AT-UWC Series Wireless LAN Controller for Enterprise AT-UWC-60-APL AT-UWC WLAN Controller on a Server Web GUI User’s Guide 613-001893 Rev.
Copyright © 2014 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc. Microsoft and Internet Explorer are registered trademarks of Microsoft Corporation. Netscape Navigator is a registered trademark of Netscape Communications Corporation. All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners. Allied Telesis, Inc.
Contents Preface ..................................................................................................................................................................................9 Safety Symbols Used in this Document................................................................................................................................10 Contacting Allied Telesis .........................................................................................................................
AT-UWC WLAN Controller Web GUI User’s Guide Trap Receiver Configuration .................................................................................................................................................75 Supported MIBs ....................................................................................................................................................................77 Controller Detailed Statistics................................................................................
Contents Viewing a List of CP Profiles .......................................................................................................................................140 Adding or Modify a CP Profile .....................................................................................................................................141 Deleting a CP Profile .................................................................................................................................................
AT-UWC WLAN Controller Web GUI User’s Guide Changing the Debug Status ........................................................................................................................................216 Changing the Channel or Power .................................................................................................................................217 Status/Statistics > Global.................................................................................................................
Contents WLAN Advanced Configuration > Distributed Tunneling....................................................................................................308 WLAN Advanced Configuration > Centralized L2 Tunneling..............................................................................................310 Adding VLAN’s to the List............................................................................................................................................
AT-UWC WLAN Controller Web GUI User’s Guide 8
Preface This manual is the Web Graphic User Interface (GUI) user’s guide for the AT-UWC Wireless LAN Controller. The instructions in this guide explain how to configure the management tool.
AT-UWC WLAN Controller Web GUI User’s Guide Safety Symbols Used in this Document This document uses the following conventions: Note Notes provide additional information. Caution Cautions inform you that performing or omitting a specific action may result in equipment damage or loss of data. Warning Warnings inform you that performing or omitting a specific action may result in bodily injury. Warning Warnings inform you that an eye and skin hazard exists due to the presence of a Class 1 laser device.
Preface Contacting Allied Telesis If you need assistance with this product, you may contact Allied Telesis technical support by going to the Support & Services section of the Allied Telesis web site at www.alliedtelesis.com/support.
AT-UWC WLAN Controller Web GUI User’s Guide 12
Chapter 1 Getting Started This chapter provides an overview of the AT-UWC Wireless LAN Controller and how to perform basic operations.
AT-UWC WLAN Controller Web GUI User’s Guide AT-UWC Wireless LAN Controller The AT-UWC Wireless LAN (WLAN) Controller is a software-based management tool that allows you to control Allied Telesis TQ series wireless access points in an enterprise network. You can deploy the AT-UWC WLAN Controller to your network as the following forms: AT-UWC WLAN Controller on a server The AT-UWC WLAN Controller is installed to a server or virtual machine in your network using the AT-UWC-Install program.
Chapter 1: Getting Started Preparing the Management Workstation To access the AT-UWC WLAN Controller, you must have a management workstation. The management workstation is a computer that you use to manage the AT-UWC WLAN Controller. The management workstation must be connected to the network that the AT-UWC WLAN Controller server belongs to. See an example shown in Figure 1. Figure 1.
AT-UWC WLAN Controller Web GUI User’s Guide Starting a Management Session The AT-UWC WLAN Controller is managed from the management workstation through the Web GUI. To start a management session of the AT-UWC WLAN Controller, do the following: 1. Login to the management workstation. If you do not have a management workstation, see “Preparing the Management Workstation” on page 15. 2. Open Internet Explorer 7 or 8, and enter the IP address of the AT-UWC WLAN Controller server. The default IP address is 192.
Chapter 1: Getting Started Registering the License Key Registering the license key activates the AT-UWC WLAN Controller. For the first time you login to the AT-UWC WLAN Controller, you must register the license key. License Key The license key is formed with the following two information: A serial number An authentication key When you purchase the AT-UWC WLAN Controller software, you obtain a license key that allows you to control 10 access point devices.
AT-UWC WLAN Controller Web GUI User’s Guide Downloading the Free Trail License Allied Telesis provides the license key from the Restricted Software Downloads website. To download the license key, do the following: 1. Open a web browser, such as Internet Explorer or FireFox, on your system and enter the following: http://www.alliedtelesis.com/support/software/restricted The browser prompts you to enter a user name and password as shown in Figure 3. Figure 3. Restricted Software Downloads Login Page 2.
Chapter 1: Getting Started Figure 4. Restricted Software Downloads Welcome Page 4. Select AT-UWC Series from the select box. The AT-UWC page is displayed as shown in Figure 5. Figure 5.
AT-UWC WLAN Controller Web GUI User’s Guide 5. Click View/download individual files in this release under the AT-UWC-Install v2.0.1.B01 section. The available AT-UWC files are listed as shown in Figure 6. Figure 6. Restricted Software Downloads AT-UWC Page 6. Select AT-UWC-TrialST (NA) or AT-UWC-TrialST (WW) rom the list and save it onto your system.
Chapter 1: Getting Started Changing the IP Address When you access the AT-UWC WLAN Controller from the management workstation, it must have an IP address form the same network as the AT-UWC WLAN Controller server. The procedures for changing the IP address is slightly different among Windows Operating Systems. The following is the procedures using Windows 7 as an example. To change the IP address of a PC installed on Windows 7, do the following: 1. Click Control Panel from the Start button.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 8. Control Panel with Large Icons 3. Click Network and Sharing Center. The Basic Network Information window appears as shown in Figure 9. Figure 9.
