Document Outline

• Contents
  • Figure 1. AT-WA7400 CD Main Page 27
  • Figure 2. KickStart Page 27
  • Figure 3. KickStart Welcome Dialog Box 28
  • Figure 4. KickStart Search Results Dialog Box 28
  • Figure 5. Administration Dialog Box 29
  • Figure 6. KickStart Setup Wizard Dialog Box 30
  • Figure 7. Select Installation Folder Dialog Box 31
  • Figure 8. KickStart Setup Disk Space Dialog Box 31
  • Figure 9. KickStart Installation Confirmation Dialog Box 32
  • Figure 10. Installing KickStart Dialog Box 32
  • Figure 11. KickStart Installation Complete Dialog Box 33
  • Figure 12. Login Dialog Box 34
  • Figure 13. Basic Settings Page 35
  • Figure 14. Navigational Aids 36
  • Figure 15. Summary of Settings Page 40
  • Figure 16. Default Web Page 42
  • Figure 17. Access Points Page 48
  • Figure 18. Settings of Access Point that Joined the Cluster 50
  • Figure 19. MAC Filtering Page 53
  • Figure 20. Configure Rogue MAC Filtering of Access Point Page 55
  • Figure 21. User Management Page 58
  • Figure 22. User Accounts Section 60
  • Figure 23. Backup or Restore User Database Page 62
  • Figure 24. Sessions Page 66
  • Figure 25. Without Automatic Channel Management: Access Points Can Broadcast on Overlapping Channels 71
  • Figure 26. With Channel Management Enabled: Access Points are Re-Assigned to Non-Interfering Channels 71
  • Figure 27. Channel Management Page 72
  • Figure 28. Wireless Neighborhood Page 81
  • Figure 29. Neighbor Details Information 84
  • Figure 30. Ethernet (Wired) Settings Page 88
  • Figure 31. Wireless Settings Page 98
  • Figure 32. Security Page 114
  • Figure 33. Static WEP Security Mode Settings 117
  • Figure 34. Setting the AP Transfer Key on the Access Point 119
  • Figure 35. Providing a Wireless Client with a WEP Key 120
  • Figure 36. Example of Using Multiple WEP Keys and Transfer Key Index on Client Stations 121
  • Figure 37. IEEE 802.1x Security Mode Settings 122
  • Figure 38. WPA/WPA2 Personal (PSK) Security Mode Settings 124
  • Figure 39. WPA/WPA2 Enterprise (RADIUS) Security Mode Settings 126
  • Figure 40. IAPP Map Table 129
  • Figure 41. SNMP Configuration Page 131
  • Figure 42. Guest Login Configuration Page 136
  • Figure 43. Virtual Wireless Networks Page 140
  • Figure 44. VLAN Management Page 143
  • Figure 45. Radio One Page 147
  • Figure 46. Radio One Rate Sets 152
  • Figure 47. Radio Two Rate Sets 152
  • Figure 48. Load Balancing Page 158
  • Figure 49. Quality of Service Page 168
  • Figure 50. Example Wireless Network 174
  • Figure 51. WDS Bridge 175
  • Figure 52. Wireless Distribution System Page 179
  • Figure 53. Interfaces Page 184
  • Figure 54. Events Page 186
  • Figure 55. Transmit/Receive Statistics Page 190
  • Figure 56. Client Associations Page 192
  • Figure 57. Neighboring Access Points Page 193
  • Figure 58. System Information Page 197
  • Figure 59. Basic Settings Page 200
  • Figure 60. Time Protocol Page 202
  • Figure 61. HTTP TImeout 204
  • Figure 62. Reboot Page 205
  • Figure 63. Reset Configuration Page 206
  • Figure 64. Upgrade Firmware Page 208
  • Figure 65. Configure SNMP Firmware Upgrade Page 209
  • Figure 66. Backup/Restore Page 212
  • Figure 67. Wireless Network Connections Properties Dialog Box 222
  • Figure 68. Wireless Network Properties Dialog Box 223
  • Figure 69. Wireless Network Properties Dialog Box 224
  • Figure 70. Security Settings Page 225
  • Figure 71. Wireless Network Properties Dialog Box 226
  • Figure 72. Security Settings Page 228
  • Figure 73. Association and Authentication Tabs 228
  • Figure 74. Protected EAP Properties Dialog Box and EAP Properties Dialog Box 230
  • Figure 75. Security Settings Page 232
  • Figure 76. Association and Authentication Tabs 233
  • Figure 77. Smart Card or other Certificate Properties Dialog Box 234
  • Figure 78. Security Settings Page 237
  • Figure 79. User Management Accounts Page 238
  • Figure 80. Wireless Network Properties Dialog Box 239
  • Figure 81. Protected AP Properties Dialog Box 240
  • Figure 82. Security Settings Page 242
  • Figure 83. Association and Authentication Tabs 243
