Allied Telesis TQ6000 GEN2, Management Software User Manual

Page 1: ...Q6000 GEN2 WIRELESS ACCESS POINTS TQ6702 GEN2 TQm6702 GEN2 802 11ax Dual radio 5G 2 4GHz 8x8 4x4 Access Points TQ6602 GEN2 TQm6602 GEN2 802 11ax Dual radio 5G 2 4GHz 4x4 4x4 Access Points Management Software User s Guide ...

Page 2: ...licensed under the New BSD License Copyright c 1984 2000 by Carnegie Mellon University All rights reserved Copyright c 2002 2003 by Matt Johnston All rights reserved Copyright c 1995 by Tatu Ylonen ylo cs hut fi All rights reserved Copyright 1997 2003 by Simon Tatham Portions copyright by Robert de Bath Joris van Rantwijk Delian Delchev Andreas Schultz Jeroen Massar Wez Furlong Nicolas Barry Justi...

Page 3: ...n this document without prior written notice The information provided herein is subject to change without notice In no event shall Allied Telesis Inc be liable for any incidental special indirect or consequential damages whatsoever including but not limited to lost profits arising out of or related to this manual or the information contained herein even if Allied Telesis Inc has been advised of kn...

Page 4: ......

Page 5: ... Displaying Basic System Information 34 Displaying VAP and LAN Port Statistics 37 Displaying the System Log 39 Displaying Neighbor AP 41 Displaying Associated Clients 42 Chapter 3 System Settings 43 Assigning a Dynamic IP Address from a DHCP Server 44 Assigning a Static IPv4 Address to the Access Point 47 Setting the Date and Time with the Network Time Protocol NTP 50 Manually Setting the Date and...

Page 6: ...ing MAC Access Control 121 Authenticating Using Both MAC Address List and RADIUS 122 Authenticating Using RADIUS 125 Authenticating Using MAC Address List 127 Application Proxy 128 Configuring Captive Portal 129 Captive Portal Options 129 No Captive Portal 130 No Authentication and Web Page Stored in the Access Point 131 Delegating a Proxy Sever to Interact with Wireless Clients 134 RADIUS Server ...

Page 7: ...ion EDCA Parameters 164 Chapter 9 Maintenance 167 Downloading the Configuration of the Access Point to Your Computer 168 Restoring a Configuration to the Access Point 169 Restoring the Default Settings to the Access Point 170 Uploading New Management Software to the Access Point 171 Rebooting the Access Point 173 Collecting Technical Support Information to a File 174 Chapter 10 Account Menu 177 Ch...

Page 8: ...TQ6000 GEN2 Access Points User s Guide 8 ...

Page 9: ... Figure 24 LAN2 Port in Cascade Mode with a Networking Device 72 Figure 25 LAN Settings Window LAN2 Port Configuration 73 Figure 26 Status of LAN1 Port Window 75 Figure 27 Basic Radio Settings Window 78 Figure 28 Advanced Radio Settings Window 82 Figure 29 Radio1 Status Window 87 Figure 30 Radio2 Status Window 87 Figure 31 WDS Bridge 94 Figure 32 Example of Radio and Channel Assignments in a WDS B...

Page 10: ...l RADIUS and Authentication Page Proxy 141 Figure 50 Captive Portal Terms of Service Page Sample 143 Figure 51 Captive Portal Login Page Sample 144 Figure 52 Fast Roaming Window 147 Figure 53 Advanced VAP Settings Window 150 Figure 54 MAC Address List Window 153 Figure 55 QoS Window 159 Figure 56 Configuration Window 168 Figure 57 Upgrade Window 172 Figure 58 Reboot Window 173 Figure 59 Support Wi...

Page 11: ...1 or LAN2 Window 75 Table 16 Basic Radio Settings Window 79 Table 17 Advanced Radio Settings Window 82 Table 18 Radio Status Window 88 Table 19 Virtual Access Point Tab 106 Table 20 Static WEP Security Tab 112 Table 21 WPA Personal Security Tab 114 Table 22 WPA Enterprise Security Tab 117 Table 23 MAC Address List External RADIUS Window 123 Table 24 Captive Portal Click Through 132 Table 25 Captiv...

Page 12: ...TQ6000 GEN2 Access Points User s Guide 12 ...

Page 13: ...6000 GEN2 access points with the web browser management interface The models included in this manual are TQ6702 GEN2 TQm6702 GEN2 TQ6602 GEN2 TQm6602 GEN2 This preface contains the following sections Safety Symbols Used in this Document on page 14 Contacting Allied Telesis on page 15 ...

Page 14: ...nal information Caution Cautions inform you that performing or omitting a specific action may result in equipment damage or loss of data Warning Warnings inform you that performing or omitting a specific action may result in bodily injury Warning Laser warnings inform you that an eye or skin hazard exists due to the presence of a Class 1 laser device ...

Page 15: ...Return Merchandise Authorizations RMAs and contact Allied Telesis technical experts Software Downloads Download the latest software releases for your product Licensing Register and obtain your License key to activate your product Product Documents View the most recent installation guides user guides software release notes white papers and data sheets for your product Warranty View a list of produc...

Page 16: ...TQ6000 GEN2 Access Points User s Guide 16 ...

Page 17: ... on page 18 Management Tools on page 21 Starting the First Management Session on page 23 Starting a Management Session on page 26 Management Windows on page 28 Saving and Applying Your Changes on page 30 Ending Management Sessions on page 31 What to Configure First on page 32 ...

Page 18: ...AN2 ports and power Kensington lock port Ceiling wall or table installation Installing on the Cisco or Fortimet mounting brackets using BRKT CONV AP1 converter bracket One Console RS232 RJ 45 port for factory use only Features of the 2 4GHz and 5GHz radios include IEEE802 11a b g n ac ax Automatic channel selection Band steering Wi Fi multimedia WMM for prioritizing traffic Features of system powe...

Page 19: ... r MAC address client filtering with the on board filter MAC address client filtering with RADIUS servers Wireless Distribution System WDS bridges Only one to one WDS connection is supported Quick Response codes for VAPs System log Syslog client SNMPv1 v2c and v3 Software features with Vista Manager EX and the Autonomous Wave Controller AWC plug in include AWC Lite Combination use with Cell AWC SC...

Page 20: ... Access Points User s Guide 20 WDS WDS links 1 WDS HOPs 1 AWC Access points managed by AWC 3 000 Client Authentication MAC address list 2 048 Table 1 Maximum Supported Numbers Continued Feature Item Maximum Number ...

Page 21: ...n 3 9 0 or later and the Autonomous Wave Control AWC plug in Configuring and monitoring large numbers of devices is simplified with AWC because you can add multiple devices to management groups and manage them as one unit The application can also monitor the operations of the access points and automatically adjust operating properties to optimize the performance of your wireless network You cannot...

