Warning

This device complies with the essential requirements of the R&TTE Directive 1999/5/EC. The following test methods have been

applied in order to prove presumption of conformity with the essential requirements of the R&TTE Directive 1999/5/EC:

EN60950-1: 2006

Safety of Information Technology Equipment

EN 50385: 2002

Product standard to demonstrate the compliance of radio base stations and fixed terminal stations for wireless telecommunication

systems with the basic restrictions or the reference levels related to human exposure to radio frequency electromagnetic fields

(110MHz - 40 GHz) - General public

EN 300 328 V1.7.1 (2006-10)

AT-TQ2403 Management Software User's Guide 5

Electromagnetic compatibility and Radio spectrum Matters (ERM); Wideband transmission systems; Data transmission equipment

operating in the 2,4 GHz ISM band and using wide band modulation techniques; Harmonized EN covering essential requirements

under article 3.2 of the R&TTE Directive

EN 301 893 V1.4.1: (2007-07)

Broadband Radio Access Networks (BRAN); 5 GHz high performance RLAN; Harmonized EN covering essential requirements of

article 3.2 of the R&TTE Directive

EN 301 489-1 V1.8.1 (2008-04)

Electromagnetic compatibility and Radio Spectrum Matters (ERM); ElectroMagnetic Compatibility (EMC) standard for radio

equipment and services; Part 1: Common technical requirements

EN 301 489-17 V1.3.2 (2008-04)

Electromagnetic compatibility and Radio spectrum Matters (ERM); ElectroMagnetic Compatibility (EMC) standard for radio

equipment and services; Part 17: Specific conditions for 2,4 GHz wideband transmission systems , 5 GHz high performance RLAN

equipment and 5,8GHz Broadband Data Transmitting Systems.

This device is a 2.4 GHz wideband transmission system (transceiver), intended for use in all EU member states and EFTA countries,

except in France and Italy where restrictive use applies.

In Italy the end-user should apply for a license at the national spectrum authorities in order to obtain authorization to use the device

for setting up outdoor radio links and/or for supplying public access to telecommunications and/or network services.

This device may not be used for setting up outdoor radio links in France and in some areas the RF output power may be limited to

10 mW EIRP in the frequency range of 2454 – 2483.5 MHz. For detailed information the end-user should contact the national

spectrum authority in France.

6 AT-TQ2403 - Management Software - User's Guide

CONTENTS

Preface ....................................................................................................................................................................15

Purpose of This Guide .................................................................................................................................15

How This Guide is Organized....................................................................................................................15

Document Conventions ..............................................................................................................................15

Contacting Allied Telesis....................................................................................................................................16

Online Support ..............................................................................................................................................16

Email and Telephone Support ....................................................................................................................16

Warranty ........................................................................................................................................................16

Where to Find Web-based Guides...........................................................................................................16

Returning Products.......................................................................................................................................16

Sales or Corporate Information ................................................................................................................16

Management Software Updates .................................................................................................................16

Tell Us What You Think .............................................................................................................................16

Chapter 1: Preparing to Set Up the AT-TQ2403 Wireless Access Point ..............................................17

Setting Up the Administrator’s Computer..............................................................................................17

Setting Up the Wireless Client Computers ............................................................................................18

Understanding Dynamic and Static IP Addressing on the AT-TQ2403 Management Software...19

How Does the Access Point Obtain an IP Address at Start-up? .....................................................19

Dynamic IP Addressing .............................................................................................................................19

Static IP Addressing ...................................................................................................................................19

Recovering an IP Address.........................................................................................................................20

Chapter 2: Setting up the AT-TQ2403 Management Software..................................................................21

Running Kick Start to Find Access Points on the Network.................................................................21

Logging in to the AT-TQ2403 Management Software..........................................................................23

Configuring the Basic Settings and Starting the Wireless Network...................................................25

Configuring the Basic Settings .................................................................................................................25

Chapter 3: Configuring Basic Settings..............................................................................................................27

Navigating to Basic Settings ........................................................................................................................27

Review / Describe the Access Point.........................................................................................................28

Provide Network Settings...........................................................................................................................29

Update Basic Settings ...................................................................................................................................30

Basic Settings for a Standalone Access Point ..........................................................................................30

Setting User Interface Scheme Preferences ............................................................................................30

Navigation.......................................................................................................................................................30

Chapter 4: Managing Access Points and Clusters .........................................................................................31

Navigating to Access Points Management ...............................................................................................32

Understanding Clustering............................................................................................................................32

What is a Cluster? .....................................................................................................................................32

How Many APs Can a Cluster Support? ...............................................................................................32

