Allied Telesis TQ6000 GEN2 Скачать руководство пользователя страница 121

Страница: 121 / 180

Chapter 7: Virtual Access Points

121

Configuring MAC Access Control

The access point has the MAC Access Control feature to add security to

VAPs by authenticating the MAC addresses of wireless clients. The

access point forwards traffic from only approved addresses.
You have the following options for MAC Access Control:



“Disabling MAC Access Control” on page 121



“Authenticating Using Both MAC Address List and RADIUS” on

page 122



“Authenticating Using RADIUS” on page 125



“Authenticating Using MAC Address List” on page 127



“Application Proxy” on page 128

Disabling MAC

Access Control

To disable MAC Access Control of the on-board MAC address list and

external RADIUS server, perform the following procedure:

1. Select

Settings

VAP / Security

from the main menu.

2. Select

Radio1

Radio2

from the sub-menu. The default is Radio1.

You can configure only one radio at a time.

3. Select a VAP to configure from the next sub-menu. The default is

VAP0.

Note

You can configure multiple VAPs without saving each VAP

configuration page. You can save multiple VAP configurations all at

once by clicking the

SAVE & APPLY

button.

4. Select the

MAC Access Control

tab. See Figure 40.

Figure 40. MAC Access Control Tab

Содержание TQ6000 GEN2

Страница 1: ...Q6000 GEN2 WIRELESS ACCESS POINTS TQ6702 GEN2 TQm6702 GEN2 802 11ax Dual radio 5G 2 4GHz 8x8 4x4 Access Points TQ6602 GEN2 TQm6602 GEN2 802 11ax Dual radio 5G 2 4GHz 4x4 4x4 Access Points Management Software User s Guide ...

Страница 2: ...licensed under the New BSD License Copyright c 1984 2000 by Carnegie Mellon University All rights reserved Copyright c 2002 2003 by Matt Johnston All rights reserved Copyright c 1995 by Tatu Ylonen ylo cs hut fi All rights reserved Copyright 1997 2003 by Simon Tatham Portions copyright by Robert de Bath Joris van Rantwijk Delian Delchev Andreas Schultz Jeroen Massar Wez Furlong Nicolas Barry Justi...

Страница 3: ...n this document without prior written notice The information provided herein is subject to change without notice In no event shall Allied Telesis Inc be liable for any incidental special indirect or consequential damages whatsoever including but not limited to lost profits arising out of or related to this manual or the information contained herein even if Allied Telesis Inc has been advised of kn...

Страница 4: ......

Страница 5: ... Displaying Basic System Information 34 Displaying VAP and LAN Port Statistics 37 Displaying the System Log 39 Displaying Neighbor AP 41 Displaying Associated Clients 42 Chapter 3 System Settings 43 Assigning a Dynamic IP Address from a DHCP Server 44 Assigning a Static IPv4 Address to the Access Point 47 Setting the Date and Time with the Network Time Protocol NTP 50 Manually Setting the Date and...

Страница 6: ...ing MAC Access Control 121 Authenticating Using Both MAC Address List and RADIUS 122 Authenticating Using RADIUS 125 Authenticating Using MAC Address List 127 Application Proxy 128 Configuring Captive Portal 129 Captive Portal Options 129 No Captive Portal 130 No Authentication and Web Page Stored in the Access Point 131 Delegating a Proxy Sever to Interact with Wireless Clients 134 RADIUS Server ...

Страница 7: ...ion EDCA Parameters 164 Chapter 9 Maintenance 167 Downloading the Configuration of the Access Point to Your Computer 168 Restoring a Configuration to the Access Point 169 Restoring the Default Settings to the Access Point 170 Uploading New Management Software to the Access Point 171 Rebooting the Access Point 173 Collecting Technical Support Information to a File 174 Chapter 10 Account Menu 177 Ch...

Страница 8: ...TQ6000 GEN2 Access Points User s Guide 8 ...

Страница 9: ... Figure 24 LAN2 Port in Cascade Mode with a Networking Device 72 Figure 25 LAN Settings Window LAN2 Port Configuration 73 Figure 26 Status of LAN1 Port Window 75 Figure 27 Basic Radio Settings Window 78 Figure 28 Advanced Radio Settings Window 82 Figure 29 Radio1 Status Window 87 Figure 30 Radio2 Status Window 87 Figure 31 WDS Bridge 94 Figure 32 Example of Radio and Channel Assignments in a WDS B...

Страница 10: ...l RADIUS and Authentication Page Proxy 141 Figure 50 Captive Portal Terms of Service Page Sample 143 Figure 51 Captive Portal Login Page Sample 144 Figure 52 Fast Roaming Window 147 Figure 53 Advanced VAP Settings Window 150 Figure 54 MAC Address List Window 153 Figure 55 QoS Window 159 Figure 56 Configuration Window 168 Figure 57 Upgrade Window 172 Figure 58 Reboot Window 173 Figure 59 Support Wi...

Страница 11: ...1 or LAN2 Window 75 Table 16 Basic Radio Settings Window 79 Table 17 Advanced Radio Settings Window 82 Table 18 Radio Status Window 88 Table 19 Virtual Access Point Tab 106 Table 20 Static WEP Security Tab 112 Table 21 WPA Personal Security Tab 114 Table 22 WPA Enterprise Security Tab 117 Table 23 MAC Address List External RADIUS Window 123 Table 24 Captive Portal Click Through 132 Table 25 Captiv...

Страница 12: ...TQ6000 GEN2 Access Points User s Guide 12 ...

Страница 13: ...6000 GEN2 access points with the web browser management interface The models included in this manual are TQ6702 GEN2 TQm6702 GEN2 TQ6602 GEN2 TQm6602 GEN2 This preface contains the following sections Safety Symbols Used in this Document on page 14 Contacting Allied Telesis on page 15 ...

Страница 14: ...nal information Caution Cautions inform you that performing or omitting a specific action may result in equipment damage or loss of data Warning Warnings inform you that performing or omitting a specific action may result in bodily injury Warning Laser warnings inform you that an eye or skin hazard exists due to the presence of a Class 1 laser device ...

Страница 15: ...Return Merchandise Authorizations RMAs and contact Allied Telesis technical experts Software Downloads Download the latest software releases for your product Licensing Register and obtain your License key to activate your product Product Documents View the most recent installation guides user guides software release notes white papers and data sheets for your product Warranty View a list of produc...

Страница 16: ...TQ6000 GEN2 Access Points User s Guide 16 ...

Страница 17: ... on page 18 Management Tools on page 21 Starting the First Management Session on page 23 Starting a Management Session on page 26 Management Windows on page 28 Saving and Applying Your Changes on page 30 Ending Management Sessions on page 31 What to Configure First on page 32 ...

Страница 18: ...AN2 ports and power Kensington lock port Ceiling wall or table installation Installing on the Cisco or Fortimet mounting brackets using BRKT CONV AP1 converter bracket One Console RS232 RJ 45 port for factory use only Features of the 2 4GHz and 5GHz radios include IEEE802 11a b g n ac ax Automatic channel selection Band steering Wi Fi multimedia WMM for prioritizing traffic Features of system powe...

