Enterprise-class Wireless Access Points
with IEEE802.11a/b/g/n Dual Radios
Management Software
User’s Guide
613-001867 Rev. B
Copyright 2014 Allied Telesis, Inc.
All rights reserved.
This product includes software licensed under the BSD License. As such, the following language applies for those
portions of the software licensed under the BSD License:
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following
conditions are met:
* Redistributions of source code must retain the above copyright notice, this list of conditions and the following
disclaimer.
* Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following
disclaimer in the documentation and/or other materials provided with the di stribution.
* Neither the name of Allied Telesis, Inc. nor the names of the respective companies above may be used to endorse or
promote products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY
EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT
SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Copyright (c) [dates as appropriate to package] by The Regents of the University of California - All rights reserved.
Copyright (c) 2000-2003 by Intel Corporation - All rights reserved. Copyright (c) 1997-2003, 2004 by Thomas E. Dickey
<dickey@invisible-island.net> - All rights reserved. Copyright (c) 2001 -2009 by Brandon Long (ClearSilver is now
licensed under the New BSD License.) Copyright (c) 1984-2000 by Carnegie Mellon University - All rights reserved.
Copyright (c) 2002,2003 by Matt Johnston - All rights reserved. Copyright (c) 1995 by Tatu Ylonen <ylo@cs.hut.fi> - All
rights reserved. Copyright 1997-2003 by Simon Tatham. Portions copyright by Robert de Bath, Joris van Rantwijk,
Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, and CORE SDI S.A.
Copyright (c) 1989, 1991 by Free Software Foundation, Inc. (GNU General Public License, Version 2, June 1991).
Copyright (c) 2002-2005 by Jouni Malinen <jkmaline@cc.hut.fi> and contributors. Copyright (c) 1991, 1999 by Free
Software Foundation, Inc. (GNU Lesser General Public License, Version 2.1, February 1999). Copyright (c) 1998-2002
by Daniel Veillard - All rights reserved. Copyright (c) 1998-2004 by The OpenSSL Project - All rights reserved.
Copyright (c) 1995-1998 by Eric Young (eay@cryptsoft.com) - All rights reserved.
This product also includes software licensed under the GNU General Public License available from:
http://www.gnu.org/licenses/gpl2.html
Allied Telesis is committed to meeting the requirements of the open source licenses including the GNU General Public
License (GPL) and will make all required source code available.
If you would like a copy of the GPL source code contained in this product, please send us a request by registered mail
including a check for US$15 to cover production and shipping costs, and a CD with the GPL code will be mailed to you.
GPL Code Request
Allied Telesis Labs (Ltd)
PO Box 8011
Christchurch, New Zealand
No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc.
Allied Telesis™ and the Allied Telesis logo are trademarks of Allied Telesis, Incorporated.
Ethernet™ is a trademark of the Xerox Corporation.
Wi-Fi®, Wi-Fi Alliance®, WMM®, Wi-Fi Protected Access® (WPA), the Wi-Fi CERTIFIED logo, the Wi-Fi logo, the
Wi-Fi ZONE logo, and the Wi-Fi Protected Setup logo are registered trademarks of the Wi-Fi Alliance. Wi-Fi
CERTIFIED™, Wi-Fi Multimedia™, WPA2™ and the Wi-Fi Alliance logo are trademarks of the Wi-Fi Alliance.
Microsoft is a registered trademark of Microsoft Corporation.
All other product names, company names, logos or other designations mentioned herein are trademarks or registered
trademarks of their respective owners.
Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document
without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied
Telesis, Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited
to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesis, Inc. has
been advised of, known, or should have known, the possibility of such damages.