Page 22: ...d SNMPv3 to view the parameter settings of the access point The MIB is available from Allied Telesis website For instructions on how to configure the access point for SNMP see Configuring SNMPv1 SNMPv2 and SNMPv3 on page 57 Note You cannot change the parameter settings on the access point with SNMP ...

Page 23: ...o supply power to the access point you can connect your computer and access point directly with an Ethernet cable This procedure requires changing the IP address on your computer to make it a member of the same subnet as the default IP address on the access point Connecting the Access Point to a Network The first management session can also be performed while the device is connected to your networ...

Page 24: ...ent Session without a DHCP Server 1 Connect one end of a network cable to the LAN1 port on the access point and the other end to the Ethernet network port on your computer 2 Change the IP address on your computer to 192 168 1 n where n is a number from 1 to 254 but not 230 See the documentation that accompanies your computer for instructions on how to set the IP address 3 Set the subnet mask on yo...

Page 25: ...sting the VLANS and their port assignments For example if the access point is connected to a port that is a member of the Sales VLAN your computer must be connected to a port that is also a member of that VLAN If your network is small and does not have VLANs or routers you can connect your computer to any port on the Ethernet switch 3 Change the IP address on your computer to 192 168 1 n where n i...

Page 26: ...point is using its default address 192 168 1 230 see Starting the First Management Session on page 23 for instructions To start a management session on the access point perform the following procedure 1 Open the web browser on your management workstation 2 Enter the IP address of the access point in the URL field of the web browser Note Precede the IP address with HTTPS if the access point is alre...

Page 27: ... If this occurs select an appropriate option to continue to the web site To avoid the message in future management sessions make the web site a trusted site in your web browser 3 Enter the user name and password for the unit The default values are User name manager Password friend Note The user name and password are case sensitive 4 Click the Login button ...

Page 28: ...ified in Figure 2 Figure 2 Sample Management Window Main Menu The main menu is displayed on the left side of the windows and consists of the following selections Monitoring Settings Maintenance Account Clicking a main menu option expands it to display the sub items The Monitoring option is expanded by default at the start of management sessions Main Menu Navigator Sub menu Content ...

Page 29: ... 3 Clicking the main menu button displays the menu over the content window The menu is hidden again after you make a menu selection Figure 3 Main Menu Button Navigation The Navigator shows the menu path of the current window Sub menu Sub menus are located across the tops of many management windows Content This is the main body of the windows It displays parameters for you to configure or status or...

Page 30: ... configuring the parameters in a management window The button is located in the bottom of the windows When you click the button the access point immediately activates your changes and saves them in its configuration file If you change the parameter settings in a window and navigate to a different window without clicking the button the access point discards your changes ...

Page 31: ...ng Started 31 Ending Management Sessions You should always log off when you are finished managing the unit To log off select Account Logout Click OK at the confirmation prompt For added security close your web browser ...

Page 32: ...ng the country setting disables the radios The procedure is disruptive to network operations if the unit is actively forwarding client traffic 2 Change the manager s login name and password Refer to Changing the Manager s Login Name and Password on page 178 3 If you prefer to use HTTPS management sessions perform Changing the Manager s Login Name and Password on page 178 4 Set the language of the ...

Page 33: ... has the following procedures Displaying Basic System Information on page 34 Displaying VAP and LAN Port Statistics on page 37 Displaying the System Log on page 39 Displaying Neighbor AP on page 41 Displaying Associated Clients on page 42 ...

Page 34: ... Monitoring Status from the main menu 2 Select System from the sub menu This is the default window Refer to Figure 4 Figure 4 System Window The fields are defined in Table 2 Table 2 System Window Item Name Description Model Displays the product s model name Firmware Version Displays the version number of the management software on the access point Firmware Build Date Displays the date and time whe...

Page 35: ...t change the MAC addresses IP Address Displays the IP address of the access point To set this value refer to Assigning a Dynamic IP Address from a DHCP Server on page 44 or Assigning a Static IPv4 Address to the Access Point on page 47 Subnet Mask Displays the subnet mask To set this value refer to Assigning a Dynamic IP Address from a DHCP Server on page 44 or Assigning a Static IPv4 Address to t...

Page 36: ...ddress from a DHCP Server on page 44 or Assigning a Static IPv4 Address to the Access Point on page 47 Management VLAN ID Displays the management VLAN ID The VLAN ID is 1 Open Source License Information When you click the View button displays open source license information Table 2 System Window Continued Item Name Description ...

Page 37: ...oring 37 Displaying VAP and LAN Port Statistics To view VAP and LAN port status and statistics select Monitoring Statistics window See Figure 5 Figure 5 Statistics Window The columns are defined in Table 3 on page 38 ...

Page 38: ...tus Displays the status up or down of the interface Packets Received Displays the total number of packets received on the interface Bytes Received Displays the total number of bytes received on the interface Packets Sent Displays the total number of packets transmitted on the interface Bytes Sent Displays the total number of bytes transmitted on the interface ...

Page 39: ...in the syslog client Refer to Sending Log Messages to a Syslog Server on page 62 Note All messages are deleted from the log when the access point is reset or powered off To permanently save the messages refer to Sending Log Messages to a Syslog Server on page 62 To view the system log select Monitoring Log Figure 6 on page 40 is an example Table 4 Message Severity Levels Severity Level Description...

Page 40: ...TQ6000 GEN2 Access Points User s Guide 40 Figure 6 Log Window for Event Messages ...

Page 41: ...bor AP Window Column Description MAC Address Displays the MAC address of the detected access point Detected Channel Displays the channel of the detected access point SSID Displays the network name SSID of the detected access point Type Displays the mode of the detected access point AP or Adhoc Signal Displays the intensity of the received signal in a four level bar graph icon Pointing to the icon ...

Page 42: ...ted clients IPv4 address Displays the IPv4 address of associated clients It is displayed when IPv4 is used NetBIOS name Displays the NetBIOS name of associated clients It displays n a when NetBIOS name is not acquired or during the acquisition SSID Displays the network name SSIDs to which the client is connected Channel Displays the radio channel the client is using Signal dBm Displays the strengt...

Page 43: ...etwork Time Protocol NTP on page 50 Manually Setting the Date and Time on page 53 Configuring the Web Browser Interface on page 55 Configuring SNMPv1 SNMPv2 and SNMPv3 on page 57 Displaying the System Log on page 61 Sending Log Messages to a Syslog Server on page 62 Enabling or Disabling the LEDs on page 64 Configuring PoE Negotiation with Link Layer Discovery Protocol LLDP on page 65 Enabling or ...

Page 44: ... Address to the Access Point on page 47 Note Changing the IP address of the access point might interrupt your management session To resume managing the device start another session using the access point s new IP address Note The default setting for the DHCP client is enabled You only need to perform this procedure if you disabled the client and assigned the device a static IP address but now want...