Only the same country domain setting can be clustered. .................................................................32

What Kinds of APs Can Cluster Together? .........................................................................................33

Which Settings are Shared as Part of the Cluster Configuration and Which Are Not? ............33

Cluster Formation......................................................................................................................................34

Cluster Size and Membership..................................................................................................................34

Intra-Cluster Security................................................................................................................................35

Understanding Access Point Settings........................................................................................................35

Modifying the Location Description..........................................................................................................36

Setting the Cluster Name............................................................................................................................36

Stopping Clustering.......................................................................................................................................37

Starting Clustering ........................................................................................................................................37

AT-TQ2403 Management Software User's Guide 7

Navigating to Configuration Information for a Specific AP and Managing Standalone APs...........37

Navigating to an AP by Using its IP Address in a URL..........................................................................38

Chapter 5: Managing User Accounts ...............................................................................................................39

Navigating to User Management for Clustered Access Points ...........................................................39

Viewing User Accounts ...............................................................................................................................40

Adding a User ................................................................................................................................................40

Editing a User Account................................................................................................................................41

Enabling and Disabling User Accounts .....................................................................................................41

Enabling a User Account ..........................................................................................................................41

Disabling a User Account.........................................................................................................................42

Removing a User Account ..........................................................................................................................42

Backing Up and Restoring a User Database............................................................................................42

Backing Up the User Database ...............................................................................................................42

Restoring a User Database from a Backup File ...................................................................................42

Chapter 6: Session Monitoring..........................................................................................................................43

Navigating to Session Monitoring..............................................................................................................43

Understanding Session Monitoring Information.....................................................................................43

Sorting Session Information........................................................................................................................45

Refreshing Session Information..................................................................................................................45

Chapter 7: Channel Management .....................................................................................................................46

Navigating to Channel Management .........................................................................................................46

Understanding Channel Management.......................................................................................................47

How it Works in a Nutshell....................................................................................................................47

For the Curious: More About Overlapping Channels .......................................................................47

Example: A Network Before and After Channel Management........................................................47

Configuring and Viewing Channel Management Settings......................................................................48

Stopping/Starting Automatic Channel Assignment .............................................................................48

Viewing Current Channel Assignments and Setting Locks ...............................................................49

Update Current Channel Settings (Manual Setting) ...........................................................................49

Viewing Last Proposed Set of Changes .................................................................................................50

Configuring Advanced Settings (Customizing and Scheduling Channel Plans)..............................50

Update Advanced Settings .......................................................................................................................51

Chapter 8: Wireless Neighborhood...............................................................................................................52

Navigating to Wireless Neighborhood ....................................................................................................52

Understanding Wireless Neighborhood Information ...........................................................................53

Viewing Wireless Neighborhood ..............................................................................................................53

Viewing Details for a Cluster Member.....................................................................................................55

Chapter 9: Configuring Security .......................................................................................................................57

Understanding Security Issues on Wireless Networks ........................................................................57

How Do I Know Which Security Mode to Use? ................................................................................57

Comparison of Security Modes for Key Management, Authentication and Encryption Algorithms

.......................................................................................................................................................................

58

Does Prohibiting the Broadcast SSID Enhance Security? ..................................................................62

Navigating to Security Settings...................................................................................................................62

Configuring Security Settings......................................................................................................................62

Broadcast SSID, Station Isolation, and Security Mode .......................................................................63

None (Plain-text) .......................................................................................................................................64

Static WEP...................................................................................................................................................65

IEEE 802.1x..................................................................................................................................................69

WPA Personal ............................................................................................................................................71

WPA Enterprise .........................................................................................................................................73

Updating Settings ..........................................................................................................................................77

Chapter 10: Maintenance and Monitoring ......................................................................................................78

Interfaces ........................................................................................................................................................78

8 AT-TQ2403 - Management Software - User's Guide

Ethernet (Wired) Settings...........................................................................................................................79

Wireless Settings...........................................................................................................................................79

Event Logs.......................................................................................................................................................79

Enabling or Disabling Persistence ..............................................................................................................80

Severity.........................................................................................................................................................80

Depth............................................................................................................................................................81

Log Relay Host for Kernel Messages........................................................................................................81

Understanding Remote Logging..............................................................................................................81

Setting Up the Log Relay Host................................................................................................................82

Enabling or Disabling the Log Relay Host on the Status > Events Page .........................................82

Update Settings...........................................................................................................................................82

Events Log....................................................................................................................................................83

Transmit/Receive Statistics .........................................................................................................................83

Associated Wireless Clients.......................................................................................................................84

Link Integrity Monitoring..........................................................................................................................85

