Copyright © 2011, Juniper Networks, Inc.
11
APPLICATION NOTE - Configuring and deploying the AX411 Wireless Access Point
set wlan access-point AP-2 mac-address 00:12:cf:c5:4b:40
set wlan access-point AP-2 access-point-options country US
set wlan access-point AP-2 radio 1 virtual-access-point 0 ssid WifiNet
set wlan access-point AP-2 radio 1 virtual-access-point 0 security none
set wlan access-point AP-2 radio 2 virtual-access-point 0 ssid WifiNet
#AP-3
set wlan access-point AP-3 mac-address 00:12:cf:c5:4c:40
set wlan access-point AP-3 access-point-options country US
set wlan access-point AP-3 radio 1 virtual-access-point 0 ssid WifiNet
set wlan access-point AP-3 radio 1 virtual-access-point 0 security none
set wlan access-point AP-3 radio 2 virtual-access-point 0 ssid WifiNet
Segregating user and Management Traffic
In this example, VLAN tags are used to separate management traffic from user traffic. This configuration can be
applied to both L2 and L3 deployment modes. from this example on, only the L2 mode will be shown (as it is the most
popular method) but it should be apparent from our previous example how to configure each scenario in L3 mode.
Figure 5: Segregating user and management traffic
INTERNET
OFFICE
vlan.1 (management)
10.0.0.1/24
vlan.2 (trust)
192.168.1.1/24-VLANID 2
Client
AP-1
00:de:ad:10:75:00
AP-2
00:de:ad:10:76:00
AP-3
00:de:ad:10:77:00
CorpNet SSID
A single broadcast SSID is advertised
SRX
Series
ge-0/0/0.0
(untrust)
198.0.0.1/24
#DHCP Server config
set system services dhcp pool name-server 4.2.2.2
#This pool is used by the management vlan
set system services dhcp pool 192.168.1.0/24 address-range low 192.168.1.2
set system services dhcp pool 192.168.1.0/24 address-range high 192.168.1.254
set system services dhcp pool 192.168.1.0/24 router 192.168.1.1
#This pool is used by the WifiNet vlan
set system services dhcp pool 192.168.2.0/24 address-range low 192.168.2.2
set system services dhcp pool 192.168.2.0/24 address-range high 192.168.2.254
set system services dhcp pool 192.168.2.0/24 router 192.168.2.1
#Interface and VLAN Configuration.
#Since all ports connected to an AP will have identical configs we will make use
of an interface ranges.
set interfaces interface-range APs member ge-0/0/1
set interfaces interface-range APs member-range fe-0/0/2 to fe-0/0/3
set interfaces interface-range APs unit 0 family ethernet-switching port-mode
trunk
set interfaces interface-range APs unit 0 family ethernet-switching vlan members
default
set interfaces interface-range APs unit 0 family ethernet-switching vlan members
WifiNet