Page 45: ...T TQ6602 GEN2 AT TQm6602 GEN2 If you want the DHCP server to supply the hostname enable the Get Hostname from DHCP Server option in this window Connection Type Select DHCP This is the default The Static IP selection is explained in Assigning a Static IPv4 Address to the Access Point on page 47 Get Hostname from DHCP Select one of the following options Enabled When the DHCP server assigns an IP add...

Page 46: ...al IP Address for Captive Portal Assigns a virtual IP address for Captive Portal Wireless clients use the virtual address instead of the device s actual IP address to log on to captive portals Using a virtual address increases the security of your wireless network The device supports one virtual IP address Note This field is not supported with Wireless Distribution System WDS bridges This field is...

Page 47: ...tion from a DHCP server on your network refer to Assigning a Dynamic IP Address from a DHCP Server on page 44 Note Changing the IP address of the access point might interrupt your management session To resume managing the device start a new session using the access point s new IP address To assign a static IP address to the device perform the following procedure 1 Select Settings System from the m...

Page 48: ...t can have only one hostname The default is one of the following depending upon the model of your access point AT TQ6702 GEN2 AT TQm6702 GEN2 AT TQ6602 GEN2 AT TQm6602 GEN2 Connection Type Select Static IP Static IP Address Enter the new IP address for the access point The device can have only one IP address The default is 192 168 1 230 Subnet Mask Enter the subnet mask for the IP address The defa...

Page 49: ...se the virtual address instead of the device s actual IP address to log on to captive portals Using a virtual address increases the security of your wireless network The device supports one virtual IP address Note This option is not supported with Wireless Distribution System WDS bridges This field is optional The default value is NULL Table 8 Network Static IP Selection Window Continued Item Name...

Page 50: ...nly one server The access point must have an IPv4 address and subnet mask The access point must also have a default gateway address if the NTP server is on a different subnet or network The default gateway must specify the first router hop to the subnet or network of the SNTP server The client is compatible with SNTP servers It is not compatible with NTP servers To configure the NTP client perform...

Page 51: ...e access point observes daylight savings time click the check box for this option The window displays the fields in Figure 12 on page 52 If the area does not observe Daylight Savings time leave the check box empty Start Daylight Saving Use the pull down menus to set the date and time for the start of Daylight Savings Time End Daylight Saving Use the pull down menus to set the date and time for the...

Page 52: ...lified domain name FQDN example ntp mydomain com Here are the guidelines You can specify only one server The first character must be a letter or number It cannot be a special character The last character cannot be a hyphen or period The factory default is no server Observe these guidelines when using an FQDN to identify the server It cannot start or end with a hyphen Domain labels can have a maxim...

Page 53: ...y are returned to their default values Jan 1 00 00 00 2018 when the device is reset or powered off Note Allied Telesis recommends using an SNTP server to set the date and time For instructions refer to Setting the Date and Time with the Network Time Protocol NTP on page 50 To manually set the date and time perform the following procedure 1 Select Settings System from the main menu 2 Select Time fr...

Page 54: ...vings time click the dialog box for the Adjust Time for Daylight Savings parameter The window displays the fields in Figure 12 on page 52 If the area does not observe Daylight Savings time leave the check box empty Start Daylight Saving Use the pull down menus to set the date and time for the start of Daylight Savings Time End Daylight Saving Use the pull down menus to set the date and time for th...

Page 55: ...t Generate a self signed HTTPS certificate Note Do not disable both HTTP and HTTPS Otherwise you will not be able to manage the access point with a web browser Note HTTP management is non secure meaning the packets exchanged between the access point and your workstation are sent in clear text leaving them vulnerable to snooping For this reason Allied Telesis recommends using HTTPS to manage the ac...

Page 56: ...ctions The default is five sessions The access point blocks new management session after reaching the maximum number of sessions Session Timeout Specify the time in minutes when the access point automatically ends inactive sessions The range is 1 to 1440 minutes 1440 minutes 1 day The default is five minutes HTTP Status Enable or disable HTTP management The default is enabled HTTP Port Specify the...

Page 57: ...or SNMP management For more information see Assigning a Dynamic IP Address from a DHCP Server on page 44 or Assigning a Static IPv4 Address to the Access Point on page 47 To enable or disable SNMP perform the following procedure 1 Select Settings System from the main menu 2 Select SNMP from the sub menu Refer to Figure 15 Figure 15 SNMP Window 3 Select Disabled or Enabled in the Status field To co...

Page 58: ...lained here Enabled Select this option to activate the SNMP agent and trap settings This allows you to use SNMP to view the parameter settings on the access point It also allows the access point to send traps You have to enable SNMP to configure the settings in this window and the Trap Settings window Disabled Select this option to disable SNMP and the trap settings This is the default setting Ver...

Page 59: ...P to specific subnets or individual workstations The options are Enabled Restrict the use of SNMP on the access point to only the management stations specified in the Only allow from the designated hosts or subnets field Disabled Permit any workstation to use the community string to view the device This is the default setting Username SNMPv3 only Specify a user name for SNMP Password SNMPv3 only S...

Page 60: ...he same subnet for example 192 168 1 0 24 You can specify a workstation by its Fully Qualified Domain Name FQDN The default is blank Observe these guidelines when using an FQDN to specify the workstation It cannot start or end with a hyphen Domain labels can have a maximum of 63 characters An FQDN can have up to 253 characters System Name Specify the SNMP system name of the access point The defaul...

Page 61: ...Chapter 3 System Settings 61 Displaying the System Log See Displaying the System Log on page 39 ...

Page 62: ...ient Field Description Severity Select the severity of messages the access point is to display in the log file and transmit to the syslog server The severity levels are listed in Table 4 on page 39 Here are the guidelines You can specify only one severity level The severity level applies to both the messages displayed in the log file and transmitted to a syslog server The selected level includes t...

Page 63: ...the IPv4 address for example 10 10 1 200 or host name FQDN of the syslog server Here are the guidelines You can enter only one host Do not include a subnet mask with IP address The factory default is blank Observe these guidelines when using an FQDN to identify the host It cannot start or end with a hyphen Domain labels can have a maximum of 63 characters An FQDN can have up to 253 characters Port...

Page 64: ...default setting for the LEDs is on To turn the LEDs on or off perform the following procedure 1 Select Settings System in the main menu 2 Select LED in the sub menu Refer to Figure 18 F Figure 18 LED Window 3 From the Eco Mode pull down menu select one of the following Enabled The Eco Mode is enabled The LEDs are off Disabled The Eco Mode is disabled The LEDs are on This is the default setting 4 C...

Page 65: ...ot forwarded on to other devices on the network because LLDP is a on way protocol That is the information transmitted in LLDP advertisements flows in one direction only from one device to its neighbors LLDP transmits information in packets called LLDP Data Units LLDPDUs An LLDPDU consists of a set of Type Length Value elements TLV each containing a particular type of information about the device o...

Page 66: ...f the following from the PoE Negotiation Enabled Enables PoE negotiation The access point transmits the Extended Power Management TLV on the LAN1 port Disabled Disables PoE negotiation This is the default setting 4 Click the SAVE APPLY button to save and update the configuration ...