Chapter 1: Getting Started 4. Click Local Area Connection. The Local Area Connection Status window appears as shown in Figure 10. Figure 10. Local Area Connection Status Window 5. Click the Properties button at the bottom. The Local Area Connection Properties window appears as shown in Figure 11. Figure 11.
AT-UWC WLAN Controller Web GUI User’s Guide 6. Double-click Internet Protocol Version 4 (TCP/IPv4). The Internet Protocol Version 4 (IPv4) Properties window appears as shown in Figure 12. Figure 12. IPv4 Properties Window 7. Select the radio button labeled “Use the following IP address.” 8. Enter the IP address and Subnet mask. See Figure 13. Figure 13. IPv4 Properties Window Example 9. Click OK.
Chapter 1: Getting Started Enabling JavaScript To access the AT-UWC WLAN Controller, you must enable JavaScript for your Windows Internet Explorer. You can enable JavaScript only when accessing the AT-UWC WLAN Controller. Note When JavaScript is already enabled, you do not have to change the setting. To enable JavaScript only for the AT-UWC WLAN Controller, do the following: 1. Open the Windows Internet Explorer. 2. Click Tools from the menu bar. 3. Select Internet options from the drop-down menu.
AT-UWC WLAN Controller Web GUI User’s Guide 5. Select the Trusted sites icon in the box and press the Sites button. The Trusted sites window appears as shown in Figure 15. Figure 15. Trusted Sites Window 6. Enter the IP address of the AT-UWC WLAN Controller server and check the checkbox of “Require server verification (https:) for all sites in this zone. Note By the default, the IP address of the AT-UWC WLAN Controller server 192.168.1.1. 7. Click Add.
Chapter 1: Getting Started Figure 16. Security Settings Window 8. Change the setting of Active scripting to Enable. 9. Click OK. 10. Restart the Internet Explorer. JavaScript is enabled only when you access the AT-UWC WLAN Controller.
AT-UWC WLAN Controller Web GUI User’s Guide Configuring the AT-UWC WLAN Controller To configure the features of the AT-UWC WLAN Controller, look at the Navigation panel on the left of the web page. Go to the page that you want to configure.
Chapter 1: Getting Started Saving the Changes When you change settings of the AT-UWC WLAN Controller and click the Submit button on each page, the changes are stored in the running configuration. The settings in the running configuration are deleted when the AT-UWC WLAN Controller reboots. You must save the changes to the startup configuration if you want to keep the changes after the AT-UWC WLAN Controller reboots. To save the changes to the startup configuration, do the following: 1.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 18. AT-UWC WLAN Controller Save Changes Screen 3. Click Save. The Confirmation window appears as shown in Figure 19. Figure 19. Confirmation Window The changes are saved to the startup configuration.
Chapter 1: Getting Started Using Online Help When you have a question about the AT-UWC WLAN Controller, the Online Help can be a good place to look for your answer. To access the Online Help, do the following: 1. Start a management session. See “Starting a Management Session” on page 16. The Allied Telesis Unified Wireless Controller screen is displayed as shown in Figure 20. Figure 20. AT-UWC WLAN Controller Screen 2. Click ?Help. The Online Help is displayed shown in Figure 21 on page 32.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 21. AT-UWC WLAN Controller Online Help 3. Click the TOC button at the lower left corner of the screen. The Online Help Table of Contents is displayed shown in Figure 22 on page 33.
Chapter 1: Getting Started Figure 22. AT-UWC WLAN Controller Online Help TOC 4. Click the Configuration on the Table of Contents for example. The Online Help Configuration portion is displayed shown in Figure 23 on page 34.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 23.
Chapter 1: Getting Started Ending a Management Session You can end a management session at any time during a management session. To end a management session, do the following: 1. Save the changes to the startup configuration. See “Saving the Changes” on page 29. If you do not want to save your changes, skip this step. 2. Click the Logout button on the right side of the screen. See Figure 24 as an example. Figure 24. AT-UWC WLAN Controller Screen The management session ends.
AT-UWC WLAN Controller Web GUI User’s Guide 36
Chapter 2 System This chapter includes the following topics. Each topic corresponds to the same title in the System folder in the Navigation Panel on the Web GUI.
AT-UWC WLAN Controller Web GUI User’s Guide “Trap Receiver Configuration” on page 75 “Supported MIBs” on page 77 Statistics “Controller Detailed Statistics” on page 78 “Controller Statistics Summary” on page 81 System Utility “System Reset” on page 82 “Reset Configuration To Default” on page 83 “Erase Startup Configuration File” on page 85 “Reset Passwords to Defaults” on page 87 “Download File to Controller” on page 88 “Upload File from Controller” on page 90 “Bu
Chapter 2: System Save All Applied Changes From the Save All Applied Changes page, you can save all the changes you have made to the startup configuration file. When you save your changes to the startup configuration file, the changes are effective after the system reboots. Note When you click Submit on each page, you save your changes on the page to the running configuration file. The changes are effective immediately; however, when the system is reset, the changes are lost.