Страница 19: ... r MAC address client filtering with the on board filter MAC address client filtering with RADIUS servers Wireless Distribution System WDS bridges Only one to one WDS connection is supported Quick Response codes for VAPs System log Syslog client SNMPv1 v2c and v3 Software features with Vista Manager EX and the Autonomous Wave Controller AWC plug in include AWC Lite Combination use with Cell AWC SC...

Страница 20: ... Access Points User s Guide 20 WDS WDS links 1 WDS HOPs 1 AWC Access points managed by AWC 3 000 Client Authentication MAC address list 2 048 Table 1 Maximum Supported Numbers Continued Feature Item Maximum Number ...

Страница 21: ...n 3 9 0 or later and the Autonomous Wave Control AWC plug in Configuring and monitoring large numbers of devices is simplified with AWC because you can add multiple devices to management groups and manage them as one unit The application can also monitor the operations of the access points and automatically adjust operating properties to optimize the performance of your wireless network You cannot...

Страница 22: ...d SNMPv3 to view the parameter settings of the access point The MIB is available from Allied Telesis website For instructions on how to configure the access point for SNMP see Configuring SNMPv1 SNMPv2 and SNMPv3 on page 57 Note You cannot change the parameter settings on the access point with SNMP ...

Страница 23: ...o supply power to the access point you can connect your computer and access point directly with an Ethernet cable This procedure requires changing the IP address on your computer to make it a member of the same subnet as the default IP address on the access point Connecting the Access Point to a Network The first management session can also be performed while the device is connected to your networ...

Страница 24: ...ent Session without a DHCP Server 1 Connect one end of a network cable to the LAN1 port on the access point and the other end to the Ethernet network port on your computer 2 Change the IP address on your computer to 192 168 1 n where n is a number from 1 to 254 but not 230 See the documentation that accompanies your computer for instructions on how to set the IP address 3 Set the subnet mask on yo...

Страница 25: ...sting the VLANS and their port assignments For example if the access point is connected to a port that is a member of the Sales VLAN your computer must be connected to a port that is also a member of that VLAN If your network is small and does not have VLANs or routers you can connect your computer to any port on the Ethernet switch 3 Change the IP address on your computer to 192 168 1 n where n i...

Страница 26: ...point is using its default address 192 168 1 230 see Starting the First Management Session on page 23 for instructions To start a management session on the access point perform the following procedure 1 Open the web browser on your management workstation 2 Enter the IP address of the access point in the URL field of the web browser Note Precede the IP address with HTTPS if the access point is alre...

Страница 27: ... If this occurs select an appropriate option to continue to the web site To avoid the message in future management sessions make the web site a trusted site in your web browser 3 Enter the user name and password for the unit The default values are User name manager Password friend Note The user name and password are case sensitive 4 Click the Login button ...

Страница 28: ...ified in Figure 2 Figure 2 Sample Management Window Main Menu The main menu is displayed on the left side of the windows and consists of the following selections Monitoring Settings Maintenance Account Clicking a main menu option expands it to display the sub items The Monitoring option is expanded by default at the start of management sessions Main Menu Navigator Sub menu Content ...

Страница 29: ... 3 Clicking the main menu button displays the menu over the content window The menu is hidden again after you make a menu selection Figure 3 Main Menu Button Navigation The Navigator shows the menu path of the current window Sub menu Sub menus are located across the tops of many management windows Content This is the main body of the windows It displays parameters for you to configure or status or...

Страница 30: ... configuring the parameters in a management window The button is located in the bottom of the windows When you click the button the access point immediately activates your changes and saves them in its configuration file If you change the parameter settings in a window and navigate to a different window without clicking the button the access point discards your changes ...

Страница 31: ...ng Started 31 Ending Management Sessions You should always log off when you are finished managing the unit To log off select Account Logout Click OK at the confirmation prompt For added security close your web browser ...

Страница 32: ...ng the country setting disables the radios The procedure is disruptive to network operations if the unit is actively forwarding client traffic 2 Change the manager s login name and password Refer to Changing the Manager s Login Name and Password on page 178 3 If you prefer to use HTTPS management sessions perform Changing the Manager s Login Name and Password on page 178 4 Set the language of the ...

Страница 33: ... has the following procedures Displaying Basic System Information on page 34 Displaying VAP and LAN Port Statistics on page 37 Displaying the System Log on page 39 Displaying Neighbor AP on page 41 Displaying Associated Clients on page 42 ...

Страница 34: ... Monitoring Status from the main menu 2 Select System from the sub menu This is the default window Refer to Figure 4 Figure 4 System Window The fields are defined in Table 2 Table 2 System Window Item Name Description Model Displays the product s model name Firmware Version Displays the version number of the management software on the access point Firmware Build Date Displays the date and time whe...

Страница 35: ...t change the MAC addresses IP Address Displays the IP address of the access point To set this value refer to Assigning a Dynamic IP Address from a DHCP Server on page 44 or Assigning a Static IPv4 Address to the Access Point on page 47 Subnet Mask Displays the subnet mask To set this value refer to Assigning a Dynamic IP Address from a DHCP Server on page 44 or Assigning a Static IPv4 Address to t...

Страница 36: ...ddress from a DHCP Server on page 44 or Assigning a Static IPv4 Address to the Access Point on page 47 Management VLAN ID Displays the management VLAN ID The VLAN ID is 1 Open Source License Information When you click the View button displays open source license information Table 2 System Window Continued Item Name Description ...

Страница 37: ...oring 37 Displaying VAP and LAN Port Statistics To view VAP and LAN port status and statistics select Monitoring Statistics window See Figure 5 Figure 5 Statistics Window The columns are defined in Table 3 on page 38 ...

Страница 38: ...tus Displays the status up or down of the interface Packets Received Displays the total number of packets received on the interface Bytes Received Displays the total number of bytes received on the interface Packets Sent Displays the total number of packets transmitted on the interface Bytes Sent Displays the total number of bytes transmitted on the interface ...

Страница 39: ...in the syslog client Refer to Sending Log Messages to a Syslog Server on page 62 Note All messages are deleted from the log when the access point is reset or powered off To permanently save the messages refer to Sending Log Messages to a Syslog Server on page 62 To view the system log select Monitoring Log Figure 6 on page 40 is an example Table 4 Message Severity Levels Severity Level Description...

Страница 40: ...TQ6000 GEN2 Access Points User s Guide 40 Figure 6 Log Window for Event Messages ...

Страница 41: ...bor AP Window Column Description MAC Address Displays the MAC address of the detected access point Detected Channel Displays the channel of the detected access point SSID Displays the network name SSID of the detected access point Type Displays the mode of the detected access point AP or Adhoc Signal Displays the intensity of the received signal in a four level bar graph icon Pointing to the icon ...

Страница 42: ...ted clients IPv4 address Displays the IPv4 address of associated clients It is displayed when IPv4 is used NetBIOS name Displays the NetBIOS name of associated clients It displays n a when NetBIOS name is not acquired or during the acquisition SSID Displays the network name SSIDs to which the client is connected Channel Displays the radio channel the client is using Signal dBm Displays the strengt...