Neighboring Access Points .........................................................................................................................85

Chapter 11: Setting the Ethernet (Wired) Interface ...................................................................................88

Navigating to Ethernet (Wired) Settings..................................................................................................88

Setting the DNS HostName .......................................................................................................................89

Enabling or Disabling Guest Access ..........................................................................................................90

Configuring an Internal LAN and a Guest Network ..........................................................................90

Enabling or Disabling Guest Access and Choosing a Virtual Network ..........................................90

Enabling or Disabling Virtual Wireless Networks on the AP..............................................................90

Enabling or Disabling Standby Power Saving ...........................................................................................91

Configuring LAN or Internal Interface Ethernet Settings.....................................................................91

Configuring Guest Interface Ethernet (Wired) Settings.......................................................................94

Updating Settings...........................................................................................................................................94

Chapter 12: Setting the Wireless Interface...................................................................................................95

Navigating to Wireless Settings .................................................................................................................95

Configuring 802.11d Regulatory Domain Support.................................................................................96

802.11h Regulatory Domain Control .......................................................................................................96

Configuring the Radio Interface.................................................................................................................97

Configuring "Internal" LAN Wireless Settings........................................................................................98

Configuring "Guest" Network Wireless Settings...................................................................................99

Updating Settings...........................................................................................................................................99

Chapter 13: Setting up Guest Access ........................................................................................................... 100

Understanding the Guest Interface........................................................................................................ 100

Configuring the Guest Interface ............................................................................................................. 101

Configuring a Guest Network on a Virtual LAN ............................................................................. 101

Configuring the Welcome Screen (Captive Portal)......................................................................... 101

Using the Guest Network as a Client ................................................................................................... 102

Deployment Example................................................................................................................................102

Chapter 14: Configuring Virtual Wireless Networks................................................................................ 104

Navigating to Virtual Wireless Network Settings............................................................................... 104

Configuring VLANs.................................................................................................................................... 105

Updating Settings........................................................................................................................................ 106

Chapter 15: Configuring Radio Settings...................................................................................................... 107

Understanding Radio Settings.................................................................................................................. 107

Navigating to Radio Settings .................................................................................................................... 107

Updating Settings........................................................................................................................................ 113

Chapter 16: Controlling Access by MAC Address Filtering .................................................................... 114

Navigating to MAC Filtering Settings..................................................................................................... 114

Using MAC Filtering .................................................................................................................................. 114

Updating Settings........................................................................................................................................ 115

AT-TQ2403 Management Software User's Guide 9

Chapter 17: Load Balancing ............................................................................................................................ 116

Understanding Load Balancing ................................................................................................................ 116

Identifying the Imbalance: Overworked or Under-utilized Access Points.................................. 116

Specifying Limits for Utilization and Client Associations................................................................ 116

Load Balancing and QoS........................................................................................................................ 117

Navigating to Load Balancing Settings ................................................................................................... 117

Configuring Load Balancing...................................................................................................................... 117

Updating Settings ....................................................................................................................................... 118

Chapter 18: Pre-Config Rogue AP ................................................................................................................ 119

Navigating to Pre-Config Rogue AP Settings ....................................................................................... 119

Using Pre-Config Rogue AP..................................................................................................................... 120

Updating Settings ....................................................................................................................................... 120

Chapter 19: Configuring Quality of Service (QoS).................................................................................... 121

Understanding QoS................................................................................................................................... 121

QoS and Load Balancing........................................................................................................................ 121

802.11e and WMM Standards Support .............................................................................................. 122

QoS Queues and Parameters to Coordinate Traffic Flow ............................................................ 122

802.1q and DSCP tags............................................................................................................................ 125

Navigating to QoS Settings...................................................................................................................... 126

Configuring QoS Queues......................................................................................................................... 126

Configuring AP EDCA Parameters ..................................................................................................... 127

Enabling/Disabling Wi-Fi Multimedia................................................................................................... 129

Configuring Station EDCA Parameters.............................................................................................. 129

Updating Settings ....................................................................................................................................... 131

Chapter 20: Configuring the Wireless Distribution System (WDS)...................................................... 132

Understanding the Wireless Distribution System .............................................................................. 132

Using WDS to Bridge Distant Wired LANs ..................................................................................... 132

Using WDS to Extend the Network Beyond the Wired Coverage Area.................................. 133

Security Considerations Related to WDS Links ................................................................................. 133

Understanding Static (WEP) Data Encryption.................................................................................. 133

Understanding WPA (PSK) Data Encryption.................................................................................... 134

Navigating to WDS Settings .................................................................................................................... 134