Page 67: ...s network Note If you disable the Reset button be sure not to forget the manager account password Otherwise you will not be able to manage the unit with the web browser interface To enable or disable the Reset button perform the following procedure 1 Select Settings System from the main menu 2 Select Hardware from the sub menu Refer to Figure 20 Figure 20 Hardware Window 3 From the ResetButton Ena...

Page 68: ...TQ6000 GEN2 Access Points User s Guide 68 ...

Page 69: ...69 Chapter 4 LAN Port This chapter describes the following procedures Enabling the Management VLAN Tag on page 70 Displaying the Status of LAN Port on page 75 ...

Page 70: ...VLAN 1 When the management VLAN Tag is enabled the access point accepts only tagged packets and discards all untagged packets Enabling or Disabling the Management VLAN Tag To enable or disable the management VLAN Tag perform the following procedure 1 Select Settings LAN from the main menu Refer to Figure 21 Figure 21 LAN Settings Window 2 Enable or disable Management VLAN Tag Enable Activates the ...

Page 71: ...into a static LAG A static LAG functions as a single logical link between the access point and another network device such as an Ethernet switch or router A static LAG also provides link redundancy If one link goes down the access point maintains connectivity to the wired network over the remaining link Refer to Figure 22 Figure 22 LAN1 and LAN2 Ports in a Static LAG Here are guidelines to using L...

Page 72: ...igure 23 Figure 23 LAN2 Port in Cascade Mode with an End Node It can also be a networking device such as a switch router or media converter Refer to Figure 24 Figure 24 LAN2 Port in Cascade Mode with a Networking Device Here are the Cascade mode guidelines The Cascade mode requires firmware version 8 0 1 1 1 or later You set the Cascade mode with the on board web browser management interface or wi...

Page 73: ...the VLAN Configuration section see Enabling or Disabling the Management VLAN Tag on page 70 2 From the Mode pull down menu in the LAN2 Port Configuration section configure the settings by referring to Table 14 Table 14 LAN Settings Window LAN2 Port Configuration Section Item Description Mode Select one of the following Disabled Disable LAN2 port Static LAG Combines LAN11 and LAN2 ports into a stat...

Page 74: ...int automatically combines LAN1 and LAN2 ports into a static LAG Configure the ports on the other network device as a static LAG and connect LAN1 and LAN2 ports to it If you enabled the Cascade mode connect the LAN2 port to a network device such as a personal computer or an Ethernet switch The access point begins forwarding and receiving traffic on the port ...

Page 75: ...efined in Table 15 Table 15 Status of LAN1 or LAN2 Window Item Name Description Mode LAN2 Only Displays LAN2 Port Configuration The options are Disabled Static LAG Cascade Status Displays the status of the LAN port The possible states are listed here Up The port has established a link with a network devices such as an Ethernet switch or router Down The port has not established a link with a networ...

Page 76: ... Points User s Guide 76 Duplex Mode Displays the duplex mode of the port as follows Full Full duplex Half Half duplex PoE Mode Displays the PoE mode Table 15 Status of LAN1 or LAN2 Window Continued Item Name Description ...

Page 77: ... 4GHz and 5GHz Radios This chapter has the following procedures Configuring the Radios on page 78 Displaying Radio Status on page 87 Dynamic Frequency Selection on page 90 Setting the Country Code Setting on page 91 ...

Page 78: ...onfiguring Basic Radio Settings To configure the basic settings for Radio1 or Radio2 perform the following procedure 1 Select Settings Radio 2 Select Radio1 or Radio2 from the sub menu You can configure only one radio at a time 3 Click the Basic Settings tab shown in Figure 27 This is the default tab Figure 27 Basic Radio Settings Window 4 Configure the settings by referring to Table 16 on page 79...

Page 79: ... radios Changing the country code disables the radios You have to reconfigure the radio settings if you change the country code You cannot change the country code on units sold in North America Japan or Taiwan Status Activate or deactivate the radio The selections in the pull down menu are described here Enabled Activates the radio Disabled Deactivates the radio This is the default setting Mode Ra...

Page 80: ...el for the radio from the pull down menu Here are the guidelines You can select only one channel The channels vary by radio bandwidth and country To view the current active channel refer to Displaying Radio Status on page 87 Bandwidth Radio1 Select the bandwidth for Radio1 from the pull down menu The selections for IEEE 802 11n are listed here 20 MHz This is the default setting 40 MHz For IEEE 802...

Page 81: ... ax are listed here 20 MHz This is the default setting 40 MHz 80 MHz 80 80 MHz The only bandwidth for IEEE 802 11a is 20 MHz Auto Channel Selection Radio 1 Select the channels that the radio can choose from when the Channel parameter is set to Auto Here are the guidelines A channel is enabled when its check box has a check and disabled when the check box is empty The available channels very by rad...

Page 82: ...nts Use this option to specify the maximum number of wireless clients that a radio will support at one time You might use the option to control the distribution of clients over the radios A radio rejects all clients when the parameter is set to 0 The maximum numbers of wireless clients that a radio supports at one time are 2 4GHz Radio1 320 clients default setting 5GHz Radio2 320 clients default s...

Page 83: ...reless clients to communicate with other clients in the same VAP or different VAPs and with the wired LAN This is the default setting Neighbor AP Detection Enable or disable Neighbor AP Detection which controls whether the access point listens for neighboring access points Here are the options Enabled The access point listens for neighboring access points and displays them in the Neighbor AP windo...

Page 84: ...ss can control at a time is 50 Band Steering Use this option to enable or disable band steering on the radios Band steering reduces radio congestion by forcing wireless clients that support both 2 4GHz and 5GHz radios to associate with VAPs on a different radio during periods of traffic congestion Band steering forces clients to associate with VAPs on a 5GHz radio when there is traffic congestion ...

Page 85: ...the access point can support up to 4 wireless clients simultaneously OFDMA Orthogonal Frequency Division Multiple Access OFDMA allows the access point to serve multiple wireless clients at the same time by dividing packets into separate bands The options are Disabled OFDMA is disabled This is the default setting Enabled The access point can serve multiple wireless clients at the same time Table 17...

Page 86: ...radar systems the 5GHz radio switches to another channel and keeps connectivity of wireless clients The access point keeps connectivity however a wireless client continues to be connected or disconnected and reconnected depending upon the behavior of wireless clients Here are guidelines to enable Off channel CAC For TQ6702 GEN2 and TQm6702 GEN2 Off channel CAC can be enabled only when the bandwidt...

Page 87: ...a radio perform the following procedure 1 Select Monitoring Status from the main menu 2 Select Radio1 or Radio2 from the sub menu You can view only one radio at a time The example in Figure 29 is for Radio1 Figure 29 Radio1 Status Window Figure 30 is an example for Radio2 Figure 30 Radio2 Status Window ...