Страница 43: ...etwork Time Protocol NTP on page 50 Manually Setting the Date and Time on page 53 Configuring the Web Browser Interface on page 55 Configuring SNMPv1 SNMPv2 and SNMPv3 on page 57 Displaying the System Log on page 61 Sending Log Messages to a Syslog Server on page 62 Enabling or Disabling the LEDs on page 64 Configuring PoE Negotiation with Link Layer Discovery Protocol LLDP on page 65 Enabling or ...

Страница 44: ... Address to the Access Point on page 47 Note Changing the IP address of the access point might interrupt your management session To resume managing the device start another session using the access point s new IP address Note The default setting for the DHCP client is enabled You only need to perform this procedure if you disabled the client and assigned the device a static IP address but now want...

Страница 45: ...T TQ6602 GEN2 AT TQm6602 GEN2 If you want the DHCP server to supply the hostname enable the Get Hostname from DHCP Server option in this window Connection Type Select DHCP This is the default The Static IP selection is explained in Assigning a Static IPv4 Address to the Access Point on page 47 Get Hostname from DHCP Select one of the following options Enabled When the DHCP server assigns an IP add...

Страница 46: ...al IP Address for Captive Portal Assigns a virtual IP address for Captive Portal Wireless clients use the virtual address instead of the device s actual IP address to log on to captive portals Using a virtual address increases the security of your wireless network The device supports one virtual IP address Note This field is not supported with Wireless Distribution System WDS bridges This field is...

Страница 47: ...tion from a DHCP server on your network refer to Assigning a Dynamic IP Address from a DHCP Server on page 44 Note Changing the IP address of the access point might interrupt your management session To resume managing the device start a new session using the access point s new IP address To assign a static IP address to the device perform the following procedure 1 Select Settings System from the m...

Страница 48: ...t can have only one hostname The default is one of the following depending upon the model of your access point AT TQ6702 GEN2 AT TQm6702 GEN2 AT TQ6602 GEN2 AT TQm6602 GEN2 Connection Type Select Static IP Static IP Address Enter the new IP address for the access point The device can have only one IP address The default is 192 168 1 230 Subnet Mask Enter the subnet mask for the IP address The defa...

Страница 49: ...se the virtual address instead of the device s actual IP address to log on to captive portals Using a virtual address increases the security of your wireless network The device supports one virtual IP address Note This option is not supported with Wireless Distribution System WDS bridges This field is optional The default value is NULL Table 8 Network Static IP Selection Window Continued Item Name...

Страница 50: ...nly one server The access point must have an IPv4 address and subnet mask The access point must also have a default gateway address if the NTP server is on a different subnet or network The default gateway must specify the first router hop to the subnet or network of the SNTP server The client is compatible with SNTP servers It is not compatible with NTP servers To configure the NTP client perform...

Страница 51: ...e access point observes daylight savings time click the check box for this option The window displays the fields in Figure 12 on page 52 If the area does not observe Daylight Savings time leave the check box empty Start Daylight Saving Use the pull down menus to set the date and time for the start of Daylight Savings Time End Daylight Saving Use the pull down menus to set the date and time for the...

Страница 52: ...lified domain name FQDN example ntp mydomain com Here are the guidelines You can specify only one server The first character must be a letter or number It cannot be a special character The last character cannot be a hyphen or period The factory default is no server Observe these guidelines when using an FQDN to identify the server It cannot start or end with a hyphen Domain labels can have a maxim...

Страница 53: ...y are returned to their default values Jan 1 00 00 00 2018 when the device is reset or powered off Note Allied Telesis recommends using an SNTP server to set the date and time For instructions refer to Setting the Date and Time with the Network Time Protocol NTP on page 50 To manually set the date and time perform the following procedure 1 Select Settings System from the main menu 2 Select Time fr...

Страница 54: ...vings time click the dialog box for the Adjust Time for Daylight Savings parameter The window displays the fields in Figure 12 on page 52 If the area does not observe Daylight Savings time leave the check box empty Start Daylight Saving Use the pull down menus to set the date and time for the start of Daylight Savings Time End Daylight Saving Use the pull down menus to set the date and time for th...

Страница 55: ...t Generate a self signed HTTPS certificate Note Do not disable both HTTP and HTTPS Otherwise you will not be able to manage the access point with a web browser Note HTTP management is non secure meaning the packets exchanged between the access point and your workstation are sent in clear text leaving them vulnerable to snooping For this reason Allied Telesis recommends using HTTPS to manage the ac...

Страница 56: ...ctions The default is five sessions The access point blocks new management session after reaching the maximum number of sessions Session Timeout Specify the time in minutes when the access point automatically ends inactive sessions The range is 1 to 1440 minutes 1440 minutes 1 day The default is five minutes HTTP Status Enable or disable HTTP management The default is enabled HTTP Port Specify the...

Страница 57: ...or SNMP management For more information see Assigning a Dynamic IP Address from a DHCP Server on page 44 or Assigning a Static IPv4 Address to the Access Point on page 47 To enable or disable SNMP perform the following procedure 1 Select Settings System from the main menu 2 Select SNMP from the sub menu Refer to Figure 15 Figure 15 SNMP Window 3 Select Disabled or Enabled in the Status field To co...

Страница 58: ...lained here Enabled Select this option to activate the SNMP agent and trap settings This allows you to use SNMP to view the parameter settings on the access point It also allows the access point to send traps You have to enable SNMP to configure the settings in this window and the Trap Settings window Disabled Select this option to disable SNMP and the trap settings This is the default setting Ver...

Страница 59: ...P to specific subnets or individual workstations The options are Enabled Restrict the use of SNMP on the access point to only the management stations specified in the Only allow from the designated hosts or subnets field Disabled Permit any workstation to use the community string to view the device This is the default setting Username SNMPv3 only Specify a user name for SNMP Password SNMPv3 only S...

Страница 60: ...he same subnet for example 192 168 1 0 24 You can specify a workstation by its Fully Qualified Domain Name FQDN The default is blank Observe these guidelines when using an FQDN to specify the workstation It cannot start or end with a hyphen Domain labels can have a maximum of 63 characters An FQDN can have up to 253 characters System Name Specify the SNMP system name of the access point The defaul...

Страница 61: ...Chapter 3 System Settings 61 Displaying the System Log See Displaying the System Log on page 39 ...

Страница 62: ...ient Field Description Severity Select the severity of messages the access point is to display in the log file and transmit to the syslog server The severity levels are listed in Table 4 on page 39 Here are the guidelines You can specify only one severity level The severity level applies to both the messages displayed in the log file and transmitted to a syslog server The selected level includes t...

Страница 63: ...the IPv4 address for example 10 10 1 200 or host name FQDN of the syslog server Here are the guidelines You can enter only one host Do not include a subnet mask with IP address The factory default is blank Observe these guidelines when using an FQDN to identify the host It cannot start or end with a hyphen Domain labels can have a maximum of 63 characters An FQDN can have up to 253 characters Port...