AT-TQ Series of Wireless Access Points ............................ ....................................... ... ... .... ... ... ......................18
Features ...........................................................................................................................................................19
Changing the Manager’s Login Name and Password ......................................................................................32
Changing the System Name, Contact, and Location........................................................................................33
Chapter 3: Manage Menu ..............................................................................................................................35
Assigning a Static IP Address to the Access Point...........................................................................................36
Assigning a Dynamic IP Address from a DHCP Server to the Access Point....................................................38
VLAN ID for Untagged Traffic ....................................................................................................................39
Enabling or Disabling Broadcast Ping Replies .................................................................................................40
Setting the Country Setting..................... ... .... ... ... ... ... .... ... ................................................................................41
Configuring Basic Radio Settings.....................................................................................................................43
Configuring the Radio Settings.........................................................................................................................46
No Security.................................................................................................................................................61
Radio Mode................................................................................................................................................73
Radio Channel ...........................................................................................................................................73
Planning a Cluster.......................................................................................................................................... 101
Creating or Adding Access Points to a Cluster.............................................................................................. 102
Managing the Access Points of a Cluster ...................................................................................................... 105
Removing an Access Point from a Cluster .................................................................................................... 106
Viewing the Wireless Clients of a Cluster ...................................................................................................... 107
Using Automatic Channel Assignments......................................................................................................... 109
Viewing the Neighboring Access Points of the Cluster.................................................................................. 113
Chapter 5: Status Menu ................................ .............................................................. ................................ 117
Viewing the Associated Clients of an Access Point ....................................................................................... 118
Configuring SNMPv1 and v2c........................................................................................................................ 143
Enabling or Disabling the LEDs ..................................................................................................................... 150
Configuring the HTTP Server......................................................................................................................... 151
Enabling the HTTP Server....................................................................................................................... 151
Disabling the HTTP Server...................................................................................................................... 152
Configuring the HTTPS Server ...................................................................................................................... 153
Enabling the HTTPS Server.................................................................................................................... 153
Disabling the HTTPS Server ................................................................................................................... 154
Configuring the Maximum Number of Active Management Sessions............ ... ... ... ... .... ... ............................. 155
Configuring the Management Session Timer................................................................................................. 156
Manually Setting the Date and Time.............................................................................................................. 157
Setting the Date and Time with the Network Time Protocol Client ...................... ... ....................................... 159
Chapter 7: Maintenance Menu ................................................................................................................... 161
Restoring the Default Settings to the Access Point ....................................................................................... 162
Downloading the Configuration from the Access Point to Your Computer..................................................... 164
Restoring a Configuration to the Access Point .............................................................................................. 165
Rebooting the Access Point........................................................................................................................... 166
Enabling or Disabling the Reset Button ......................................................................................................... 167
This guide explains how to configure the AT-TQ2450 and AT-TQ3600
Wireless Access Points with the web browser management windows. This
preface contains the following sections:
“Safety Symbols Used in this Document” on page 14
“Contacting Allied Telesis” on page 15
13
Preface
Note
Caution
Warning
Warning
Safety Symbols Used in this Document
This document uses the following conventions.
Notes provide additional information.
Cautions inform you that performing or omitting a specific action
may result in equipment damage or loss of data.
Warnings inform you that performing or omitting a specific action
may result in bodily injury.
Laser warnings inform you that an eye or skin hazard exists due to
the presence of a Class 1 laser device.
14
Contacting Allied Telesis
If you need assistance with this product, you may contact Allied Telesis
technical support by going to the Support & Services section of the Allied
Telesis web site at www.alliedtelesis.com/support. You can find links for
the following services on this page:
24/7 Online Support — Enter our interactive support center to
search for answers to your product questions in our knowledge
database, to check support tickets, to learn about RMAs, and to
contact Allied Telesis technical experts.
USA and EMEA phone support — Select the phone number that
best fits your location and customer type.
Hardware warranty information — Learn about Allied Telesis
warranties and register your product online.
Replacement Services — Submit a Return Merchandise
Authorization (RMA) request via our interactive support center.
AT-TQ Wireless Access Point Series User’s Guide
Documentation — View the most recent installation and user
guides, software release notes, white papers, and data sheets for
your products.
Software Downloads — Download the latest software releases for
your managed products.
For sales or corporate information, go to www.alliedtelesis.com/purchase.