Configuring WDS Settings ....................................................................................................................... 135

Updating Settings ....................................................................................................................................... 137

Chapter 21: Configuring Simple Network Management Protocol (SNMP) on the AP...................... 138

Understanding SNMP................................................................................................................................138

Supported MIBs.......................................................................................................................................... 139

Navigating to SNMP Settings................................................................................................................... 140

Configuring SNMP Settings...................................................................................................................... 140

Configuring SNMP Traps....................................................................................................................... 142

Updating SNMP Settings........................................................................................................................... 143

Chapter 22: Enabling the Network Time Protocol Server ...................................................................... 144

Navigating to Time Protocol Settings.................................................................................................... 144

Enabling or Disabling a Network Time Protocol (NTP) Server...................................................... 145

Updating Settings ....................................................................................................................................... 145

Chapter 23: Backing up and Restoring a Configuration............................................................................ 146

Navigating to the Access Point’s Configuration Settings................................................................... 146

Resetting Factory Default Configuration .............................................................................................. 147

Saving the Current Configuration to a Backup File............................................................................ 147

Restoring the Configuration from a Previously Saved File................................................................ 148

Rebooting the Access Point..................................................................................................................... 148

Upgrading the Firmware........................................................................................................................... 149

Update....................................................................................................................................................... 150

Verifying the Firmware Upgrade.......................................................................................................... 150

10 AT-TQ2403 - Management Software - User's Guide

Appendix A: Security Settings on Wireless Clients and RADIUS Server Setup................................. 151

Network Infrastructure and Choosing Between Built-in or External Authentication Server... 152

Make Sure the Wireless Client Software is Up-to-Date................................................................... 152

Accessing the Microsoft Windows Wireless Client Security Settings ........................................... 153

Configuring a Client to Access an Unsecure Network (No Security) ........................................... 154

Configuring Static WEP Security on a Client....................................................................................... 155

Configuring IEEE 802.1x Security on a Client...................................................................................... 157

IEEE 802.1x Client Using EAP/PEAP ................................................................................................... 158

IEEE 802.1x Client Using EAP/TLS Certificate.................................................................................. 161

Configuring WPA/WPA2 Enterprise (RADIUS) Security on a Client ............................................ 165

WPA/WPA2 Enterprise (RADIUS) Client Using EAP-TLS Certificate........................................ 169

WPA/WPA2 Enterprise (RADIUS) Client Using EAP-SIM Certificate........................................ 172

Configuring WPA/WPA2 Personal (PSK) Security on a Client........................................................ 175

Configuring an External RADIUS Server to Recognize the AT-TQ2403 Wireless Access Point176

Obtaining a TLS-EAP Certificate for a Client.............................................................................................. 180

Configuring RADIUS Server for VLAN tags......................................................................................... 183

Configuring a RADIUS server .............................................................................................................. 183

Appendix B: Troubleshooting......................................................................................................................... 185

Wireless Distribution System (WDS) Problems and Solutions....................................................... 185

Cluster Recovery ....................................................................................................................................... 185

Reboot or Reset Access Point ............................................................................................................. 185

BootLoader Recovery............................................................................................................................... 186

Appendix C: Command Line Interface (CLI) for AP Configuration....................................................... 187

Comparison of Settings Configurable with the CLI and Web UI.................................................... 188

How to Access the CLI for an Access Point........................................................................................ 190

Telnet Connection to the AP............................................................................................................... 190

SSH Connection to the AP ................................................................................................................... 191

Quick View of Commands and How to Get Help.............................................................................. 192

Commands and Syntax........................................................................................................................... 192

Getting Help on Commands at the CLI ............................................................................................. 195

Ready to Get Started?............................................................................................................................ 197

Command Usage and Configuration Examples.................................................................................... 197

Understanding Interfaces as Presented in the CLI........................................................................... 197

Understanding CLI Validation of Configuration Settings................................................................ 198

Saving Configuration Changes .............................................................................................................. 198

Basic Settings............................................................................................................................................ 199

Access Point and Cluster Settings....................................................................................................... 203

User Accounts......................................................................................................................................... 204

Status ......................................................................................................................................................... 206

Ethernet (Wired) Interface................................................................................................................... 216

Wireless Interface................................................................................................................................... 220

Guest Access............................................................................................................................................ 220

Enable/Configure Guest Login Welcome Page................................................................................. 222

Configuring Virtual Wireless Networks (VWNs)............................................................................ 223

Example: Configuring VWNs................................................................................................................ 227

Security...................................................................................................................................................... 228

Radio Settings........................................................................................................................................... 244

MAC Filtering........................................................................................................................................... 253