Страница 64: ...default setting for the LEDs is on To turn the LEDs on or off perform the following procedure 1 Select Settings System in the main menu 2 Select LED in the sub menu Refer to Figure 18 F Figure 18 LED Window 3 From the Eco Mode pull down menu select one of the following Enabled The Eco Mode is enabled The LEDs are off Disabled The Eco Mode is disabled The LEDs are on This is the default setting 4 C...

Страница 65: ...ot forwarded on to other devices on the network because LLDP is a on way protocol That is the information transmitted in LLDP advertisements flows in one direction only from one device to its neighbors LLDP transmits information in packets called LLDP Data Units LLDPDUs An LLDPDU consists of a set of Type Length Value elements TLV each containing a particular type of information about the device o...

Страница 66: ...f the following from the PoE Negotiation Enabled Enables PoE negotiation The access point transmits the Extended Power Management TLV on the LAN1 port Disabled Disables PoE negotiation This is the default setting 4 Click the SAVE APPLY button to save and update the configuration ...

Страница 67: ...s network Note If you disable the Reset button be sure not to forget the manager account password Otherwise you will not be able to manage the unit with the web browser interface To enable or disable the Reset button perform the following procedure 1 Select Settings System from the main menu 2 Select Hardware from the sub menu Refer to Figure 20 Figure 20 Hardware Window 3 From the ResetButton Ena...

Страница 68: ...TQ6000 GEN2 Access Points User s Guide 68 ...

Страница 69: ...69 Chapter 4 LAN Port This chapter describes the following procedures Enabling the Management VLAN Tag on page 70 Displaying the Status of LAN Port on page 75 ...

Страница 70: ...VLAN 1 When the management VLAN Tag is enabled the access point accepts only tagged packets and discards all untagged packets Enabling or Disabling the Management VLAN Tag To enable or disable the management VLAN Tag perform the following procedure 1 Select Settings LAN from the main menu Refer to Figure 21 Figure 21 LAN Settings Window 2 Enable or disable Management VLAN Tag Enable Activates the ...

Страница 71: ...into a static LAG A static LAG functions as a single logical link between the access point and another network device such as an Ethernet switch or router A static LAG also provides link redundancy If one link goes down the access point maintains connectivity to the wired network over the remaining link Refer to Figure 22 Figure 22 LAN1 and LAN2 Ports in a Static LAG Here are guidelines to using L...

Страница 72: ...igure 23 Figure 23 LAN2 Port in Cascade Mode with an End Node It can also be a networking device such as a switch router or media converter Refer to Figure 24 Figure 24 LAN2 Port in Cascade Mode with a Networking Device Here are the Cascade mode guidelines The Cascade mode requires firmware version 8 0 1 1 1 or later You set the Cascade mode with the on board web browser management interface or wi...

Страница 73: ...the VLAN Configuration section see Enabling or Disabling the Management VLAN Tag on page 70 2 From the Mode pull down menu in the LAN2 Port Configuration section configure the settings by referring to Table 14 Table 14 LAN Settings Window LAN2 Port Configuration Section Item Description Mode Select one of the following Disabled Disable LAN2 port Static LAG Combines LAN11 and LAN2 ports into a stat...

Страница 74: ...int automatically combines LAN1 and LAN2 ports into a static LAG Configure the ports on the other network device as a static LAG and connect LAN1 and LAN2 ports to it If you enabled the Cascade mode connect the LAN2 port to a network device such as a personal computer or an Ethernet switch The access point begins forwarding and receiving traffic on the port ...

Страница 75: ...efined in Table 15 Table 15 Status of LAN1 or LAN2 Window Item Name Description Mode LAN2 Only Displays LAN2 Port Configuration The options are Disabled Static LAG Cascade Status Displays the status of the LAN port The possible states are listed here Up The port has established a link with a network devices such as an Ethernet switch or router Down The port has not established a link with a networ...

Страница 76: ... Points User s Guide 76 Duplex Mode Displays the duplex mode of the port as follows Full Full duplex Half Half duplex PoE Mode Displays the PoE mode Table 15 Status of LAN1 or LAN2 Window Continued Item Name Description ...

Страница 77: ... 4GHz and 5GHz Radios This chapter has the following procedures Configuring the Radios on page 78 Displaying Radio Status on page 87 Dynamic Frequency Selection on page 90 Setting the Country Code Setting on page 91 ...

Страница 78: ...onfiguring Basic Radio Settings To configure the basic settings for Radio1 or Radio2 perform the following procedure 1 Select Settings Radio 2 Select Radio1 or Radio2 from the sub menu You can configure only one radio at a time 3 Click the Basic Settings tab shown in Figure 27 This is the default tab Figure 27 Basic Radio Settings Window 4 Configure the settings by referring to Table 16 on page 79...

Страница 79: ... radios Changing the country code disables the radios You have to reconfigure the radio settings if you change the country code You cannot change the country code on units sold in North America Japan or Taiwan Status Activate or deactivate the radio The selections in the pull down menu are described here Enabled Activates the radio Disabled Deactivates the radio This is the default setting Mode Ra...

Страница 80: ...el for the radio from the pull down menu Here are the guidelines You can select only one channel The channels vary by radio bandwidth and country To view the current active channel refer to Displaying Radio Status on page 87 Bandwidth Radio1 Select the bandwidth for Radio1 from the pull down menu The selections for IEEE 802 11n are listed here 20 MHz This is the default setting 40 MHz For IEEE 802...

Страница 81: ... ax are listed here 20 MHz This is the default setting 40 MHz 80 MHz 80 80 MHz The only bandwidth for IEEE 802 11a is 20 MHz Auto Channel Selection Radio 1 Select the channels that the radio can choose from when the Channel parameter is set to Auto Here are the guidelines A channel is enabled when its check box has a check and disabled when the check box is empty The available channels very by rad...

Страница 82: ...nts Use this option to specify the maximum number of wireless clients that a radio will support at one time You might use the option to control the distribution of clients over the radios A radio rejects all clients when the parameter is set to 0 The maximum numbers of wireless clients that a radio supports at one time are 2 4GHz Radio1 320 clients default setting 5GHz Radio2 320 clients default s...

Страница 83: ...reless clients to communicate with other clients in the same VAP or different VAPs and with the wired LAN This is the default setting Neighbor AP Detection Enable or disable Neighbor AP Detection which controls whether the access point listens for neighboring access points Here are the options Enabled The access point listens for neighboring access points and displays them in the Neighbor AP windo...

Страница 84: ...ss can control at a time is 50 Band Steering Use this option to enable or disable band steering on the radios Band steering reduces radio congestion by forcing wireless clients that support both 2 4GHz and 5GHz radios to associate with VAPs on a different radio during periods of traffic congestion Band steering forces clients to associate with VAPs on a 5GHz radio when there is traffic congestion ...

Страница 85: ...the access point can support up to 4 wireless clients simultaneously OFDMA Orthogonal Frequency Division Multiple Access OFDMA allows the access point to serve multiple wireless clients at the same time by dividing packets into separate bands The options are Disabled OFDMA is disabled This is the default setting Enabled The access point can serve multiple wireless clients at the same time Table 17...