Page 88: ...ddress Displays the MAC address of the wireless interface Status Displays the status up down of the wireless interface Mode Displays the current wireless communication mode Radio1 has these modes IEEE 802 11b g IEEE 802 11b g n ax Radio2 has these modes IEEE 802 11a IEEE 802 11a n ac ax Operational Channel Displays the active channel The channel may have been selected manually Bandwidth Displays t...

Page 89: ...he DFS radar detection period for one minute before beginning to transmit or receive wireless traffic If no radar is detected the radio moves to the ISM status ISM In Service Monitoring The radio is using a DFS target channel If radar is detected it changes the channel The DFS status changes to IDLE if the new channel is W52 or W58 or to CAC if the new channel is W53 or W56 OOC Out Of Channels The...

Page 90: ... DFS on 5GHz channels that countries or regions have designated as DFS channels If an access point detects a radar signal on its current 5GHz channel and if the channel is designated as a DFS channel it immediately marks the channel as unusable for a minimum of thirty minutes and randomly selects another channel with which to communicate with its clients Here are the guidelines for DFS on the wire...

Page 91: ...o set the country code setting perform the following procedure 1 Select Settings Radio 2 Select Radio1 from the sub menu The country code must be set from Radio1 3 Click the Basic Settings tab This is the default tab Refer to Figure 27 on page 78 4 Select the Country Code pull down menu and choose your country or region Here are the guidelines You can select only one country The Country Code param...

Page 92: ...TQ6000 GEN2 Access Poinst User s Guide 92 ...

Page 93: ...ains the procedures for managing Wireless Distribution Bridges The chapter contains the following sections Introduction to Wireless Distribution Bridges on page 94 WDS Bridge Elements on page 97 Guidelines on page 99 Preparing Access Points for a WDS Bridge on page 100 ...

Page 94: ... wired network over the WDS bridge to the parent An example of a parent with three children is shown in Figure 31 Figure 31 WDS Bridge When a child receives traffic from a wireless client that is intended for the wired network it transmits the traffic over the WDS bridge to the parent which forwards the packets on its LAN ports Conversely when a parent receives traffic on the wired network intende...

Page 95: ... different WDS bridges That is it can be a parent in one WDS bridge and a child in another Figure 33 on page 96 is an example Access Point A is functioning as the parent to children 1 and 2 in one WDS bridge and as child 5 to Access Point B in another bridge In contrast Access Point B is functioning solely as a parent in this case to children 3 4 and 5 which is Access Point A Each WDS bridge has t...

Page 96: ...ld be connected to the wired network Connecting the LAN ports on both parents to the wired network might form a loop in your network topology which might cause broadcast storms Child 2 Child 3 Child 4 Child 1 Parent Child 5 To Wired Network Access Point A Access Point B Parent Radio2 Channel 40 Radio2 Channel 40 Radio1 Channel 10 ...

Page 97: ...and channel settings for VAP0 must be the same on all the access points in the WDS bridge Radio Channel When access points are operating in close proximity to each other such that there is an overlap in coverage the usual practice is to set the radios to different channels to minimize radio interference and improve performance The radios in the access points of a WDS bridge however have to use the...

Page 98: ...hannel and if the channel is designated as a DFS channel it immediately marks the channel as unusable for a minimum of thirty minutes and randomly selects another channel with which to communicate with its clients If a wireless access point is using a DFS 5GHz channel for a WDS bridge and it detects radar signals it randomly selects another channel so as not to interfere with the signals This acti...

Page 99: ...ed Telesis recommends using WPA Personal security A WDS bridge has to be consisted of AT TQ6702 GEN2 AT TQm6702 GEN2 AT TQ6602 GEN2 or AT TQm6602 GEN2 access points The radios of the WDS bridge have to be set to the same mode and channel You must set the channel manually Do not use the Auto setting If you use Radio1or Radio2 for the bridge Allied Telesis recommends selecting a channel that is not ...

Page 100: ... WDS bridge To prepare an access point for a WDS bridge perform the following procedure 1 Start a management session 2 On the selected radio for the bridge set the mode and channel Refer to Configuring Basic Radio Settings on page 78 Here are the guidelines You can use any available radio mode for the bridge but the radios in the different access points must use the same mode You can use any avail...

Page 101: ...e on all access points to be in the WDS bridge When an access point is designated as a child it automatically begins searching for a parent on the designated radio and channel If it finds one it forwards traffic from its wireless clients over the bridge to the parent as needed and transmits traffic from the parent to its clients To view the children of a parent display the Associated Clients windo...

Page 102: ...TQ6000 GEN2 Access Poinst User s Guide 102 ...

Page 103: ... on page 105 Generating a Quick Response QR Code for a VAP on page 108 Configuring VAP Security on page 110 Configuring MAC Access Control on page 121 Configuring Captive Portal on page 129 Viewing Fast Roaming on page 146 Configuring Advanced Settings on page 150 Configuring MAC Access Control Settings on page 153 Configuring IEEE802 11u Integration of Wireless Services on page 155 Configuring Pa...

Page 104: ... VAP Each radio can have up to eight VAPs Allied Telesis recommends no more than five VAPs per radio for best performance The VAPs are numbered from 0 to 15 You can enable or disable the VAPs individually except for VAP0 which can only be disabled by disabling its radio You can enable 16 VAPs per radio The VAPs of a radio can have different security methods VAPs can have the same or different VLAN...

Page 105: ...radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Virtual Access Point tab This is the default tab The example in Figure 34 shows the settings for VAP0 on Radio1 Figure 34 Virtual Acc...

Page 106: ...enu choices are listed here Access Point Select this mode to have a VAP function as a normal VAP without WDS bridging This is the default setting Note The mode option for VAP1 to VAP15 is only Access Point WDS Parent WDS Child For more information see Chapter 6 Wireless Distribution System Bridges on page 93 SSID Enter a name for the VAP Here are the guidelines A VAP must have a name A name can be...

Page 107: ...his VID is ignored for wireless clients that receive their VIDs from a RADIUS server for WPA Enterprise security VIDs from a RADIUS server override the number in this field Hidden SSID Select whether the access point should advertise the VAP SSID to clients Here are the options Disabled The access point transmits the SSID to advertise the VAP to clients This is the default setting Enabled The acce...

Page 108: ...e not supported on VAPs that use RADIUS servers to authenticate wireless clients When a Radio is disabled a QR code for a VAP in the Radio wioo not generated To generate a QR code for a VAP perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP See ...

Page 109: ...Chapter 7 Virtual Access Points 109 Figure 35 QR Code 6 Download the QR code The QR code is ready to be used ...

Page 110: ...ss VAPs with no security This is the default setting To configure a VAP for no security perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without savin...

Page 111: ...E802 11b g or IEEE802 11 a See Configuring Basic Radio Settings on page 78 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save mu...

Page 112: ...cates VAP clients Here are the options Open System The access point does not authenticate VAP clients All clients even those without correct WEP keys can connect to the VAP This is the default setting Clients in an open system VAP still must have the correct WEP key to encrypt and decrypt the traffic they exchange with the access point Shared Key Clients must have the correct WEP key to connect wi...