Load Balancing ......................................................................................................................................... 255

Quality of Service.................................................................................................................................... 256

Wireless Distribution System (WDS) ................................................................................................ 262

Simple Network Management Protocol (SNMP) ............................................................................. 264

Time Protocol.......................................................................................................................................... 265

Pre-Config Rogue AP ............................................................................................................................. 266

Reboot the AP......................................................................................................................................... 266

Reset the AP to Factory Defaults........................................................................................................ 267

Upgrade the Firmware........................................................................................................................... 267

Keyboard Shortcuts and Tab Completion Help.................................................................................. 268

AT-TQ2403 Management Software User's Guide 11

Keyboard Shortcuts................................................................................................................................268

Tab Completion and Help..................................................................................................................... 269

CLI Classes and Properties Reference.................................................................................................. 272

Glossary .............................................................................................................................................................. 274

12 AT-TQ2403 - Management Software - User's Guide

FIGURES

Figure 1: Kick Start Welcome Dialog Box ............................................................................................................... 22

Figure 2: Kick Start Search Results Dialog Box....................................................................................................... 22

Figure 3: Administration Dialog Box ......................................................................................................................... 23

Figure 4: Log-in Dialog Box ......................................................................................................................................... 24

Figure 5: Basic Settings Page........................................................................................................................................ 24

Figure 6: Basic Settings Page........................................................................................................................................ 27

Figure 7: Basic Settings Page Step 1 ........................................................................................................................... 28

Figure 8: Basic Settings Step 2..................................................................................................................................... 29

Figure 9: Basic Settings Page Step 3 ........................................................................................................................... 30

Figure 10: Web User Interface Setting...................................................................................................................... 30

Figure 11: Access Points Setting Page........................................................................................................................ 32

Figure 12: Access Points Setting Page........................................................................................................................ 35

Figure 13: User Management Page ............................................................................................................................. 40

Figure 14: Cluster Settings Page Detail ..................................................................................................................... 41

Figure 15: Sessions Setting Page ................................................................................................................................. 43

Figure 16: Channel Management Setting Page ......................................................................................................... 46

Figure 17: Before Channel Management Enable...................................................................................................... 47

Figure 18: After Channel Management Enable......................................................................................................... 48

Figure 19: After Channel Management Enable......................................................................................................... 49

Figure 20: Wireless Neighborhood Page.................................................................................................................. 52

Figure 21: Cluster Member Setting Detail................................................................................................................ 55

Figure 22: Security Setting Page.................................................................................................................................. 62

Figure 23: Security Setting Page – None (Plain-text) Setting................................................................................ 64

Figure 24: Security Setting Page – Static WEP Setting ........................................................................................... 65

Figure 25: Security Setting Page – Static WEP Setting Example........................................................................... 68

Figure 26: Providing a Wireless Client with a WEP Key....................................................................................... 68

Figure 27: Example of Using Multiple WEP Keys and Transfer Key Index on Client Stations...................... 69

Figure 28: Security Setting Page – IEEE802.1x Setting Page.................................................................................. 70

Figure 29: Security Setting Page – WPA Personal Setting Page ........................................................................... 72

Figure 30: Security Setting Page – WPA Enterprise Setting Page........................................................................ 74

Figure 31: Status - Interfaces Page.............................................................................................................................. 78

Figure 32: Status - Event Page ..................................................................................................................................... 79

Figure 33: Persistence Setting Detail ......................................................................................................................... 80

Figure 34: Relay Log Host Setting Detail.................................................................................................................. 82

Figure 35: Transmit / Receive Page............................................................................................................................ 83

Figure 36: Client Associations Page ........................................................................................................................... 84

Figure 37: Neighboring Access Points Page ............................................................................................................. 85

AT-TQ2403 Management Software User's Guide 13

Figure 38: Ethernet (Wired) Settings Page............................................................................................................... 89

Figure 39: Wireless Settings Page............................................................................................................................... 95

Figure 40: Guest Login Setting Page ........................................................................................................................ 102

Figure 41: Guest Network Diagram Example ....................................................................................................... 103

Figure 42: VWN Page ................................................................................................................................................. 104

Figure 43: Radio Setting Page .................................................................................................................................... 108

Figure 44: MAC Filtering Setting Page..................................................................................................................... 114

Figure 45: Load Balancing Settings Page.................................................................................................................. 117

Figure 46: Pre-Config Rogue AP Page ..................................................................................................................... 119

Figure 47: Backoff timer Diagram............................................................................................................................. 124

Figure 48: 802.1q Tag Retrieving Flow Diagram ................................................................................................... 125