Страница 86: ...radar systems the 5GHz radio switches to another channel and keeps connectivity of wireless clients The access point keeps connectivity however a wireless client continues to be connected or disconnected and reconnected depending upon the behavior of wireless clients Here are guidelines to enable Off channel CAC For TQ6702 GEN2 and TQm6702 GEN2 Off channel CAC can be enabled only when the bandwidt...

Страница 87: ...a radio perform the following procedure 1 Select Monitoring Status from the main menu 2 Select Radio1 or Radio2 from the sub menu You can view only one radio at a time The example in Figure 29 is for Radio1 Figure 29 Radio1 Status Window Figure 30 is an example for Radio2 Figure 30 Radio2 Status Window ...

Страница 88: ...ddress Displays the MAC address of the wireless interface Status Displays the status up down of the wireless interface Mode Displays the current wireless communication mode Radio1 has these modes IEEE 802 11b g IEEE 802 11b g n ax Radio2 has these modes IEEE 802 11a IEEE 802 11a n ac ax Operational Channel Displays the active channel The channel may have been selected manually Bandwidth Displays t...

Страница 89: ...he DFS radar detection period for one minute before beginning to transmit or receive wireless traffic If no radar is detected the radio moves to the ISM status ISM In Service Monitoring The radio is using a DFS target channel If radar is detected it changes the channel The DFS status changes to IDLE if the new channel is W52 or W58 or to CAC if the new channel is W53 or W56 OOC Out Of Channels The...

Страница 90: ... DFS on 5GHz channels that countries or regions have designated as DFS channels If an access point detects a radar signal on its current 5GHz channel and if the channel is designated as a DFS channel it immediately marks the channel as unusable for a minimum of thirty minutes and randomly selects another channel with which to communicate with its clients Here are the guidelines for DFS on the wire...

Страница 91: ...o set the country code setting perform the following procedure 1 Select Settings Radio 2 Select Radio1 from the sub menu The country code must be set from Radio1 3 Click the Basic Settings tab This is the default tab Refer to Figure 27 on page 78 4 Select the Country Code pull down menu and choose your country or region Here are the guidelines You can select only one country The Country Code param...

Страница 92: ...TQ6000 GEN2 Access Poinst User s Guide 92 ...

Страница 93: ...ains the procedures for managing Wireless Distribution Bridges The chapter contains the following sections Introduction to Wireless Distribution Bridges on page 94 WDS Bridge Elements on page 97 Guidelines on page 99 Preparing Access Points for a WDS Bridge on page 100 ...

Страница 94: ... wired network over the WDS bridge to the parent An example of a parent with three children is shown in Figure 31 Figure 31 WDS Bridge When a child receives traffic from a wireless client that is intended for the wired network it transmits the traffic over the WDS bridge to the parent which forwards the packets on its LAN ports Conversely when a parent receives traffic on the wired network intende...

Страница 95: ... different WDS bridges That is it can be a parent in one WDS bridge and a child in another Figure 33 on page 96 is an example Access Point A is functioning as the parent to children 1 and 2 in one WDS bridge and as child 5 to Access Point B in another bridge In contrast Access Point B is functioning solely as a parent in this case to children 3 4 and 5 which is Access Point A Each WDS bridge has t...

Страница 96: ...ld be connected to the wired network Connecting the LAN ports on both parents to the wired network might form a loop in your network topology which might cause broadcast storms Child 2 Child 3 Child 4 Child 1 Parent Child 5 To Wired Network Access Point A Access Point B Parent Radio2 Channel 40 Radio2 Channel 40 Radio1 Channel 10 ...

Страница 97: ...and channel settings for VAP0 must be the same on all the access points in the WDS bridge Radio Channel When access points are operating in close proximity to each other such that there is an overlap in coverage the usual practice is to set the radios to different channels to minimize radio interference and improve performance The radios in the access points of a WDS bridge however have to use the...

Страница 98: ...hannel and if the channel is designated as a DFS channel it immediately marks the channel as unusable for a minimum of thirty minutes and randomly selects another channel with which to communicate with its clients If a wireless access point is using a DFS 5GHz channel for a WDS bridge and it detects radar signals it randomly selects another channel so as not to interfere with the signals This acti...

Страница 99: ...ed Telesis recommends using WPA Personal security A WDS bridge has to be consisted of AT TQ6702 GEN2 AT TQm6702 GEN2 AT TQ6602 GEN2 or AT TQm6602 GEN2 access points The radios of the WDS bridge have to be set to the same mode and channel You must set the channel manually Do not use the Auto setting If you use Radio1or Radio2 for the bridge Allied Telesis recommends selecting a channel that is not ...

Страница 100: ... WDS bridge To prepare an access point for a WDS bridge perform the following procedure 1 Start a management session 2 On the selected radio for the bridge set the mode and channel Refer to Configuring Basic Radio Settings on page 78 Here are the guidelines You can use any available radio mode for the bridge but the radios in the different access points must use the same mode You can use any avail...

Страница 101: ...e on all access points to be in the WDS bridge When an access point is designated as a child it automatically begins searching for a parent on the designated radio and channel If it finds one it forwards traffic from its wireless clients over the bridge to the parent as needed and transmits traffic from the parent to its clients To view the children of a parent display the Associated Clients windo...

Страница 102: ...TQ6000 GEN2 Access Poinst User s Guide 102 ...

Страница 103: ... on page 105 Generating a Quick Response QR Code for a VAP on page 108 Configuring VAP Security on page 110 Configuring MAC Access Control on page 121 Configuring Captive Portal on page 129 Viewing Fast Roaming on page 146 Configuring Advanced Settings on page 150 Configuring MAC Access Control Settings on page 153 Configuring IEEE802 11u Integration of Wireless Services on page 155 Configuring Pa...

Страница 104: ... VAP Each radio can have up to eight VAPs Allied Telesis recommends no more than five VAPs per radio for best performance The VAPs are numbered from 0 to 15 You can enable or disable the VAPs individually except for VAP0 which can only be disabled by disabling its radio You can enable 16 VAPs per radio The VAPs of a radio can have different security methods VAPs can have the same or different VLAN...

Страница 105: ...radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Virtual Access Point tab This is the default tab The example in Figure 34 shows the settings for VAP0 on Radio1 Figure 34 Virtual Acc...

Страница 106: ...enu choices are listed here Access Point Select this mode to have a VAP function as a normal VAP without WDS bridging This is the default setting Note The mode option for VAP1 to VAP15 is only Access Point WDS Parent WDS Child For more information see Chapter 6 Wireless Distribution System Bridges on page 93 SSID Enter a name for the VAP Here are the guidelines A VAP must have a name A name can be...

Страница 107: ...his VID is ignored for wireless clients that receive their VIDs from a RADIUS server for WPA Enterprise security VIDs from a RADIUS server override the number in this field Hidden SSID Select whether the access point should advertise the VAP SSID to clients Here are the options Disabled The access point transmits the SSID to advertise the VAP to clients This is the default setting Enabled The acce...

Страница 108: ...e not supported on VAPs that use RADIUS servers to authenticate wireless clients When a Radio is disabled a QR code for a VAP in the Radio wioo not generated To generate a QR code for a VAP perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP See ...