15
Preface
16
Chapter 1
Overview
This chapter describes how to start the initial management session on the
access point. This chapter contains the following sections:
“AT-TQ Series of Wireless Access Points” on page 18
“Features” on page 19
“Management Modes and Methods” on page 21
“Starting a Management Session on the Access Point” on page 22
“Starting the Initial Management Session on the Access Point” on
page 23
“Using the Management Menus and Windows” on page 26
17
Chapter 1: Overview
AT-TQ2450 Access Point
AT-TQ3600 Access Point
AT-TQ Series of Wireless Access Points
The AT-TQ Series of wireless access points consists of the AT-TQ2450
and AT-TQ3600 Access Points. Refer to Figure 1.
18
Figure 1. AT-TQ2450 and AT-TQ3600 Access Points
Features
AT-TQ Wireless Access Point Series User’s Guide
The access points share the following features:
Independent 2.4 and 5 GHz radios
IEEE 802.11a/b/g
Wireless Distribution System (WDS) bridges
Access point clustering
Rogue access point detection
Multiple SSIDs
One 10/100/1000Base-T Ethernet port with Auto-Negotiation, auto
MDI/MDIX, and IEEE 802.3af Power over Ethernet (PoE)
MAC address filtering for wireless access security
Broadcast and multicast rate limiting
Virtual access points for multiple broadcast domains
DHCP client
RADIUS accounting with external RADIUS server
Network Time Protocol (NTP) client
Domain name server (DNS) client
IEEE 802.1x authentication
WPA-Personal and WPA-Enterprise with WPA, WPA2, TKIP, and
CCMP (AES) authentication and encryption
Static WEP encryption
HTTP and HTTPS web browser management
SNMPv1 and v2c management
Quality of Service
Event log
Syslog client
Table, wall, or ceiling installation
Differences between the access points are listed here:
The AT-TQ2450 Access Point has external, adjustable antennas.
The AT-TQ3600 Access Point has internal antennas.
The AT-TQ2450 Access Point features IEEE 802.11n 2x2 MIMO
chains with antenna diversity.
The AT-TQ3600 Access Point features IEEE 802.11n 3x3 MIMO
chains.
19
Chapter 1: Overview
Both radios in the AT-TQ2450 Access Point have a data rate of
300 Mbps.
Both radios in the AT-TQ3600 Access Point have a data rate of
450 Mbps.
20
Management Modes and Methods
The access point has two management modes:
Stand-alone mode: Access points in the stand-alone mode have to
be managed individually. To configure a unit in this mode, you
have to know its IP address or domain name, and the username
and password of the manager account. This is the default setting
for the access point.
Cluster mode: The cluster management mode is intended for two
or more access points that have similar configuration settings.
When you change the parameter settings on an access point in a
cluster, your changes are automatically communicated to the other
access points. This reduces the need for having to configure the
units individually. For cluster instructions, refer to Chapter 4,
“Cluster Menu” on page 93.
Here are the methods for managing the access point:
AT-TQ Wireless Access Point Series User’s Guide
Web browser: The management software on the access point has
management windows for you to use with the web browser on your
management workstations. They make it easy for you to configure
all the parameter settings and features. The access point supports
both non-secure HTTP and secure HTTPS management sessions.
The default is HTTP. For instructions on how to enable or disable
the HTTP and HTTPS servers on the access point, refer to
“Configuring the HTTP Server” on page 151 and “Configuring the
HTTPS Server” on page 153
AT-UWC Unified Wireless Controller program: This optional
program allows you to manage the access points from a central
point. For instructions on how to configure the unit for the wireless
controller program, refer to “Configuring the Access Point for the
Optional AT-UWC Program” on page 88.
SNMPv1 and v2c: You may also use SNMP to manage some of
the parameter settings of the device. The MIB is available from the
Allied Telesis web site. It should be noted that you can configure
only a limited number of parameters on the access point with
SNMP. To manage all the parameters, you must use a web
browser or the optional AT-UWC program. For instructions on how
to configure the unit for SNMP, refer to “Configuring SNMPv1 and
v2c” on page 143. The default setting for SNMP is disabled. The
product does not support SNMPv3.