Figure 49: QoS Setting Page ...................................................................................................................................... 126

Figure 50: Bridge Distant Wired LAN by WDS Diagram................................................................................... 133

Figure 51: WDS Setting Page .................................................................................................................................... 134

Figure 52: SNMP Setting Diagram............................................................................................................................ 139

Figure 53: SNMP Setting Page ................................................................................................................................... 140

Figure 54: Time Setting Page ..................................................................................................................................... 144

Figure 55: Configuration Page................................................................................................................................... 146

Figure 56: Configuration Setting Detail................................................................................................................... 147

Figure 57: Configuration Setting Page ..................................................................................................................... 149

Figure 58: Upgrade Page............................................................................................................................................. 150

Figure 59: Wireless Network Connection Page................................................................................................... 153

Figure 60: Wireless Network Connection Properties Page............................................................................... 154

Figure 61: Wireless Network Connection Properties Setting – No Security Setting Association Tab.... 155

Figure 62: Security Setting Page – Static WEP Setting Page ............................................................................... 156

Figure 63: Client Side Security Setting - Static WEP Setting Detail Association Tab.................................... 156

Figure 64: Security Setting Page – IEEE802.1x Setting Page................................................................................ 158

Figure 65: Client Side Security Setting - IEEE802.1x Security Setting Detail .................................................. 159

Figure 66: Security Setting Page – IEEE802.1x Setting Page................................................................................ 162

Figure 67: Client Side Security Setting - IEEE802.1x Security Setting Detail .................................................. 163

Figure 68: Security Setting Page – WPA Enterprise Setting Page...................................................................... 166

Figure 69: User Management Page........................................................................................................................... 166

Figure 70: Client Side Security Setting – WPA Enterprise Setting Detail........................................................ 167

Figure 71: Security Setting Page – WPA Enterprise Setting Page...................................................................... 170

Figure 72: Client Side Security Setting – WPA Setting Detail............................................................................ 171

Figure 73: Security Setting Page – WPA Enterprise Setting Page...................................................................... 173

Figure 74: Client Side Security Setting – WPA Setting Detail............................................................................ 174

Figure 75: Security Setting Page – WPA Personal Setting Page......................................................................... 175

Figure 76: Client Side Security Setting – WPA Personal Setting Detail........................................................... 175

Figure 77: Radius Server – Internet Authentication Service .............................................................................. 178

14 AT-TQ2403 - Management Software - User's Guide

Figure 78: Radius Server Setting – Input New Radius Client ............................................................................. 178

Figure 79: Radius Server Setting – New Radius Client Setting .......................................................................... 179

Figure 80: Radius Server............................................................................................................................................. 179

Figure 81: Web Security Alert.................................................................................................................................. 180

Figure 82: Welcome Message from Certification Server.................................................................................... 181

Figure 83: Radius Server Log-in Page....................................................................................................................... 181

Figure 84: User Certification Installation – Request a Certification................................................................. 181

Figure 85: User Certification Installation – Identifying Information.................................................................. 182

Figure 86: User Certification Installation – Submit............................................................................................... 182

Figure 87: User Certification Installation – Certification Issued........................................................................ 183

Figure 88: User Certification Installation – Certification Installed.................................................................... 183

Figure 89: SSH Application Setting – PuTTY as an Eample................................................................................. 191

Figure 90: Kick Start Search Results Dialog Box...................................................................................................273

AT-TQ2403 Management Software User's Guide 15

Preface

Purpose of This Guide

This guide is intended for customers and/or network administrators who are responsible for installing

and maintaining the AT-TQ2403 Management Software.

How This Guide is Organized

This guide contains instructions on how to install AT-TQ2403 Management Software

.

This preface

contains the following sections

?

Chapter 1 Overview, describes the features, LEDs and ports on the

equipment.

Chapter 2 Installation, describes how to install and configure the e

quipment.

Chapter 3 Troubleshooting, describes what you should do when the device does not operate

correctly.

Document Conventions

This guide uses several conventions that you should become familiar with before you begin to install the

product:

 Note

A note provides additional information. Please go to the Allied Telesis website

http://www.alliedtelesis.com for the translated safety statement in your language.

Warning

A warning indicates that performing or omitting a specific action may result in bodily injury.

Caution

A caution indicates that performing or omitting a specific action may result in equipment

damage or loss of data.

16 AT-TQ2403 - Management Software - User's Guide

Contacting Allied Telesis

This section provides Allied Telesis contact information for technical support as well as sales and

corporate information.