Page 113: ...setting 64 bits Key Type Seelect a key type The options are Hex Enter keys in hexadecimalnumbers This is the default setting ASCII Enter keys in ASCII Transfer Key Index Select the key the access point should use to encrypt network traffic You can select only one key Key 1 to 4 Enter up to four WEP keys in the fields numbered 1 to 4 Here are the guidelines When the key length is set to 128 bits 26...

Page 114: ...ltiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Security tab 5 Select WPA Personal from the Mode pull down menu See Figure 38 on page 114 Figure 38 WPA Personal Security Tab 6 Configure the parameters by referring to Table 21 Table 21 WPA Personal Security Tab Field Description Mode Select WPA Personal ...

Page 115: ...here CCMP When the WPA version is WPA2 WPA2 and WPA3 or WPA3 CCMP is the only option TKIP and CCMP When the WPA version is WPA and WPA2 TKIP and CCMP is the only option For the TKIP and CCMP setting clients who are using WPA must have one of the following A valid TKIP key A valid CCMP AES key Key Enter a shared secret key Here are the guidelines The key can be from 8 to 63 alphanumeric characters ...

Page 116: ...u can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Security tab 5 Select WPA Enterprise from the Mode pull down menu See Figure 39 IEEE802 11w MFP Control IEEE 802 11w management frame protection The options are available only when the WPA version is WPA2 Disabled Disable Manag...

Page 117: ...pter 7 Virtual Access Points 117 Figure 39 WPA Enterprise Security Tab 6 Configure the parameters by referring to Table 22 Table 22 WPA Enterprise Security Tab Field Description Mode Select WPA Enterprise ...

Page 118: ...3 CCMP is the only option TKIP and CCMP When the WPA version is WPA and WPA2 TKIP and CCMP is the only option GCMP When the WPA version is WPA3 GCMP is the only option For the TKIP and CCMP setting clients configured to use WPA with RADIUS must have one of the following A valid TKIP RADIUS IP address and RADIUS key A valid CCMP IP address and RADIUS key IEEE802 11w MFP Control IEEE 802 11w managem...

Page 119: ...refreshing unicast session key to be sent to the wireless clients connected to the VAP Session keys are unique to each client The range is 0 to 86400 seconds The key is not updated when this parameter is set to 0 zero The default is 0 Session Key Refresh Action Select an action that the access point takes when a session is expired The options are Reauthentication Wireless clients are re authentica...

Page 120: ...efault is 1812 RADIUS Accounting Control RADIUS accounting When accounting is enabled the access point sends client information such as usage time to the RADIUS server The options are listed here Enabled Activate RADIUS accounting Disabled Deactivate RADIUS accounting This is the default setting RADUIS Accounting Port Enter the RADIUS accounting port number of the RADIUS server If you entered IP a...

Page 121: ...C Address List on page 127 Application Proxy on page 128 Disabling MAC Access Control To disable MAC Access Control of the on board MAC address list and external RADIUS server perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from ...

Page 122: ...cepts clients whose addresses are on the server and denies clients whose addresses are not on the server In summary when the on board filter is set to Allow the wireless access point accepts clients whose MAC address are either in the on board filter or on the RADIUS server When the on board MAC address filter is set to Deny the wireless access point authenticates wireless clients in this manner I...

Page 123: ...ntrol tab See Figure 40 on page 121 5 Select the MAC Address List External RADIUS option from the MAC Access Control pull down menu See Figure 41 Figure 41 MAC Access Control MAC Address List External RADIUS 6 Configure the parameters by referring to Table 23 Table 23 MAC Address List External RADIUS Window Field Description Primary RADIUS Server IP Enter the IPv4 address of the primary RADIUS ser...

Page 124: ...red IP addresses for both primary and secondary servers the units must be using the same port number The range is 0 to 65535 The default is 1812 User Name Format Separator Select the character that the access point should use to separate the octets in the MAC addresses it sends to the servers The MAC addresses function as the user name attributes for the wireless clients The choices are listed her...

Page 125: ...nal RADIUS server perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 User Password Format Format Specify the password for the MAC addresses The choices are listed here User Name The MAC add...

Page 126: ...MAC Access Control tab See Figure 40 on page 121 5 Select External RADIUS from the MAC Access Control pull down menu See Figure 42 Figure 42 MAC Access Control External RADIUS Window 6 Configure the parameters by referring to Table 23 on page 123 7 Click the SAVE APPLY button to save and update the configuration or configure other VAPs and save the configurations at once later 8 Or click VIEW QR C...

Page 127: ...edure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY butt...

Page 128: ...Proxy in the AMF Security controller The application proxy allows you to add security policies that define where and when clients can access your wireless network It also allows you to designate their network assignments by assigning them VLAN IDs This feature requires AMF Security mini or the AMF Security Controller AMF SEC v2 2 2 or later The TQ6000 GEN2 access points require Vista Manager EX v3...

Page 129: ...Authentication and Web Page Stored in the Access Point on page 131 A web page including your message and the Agree Button is displayed with no authentication Your message in HTML is stored in the access point Delegating a Proxy Sever to Interact with Wireless Clients on page 134 Interacting with wireless clients is conducted by the proxy server that you specify Place the HTML files or applications...

Page 130: ...he default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Captive Portal tab See Figure 44 Figure 44 Capital Portal Window 5 Select Disabled from the Captive Portal pull down menu Disabled is the default setting 6 Click the SAVE APPLY button to save and updat...

Page 131: ...adio2 from the sub menu The default is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Captive Portal tab 5 Select Click Through from the Captive P...

Page 132: ...cation Page Proxy on the Captive Portal Enabled The access point uses other web server s authentication page via proxy with Captive Portal See Delegating a Proxy Sever to Interact with Wireless Clients on page 134 Disabled The access point uses its own local authentication page with Captive Portal This is the default setting Select this option when you want to store a web page in the access point ...

Page 133: ... URL field Session Keep Directs clients to the web page they requested prior to the click through window Disabled Disables redirect The welcome html file that you prepared is displayed When the Captive Portal field is Click Through and the Authentication Proxy Page is Disabled the welcome page on the access point is displayed This is the default setting Session Timeout Specify the time interval in...

Page 134: ...ce by clicking the SAVE APPLY button 4 Select the Captive Portal tab 5 Select Click Through from the Captive Portal pull down menu 6 Select Enabled from the Authentication Page Proxy pull down menu See Figure 46 Walled Garden Enter the URLs of up to fifty approved HTTP web sites that wireless clients can access through the captive portals on the access point without having to log on Wireless clien...

Page 135: ...ce later 10 Or click VIEW QR CODE to generate a QR code 11 Go to Creating Pages in HTML for a Proxy Server on page 142 RADIUS Server for Authentication and External URL for Web Hosting To redirect wireless clients to an external URL for a logon window and authenticate them with an external RADIUS server perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radi...