21
Chapter 1: Overview
Note
Starting a Management Session on the Access Point
This section explains how to start a management session on the access
point from your management workstation. The procedure assumes that
the access point has already been assigned an IP address. The address
can be a static address that was manually assigned to the unit or it can be
a dynamic address from a DHCP server.
If the access point has not been assigned an IP address and is
using its default address 192.168.1.230, refer to “Starting the Initial
Management Session on the Access Point” on page 23 for
instructions on how to start a management session.
To start a management session on the access point, perform the following
procedure:
1. Open the web browser on your management workstation.
2. Enter the IP address of the access point in the URL field of the web
browser.
You should now see the logon window, shown in Figure 2.
Figure 2. Log On Window
3. Enter the username and password for the unit. The default values are
“manager” for the username and “friend” for the password. The
username and password are case-sensitive.
4. Click the Logon button.
22
AT-TQ Wireless Access Point Series User’s Guide
Note
Starting the Initial Management Session on the Access Point
If you just installed the device and are powering it on for the first time, it
queries the subnet on the LAN port for a DHCP server. If a DHCP server
responds to its query, the unit uses the IP address the server assigns to it.
If there is no DHCP server, the access point uses the default IP address
192.168.1.230.
There are a several ways to start the initial management session on the
access point. One way is to establish a direct connection between your
computer and the unit by connecting an Ethernet cable to the Ethernet port
on the computer and the LAN port on the access point. This procedure
requires changing the IP address on your computer to make it a member
of the same subnet as the default IP address on the access point. You
might perform this procedure if your network does not have a DHCP
server and you want to configure the access point before connecting it to
your network.
The initial management session may also be performed while the device is
connected to your network. However, If your network does not have a
DHCP server, you still have to change the IP address of your computer to
match the subnet of the default address of the access point. Furthermore,
if your network is divided into virtual LANs (VLANs), you have to be sure to
connect the access port and your computer to ports on an Ethernet switch
that are members of the same VLAN.
If your network has a DHCP server, use the IP address the server assigns
it to it to start the management session.
The instructions for starting the initial management session are found in
the following sections:
“Starting the Initial Management Session with a Direct Connection” on
page 24
“Starting the Initial Management Session without a DHCP Server” on
page 24
“Starting the Initial Management Session with a DHCP Server” on
page 25
The initial management session of the access point has to be
conducted through the LAN port because the default setting for the
radios is off.
23
Chapter 1: Overview
Note
Starting the
Initial
Management
Session with a
Direct
Connection
To start the management session with a direct Ethernet connection
between your computer and the access port, perform the following
procedure:
If the access point is using PoE, you may not perform this procedure
because it involves a direct connection between your computer and
the LAN port on the access point. You may either temporarily attach
the power supply to the unit until after you have completed the initial
management session or you may instead perform one of the other
procedures for starting the initial management session.
1. Connect one end of a network cable to the LAN port on the access
point and the other end to the Ethernet network port on your computer.
(This requires removing the LAN cable you connected earlier in the
hardware installation instructions.)
2. Change the IP address on your computer to 192.168.1.n, where n is a
number from 1 to 254, but not 230. Refer to the documentation that
accompanies your computer for instructions on how to set the IP
address.
Starting the
Initial
Management
Session without a
DHCP Server
3. Set the subnet mask on your computer to 255.255.255.0.
4. Power on the access point.
5. Start the web browser on your computer.
6. Enter the IP address 192.168.1.230 in the URL field of the browser
and press the Return key.
You should now see the logon window, shown in Figure 2 on page 22.
7. Enter “manager” for the username and “friend” for the password. The
username and password are case-sensitive.