Online Support

You can request technical support online by accessing the Allied Telesis Knowledge Base:

http://www.alliedtelesis.com/support/kb.aspx

. You can use the Knowledge Base to submit

questions to our technical support staff and review answers to previously asked questions.

Email and Telephone Support

For Technical Support via email or telephone, refer to the Allied Telesis web site at

http://www.alliedtelesis.com

. Select your country from the list on the website and then select the

appropriate tab.

Warranty

For product registration and warranty conditions please visit Allied Telesis website:

http://www.alliedtelesis.com/support/warranty/

.

Where to Find Web-based Guides

The installation and user guides for all Allied Telesis products are available for viewing in portable

document format (PDF) from our website at http://www.alliedtelesis.com

.

Returning Products

Products for return or repair must first be assigned a return materials authorization (RMA) number. A

product sent to Allied Telesis without an RMA number will be returned to the sender at the sender’s

expense. For instructions on how to obtain an RMA number, go to the Support section on our website

at http://www.alliedtelesis.com

.

Sales or Corporate Information

You can contact Allied Telesis for sales or corporate information through our web site at

http://www.alliedtelesis.com

.

Management Software Updates

New releases of management software for our managed products are available from the following

Internet sites:

 Allied Telesis web site: http://www.alliedtelesis.com

 Allied Telesis FTP server: ftp://ftp.alliedtelesis.com

If the FTP server prompts you to log on, enter “anonymous” as the user name and your email address as

the password.

Tell Us What You Think

If you have any comments or suggestions on how we might improve this or other Allied Telesis

documents, please contact us at http://www.alliedtelesis.com

.

AT-TQ2403 Management Software User's Guide 17

Chapter 1: Preparing to Set Up the AT-TQ2403

Wireless Access Point

Before you plug in and boot a new AT-TQ2403 Management Software, review the following sections for

a quick check of required hardware components, software, client configurations, and compatibility issues.

Make sure you have everything you need ready to go for a successful launch and test of your new (or

extended) wireless network.

This chapter contains the following sections:

 Setting Up the Administrator’s Computer

 Setting Up the Wireless Client Computers

 Understanding Dynamic and Static IP Addressing on the AT-TQ2403 Management Software

Setting Up the Administrator’s Computer

You configure and administer AT-TQ2403 Management Software with the Kick Start utility (which you

run from the CD) and through a web-based user interface (UI). In order to successfully start the

management software, the administrator’s computer must be set up with the following hardware and

software components:

 Ethernet connection

The computer used to configure the first AT-TQ2403 Management Software with Kick Start must be

connected to the access point, either directly or through a hub, by an Ethernet cable.

 Wireless Connection to the Network

After you initially configure and launch the first AT-TQ2403 Management Software, you can make

fur

ther configuration changes through the management software using a wireless connection to the

“internal” network. This configuration includes:

 Portable or built-in Wi-Fi client adapter that supports one or more of the IEEE 802.11

modes in which you plan to run the access point. (IEEE 802.11a, 802.11b, 802.11g, and

802.11a Turbo modes are supported.)

 Wireless client software such as Microsoft Windows XP or Funk Odyssey wireless client

configured to associate with the AT-TQ2403 Management Software.

For more details about the Wi-Fi client setup, see “Setting Up the Wireless Client Computers

”.

 Web browser/operating system

Configuration and administration of the AT-TQ2403 Management Software is provided through a

Web-based user interface hosted on the access point. Allied Telesis recommends using one of the

following supported web browsers to access the AT-TQ2403 Management Software:

 Microsoft Internet Explorer version 5.5 or greater (with up-to-date patch level for either

major version) on Microsoft Windows XP or Microsoft Windows 2000

 Netscape Mozilla 1.7.x on Redhat Linux version 2.4

18 AT-TQ2403 - Management Software - User's Guide

The administration web browser must have JavaScript enabled to support the interactive features of

the administration interface. It must also support HTTP uploads to use the firmware upgrade feature.

 AT-TQ2403 Software and Documentation CD

This CD contains the Kick Start utility and the software documentation. You can run the Kick Start

utility on Windows (only Windows 2000, XP, Vista, 2000 Server and 2003 Server) laptop or

computer that is connected to the access point (via wired or wireless connection). It detects

AT-TQ2403 Management Software on the network. The wizard steps you through initial

configuration of new access points, and provides a link to the AT-TQ2403 Management Software

where you finish the basic setup process in a step-by-step mode and launch the network.

For more about using Kick Start, see “Running Kick Start to Find Access Points on the

Network”.

 CD-ROM Drive

The administrator’s computer must have a CD-ROM drive to run the Kick Start application on the

AT-TQ2403 Software and Documentation CD.