AT-UWC WLAN Controller Web GUI User’s Guide ARP Cache From the ARP Cache page, you can view and clear the Address Resolution Protocol (ARP) cache. ARP stores map entries in the ARP cache to map IP addresses to MAC addresses. Clear the ARP cache when it may be corrupted or damaged. To view and clear the ARP cache, do the following: 1. From the Navigation pane, go to System > ARP Cache. The ARP Cache page is displayed as shown in Figure 26. Figure 26. System ARP Cache Page 2. Observe the ARP cache. 3.
Chapter 2: System System Resources From the System Resources page, you can view the information about the system resources. To view the system resources, do the following: 1. From the Navigation pane, go to System > System Resources. The System Resources page is displayed as shown in Figure 27. Figure 27. System Resources Page 2. Observe the fields described in Table 1. Table 1.
AT-UWC WLAN Controller Web GUI User’s Guide Table 1. System Resources (Continued) Field Description 5 Seconds Displays the CPU usage by the task in the last 5 seconds. 60 Seconds Displays the CPU usage by the task in the last 60 seconds. 300 Seconds Displays the CPU usage by the task in the last 300 seconds. Total CPU Utilization Displays the total CPU usage by all the tasks. 3. If you want to refresh the display, click Refresh.
Chapter 2: System System Description From the System Description page, you can view and modify system information. To view and modify the system information, do the following: 1. From the Navigation pane, click System or go to System > Configuration > System Description. The System Description page is displayed as shown in Figure 28. Figure 28. System Description Page 2. Observe and modify the values in the fields described in Table 2. Table 2.
AT-UWC WLAN Controller Web GUI User’s Guide Table 2. System Description (Continued) Field Description IP Address Displays the IP address of the WLAN Controller. To change the IP address, see “Network Connectivity Configuration” on page 45. System Up Time Displays the length of time since the lWLAN Controller last rebooted. Current SNTP Synchronized Time Displays the system time from the currently synchronized SNTP. For information about SNTP, see ““SNTP Global Status” on page 114” 3.
Chapter 2: System Network Connectivity Configuration From the Network Connectivity Configuration page, you can view and modify the network interface properties. To view and modify the network interface properties, do the following: 1. From the Navigation pane, go to System > Configuration > Network Connectivity Configuration. The Network Connectivity Configuration page is displayed as shown in Figure 29. Figure 29. Network Connectivity Configuration Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide Table 3. Network Connectivity Configuration (Continued) Field Description Burned In MAC Address Displays the MAC address of the WLAN Controller. Management VLAN ID Displays the management VLAN ID. The default value is VLAN 1 3. Click the following buttons as needed: Refresh — Refreshes the display on this page. Submit — Makes the changes effective and saves them to the running configuration file.
Chapter 2: System HTTP On the HTTP Configuration page, you can view and modify the property settings for HTTP connections. To view and modify the HTTP settings, do the following: 1. From the Navigation pane, go to System > Configuration > HTTP. The HTTP Configuration page is displayed as shown in Figure 30. Figure 30. HTTP Configuration Page 2. Observe or modify the values in the fields described in Table 4. Table 4. HTTP Configuration Field Description HTTP Admin Mode Displays Enable or Disable.
AT-UWC WLAN Controller Web GUI User’s Guide Table 4. HTTP Configuration (Continued) Field Description Maximum Number of HTTP Session Displays the maximum number of HTTP sessions that you allows to the WLAN Controller. The default setting is 16 sessions. 3. Click the following buttons as needed: Refresh — Refreshes the display on this page. Submit — Makes the changes effective and saves them to the running configuration file.
Chapter 2: System Telnet Session Note The current AT-UWC WLAN Controller does not support the Telnet Session.
AT-UWC WLAN Controller Web GUI User’s Guide User Accounts Configuration From the User Accounts Configuration page, you can modify the password for the manager account. Note The create option in the User field and guest account are not supported for the current version. Note Allied Telesis recommends not changing the access level of the manager account. Change only the password of the manager account. To modify the password of the manager account, do the following: 1.
Chapter 2: System Table 5. User Accounts Configuration Field User Description Select the manager option. The following items are visible from the select list: manager: Modifies the manager account. quest: Not supported. create: Not supported. User Name Displays the name of the user account. You cannot modify the name. Password Enter a password. The password is not displayed. Confirm Password Re-enter the password. Access Level Allied Telesis recommends not changing the access level. 3.
AT-UWC WLAN Controller Web GUI User’s Guide Login Sessions From the Login Sessions page, you can view information about your current login session. To view information about your login session, do the following: 1. From the Navigation pane, go to System > Configuration > Login Sessions. The Login Sessions page is displayed as shown in Figure 32. Figure 32. Login Sessions Page 2. Observe the fields described in Table 6. Table 6.
Chapter 2: System Table 6. Login Session (Continued) Field Session Type Description Displays the connection type, either HTTP or HTTPS. 3. If you want to refresh the display, click Refresh.
AT-UWC WLAN Controller Web GUI User’s Guide Forwarding Database Configuration From the Forwarding Database Configuration page, you can change the aging interval for the forwarding database. A forwarding database is also called a MAC address table that Layer 2 devices keep to associate MAC addresses to the ports. To change the aging interval for the forwarding database, do the following: 1. From the Navigation pane, go to System > Forwarding Database > Configuration.
Chapter 2: System Forwarding Database Search From the Forwarding Database Search page, you can view MAC address entries and search a specific MAC address from the database. Viewing the Forwarding Database To view the forwarding database, do the following: 1. From the Navigation pane, go to System > System > Forwarding Database > Search. The Forwarding Database Search page is displayed as shown in Figure 34. Figure 34. Forwarding Database Search Page 2. Observe the fields as shown in Table 7. Table 7.