Страница 109: ...Chapter 7 Virtual Access Points 109 Figure 35 QR Code 6 Download the QR code The QR code is ready to be used ...

Страница 110: ...ss VAPs with no security This is the default setting To configure a VAP for no security perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without savin...

Страница 111: ...E802 11b g or IEEE802 11 a See Configuring Basic Radio Settings on page 78 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save mu...

Страница 112: ...cates VAP clients Here are the options Open System The access point does not authenticate VAP clients All clients even those without correct WEP keys can connect to the VAP This is the default setting Clients in an open system VAP still must have the correct WEP key to encrypt and decrypt the traffic they exchange with the access point Shared Key Clients must have the correct WEP key to connect wi...

Страница 113: ...setting 64 bits Key Type Seelect a key type The options are Hex Enter keys in hexadecimalnumbers This is the default setting ASCII Enter keys in ASCII Transfer Key Index Select the key the access point should use to encrypt network traffic You can select only one key Key 1 to 4 Enter up to four WEP keys in the fields numbered 1 to 4 Here are the guidelines When the key length is set to 128 bits 26...

Страница 114: ...ltiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Security tab 5 Select WPA Personal from the Mode pull down menu See Figure 38 on page 114 Figure 38 WPA Personal Security Tab 6 Configure the parameters by referring to Table 21 Table 21 WPA Personal Security Tab Field Description Mode Select WPA Personal ...

Страница 115: ...here CCMP When the WPA version is WPA2 WPA2 and WPA3 or WPA3 CCMP is the only option TKIP and CCMP When the WPA version is WPA and WPA2 TKIP and CCMP is the only option For the TKIP and CCMP setting clients who are using WPA must have one of the following A valid TKIP key A valid CCMP AES key Key Enter a shared secret key Here are the guidelines The key can be from 8 to 63 alphanumeric characters ...

Страница 116: ...u can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Security tab 5 Select WPA Enterprise from the Mode pull down menu See Figure 39 IEEE802 11w MFP Control IEEE 802 11w management frame protection The options are available only when the WPA version is WPA2 Disabled Disable Manag...

Страница 117: ...pter 7 Virtual Access Points 117 Figure 39 WPA Enterprise Security Tab 6 Configure the parameters by referring to Table 22 Table 22 WPA Enterprise Security Tab Field Description Mode Select WPA Enterprise ...

Страница 118: ...3 CCMP is the only option TKIP and CCMP When the WPA version is WPA and WPA2 TKIP and CCMP is the only option GCMP When the WPA version is WPA3 GCMP is the only option For the TKIP and CCMP setting clients configured to use WPA with RADIUS must have one of the following A valid TKIP RADIUS IP address and RADIUS key A valid CCMP IP address and RADIUS key IEEE802 11w MFP Control IEEE 802 11w managem...

Страница 119: ...refreshing unicast session key to be sent to the wireless clients connected to the VAP Session keys are unique to each client The range is 0 to 86400 seconds The key is not updated when this parameter is set to 0 zero The default is 0 Session Key Refresh Action Select an action that the access point takes when a session is expired The options are Reauthentication Wireless clients are re authentica...

Страница 120: ...efault is 1812 RADIUS Accounting Control RADIUS accounting When accounting is enabled the access point sends client information such as usage time to the RADIUS server The options are listed here Enabled Activate RADIUS accounting Disabled Deactivate RADIUS accounting This is the default setting RADUIS Accounting Port Enter the RADIUS accounting port number of the RADIUS server If you entered IP a...

Страница 121: ...C Address List on page 127 Application Proxy on page 128 Disabling MAC Access Control To disable MAC Access Control of the on board MAC address list and external RADIUS server perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from ...

Страница 122: ...cepts clients whose addresses are on the server and denies clients whose addresses are not on the server In summary when the on board filter is set to Allow the wireless access point accepts clients whose MAC address are either in the on board filter or on the RADIUS server When the on board MAC address filter is set to Deny the wireless access point authenticates wireless clients in this manner I...

Страница 123: ...ntrol tab See Figure 40 on page 121 5 Select the MAC Address List External RADIUS option from the MAC Access Control pull down menu See Figure 41 Figure 41 MAC Access Control MAC Address List External RADIUS 6 Configure the parameters by referring to Table 23 Table 23 MAC Address List External RADIUS Window Field Description Primary RADIUS Server IP Enter the IPv4 address of the primary RADIUS ser...

Страница 124: ...red IP addresses for both primary and secondary servers the units must be using the same port number The range is 0 to 65535 The default is 1812 User Name Format Separator Select the character that the access point should use to separate the octets in the MAC addresses it sends to the servers The MAC addresses function as the user name attributes for the wireless clients The choices are listed her...

Страница 125: ...nal RADIUS server perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 User Password Format Format Specify the password for the MAC addresses The choices are listed here User Name The MAC add...

Страница 126: ...MAC Access Control tab See Figure 40 on page 121 5 Select External RADIUS from the MAC Access Control pull down menu See Figure 42 Figure 42 MAC Access Control External RADIUS Window 6 Configure the parameters by referring to Table 23 on page 123 7 Click the SAVE APPLY button to save and update the configuration or configure other VAPs and save the configurations at once later 8 Or click VIEW QR C...

Страница 127: ...edure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY butt...

Страница 128: ...Proxy in the AMF Security controller The application proxy allows you to add security policies that define where and when clients can access your wireless network It also allows you to designate their network assignments by assigning them VLAN IDs This feature requires AMF Security mini or the AMF Security Controller AMF SEC v2 2 2 or later The TQ6000 GEN2 access points require Vista Manager EX v3...

Страница 129: ...Authentication and Web Page Stored in the Access Point on page 131 A web page including your message and the Agree Button is displayed with no authentication Your message in HTML is stored in the access point Delegating a Proxy Sever to Interact with Wireless Clients on page 134 Interacting with wireless clients is conducted by the proxy server that you specify Place the HTML files or applications...

Страница 130: ...he default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Captive Portal tab See Figure 44 Figure 44 Capital Portal Window 5 Select Disabled from the Captive Portal pull down menu Disabled is the default setting 6 Click the SAVE APPLY button to save and updat...

Страница 131: ...adio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Captive Portal tab 5 Select Click Through from the Captive P...

Страница 132: ...cation Page Proxy on the Captive Portal Enabled The access point uses other web server s authentication page via proxy with Captive Portal See Delegating a Proxy Sever to Interact with Wireless Clients on page 134 Disabled The access point uses its own local authentication page with Captive Portal This is the default setting Select this option when you want to store a web page in the access point ...

Страница 133: ... URL field Session Keep Directs clients to the web page they requested prior to the click through window Disabled Disables redirect The welcome html file that you prepared is displayed When the Captive Portal field is Click Through and the Authentication Proxy Page is Disabled the welcome page on the access point is displayed This is the default setting Session Timeout Specify the time interval in...

Страница 134: ...ce by clicking the SAVE APPLY button 4 Select the Captive Portal tab 5 Select Click Through from the Captive Portal pull down menu 6 Select Enabled from the Authentication Page Proxy pull down menu See Figure 46 Walled Garden Enter the URLs of up to fifty approved HTTP web sites that wireless clients can access through the captive portals on the access point without having to log on Wireless clien...