 Security Settings

Ensure that security is disabled on the wireless client used to initially configure the access point.

Setting Up the Wireless Client Computers

The AT-TQ2403 Management Software provides wireless access to any client with a properly configured

Wi-Fi client adapter for the 802.11 mode in which the access point is running.

Multiple client operating systems are supported. Clients can be laptops or desktops, personal digital

assistants (PDAs), or any other hand-held, portable or stationary device equipped with a Wi-Fi adapter

and supporting drivers.

In order to connect to the access point, wireless clients need the following software and hardware:

 Wi-Fi Client Adapter

Portable or built-in Wi-Fi client adapter that supports one or more of the IEEE 802.11 modes in

which you plan to run the access point. (IEEE 802.11a, 802.11b, 802.11g, and 802.11a Turbo modes

are supported.)

Wi-Fi client adapters vary considerably. The adapter can be a PC card built in to the client device, a

portable PCMCIA or PCI card (types of NICs), or an external device such as a USB or Ethernet

adapter that you connect to the client by means of a cable.

The AT-TQ2403 Wireless Access Point supports 802.11a/g modes. The fundamental requirement

for clients is that they all have configured adapters that match the 802.11 a/g mode.

 Wireless Client Software

Client software such as Microsoft Windows Supplicant or Funk Odyssey wireless client configured to

associate with the AT-TQ2403 Management Software.

 Client Security Settings

Security should be disabled on the client used to do initial configuration of the access point.

If the Security mode on the access point is set to anything other than plain-text, wireless clients will

need to set a profile to the authentication mode used by the access point and provide a valid

AT-TQ2403 Management Software User's Guide 19

username and password, certificate, or similar user identity proof. Security modes are Static WEP,

IEEE 802.1x, WPA with RADIUS server, and WPA-PSK.

For information on configuring security on the access point, see “Configuring Security

”.

Understanding Dynamic and Static IP Addressing on the

AT-TQ2403 Management Software

AT-TQ2403 Management Software are designed to auto-configure, with very little setup required for the

first access point and no configuration required for additional access points subsequently joining a

pre-configured cluster.

How Does the Access Point Obtain an IP Address at Start-up?

When you deploy the access point, it looks for a network DHCP server and, if it finds one, obtains an IP

address from the DHCP server. If no DHCP server is found on the network, the access point will

continue to use its default static IP address (192.168.1.230) until you reassign it a new static IP address

(and specify a static IP addressing policy) or until a DHCP server is brought online.

When you run Kick Start, it discovers the AT-TQ2403 Management Software on the network and lists

their IP addresses and MAC addresses. Kick Start also provides a link to the administration web pages of

each access point using the IP address in the URL. (For more information about the Kick Start utility, see

“Running Kick Start to Find Access Points on the Network

”.)

Dynamic IP Addressing

The AT-TQ2403 Management Software generally expects that a DHCP server is running on the network

where the access point is deployed. Most home and small business networks already have DHCP service

provided either via a gateway device or a centralized server. However, if no DHCP server is present on

the internal network, the access point will use the default static IP address for first time startup.

Similarly, wireless clients and other network devices (such as printers) will receive their IP addresses

from the DHCP server, if there is one. If no DHCP server is present on the network, you must manually

assign static IP addresses to your wireless clients and other network devices.

The Guest network must have a DHCP sever.

Static IP Addressing

The AT-TQ2403 Management Software is shipped with a default static IP address of 192.168.1.230. If no

DHCP server is found on the network, the access point retains this static IP address at first-time startup.

After the access point starts up, you have the option of specifying a static IP addressing policy on

AT-TQ2403 Management Software and assigning static IP addresses to access points on the internal

network using the management software. (See information about the Connection Type field and related

fields in “Setting the Ethernet (Wired) Interface

”.)

Caution: If you do not have a DHCP server on the in

ternal network and do not plan to use

one, the first thing you must do after bringing up the access point is change the Connection

Type from DHCP to Static IP. You can either assign a new Static IP address to the access point

or continue using the default address. Allied Telesis recommends assigning a new Static IP

address so that if later you bring up another AT-TQ2403 Management Software on the same

network, the IP address for each access point will be unique.

20 AT-TQ2403 - Management Software - User's Guide

Recovering an IP Address

If you experience trouble communicating with the access point, you can recover a static IP address by

resetting the access point configuration to the factory defaults (see “Backing up and Restoring a

Configuration”), or you can get a dynamically assigned address by connecting the access point to a

network that has DHCP.

Page is loading ...

Allied Telesis AT-TQ2403 User manual

Allied Telesis AT-TQ2403 User manual

Related papers

Other documents