AT-UWC WLAN Controller Web GUI User’s Guide Table 7. Forwarding Database (Continued) Field Status Description Indicates the status of the MAC address entry. The options are: Learned: The MAC address was learned from received frames. Management: Indicates that MAC address is of the WLAN Controller. 3. If you want to refresh the display, click Refresh. Searching a MAC Address To search a MAC address from the forwarding database, do the following: 1.
Chapter 2: System Buffered Log Configuration From the Buffered Log Configuration page, you can enable or disable the Buffered Log function. The system stores up to 200 log messages in the buffer and deletes them when the system shuts down. Note To download buffered log messages, see “Upload File from Controller” on page 90. To enable or disable the buffered log function, do the following: 1. From the Navigation pane, go to System > Logs > Buffered Log Configuration.
AT-UWC WLAN Controller Web GUI User’s Guide Table 8. Buffered Log Configuration Field Admin Status Behavior Description Starts or stops logging messages. The options are: Enable: Starts logging messages into the buffer. Disable: Stops logging messages into the buffer. Specifies the logging behavior. The options are: Wrap: Replaces the last saved messages with new messages when the buffer is full. Stop on Full: Stops logging when the buffer is full. 3.
Chapter 2: System Buffered Log From the Buffered Log page, you can view messages stored in the buffer on the WLAN Controller. To view messages in the buffered log, do the following: 1. From the Navigation pane, go to System > Logs > Buffered Log. The Buffered Log page is displayed as shown in Figure 36. Figure 36. Buffered Log Page 2. Observe the messages. 3. If you want to refresh the display, click Refresh.
AT-UWC WLAN Controller Web GUI User’s Guide Command Logger Configuration Note The current AT-UWC WLAN Controller does not support the Command Logger.
Chapter 2: System Console Log Configuration Note The current AT-UWC WLAN Controller does not support the Console Log.
AT-UWC WLAN Controller Web GUI User’s Guide Event Log From the Event Log page, you can view event log messages. Note To download event log messages, see “Upload File from Controller” on page 90. To view event log messages, do the following: 1. From the Navigation pane, go to System > Logs > Event Log. The Event Log page is displayed as shown in Figure 37. Figure 37. Event Log Page 2. Observe the messages. 3. If you want to refresh the display, click Refresh.
Chapter 2: System Hosts Log Configuration From the Hosts Log Configuration page, you can add Syslog servers. Note To start or stop sending log messages to Syslog servers, see “Syslog Configuration” on page 69. To add a Syslog server, do the following: 1. From the Navigation pane, go to System >> Logs > Hosts Log Configuration. The Hosts Log Configuration page is displayed as shown in Figure 38. Figure 38. Hosts Log Configuration Page 2. Select the options in the fields described in Table 9. Table 9.
AT-UWC WLAN Controller Web GUI User’s Guide Table 9. Hosts Log Configuration (Continued) Field IP Address Type Description Specifies the IP address type. The options are: IPv4: Specifies a Syslog server with its IPv4 address. DNS: Specifies a Syslog server with its host name. 3. Click one of the following buttons: Refresh — Refreshes the display on this page. Submit — Saves the changes to the running configuration file.
Chapter 2: System Persistent Log Configuration From the Persistent Log Configuration page, you can enable or disable the Persistent Log feature. When the Persistent Log feature is enabled, the system stores log messages in a file on the hard disk. The system creates a new log file when rebooting. When the system has three log files, it replaces the oldest log file with a new. Note To download persistent log messages, see “Upload File from Controller” on page 90.
AT-UWC WLAN Controller Web GUI User’s Guide Table 10. Persistent Log Configuration Field Admin Status Severity Filter Description Starts or stops logging messages in the hard disc. The options are: Enable: Starts logging messages on the hard disc. Disable: Stops logging messages on the hard disc. Specifies the Severity filter. The options are: Emergency: Stores messages with the emergency level. This is the highest level of severity.
Chapter 2: System Severity Levels Table 11 describes the severity levels in decreasing order of severity. Table 11. Log Message Levels Severity Level Description 0 Emergency The system is disabled. This is the highest level of severity. 1 Alert The system requires an immediate action. 2 Critical The system is in the critical condition. 3 Error An error occurred. 4 Warning An event that leads to an error occurred. 5 Notice A noticeable event occurred. 6 Info Incudes information.
AT-UWC WLAN Controller Web GUI User’s Guide Persistent Log From the Persistent Log page, you can view persistent log messages stored in the hard disk on the WLAN Controller. Note To configure the Persistent Log feature, see “Persistent Log Configuration” on page 65. To view messages in the Persistent log, do the following: 1. From the Navigation pane, go to System > Logs > Persistent Log. The Persistent Log page is displayed as shown in Figure 40. Figure 40. Persistent Log Page 2. Observe the messages. 3.
Chapter 2: System Syslog Configuration From the Syslog Configuration page, you can start or stop sending log messages to Syslog servers. Note To set Syslog servers, see “Hosts Log Configuration” on page 63. To start or stop sending log messages to Syslog servers, do the following: 1. From the Navigation pane, go to System > System > Logs > Syslog Configuration. The Syslog Configuration page is displayed as shown in Figure 41. Figure 41. Syslog Configuration Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide Table 12. Syslog Configuration (Continued) Field Description Local UDP Port Displays the UDP port number used to sent log messages to syslog servers. The default port number is 514. Messages Received Displays the number of log messages that the process received, including discarded messages. Messages Dropped Displays the number of log messages that have an error or were discarded due to lack of space.