  • Figure 84. Smart Card or other Certificate Properties Dialog Box 244
  • Figure 85. Security Settings Page 245
  • Figure 86. Association Tab 246
  • Figure 87. Security Settings Page 249
  • Figure 88. Internet Authentication Service Window 250
  • Figure 89. New RADIUS Client Dialog Box, Name and Address Dialog Box 251
  • Figure 90. New RADIUS Client Wizard Additional Information Dialog Box 251
  • Figure 91. Internet Authentication Service Window Showing Access Point 252
  • Figure 92. Security Alert Window 254
  • Figure 93. Certificate Server Welcome Page 254
  • Figure 94. RADIUS Server Login Window 255
  • Figure 95. Request a Certificate Page 255
  • Figure 96. Security Warning Dialog Box 256
  • Figure 97. User Certificate Dialog Box 256
  • Figure 98. Potential Scripting Violation Dialog Box 256
  • Figure 99. Certificate Issued Dialog Box 257
  • Figure 100. Potential Scripting Error Dialog Box 257
  • Figure 101. Root Certificate Store Dialog Box 257
  • Figure 102. Certificate Installed Confirmation Window 258
  • Figure 103. Stop Clustering Page 262
  • Figure 104. Reset Configuration Page 263
  • Figure 105. Cluster Management Page 263
  • Figure 106. PuTTY Configuration Dialog Box 271
  • Figure 107. CLI Class Relationships 355
• Figures
  • Table 1. Static WEP Configuration 108
  • Table 2. IEEE 802.1x Configuration 109
  • Table 3. WPA/WPA2 Configuration 110
  • Table 4. RADIUS Security 111
  • Table 5. Worldwide Frequencies for 802.11g and 802.11b Radios 148
  • Table 6. Management Software Default Settings 215
  • Table 7. Comparison of CLI to Web Browser Interface Settings 266
  • Table 8. Commands and Syntax 273
  • Table 9. Interfaces in the CLI 279
  • Table 10. Basic Settings Commands 282
  • Table 11. Cluster Functions and Commands 286
  • Table 12. User Account Commands 287
  • Table 13. Status Commands 290
  • Table 14. Wired Interface Commands 301
  • Table 15. Security Commands 304
  • Table 16. WEP Key Length Commands 308
  • Table 17. Key Type Commands 308
  • Table 18. Authentication Algorithm Commands 309
  • Table 19. Authentication Server Commands 312
  • Table 20. RADIUS Accounting Commands 313
  • Table 21. WPA Version 315
  • Table 22. Cipher Commands 316
  • Table 23. WPA Version Command 318
  • Table 24. Preauthentication Commands 319
  • Table 25. Cipher Commands 319
  • Table 26. Authentication Server Commands 320
  • Table 27. RADIUS Accounting Commands 321
  • Table 28. WPA Client Commands 321
  • Table 29. Guest Login and Welcome Page Commands 323
  • Table 30. Radio Settings Commands 326
  • Table 31. Radio Operation Commands 329
  • Table 32. Radio Mode Commands 330
  • Table 33. Rate Set Commands 331
  • Table 34. Accept and Deny List Commands 334
  • Table 35. QoS Commands 337
  • Table 36. Queue Commands 339
  • Table 37. WDS Commands 345
  • Table 38. Keyboard Shortcuts 349
• Tables
• Preface
  • Where to Find Web-based Guides
  • Contacting Allied Telesyn
    • Online Support
    • Email and Telephone Support
    • Returning Products
    • Sales or Corporate Information
    • Management Software Updates
• Chapter 1
• Preparing to Set Up the AT-WA7400 Wireless Access Point
  • Setting Up the Administrator’s Computer
  • Setting Up the Wireless Client Computers
  • Understanding Dynamic and Static IP Addressing on the AT-WA7400 Management Software
    • Dynamic IP Addressing
    • Static IP Addressing
    • Recovering an IP Address
• Chapter 2
• Setting up the AT-WA7400 Management Software
  • Running KickStart to Find Access Points on the Network
    • Installing KickStart on the Administrator’s PC
  • Logging in to the AT-WA7400 Management Software
  • Navigating the Web Pages
    • Links
    • Menu
    • Help
  • Configuring the Basic Settings and Starting the Wireless Network
    • Configuring the Basic Settings
    • Default Configuration
  • Next Steps
    • Make Sure the Access Point is Connected to the LAN
    • Test LAN Connectivity with Wireless Clients
    • Secure and Fine- Tune the Access Point Using Advanced Features
  • Logging in After the Initial Setup
• Chapter 3
• Managing Access Points and Clusters
  • Understanding Clustering
    • What is a Cluster?