Page 136: ... can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Captive Portal tab 5 Select External Page Redirect from the Captive Portal pull down menu See Figure 47 on page 136 Figure 47 Capital Portal External Page Redirect Window 6 Configure the parameters described in Table 25 on page 137 ...

Page 137: ...he Captive Portal field is Click Through and the Authentication Proxy Page is Disabled the welcome page on the access point is displayed This is the default setting Primary RADIUS Server IP Enter the IPv4 address of the primary RADIUS server The default is 192 168 1 1 Primary RADIUS Server Key Enter the shared secret key for the primary RADIUS server Here are the guidelines The key can be up to 12...

Page 138: ... configure from the next sub menu The default is VAP0 RADIUS Port Enter the RADIUS port number of the RADIUS server If you entered IP addresses for both primary and secondary servers the units must be using the same port number The range is 0 to 65535 The default is 1812 RADIUS Accounting Control RADIUS accounting When accounting is enabled the access point sends client information such as usage t...

Page 139: ...ations all at once by clicking the SAVE APPLY button 4 Select the Captive Portal tab 5 Select External RADIUS from the Captive Portal pull down menu See Figure 48 on page 139 6 Select Enabled from the Authentication Page Proxy pull down menu Figure 48 Capital Portal RADIUS and Authentication Page Proxy 7 Configure the parameters described in Table 26 ...

Page 140: ...oxy server to host web pages perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 You can configure only one radio at a time Table 26 Captive Portal External RADIUS and Proxy Field Description Authentication page Proxy See Table 24 on page 132 Base URL Redirect Type after user is authenticated See Table ...

Page 141: ... You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Captive Portal tab 5 Select External RADIUS from the Captive Portal pull down menu See Figure 48 6 Select Disabled from the Authentication Page Proxy pull down menu Figure 49 Capital Portal RADIUS and Authentication Page Proxy 7 Configure the parameters described in Table 27 on page 142 ...

Page 142: ...ing HTML files and place them on the proxy server Base URL click_through_login html Base URL click_through_login_fail html Base URL welcome html Optional Table 27 Captive Portal External RADIUS and Proxy Field Description Authentication page Proxy See Table 24 on page 132 Redirect Type after user is authenticated See Table 25 on page 137 Primary RADIUS Server IP Primary RADIUS Server Key Secondary...

Page 143: ...age The following is an example of HTML code html head title Terms of Service title head form method post By using our service you acknowledge that there are risks br inherent in accessing information through the internet br br input type submit value Agree input form html Figure 50 shows its web page displayed in a web browser Figure 50 Captive Portal Terms of Service Page Sample Creating Login P...

Page 144: ...name attribute specified to password for a wireless client to enter a password In the form element you must include a button tag or an input tag with the type attribute specified to submit for a wireless client to submit the data to the RADIUS server There is no requirements for a welcome html HTML Code and Display Examples of Login Page The following is an example of HTML code html head title Web...

Page 145: ...mbers are used with the IP address of the access point 8080 for HTTP http access point s IP address 8080 auth redirect wireless client s originally requested URL 8443 for HTTPS http access point s IPv4 address 8443 auth redirect wireless client s originally requested URL ...

Page 146: ...e you can view the parameter values The View QR Code button is not supported on the Fast Roaming window Viewing the IEEE802 11r Parameter Values To view the parameter values set to Fast Roaming IEEE802 11r perform the following procedure 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 3 Select a VAP The default is VAP0 4 Select th...

Page 147: ... WPA Enterprise or WPA Personal you can view the Fast Roaming settings but cannot change them Configuring the settings requires Vista Manager EX and AWC Table 28 Fast Roaming IEEE802 11r Field Description Fast Transition IEEE802 11r Fast Transition is enabled or disabled Distributing System Enable or Disable Distributing System is enabled or disabled ...

Page 148: ... page 147 5 View the status of IEEE802 11k The options are Enabled IEEE802 11k Radio Resource Measurement RRM is enabled Disabled IEEE802 11k Radio Resource Measurement RRM is disabled Mobility Domain Shows the domain name of the access point that provides Fast Roaming Here are the guidelines The name consists of 4 alphanumeric characters The key is not case sensitive The default value is a1b2 PMK...

Page 149: ...ling or disabling requires Vista Manager EX and AWC 1 Select Settings VAP Security from the main menu 2 Select Radio1 or Radio2 from the sub menu The default is Radio1 3 Select a VAP The default is VAP0 4 Select the Fast Roaming tab See Figure 52 on page 147 5 View the status of IEEE802 11v The options are Enabled IEEE802 11v Wireless Network Management WNM is enabled Disabled IEEE802 11v Wireless...

Page 150: ...lt is Radio1 You can configure only one radio at a time 3 Select a VAP to configure from the next sub menu The default is VAP0 Note You can configure multiple VAPs without saving each VAP configuration page You can save multiple VAP configurations all at once by clicking the SAVE APPLY button 4 Select the Advanced Settings tab See Figure 53 Figure 53 Advanced VAP Settings Window 5 Configure the pa...

Page 151: ... setting Ignore The access point responds to duplicate authentication requests by authenticating the clients again Association Advertisement Controls whether the access point informs other access points of newly associated clients over the wired network When the access point associates new clients it can inform the access points to which the clients were previously connected of the change This ena...

Page 152: ...he access point is installed as standalone DTIM Period Controls the delivery traffic indication map DTIM period This specifies the number of beacons an access point transmits before transmitting any buffered broadcast or multicast packets This allows wireless clients that are in the Sleep Mode to wake up prior to receiving the packets The range is 1 to 255 beacons The default is 1 beacon Specify t...

Page 153: ...ontrol and MAC Address List The access point has only one MAC Address Control You can activate or deactivate MAC Address Control on individual VAPs You cannot enter broadcast or multicast addresses To activate MAC Address Control on VAPs See Configuring MAC Access Control on page 121 To add entries to the MAC address list perform the following procedure 1 Select Settings MAC Address List Refer to ...

Page 154: ... format xx xx xx xx xx xx and click Add button Click the Import from CSV button to upload a csv file which includes one or more MAC addresses in the format xx xx xx xx xx xx that are separated with a comma 4 Click the Add button 5 To remove addresses do one of the following To delete MAC addresses individually click the check boxes of the addresses in the list and click the Delete button To delete...

Page 155: ...Chapter 7 Virtual Access Points 155 Configuring IEEE802 11u Integration of Wireless Services The IEEE802 11u standard is not supported ...

Page 156: ...TQ6000 GEN2 Access Points User s Guide 156 Configuring Passpoint Passpoint is not supported ...

Page 157: ...ce This chapter describes the following procedures Introduction to Quality of Service on page 158 Configuring QoS Basic Settings on page 160 Configuring AP EDCA Parameters on page 161 Configuring Station EDCA Parameters on page 164 ...