Chapter 2: System Diagnosis Log Configuration From the Diagnosis Log Configuration page, you can start or stop storing diagnosis messages that include more detailed information than debug messages. When the system operates normally, disable this function. Note To view diagnosis log messages, you must download the file to a TFTP server. See “Upload File from Controller” on page 90. To start or stop storing diagnosis log messages, do the following: 1.
AT-UWC WLAN Controller Web GUI User’s Guide Note To save your changes to the startup configuration file, see “Save All Applied Changes” on page 39.
Chapter 2: System SNMP Community Configuration From the SNMP Community Configuration page, you can view a list of community strings, modify the properties of a community string, add a community string, and delete it. A community string acts as a password to access the SNMP service. Adding or Modifying Community Strings To add or modify community strings, do the following: 1. From the Navigation pane, go to System > SNMP > Community Configuration.
AT-UWC WLAN Controller Web GUI User’s Guide Table 13. SNMP Community Configuration (Continued) Field Description SNMP Agent IP address Specifies the IPv4 address of the SNMP agent. SNMP Agent IP Mask Specifies the subnet mask of the SNMP agent. Access Mode Specifies the access modes of the community string. The options are: Status Read-Only Read-Write Specifies the status of the community string. The options are: Enable Disable 3. Click Submit.
Chapter 2: System Trap Receiver Configuration From the SNMP Trap Receiver Configuration page, you can view a list of SNMP trap receivers on the WLAN Controller. You can also add, delete, or modify a trap receiver. To add, delete, or modify a trap receiver, do the following: 1. From the Navigation pane, go to System > SNMP > Trap Receiver Configuration. The SNMP Trap Receiver Configuration page is displayed as shown in Figure 44. Figure 44. SNMP Trap Receiver Configuration Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide Table 14. SNMP Trap Receiver Configuration (Continued) Field Description IP Address Specifies the IP address of the SNMP trap receiver. Status Displays the status of the trap receiver. The options are: Enable Disable 4. Click one of the following buttons: Delete — Deletes the selected SNMP trap receiver. Submit — Saves the changes to the running configuration file.
Chapter 2: System Supported MIBs From the Supported MIBs page, you can view a list of MIB’s that the WLAN Controller supports. To view a list of supported MIB’s, do the following: 1. From the Navigation pane, go to System > SNMP > Supported MIBs. The Supported MIBs page is displayed as shown in Figure 45. Figure 45. SNMP Supported MIBs Page 2. Observe the following fields in Table 15. Table 15. SNMP Supported MIBs . Field Description Name Displays the RFC number and MIB module name.
AT-UWC WLAN Controller Web GUI User’s Guide Controller Detailed Statistics From the Controller Detailed Statistics page, you can view statistics data about the activities of WLAN Controller. To view statistics information, do the following: 1. From the Navigation pane, go to System > Statistics > Controller Detailed. The Controller Detailed Statistics page is displayed as shown in Figure 46. Figure 46. Controller Detailed Statistics Page 2. Observed the fields described in Table 16 on page 79.
Chapter 2: System Table 16. Statistics Controller Detail . Field Description ifIndex Displays the value of the interface index. Octets Received Displays the number of received octets, including FCS and excluding the frame bit. Packets Received Without Error Displays the number of received broadcast and multicast packets without errors. Unicast Packets Received Displays the number of received unicast packets. Multicast Packets Received Displays the number of received multicast packets.
AT-UWC WLAN Controller Web GUI User’s Guide Table 16. Statistics Controller Detail (Continued) Field Description Address Entries in Use Displays the number of entries in the forwarding database at this moment. Maximum VLAN Entries Displays the maximum number of VLAN’s that the system is allowed to have. Most VLAN Entries Used Displays the number of VLAN’s that are active since the last time the system was rebooted.
Chapter 2: System Controller Statistics Summary From the Controller Statistics Summary page, you can view statistics data about the activities of WLAN Controller. This page displays the subset of the items displayed on the Controller Detailed Statistics page. To view statistics information, do the following: 1. From the Navigation pane, go to System > Statistics > Controller Summary. The Controller Summary page is displayed as shown in Figure 47. Figure 47. Controller Statistics Summary Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide System Reset From the System Reset page, you can reset or shut down the WLAN Controller. Note To reboot the AT-UWC WLAN Controller from a PC-based server, press Ctrl+Alt+Delete keys from the keyboard of the server. To reset or shut down the system, do the following: 1. From the Navigation pane, go to System > System Utilities > System Reset. The System Reset page is displayed as shown in Figure 48. Figure 48.
Chapter 2: System Reset Configuration To Default From the Reset Configuration To Default page, you can restore the default settings to the WLAN Controller. Guidelines for Resetting the Configuration Resetting the Configuration Here are the guidelines when you reset the configuration to the default settings: Since the IP address is reset to 192.168.1.1, you lose the connection if the IP address was changed. The password for the manager account is reset to “friend.” Licenses are not deleted.
AT-UWC WLAN Controller Web GUI User’s Guide 3. Click one of the following options: 84 Yes - Resets the configuration to the default settings. No - Cancels the operation.