    • How Many Access Points Can a Cluster Support?
    • What Kinds of Access Points Can Cluster Together?
    • What is the Relationship of the Master Access Point to Other Cluster Members?
    • Which Settings are Shared as Part of the Cluster Configuration and Which Are Not?
      • Settings Shared in the Cluster Configuration
      • Settings Not Shared by the Cluster
    • Cluster Mode
    • Standalone Mode
    • Cluster Formation
    • Cluster Size and Membership
    • Intra-Cluster Security
    • Auto-Synch of Cluster Configuration
  • Understanding and Changing Access Point Settings
    • Modifying the Location Description
    • Removing an Access Point from the Cluster
    • Adding an Access Point to a Cluster
  • Navigating to Configuration Information for a Specific Access Point and Managing Standalone Access Points
    • Navigating to an Access Point by Using its IP Address in a URL
  • Configuring MAC Address Filtering
  • MAC Filtering of Rogue Access Points
• Chapter 4
• Managing User Accounts
  • Adding a User
  • Editing a User Account
    • Enabling a User Account
    • Disabling a User Account
    • Removing a User Account
  • Backing Up and Restoring a User Database
    • Backing Up the User Database
    • Restoring a User Database from a Backup File
• Chapter 5
• Session Monitoring
  • Viewing Sessions Information
    • Viewing Specific Session Information
    • Sorting Session Information
• Chapter 6
• Channel Management
  • Understanding Channel Management
    • How it Works in a Nutshell
    • Overlapping Channels
    • Example: A Network Before and After Channel Management
  • Displaying the Channel Management Settings
  • Configuring the Channel Management Settings
    • Stopping or Starting Automatic Channel Assignment
    • Viewing Current Channel Assignments and Setting Locks
    • Updating the Current Channel Settings Manually
    • Viewing the Last Proposed Set of Changes
    • Configuring Advanced Settings (Customizing and Scheduling Channel Plans)
• Chapter 7
• Wireless Neighborhoods
  • Understanding Wireless Neighborhood Information
  • Displaying the Wireless Neighborhood Information
  • Viewing Details of a Cluster Member
• Chapter 8
• Configuring Ethernet (Wired) Settings
  • Setting the DNS Name
  • Enabling or Disabling Guest Access
    • Configuring an Internal LAN and a Guest Network
    • Enabling or Disabling Guest Access
    • Enabling or Disabling Virtual Wireless Networks on the Access Point
  • Enabling or Disabling Spanning Tree
  • Configuring the Internal Interface Ethernet Settings
  • Configuring the Guest Interface Settings
• Chapter 9
• Configuring the Wireless Settings
  • Configuring 802.11d Regulatory Domain Support
  • Configuring the Radio Interface
  • Configuring Internal Wireless LAN Settings
  • Configuring the Guest Network Wireless Settings
• Chapter 10
• Configuring Security
  • Understanding Security Issues on Wireless Networks
    • How Do I Know Which Security Mode to Use?