Страница 135: ...ce later 10 Or click VIEW QR CODE to generate a QR code 11 Go to Creating Pages in HTML for a Proxy Server on page 142 RADIUS Server for Authentication and External URL for Web Hosting To redirect wireless clients to an external URL for a logon window and authenticate them with an external RADIUS server perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radi...

Страница 136: ... can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Captive Portal tab 5 Select External Page Redirect from the Captive Portal pull down menu See Figure 47 on page 136 Figure 47 Capital Portal External Page Redirect Window 6 Configure the parameters described in Table 25 on page 137 ...

Страница 137: ...he Captive Portal field is Click Through and the Authentication Proxy Page is Disabled the welcome page on the access point is displayed This is the default setting Primary RADIUS Server IP Enter the IPv4 address of the primary RADIUS server The default is 192 168 1 1 Primary RADIUS Server Key Enter the shared secret key for the primary RADIUS server Here are the guidelines The key can be up to 12...

Страница 138: ... configure from the next sub menu The default is VAP0 RADIUS Port Enter the RADIUS port number of the RADIUS server If you entered IP addresses for both primary and secondary servers the units must be using the same port number The range is 0 to 65535 The default is 1812 RADIUS Accounting Control RADIUS accounting When accounting is enabled the access point sends client information such as usage t...

Страница 139: ...ations all at once by clicking the SAVE APPLY button 4 Select the Captive Portal tab 5 Select External RADIUS from the Captive Portal pull down menu See Figure 48 on page 139 6 Select Enabled from the Authentication Page Proxy pull down menu Figure 48 Capital Portal RADIUS and Authentication Page Proxy 7 Configure the parameters described in Table 26 ...

Страница 140: ...oxy server to host web pages perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time Table 26 Captive Portal External RADIUS and Proxy Field Description Authentication page Proxy See Table 24 on page 132 Base URL Redirect Type after user is authenticated See Table ...

Страница 141: ... You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Captive Portal tab 5 Select External RADIUS from the Captive Portal pull down menu See Figure 48 6 Select Disabled from the Authentication Page Proxy pull down menu Figure 49 Capital Portal RADIUS and Authentication Page Proxy 7 Configure the parameters described in Table 27 on page 142 ...

Страница 142: ...ing HTML files and place them on the proxy server Base URL click_through_login html Base URL click_through_login_fail html Base URL welcome html Optional Table 27 Captive Portal External RADIUS and Proxy Field Description Authentication page Proxy See Table 24 on page 132 Redirect Type after user is authenticated See Table 25 on page 137 Primary RADIUS Server IP Primary RADIUS Server Key Secondary...

Страница 143: ...age The following is an example of HTML code html head title Terms of Service title head form method post By using our service you acknowledge that there are risks br inherent in accessing information through the internet br br input type submit value Agree input form html Figure 50 shows its web page displayed in a web browser Figure 50 Captive Portal Terms of Service Page Sample Creating Login P...

Страница 144: ...name attribute specified to password for a wireless client to enter a password In the form element you must include a button tag or an input tag with the type attribute specified to submit for a wireless client to submit the data to the RADIUS server There is no requirements for a welcome html HTML Code and Display Examples of Login Page The following is an example of HTML code html head title Web...

Страница 145: ...mbers are used with the IP address of the access point 8080 for HTTP http access point s IP address 8080 auth redirect wireless client s originally requested URL 8443 for HTTPS http access point s IPv4 address 8443 auth redirect wireless client s originally requested URL ...

Страница 146: ...e you can view the parameter values The View QR Code button is not supported on the Fast Roaming window Viewing the IEEE802 11r Parameter Values To view the parameter values set to Fast Roaming IEEE802 11r perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 3 Select a VAP The default is VAP0 4 Select th...

Страница 147: ... WPA Enterprise or WPA Personal you can view the Fast Roaming settings but cannot change them Configuring the settings requires Vista Manager EX and AWC Table 28 Fast Roaming IEEE802 11r Field Description Fast Transition IEEE802 11r Fast Transition is enabled or disabled Distributing System Enable or Disable Distributing System is enabled or disabled ...

Страница 148: ... page 147 5 View the status of IEEE802 11k The options are Enabled IEEE802 11k Radio Resource Measurement RRM is enabled Disabled IEEE802 11k Radio Resource Measurement RRM is disabled Mobility Domain Shows the domain name of the access point that provides Fast Roaming Here are the guidelines The name consists of 4 alphanumeric characters The key is not case sensitive The default value is a1b2 PMK...

Страница 149: ...ling or disabling requires Vista Manager EX and AWC 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 3 Select a VAP The default is VAP0 4 Select the Fast Roaming tab See Figure 52 on page 147 5 View the status of IEEE802 11v The options are Enabled IEEE802 11v Wireless Network Management WNM is enabled Disabled IEEE802 11v Wireless...

Страница 150: ...lt is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Advanced Settings tab See Figure 53 Figure 53 Advanced VAP Settings Window 5 Configure the pa...

Страница 151: ... setting Ignore The access point responds to duplicate authentication requests by authenticating the clients again Association Advertisement Controls whether the access point informs other access points of newly associated clients over the wired network When the access point associates new clients it can inform the access points to which the clients were previously connected of the change This ena...

Страница 152: ...he access point is installed as standalone DTIM Period Controls the delivery traffic indication map DTIM period This specifies the number of beacons an access point transmits before transmitting any buffered broadcast or multicast packets This allows wireless clients that are in the Sleep Mode to wake up prior to receiving the packets The range is 1 to 255 beacons The default is 1 beacon Specify t...

Страница 153: ...ontrol and MAC Address List The access point has only one MAC Address Control You can activate or deactivate MAC Address Control on individual VAPs You cannot enter broadcast or multicast addresses To activate MAC Address Control on VAPs See Configuring MAC Access Control on page 121 To add entries to the MAC address list perform the following procedure 1 Select Settings MAC Address List Refer to ...

Страница 154: ... format xx xx xx xx xx xx and click Add button Click the Import from CSV button to upload a csv file which includes one or more MAC addresses in the format xx xx xx xx xx xx that are separated with a comma 4 Click the Add button 5 To remove addresses do one of the following To delete MAC addresses individually click the check boxes of the addresses in the list and click the Delete button To delete...

Страница 155: ...Chapter 7 Virtual Access Points 155 Configuring IEEE802 11u Integration of Wireless Services The IEEE802 11u standard is not supported ...

Страница 156: ...TQ6000 GEN2 Access Points User s Guide 156 Configuring Passpoint Passpoint is not supported ...

Страница 157: ...ce This chapter describes the following procedures Introduction to Quality of Service on page 158 Configuring QoS Basic Settings on page 160 Configuring AP EDCA Parameters on page 161 Configuring Station EDCA Parameters on page 164 ...

Страница 158: ... traffic the access point transmits to the wireless clients The Station Enhanced Distributed Channel Access EDCA Parameters table controls the four queues that store ingress traffic the access point receives from the clients To configure the QoS settings for the radios perform the following procedure 1 Select Settings QoS from the main menu 2 Select Radio1 or Radio2 from the sub menu You can confi...