Chapter 2: System Erase Startup Configuration File From the Erase Startup Configuration File page, you can delete the startup configuration file stored in the WLAN Controller. The startup configuration file is a file that includes the current saved settings, which the WLAN Controller loads when it reboots.
AT-UWC WLAN Controller Web GUI User’s Guide 3. Click one of the following options: 86 Yes - Erases the startup configuration file. No - Cancels the operation.
Chapter 2: System Reset Passwords to Defaults From the Reset Passwords to Defaults page, you can reset the password of the manager account to the default password “friend.” Note The guest account is not supported for the current version. See “User Accounts Configuration” on page 50. To restore the default password of the manager account, do the following: 1. From the Navigation pane, go to System > System Utilities > Reset Passwords to Defaults.
AT-UWC WLAN Controller Web GUI User’s Guide Download File to Controller From the Download File to Controller page, you can transfer a file from the TFTP server to the WLAN Controller. To transfer a file from the TFTP server to the WLAN Controller, do the following: 1. From the Navigation pane, go to System > System Utilities > Download File to Controller. The Download File to Controller page is displayed as shown in Figure 52. Figure 52. Download File to Controller Page 2.
Chapter 2: System Table 17. Download File to Controller . Field File Type Description Select one of the following file types: Configuration: Specifies a binary file that includes graphics used for the captive portal and network visualization. Text Configuration: Specifies a startup configuration file. Transfer Mode Displays the protocol TFTP, which is the only option. Server Address Type Select one of the following types: IPv4: Specifies a TFTP server with its IPv4 address.
AT-UWC WLAN Controller Web GUI User’s Guide Upload File from Controller From the Upload File from Controller page, you can transfer a file from the WLAN Controller to a TFTP server. To transfer a file from the WLAN Controller to a TFTP server, do the following: 1. From the Navigation pane, go to System > System > System Utilities > Upload File from Controller. The Upload File from Controller page is displayed as shown in Figure 53. Figure 53. Upload File from Controller Page 2.
Chapter 2: System Table 18. Upload File from Controller . Field File Type Description Select one of the following file types: Configuration: Specifies a binary file that includes graphics used for the captive portal and network visualization. Text Configuration: Specifies a startup configuration file. Error Log: Not supported. Buffered Log: Specifies a buffered log file. Persistent Log: Specifies a persistent log file including all persistent log messages.
AT-UWC WLAN Controller Web GUI User’s Guide HTTP File Download From the HTTP File Download page, you can transfer a file from your management workstation to the WLAN Controller. To transfer a file from your management workstation to the WLAN Controller, do the following: 1. From the Navigation pane, go to System > System Utilities > HTTP File Download. The HTTP File Download page is displayed as shown in Figure 54. Figure 54. HTTP File Download Page 2. Specify the following fields in Table 19 on page 93.
Chapter 2: System Table 19. HTTP File Download . Field File Type Description Select one of the following file types: Configuration: Specifies a binary file that includes graphics used for the captive portal and network visualization. Text Configuration: Specifies a startup configuration file. Select File Click Browse and specify the file to download. File Download Status Displays the progress of the file download. 3. Click Start File Transfer.
AT-UWC WLAN Controller Web GUI User’s Guide Software Upgrade From the Software Upgrade page, you can upgrade management software from your management workstation to the WLAN Controller. Note After downloading management software, you must reset the WLAN Controller to load the software. See “System Reset” on page 82.
Chapter 2: System Figure 55. Software Upgrade Page 2. Specify the following fields in Table 20. Table 20. Software Upgrade . Field Description Running Version Displays the version of the management software currently running. Installed File Version Displays the version of the management software downloaded to the WLAN Controller. Select File Click Browse and select a management software file. 3. Click Start File Transfer. The specified management software is downloaded.
AT-UWC WLAN Controller Web GUI User’s Guide Ping From the Ping page, you can test network connections between the WLAN Controller and the destination using the ping utility. To test network connections using the ping utility, do the following: 1. From the Navigation pane, go to System > System Utilities > Ping. The Ping page is displayed as shown in Figure 56. Figure 56. Ping Page 2. Specify the following fields in Table 21. Table 21. Ping .
Chapter 2: System Table 21. Ping (Continued) Field Description Size Specifies the size of a request packet in bytes. Ping Displays the results of executing the ping utility. 3. Click Submit.
AT-UWC WLAN Controller Web GUI User’s Guide TraceRoute From the TraceRoute page, you can trace the path that an IP packet takes to reach the destination. To trace the path to the destination using the traceroute utility, do the following: 1. From the Navigation pane, go to System > System Utilities > TraceRoute. The TraceRoute page is displayed as shown in Figure 57. Figure 57. TraceRoute Page 2. Specify the following fields in Table 22. Table 22. TraceRoute .
Chapter 2: System Table 22. TraceRoute (Continued) Field Description Probes per Hop Specifies the number of probe packets per hop. The default setting is 3 packets. Max TTL Specifies the maximum number of hops to allow probe packets to travel. Time to live (TTL) is specified by hop counts. The default setting is 30 hops. InitTTL Specifies the number set in the initial TTL. The default setting is 1. MaxFail Specifies the number of attempts to send a probe packet. The default setting is 5 times.