    • Comparison of Security Modes for Key Management, Authentication and Encryption Algorithms
      • When to Use Plain Text
      • When to Use Static WEP
      • When to Use IEEE 802.1x
      • When to Use WPA/WPA2 Personal (PSK)
      • When to Use WPA/WPA2 Enterprise (RADIUS)
    • Does Prohibiting the Broadcast SSID Enhance Security?
    • How Does Station Isolation Protect the Network?
  • Configuring Security Settings
    • Broadcast SSID, Station Isolation, and Security Mode
    • Plain Text
      • Guest Network
    • Static WEP
      • Rules to Remember for Static WEP
      • Example of Using Static WEP
    • IEEE 802.1x
    • WPA/WPA2 Personal (PSK)
    • WPA/WPA2 Enterprise (RADIUS)
  • Configuring the IAPP Mapping Table
  • Configuring SNMP
• Chapter 11
• Setting Up Guest Access
  • Understanding the Guest Interface
  • Configuring the Guest Interface
    • Configuring a Guest Network on a Virtual LAN
    • Configuring the Welcome Screen (Captive Portal)
  • Using the Guest Network as a Client
• Chapter 12
• VLANs
  • Configuring VLANs
  • Configuring the Management VLAN
• Chapter 13
• Configuring Radio Settings
  • Understanding Radio Settings
  • Configuring Radio Settings
  • Configuring the Rate Sets
• Chapter 14
• Load Balancing
  • Understanding Load Balancing
    • Identifying the Imbalance: Overworked or Under-utilized Access Points
    • Specifying Limits for Utilization and Client Associations
    • Load Balancing and QoS
  • Configuring Load Balancing
• Chapter 15
• Configuring Quality of Service (QoS)
  • Understanding QoS
    • QoS and Load Balancing
    • 802.11e and WMM Standards Support
    • QoS Queues and Parameters to Coordinate Traffic Flow
      • QoS Queues and Type of Service (ToS) on Packets
      • EDCF Control of Data Frames and Arbitration Interframe Spaces
      • Random Backoff and Minimum / Maximum Contention Windows
      • Packet Bursting for Better Performance
      • Transmission Opportunity (TXOP) Interval for Client Stations
  • Configuring QoS Queues
    • Configuring AP EDCA Parameters
    • Enabling/ Disabling Wi-Fi Multimedia
    • Configuring Station EDCA Parameters
• Chapter 16
• Configuring the Wireless Distribution System (WDS)
  • Understanding the Wireless Distribution System
    • Using WDS to Bridge Distant Wired LANs
    • Using WDS to Extend the Network Beyond the Wired Coverage Area
    • Backup Links and Unwanted Loops in WDS Bridges
    • Security Considerations Related to WDS Bridges
    • WDS Guidelines
  • Configuring WDS Settings
    • Example of Configuring a WDS Link
• Chapter 17
• Maintenance and Monitoring
  • Monitoring Wired and Wireless LAN Settings
  • Viewing the Event Logs
    • Log Relay Host for Kernel Messages
      • Setting Up the Log Relay Host
      • Enabling or Disabling the Log Relay Host
    • Events Log
  • Viewing the Transmit/Receive Statistics
  • Viewing the Associated Wireless Clients
    • Link Integrity Monitoring
    • What is the Difference Between an Association and a Session?