Page 158: ... traffic the access point transmits to the wireless clients The Station Enhanced Distributed Channel Access EDCA Parameters table controls the four queues that store ingress traffic the access point receives from the clients To configure the QoS settings for the radios perform the following procedure 1 Select Settings QoS from the main menu 2 Select Radio1 or Radio2 from the sub menu You can confi...

Page 159: ...Chapter 8 Quality of Service 159 Figure 55 QoS Window ...

Page 160: ...till configure some of the parameters that control the downstream traffic from the access point to the clients WMM must be enabled on radios that use IEEE 802 11n or IEEE 802 11ac No Acknowledgment Enable or disable No Acknowledgment Acknowledgment is a verification signal data that wireless clients transmit to the access points The Acknowledgment process takes bandwidth and airtime Here are the o...

Page 161: ...2 best effort Medium priority queue with minimum throughput and delay The queue is used to store most traditional IP data Data 3 Background Lowest priority queue with high throughput This queue is used for bulk data that requires maximum throughput and is not time sensitive such as FTP packets AIFS InterFrame Space Select the Arbitration Inter Frame Spacing AIFS value to control the amount of time...

Page 162: ... Valid values for this parameter are 1 3 7 15 31 63 127 255 511 and 1023 This parameter must be lower than the cwMax value The defaults are 3 for Data 0 7 for Data 1 and 15 for Data 2 and Data 3 cwMax Maximum Contention Window Select the maximum contention window which is the upper limit in milliseconds for doubling the random back off value The doubling continues until either the data frame is se...

Page 163: ...mation The decreased overhead results in higher throughput and better performance Here are the guidelines This is an AP EDCA parameter only and as such applies only to egress traffic from the access point to the wireless clients The factory defaults are 1 5 for Data 0 3 0 for Data 1 and 0 for Data 2 and Data 3 The range is 0 0 to 8 1 seconds Table 31 QoS Window AP EDCA Parameters Continued Paramet...

Page 164: ...th minimum delay The queue is used to store time sensitive data such as video traffic Data 2 best effort Medium priority queue with minimum throughput and delay The queue is used to store most traditional IP data Data 3 Background Lowest priority queue with high throughput This queue is used for bulk data that requires maximum throughput and is not time sensitive such as FTP packets AIFS InterFram...

Page 165: ...ss than or equal to the cwMax value Valid values for this parameter are 1 3 7 15 31 63 127 255 511 and 1023 milliseconds The defaults are 3 for Data 0 7 for Data 1 and 15 for Data 2 and Data 3 cwMax Maximum Contention Window Select the maximum contention window which is the upper limit in milliseconds for doubling the random back off value The doubling continues until either the data frame is sent...

Page 166: ...that a WME client has the right to initiate transmission to the access point Here are the guidelines The time intervals are in 32 microseconds The range is 0 to 256 intervals The default intervals are 47 for Data 0 94 for Data 1 and 0 for Data 2 and Data 3 Table 32 QoS Window Station EDCA Parameters Continued Parameter Description ...

Page 167: ... to Your Computer on page 168 Restoring a Configuration to the Access Point on page 169 Restoring the Default Settings to the Access Point on page 170 Uploading New Management Software to the Access Point on page 171 Rebooting the Access Point on page 173 Collecting Technical Support Information to a File on page 174 ...

Page 168: ...igure one unit and then transfer its configuration to the other units Please review the following information before performing this procedure You cannot edit a configuration file with a text editor This procedure does not interrupt the operations of the access point To download the configuration of the access point as a file to your workstation perform the following procedure 1 Select Maintenance...

Page 169: ... after you restore a configuration to prevent an IP address conflict from occurring among the devices You cannot edit a configuration file with a text editor Note The access point resets when you restore a configuration It does not forward network traffic for one minute while it initializes its management software This procedure assumes that the configuration file is stored on your management work...

Page 170: ...default IP address 192 168 1 230 Note The default setting for the radios is off Consequently the access point stops forwarding network traffic when returned to its default settings To activate the default settings on the access point perform the following procedure 1 Select Maintenance Configuration from the main menu Refer to Figure 56 on page 168 2 Click the Initialize button in the Factory Defa...

Page 171: ...settings of the access point are retained when a new firmware image is uploaded to the device The access point does not compare the version numbers of the new and current firmware when it uploads the management software You should compare the numbers yourself to avoid uploading an older version of the firmware to the access point The upgrade process takes about 10 minutes Caution Do not power off ...

Page 172: ...k the Upgrade button The access point displays a confirmation prompt 4 Click the Proceed button to start the upgrade procedure or Cancel to cancel the procedure 5 Wait ten minutes for the access point to upload the firmware write it into its flash memory and reboot Note Do not close the web browser window or change to a different window until the entire procedure is finished Interrupting the trans...

Page 173: ... traffic may be lost E113 To reboot the access point perform the following procedure 1 Select Maintenance Reboot from the main menu Refer to Figure 58 Figure 58 Reboot Window 2 Click the Reboot button The access point displays a confirmation prompt 3 Click OK Your current management session is interrupted 4 To resume managing the unit wait one minute for it to complete initializing its management ...

Page 174: ...rt information helps Allied Telesis technicians troubleshoot problems with the device Note You should only perform this procedure when instructed to do so by an Allied Telesis technician To collect technical support information to a file and send it to Allied Telesis perform the following procedure 1 Select Maintenance Support from the main menu Refer to Figure 59 Figure 59 Support Window 2 Read t...

Page 175: ...the Encryption Key field This step is optional Here are the guidelines The key can be up to 32 alphanumeric characters It is case sensitive Spaces are not allowed Be sure to send the key to the technicians at Allied Telesis The factory default is blank The file is sent in clear text if you do not enter a key 5 Click the Download button Your web browser prompts you to save a zip file 6 Save the zip...

Page 176: ...TQ6000 GEN2 Access Points User s Guide 176 ...

Page 177: ...177 Chapter 10 Account Menu This chapter contains the following procedures Changing the Manager s Login Name and Password on page 178 Setting the Language of the Web Browser Interface on page 180 ...

Page 178: ...ongly recommends changing the factory default password during the first management session to protect the device from unauthorized access To change the login name and password of the manager account perform the following procedure 1 Select Account User from the main menu Refer to Figure 60 Figure 60 User Window 2 To change the manager name select the Administrator Name field and enter a new name H...

Page 179: ...l 4 Select the New Password field and enter a new password The new password Here are the guidelines The password can be up to 32 alphanumeric characters It can not contain spaces or any of these special characters It is case sensitive 5 Select the Confirm New Password field and enter the new password again 6 Click the SAVE APPLY button to save and update the configuration You must use the new mana...

Page 180: ...ese The default is English To set the language perform the following procedure 1 Select Account Language from the main menu Refer to Figure 61 Figure 61 Language Window 2 From the Language pull down menu select one of the following English Japanese 3 Click the SAVE APPLY button to save and update the configuration The management interface changes to the designated language ...