AT-UWC WLAN Controller Web GUI User’s Guide Trap Flags From the Trap Flags page, you can enable or disable the system to send traps when the SNMP authentication failed or the link status changed. To enable or disable sending traps, do the following: 1. From the Navigation pane, go to System > Trap Manager > Trap Flags. The Trap Flags page is displayed as shown in Figure 58. Figure 58. Trap Flags Page 2. Specify the following fields in Table 23. Table 23. Trap Flags .
Chapter 2: System 3. Click Submit.
AT-UWC WLAN Controller Web GUI User’s Guide Trap Logs From the Trap Logs page, you can view information about traps and a list of traps that the WLAN Controller has generated. To view trap logs, do the following: 1. From the Navigation pane, go to System > Trap Manager > Trap Logs. The Trap Logs page is displayed as shown in Figure 59. Figure 59. Trap Logs Page 2. Observe the fields described in Table 24. Table 24. Trap Logs .
Chapter 2: System Table 24. Trap Logs (Continued) Field Trap Description Displays the information about the trap. 3. If you want to clear the log, click Clear Log.
AT-UWC WLAN Controller Web GUI User’s Guide DNS Global Configuration From the Domain Name Server (DNS) Global Configuration page, you can view the domain list, enable or disable the DNS client, add a domain name to the list, change the properties, and delete a domain name. Viewing the DNS Client To view the domain list on the WLAN Controller, do the following: 1. From the Navigation pane, go to System > DNS > Global Configuration. The DNS Global Configuration page is displayed as shown in Figure 60.
Chapter 2: System Table 25. DNS Global Configuration (Continued) Field Description Retry Number Displays the number of times that the DNS client tries to resolve a host name. The default setting is 2 times. Response Timeout (secs) Displays the time period in seconds the DNS client waits for a response. The default setting is 3 seconds. Domain List Displays a list of domain names added to the WLAN Controller. Remove Check the checkbox to delete the domain name. 3.
AT-UWC WLAN Controller Web GUI User’s Guide The DNS Global Configuration page is displayed as shown in Figure 60 on page 104. 2. Click Create. The DNS Domain List Configuration page is displayed as shown in Figure 61. Figure 61. DNS Domain List Configuration Page 3. Specify a domain name in the Domain Name box. 4. Click Submit. 5. If you want to add another domain name, repeat steps 3 and 4. 6. Click Back. The domain names that you added are listed on the DNS Global Configuration page.
Chapter 2: System DNS Server Configuration From the DNS Server Configuration page, you can view the DNS server list, add or delete a DNS server where the system sends queries in order to resolve host names. You can add multiple DNS servers. Viewing the DNS Server List To view the DNS server list, do the following: 1. From the Navigation pane, go to System > DNS > DNS Server Configuration. The DNS Server Configuration page is displayed as shown in Figure 62. Figure 62. DNS Server Configuration Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide The DNS Server Configuration page is displayed as shown in Figure 62 on page 107. 2. Specify the IP address of a DNS server in the DNS Server Address box. 3. Click Submit. The DNS server is added to the DNS server List. Deleting a DNS Server To delete a DNS server from the DNS server list, do the following: 1. From the Navigation pane, go to System > System > DNS > Server Configuration.
Chapter 2: System HostName IP Mapping Summary From the HostName IP Mapping Summary page, you can view the DNS static and dynamic entries, add a static entry, and delete the entries. Viewing DNS Static and Dynamic Entries To view the DNS entries, do the following: 1. From the Navigation pane, go to System > System > DNS > HostName IP Mapping Summary. The DNS HostName IP Mapping Summary page is displayed as shown in Figure 63. Figure 63. DNS HostName IP Mapping Summary Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide Table 27. DNS HostName IP Mapping Summary (Continued) Field Description Elapsed Displays the time duration in seconds that the entry has stayed on the list. Type Displays the type of the entry. Address Displays the IP address of the host. Remove Dynamic Check the checkbox to remove the host. 3. If you want to display the most current information, click Refresh. Adding a Static Entry To add a static entry do the following: 1.
Chapter 2: System Table 28. DNS HostName IP Mapping Configuration (Continued) Field Inet Address Description Specify the IP address of the host. 4. Click Submit. The domain and its IP address are entered in to the DNS HostName IP Mapping. Deleting a DNS Static Entry To delete a DNS static entry, do the following: 1. From the Navigation pane, go to System > System > DNS > HostName IP Mapping Summary. The DNS HostName Mapping Summary page is displayed as shown in Figure 63 on page 109. 2.
AT-UWC WLAN Controller Web GUI User’s Guide SNTP Global Configuration From the SNTP Global Configuration page, you can enable or disable the Simple Network Time Protocol (SNTP) client on the WLAN Controller and modify the settings. SNTP synchronizes the system time on the WLAN Controller with an SNTP server. To enable or disable the SNTP client on the WLAN Controller, or modify the settings, do the following: 1. From the Navigation pane, go to System > SNTP > Global Configuration.
Chapter 2: System Table 29. SNTP Global Configuration . Field Client Mode Description Select one of the options: Disabled — Disables the SNTP client. This is the default setting. Unicast — The SNTP client sends time requests to the specified SNTP server. To set an SNTP server, see “SNTP Server Configuration” on page 117.
AT-UWC WLAN Controller Web GUI User’s Guide SNTP Global Status From the SNTP Global Status page, you can view the SNTP status on the WLAN Controller. To view the SNTP client information, do the following: 1. From the Navigation pane, go to System > SNTP > Global Status. The SNTP Global Status page is displayed as shown in Figure 66. Figure 66. SNTP Global Status Page 2. Observed the fields described in Table 30. Table 30.