Страница 159: ...Chapter 8 Quality of Service 159 Figure 55 QoS Window ...

Страница 160: ...till configure some of the parameters that control the downstream traffic from the access point to the clients WMM must be enabled on radios that use IEEE 802 11n or IEEE 802 11ac No Acknowledgment Enable or disable No Acknowledgment Acknowledgment is a verification signal data that wireless clients transmit to the access points The Acknowledgment process takes bandwidth and airtime Here are the o...

Страница 161: ...2 best effort Medium priority queue with minimum throughput and delay The queue is used to store most traditional IP data Data 3 Background Lowest priority queue with high throughput This queue is used for bulk data that requires maximum throughput and is not time sensitive such as FTP packets AIFS InterFrame Space Select the Arbitration Inter Frame Spacing AIFS value to control the amount of time...

Страница 162: ... Valid values for this parameter are 1 3 7 15 31 63 127 255 511 and 1023 This parameter must be lower than the cwMax value The defaults are 3 for Data 0 7 for Data 1 and 15 for Data 2 and Data 3 cwMax Maximum Contention Window Select the maximum contention window which is the upper limit in milliseconds for doubling the random back off value The doubling continues until either the data frame is se...

Страница 163: ...mation The decreased overhead results in higher throughput and better performance Here are the guidelines This is an AP EDCA parameter only and as such applies only to egress traffic from the access point to the wireless clients The factory defaults are 1 5 for Data 0 3 0 for Data 1 and 0 for Data 2 and Data 3 The range is 0 0 to 8 1 seconds Table 31 QoS Window AP EDCA Parameters Continued Paramet...

Страница 164: ...th minimum delay The queue is used to store time sensitive data such as video traffic Data 2 best effort Medium priority queue with minimum throughput and delay The queue is used to store most traditional IP data Data 3 Background Lowest priority queue with high throughput This queue is used for bulk data that requires maximum throughput and is not time sensitive such as FTP packets AIFS InterFram...

Страница 165: ...ss than or equal to the cwMax value Valid values for this parameter are 1 3 7 15 31 63 127 255 511 and 1023 milliseconds The defaults are 3 for Data 0 7 for Data 1 and 15 for Data 2 and Data 3 cwMax Maximum Contention Window Select the maximum contention window which is the upper limit in milliseconds for doubling the random back off value The doubling continues until either the data frame is sent...

Страница 166: ...that a WME client has the right to initiate transmission to the access point Here are the guidelines The time intervals are in 32 microseconds The range is 0 to 256 intervals The default intervals are 47 for Data 0 94 for Data 1 and 0 for Data 2 and Data 3 Table 32 QoS Window Station EDCA Parameters Continued Parameter Description ...

Страница 167: ... to Your Computer on page 168 Restoring a Configuration to the Access Point on page 169 Restoring the Default Settings to the Access Point on page 170 Uploading New Management Software to the Access Point on page 171 Rebooting the Access Point on page 173 Collecting Technical Support Information to a File on page 174 ...

Страница 168: ...igure one unit and then transfer its configuration to the other units Please review the following information before performing this procedure You cannot edit a configuration file with a text editor This procedure does not interrupt the operations of the access point To download the configuration of the access point as a file to your workstation perform the following procedure 1 Select Maintenance...

Страница 169: ... after you restore a configuration to prevent an IP address conflict from occurring among the devices You cannot edit a configuration file with a text editor Note The access point resets when you restore a configuration It does not forward network traffic for one minute while it initializes its management software This procedure assumes that the configuration file is stored on your management work...

Страница 170: ...default IP address 192 168 1 230 Note The default setting for the radios is off Consequently the access point stops forwarding network traffic when returned to its default settings To activate the default settings on the access point perform the following procedure 1 Select Maintenance Configuration from the main menu Refer to Figure 56 on page 168 2 Click the Initialize button in the Factory Defa...

Страница 171: ...settings of the access point are retained when a new firmware image is uploaded to the device The access point does not compare the version numbers of the new and current firmware when it uploads the management software You should compare the numbers yourself to avoid uploading an older version of the firmware to the access point The upgrade process takes about 10 minutes Caution Do not power off ...

Страница 172: ...k the Upgrade button The access point displays a confirmation prompt 4 Click the Proceed button to start the upgrade procedure or Cancel to cancel the procedure 5 Wait ten minutes for the access point to upload the firmware write it into its flash memory and reboot Note Do not close the web browser window or change to a different window until the entire procedure is finished Interrupting the trans...

Страница 173: ... traffic may be lost E113 To reboot the access point perform the following procedure 1 Select Maintenance Reboot from the main menu Refer to Figure 58 Figure 58 Reboot Window 2 Click the Reboot button The access point displays a confirmation prompt 3 Click OK Your current management session is interrupted 4 To resume managing the unit wait one minute for it to complete initializing its management ...

Страница 174: ...rt information helps Allied Telesis technicians troubleshoot problems with the device Note You should only perform this procedure when instructed to do so by an Allied Telesis technician To collect technical support information to a file and send it to Allied Telesis perform the following procedure 1 Select Maintenance Support from the main menu Refer to Figure 59 Figure 59 Support Window 2 Read t...

Страница 175: ...the Encryption Key field This step is optional Here are the guidelines The key can be up to 32 alphanumeric characters It is case sensitive Spaces are not allowed Be sure to send the key to the technicians at Allied Telesis The factory default is blank The file is sent in clear text if you do not enter a key 5 Click the Download button Your web browser prompts you to save a zip file 6 Save the zip...

Страница 176: ...TQ6000 GEN2 Access Points User s Guide 176 ...

Страница 177: ...177 Chapter 10 Account Menu This chapter contains the following procedures Changing the Manager s Login Name and Password on page 178 Setting the Language of the Web Browser Interface on page 180 ...

Страница 178: ...ongly recommends changing the factory default password during the first management session to protect the device from unauthorized access To change the login name and password of the manager account perform the following procedure 1 Select Account User from the main menu Refer to Figure 60 Figure 60 User Window 2 To change the manager name select the Administrator Name field and enter a new name H...

Страница 179: ...l 4 Select the New Password field and enter a new password The new password Here are the guidelines The password can be up to 32 alphanumeric characters It can not contain spaces or any of these special characters It is case sensitive 5 Select the Confirm New Password field and enter the new password again 6 Click the SAVE APPLY button to save and update the configuration You must use the new mana...

Страница 180: ...ese The default is English To set the language perform the following procedure 1 Select Account Language from the main menu Refer to Figure 61 Figure 61 Language Window 2 From the Language pull down menu select one of the following English Japanese 3 Click the SAVE APPLY button to save and update the configuration The management interface changes to the designated language ...

Результаты поиска

Содержание TQ6000 GEN2

Отзывы:

Похожие инструкции для TQ6000 GEN2

Бренды по названию

Популярные бренды

Allied Telesis TQ6000 GEN2, Руководство пользователя программы управления

Результаты поиска

Содержание TQ6000 GEN2

Отзывы:

Похожие инструкции для TQ6000 GEN2

Бренды по названию

Популярные бренды