8. Click the Logon button.
This procedure explains how to start the initial management session on
the access port when the LAN port is connected to an Ethernet switch on a
network that does not have a DHCP server. To start the management
session, perform the following procedure:
1. If your network has VLANs, check to be sure that your computer and
the access port are connected to ports on the Ethernet switch that are
members of the same VLAN. This might require accessing the
management software on the switch and listing the VLANS and their
port assignments. For example, if the access port is connected to a
port that is a member of the Sales VLAN, your computer must be
24
AT-TQ Wireless Access Point Series User’s Guide
connected to a port that is also a member of that VLAN. If your network
is small and does not have VLANs or routers, you may connect your
computer to any port on the Ethernet switch.
2. Change the IP address on your computer to 192.168.1.n, where n is a
number from 1 to 254, but not 230. Refer to the documentation that
accompanies your computer for instructions on how to set the IP
address.
3. Set the subnet mask on your computer to 255.255.255.0.
4. Power on the access point.
5. Start the web browser on your computer.
6. Enter the IP address 192.168.1.230 in the URL field of the browser and
press the Return key.
You should now see the logon window, shown in Figure 2 on page 22.
7. Enter “manager” for the username and “friend” for the password. The
username and password are case-sensitive.
Starting the
Initial
Management
Session with a
DHCP Server
8. Click the Logon button.
This procedure explains how to start the initial management session on
the access port when the LAN port is connected to a network that has a
DHCP server. This procedure assumes that you have already configured
the DHCP server with the appropriate information for the access point
(e.g., IP address and default gateway). To start the management session,
perform the following procedure:
1. Power on the access point.
2. Start the web browser on your computer.
3. Enter the IP address of the access point in the URL field of the browser
and press the Return key. This is the IP address assigned to the
access point by the DHCP server. If you do not know the address,
refer to the DHCP server.
You should now see the logon window, shown in Figure 2 on page 22.
4. Enter “manager” for the username and “friend” for the password. The
username and password are case-sensitive.
5. Click the Logon button.
25
Chapter 1: Overview
Using the Management Menus and Windows
Here is general information about the management menus and windows.
Web Browser
Menus
You may control the appearance of the menus with the Navigator pulldown menu in the upper right corner of the web browser windows. The
menu options are Horizontal Tabs, Vertical Tabs, and Dropdown Menus.
The Horizontal Tabs selection displays the main menu in a row near the
top of the windows. Clicking a menu selection displays the menu options
in a row beneath the main menu. Figure 3 shows the Manage menu.
Figure 3. Horizontal Menus
The Vertical Tabs selection displays the menus in a column on the left
side of the management windows, as shown in Figure 4 on page 27.
26
AT-TQ Wireless Access Point Series User’s Guide
Figure 4. Vertical Menus
The Dropdown Menu option displays the main menu in a horizontal row
near the top of the window. Menu options are displayed vertically when
you move the mouse over the options in the main menu. Figure 5 shows
the Manage menu.
Figure 5. Dropdown Menus
27
Chapter 1: Overview
The menus contain the same selections and perform the same functions
regardless of the format. You may switch between formats without
interrupting your current session or having to stop and start it again.
Saving Your
Changes
You need to remember to click the Update button when you are finished
configuring the parameters in a management window. The button is
located in the bottom of the windows. When you click the button, the
access point immediately activates your changes and saves them in the
configuration file. If you navigate to a different window without clicking the
Update button, your changes are lost and have to be reentered.
Logging OffYou should always log off when you are finished managing the unit. To log
off, click the Log Off option in the upper right corners of the management
windows.
28
Chapter 2
Basic Settings Menu
This chapter describes the management functions of the menu selections
in the Basic Settings menu. The chapter contains the following sections:
“Displaying Basic Information” on page 30
“Changing the Manager’s Login Name and Password” on page 32
“Changing the System Name, Contact, and Location” on page 33
29
Chapter 2: Basic Settings Menu
Displaying Basic Information
This section explains how to display the following information about the
access point:
IP address
MAC address
Firmware version number
Build number
Operational time
To display the information, select Basic Settings from the main menus to
display the “Provide basic settings” window. The information is contained
in the Review Description of the Access Point section of the window. Refer
to Figure 6. The fields are defined in Table 1 on page 31.
30
Figure 6. Provide Basic Settings Window
Loading...
+ 142 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.