  • Viewing the Status of Neighboring Access Points
  • Viewing System Information
  • Setting the Administrator Password
  • Enabling the Network Time Protocol (NTP) Server
  • Setting the HTTP Timeout
  • Rebooting the Access Point
  • Resetting the Configuration to Factory Defaults
  • Upgrading the Firmware
    • Verifying the Firmware Upgrade
  • SNMP Firmware Upgrade
• Chapter 18
• Backing Up and Restoring a Configuration
  • Backing up the Configuration Settings for an Access Point
  • Restoring Access Point Settings to a Previous Configuration
• Appendix A
• Management Software Default Settings
• Appendix B
• Configuring Security on Wireless Clients
  • Network Infrastructure and Choosing Between the Built-in or External Authentication Server
    • I Want to Use the Built-in Authentication Server (EAP- PEAP)
    • I Want to Use an External RADIUS Server with EAP-TLS Certificates or EAP-PEAP
  • Make Sure the Wireless Client Software is Up to Date
  • Accessing the Microsoft Windows Wireless Client Security Settings
    • Configuring a Client to Access an Unsecure Network (Plain Text mode)
    • Configuring Static WEP Security on a Client
      • Connecting to the Wireless Network with a Static WEP Client
    • Configuring IEEE 802.1x Security on a Client
      • IEEE 802.1x Client Using EAP/PEAP
      • IEEE 802.1x Client Using EAP/TLS Certificate
  • Configuring WPA/WPA2 Enterprise (RADIUS) Security on a Client
    • WPA/WPA2 Enterprise (RADIUS) Client Using EAP/PEAP
    • WPA/WPA2 Enterprise (RADIUS) Client Using EAP-TLS Certificate
  • Configuring WPA/WPA2 Personal (PSK) Security on a Client
  • Configuring an External RADIUS Server to Recognize the AT-WA7400 Wireless Access Point
  • Obtaining a TLS-EAP Certificate for a Client
• Appendix C
• Troubleshooting
  • Wireless Distribution System (WDS) Problems and Solutions
  • Cluster Recovery
    • Reboot or Reset the Access Point
    • Stop Clustering and Reset Each Access Point in the Cluster
• Appendix D
• Command Line Interface (CLI) for Access Point Configuration
  • Comparison of Settings Configurable with the CLI and Web UI
  • Accessing the CLI for an Access Point
    • Telnet Connection to the Access Point
    • SSH Connection to the Access Point
  • Quick View of Commands and How to Get Help
    • Commands and Syntax
    • Getting Help on Commands at the CLI
  • Command Usage and Configuration Examples
    • Understanding Interfaces as Presented in the CLI
    • Saving Configuration Changes
    • Basic Settings
      • Get the IP Address for the Internal Interface on an Access Point
      • Get the MAC Address for an Access Point
      • Get Both the IP Address and MAC Address
      • Get Common Information on All Interfaces for an Access Point
      • Get the Firmware Version for the Access Point
      • Get the Location of the Access Point
      • Set the Location for an Access Point
      • Get the Current Password
      • Set the Password
      • Get the Wireless Network Name (SSID)
      • Set the Wireless Network Name (SSID)
    • Access Point and Cluster Settings
      • Determine if the Access Point is a Cluster Member or in Standalone Mode
      • Get MAC Addresses for all Access Points in the Cluster
      • Configure the Access Point as a Member of a Cluster
      • Configure the Access Point as a Standalone Device
    • User Accounts
      • Get All User Accounts
      • Add Users
      • Remove a User Account
    • Displaying Status
      • Get Common Information on the Internal Interface for the Access Point
      • Get Current Settings for the Ethernet (Wired) Internal Interface
        • Get All Wired Settings for the Wired Internal Interface
        • Get the MAC Address for the Wired Internal Interface
        • Get the Network Name (SSID) for the Wired Internal Interface
      • Get Current Settings for the Ethernet (Wired) Guest Interface
      • Get Current Wireless (Radio) Settings
        • Get the Current IEEE 802.11 Radio Mode
        • Get the Channel the Access Point is Currently Using
        • Get Basic Radio Settings for the Internal Interface
        • Get All Radio Settings on the Internal Interface
      • Get Status on Events
      • Enable Remote Logging and Specify the Log Relay Host for the Kernel Log
        • Prerequisites for Remote Logging
        • View Log Settings
        • Enable / Disable Log Relay Host
        • Specify the Relay Host
        • Specify the Relay Port
        • Review Log Settings After Configuring Log Relay Host
      • Get Transmit / Receive Statistics
      • Get Client Associations
      • Get Neighboring Access Points
    • Ethernet (Wired) Interface
      • Get Summary View of Internal and Guest Interfaces
      • Get the DNS Name
      • Set the DNS Name
      • Get Wired Internal Interface Settings
      • Get Wired Guest Interface Settings
      • Set DNS Nameservers to Use Static IP Addresses (Dynamic to Manual Mode)
      • Set DNS Nameservers to Use DHCP IP Addressing (Manual to Dynamic Mode)
    • Setting Up the Wireless Interface
    • Setting Up Security
      • Get the Current Security Mode
      • Get Detailed Description of Current Security Settings
      • Set the Broadcast SSID (Allow or Prohibit)
      • Enable/Disable Station Isolation
      • Set Security to Plain Text
      • Set Security to Static WEP
        • Set the Security Mode
        • Set the Transfer Key Index
        • Set the Key Length
        • Set the Key Type
        • Set the WEP Keys
        • Set the Authentication Algorithm
        • Get Current Security Settings After Re-Configuring to Static WEP Security Mode
      • Set Security to IEEE 802.1x
        • Set the Security Mode
        • Set the Authentication Server
        • Set the RADIUS Key (For External RADIUS Server Only)
        • Enable RADIUS Accounting (External RADIUS Server Only)
        • Get Current Security Settings After Re-Configuring to IEEE 802.1x Security Mode
      • Set Security to WPA/WPA2 Personal (PSK)
      • Set Security to WPA/WPA2 Enterprise (RADIUS)
        • Set the Security Mode
        • Set the WPA Versions
        • Enable Pre-Authentication
        • Set the Cipher Suites
        • Set the Authentication Server
        • Set the RADIUS Key (For External RADIUS Server Only)
        • Enable RADIUS Accounting (External RADIUS Server Only)
        • Allow Non-WPA Clients
        • Get Current Security Settings After Reconfiguring to WPA/WPA2 Enterprise (RADIUS)
    • Enabling and Configuring the Guest Login Welcome Page
      • View Guest Login Settings
      • Enable/Disable the Guest Welcome Page
      • Set Guest Welcome Page Text
      • Review Guest Login Settings
    • Configuring Multiple BSSIDs on Virtual Wireless Networks
      • Configuring Virtual Wireless Network “One” on Radio One
        • Configure These Settings from the Web UI First
        • Use the CLI to Configure Security on the Interface
        • Use the CLI to set the Network Name (SSID) for the New Virtual Wireless Network
      • Creating VWN “Two” on Radio One with WPA security
    • Radio Settings
      • Get IEEE 802.11 Radio Mode
      • Get Radio Channel
      • Get Basic Radio Settings
      • Get All Radio Settings
      • Get Supported Rate Set
      • Get Basic Rate Set
      • Configure Radio Settings
        • Turn the Radio On or Off
        • Set the Radio Mode
        • Enable or Disable Super AG
        • Set the Radio Channel
        • Set the Beacon Interval
        • Set the DTIM Period
        • Set the Fragmentation Threshold
        • Set the RTS Threshold
        • Configure Basic and Supported Rate Sets
    • MAC Filtering
      • Specify an Accept or Deny List
      • Add MAC Addresses of Client Stations to the Filtering List
      • Remove a Client Station’s MAC Address from the Filtering List
      • Getting Current MAC Filtering Settings
        • Get the Type of MAC Filtering List Currently Set (Accept or Deny)
        • Get MAC Filtering List
    • Load Balancing
    • Quality of Service
      • Enable/Disable Wi-Fi Multimedia
      • About Access Point and Station EDCA Parameters
      • Understanding the Queues for Access Point and Station
      • Distinguishing between Access Point and Station Settings in QoS Commands
      • Get QoS Settings on the Access Point
      • Get QoS Settings on the Client Station
      • Set Arbitration Interframe Spaces (aifs)
        • Set AIFs on the Access Point
        • Set AIFs on the Client Station
      • Set Minimum and Maximum Contention Windows (cwmin, cwmax)
        • Set cwmin and cwmax on the Access Point
        • Set cwmin and cwmax on the Station
      • Set the Maximum Burst Length (burst) on the Access Point
      • Set Transmission Opportunity Limit (txop-limit) for WMM client stations
    • Wireless Distribution System
      • Configure a WDS Link
        • Enable the WDS interface (wlan0wds0) on the current access point:
        • Provide the MAC address of the remote access point to which you want to link:
      • Get Details on a WDS Configuration
    • Time Protocol
    • Rebooting the Access Point
    • Resetting the Access Point to the Factory Defaults
  • Keyboard Shortcuts and Tab Completion Help
    • Keyboard Shortcuts
    • Tab Completion and Help
  • CLI Classes and Fields Reference
• Appendix E
• Radio Bands
• Index
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • K
  • L
  • M
  • N
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W