Chapter 2: System Table 30. SNTP Global Status (Continued) Field Description Last Update Time Displays the last time when the SNTP client updated the system time on the WLAN Controller. Last Attempt Time Displays the last time when the SNTP client sent a time request or received a message. Last Attempt Status Displays one of the following options as the status of the last attempt: Success — SNTP successfully synchronized the system time.
AT-UWC WLAN Controller Web GUI User’s Guide Table 30. SNTP Global Status (Continued) Field Description Broadcast Count Displays the number of time messages that the SNTP client received since the WLAN Controller last rebooted. 3. If you want to refresh the display, click Refresh.
Chapter 2: System SNTP Server Configuration From the SNTP Server Configuration page, you can add an SNTP server. SNTP synchronizes the system time on the WLAN Controller with the SNTP server. To add an SNTP server on the WLAN Controller, or modify the settings, do the following: 1. From the Navigation pane, go to System > System > SNTP > Server Configuration. The SNTP Server Configuration page is displayed as shown in Figure 67. Figure 67. SNTP Server Configuration Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide Table 31. SNTP Server Configuration (Continued) Field Description Address / Hostname Enter the IPv4 address or host name of the SNTP server, depending on the address type selected below. Address Type Select one of the following types: IPv4: Specifies the SNTP server with its IPv4 address. DNS: Specifies the SNTP server with its host name.
Chapter 2: System SNTP Server Status From the SNTP Server Status page, you can view the registered SNTP servers on the WLAN Controller. To view a list of the SNTP servers, do the following: 1. From the Navigation pane, go to System > SNTP > Server Status. The SNTP Server Status page is displayed as shown in Figure 68. Figure 68. SNTP Server Status Page 2. Select the IP address of the SNTP server that you want to view from the Address select list. 3. Observed the fields described in Table 32. Table 32.
AT-UWC WLAN Controller Web GUI User’s Guide Table 32. SNTP Server Status (Continued) Field Last Attempt Status Description Displays one of the following options as the status of the last attempt: Success — SNTP successfully synchronized the system time. Request Timed Out — The SNTP client did not receive a reply to the last request from the SNTP server. Bad Data Encoded — The time from the SNTP server was invalid.
Chapter 2: System License From the License page, you can view information about the currently registered license, add a license key, or delete an existing license key. Viewing License Information To view information about the currently registered license, do the following: 1. From the Navigation pane, go to System > License > License. The License Management page is displayed as shown in Figure 69. Figure 69. License Management Page 2. Observed the fields described in Table 33. Table 33.
AT-UWC WLAN Controller Web GUI User’s Guide Table 33. License Management (Continued) Field Description Serial Number Displays the serial number of the registered license. The license key consists of a serial number and an authentication key. Description Displays the name of the license key. Remove Check the checkbox to remove the license key. 3. If you want to refresh the display, click Refresh. Adding License Key To add a license key, do the following: 1.
Chapter 2: System Note After adding the first license key, you must reboot the AT-UWC WLAN Controller server to make the license effective. See “System Reset” on page 82. Deleting License Key To delete a license key, do the following: 1. From the Navigation pane, go to System > License > License. The License page is displayed as shown in Figure 69 on page 121. 2. Check the Remove checkbox of the license that you want to delete. 3. Click Submit. The license key is deleted.
AT-UWC WLAN Controller Web GUI User’s Guide 124
Chapter 3 Switching This chapter includes the following topics: VLAN “VLAN Configuration” on page 126 “VLAN Status” on page 130 “VLAN Port Configuration” on page 131 “VLAN Port Summary” on page 133 “Reset VLAN Configuration” on page 135 125
AT-UWC WLAN Controller Web GUI User’s Guide VLAN Configuration From the VLAN Configuration page, you can modify the properties of VLAN’s, add and delete VLAN’s. You can modify, add, and delete single VLAN or multiple VLAN’s at a time. Modifying the VLAN Properties To modify the properties of VLAN, such as a VLAN name and tagging status, do the following: 1. From the Navigation pane, go to Switching > VLAN > Configuration. The VLAN Configuration page is displayed as shown in Figure 71. Figure 71.
Chapter 3: Switching Table 34. VLAN Configuration (Continued) Field VLAN Type VLAN IDIndividual/Range Description Displays the VLAN type. The options are: Default - Default VLAN Static - Manually added VLAN Dynamic - Automatically added VLAN Enter a range of VLAN ID’s. For example, 10-20 When you modify the properties of multiple VLAN’s, click the VLAN Participation checkbox before enter the range.
AT-UWC WLAN Controller Web GUI User’s Guide The VLAN Configuration page is displayed as shown in Figure 71 on page 126. 2. Select Create from the VLAN ID select list. The VLAN Configuration (Create) page is displayed as shown in Figure 72. Figure 72. VLAN Configuration (Create) Page 3. Enter the range of VLAN’s in the VLANID-Individual/Range box. For example, enter “10-15.” 4. Click Submit. The VLAN’s, 10, 11, 12, 13, 14, and 15 are created. 5.
Chapter 3: Switching Figure 73. VLAN Configuration (Delete) Page 3. Enter the range of VLAN’s in the VLANID-Individual/Range box. For example, enter “10-15.” 4. Click Submit. The VLAN’s, 10, 11, 12, 13, 14, and 15 are deleted.
AT-UWC WLAN Controller Web GUI User’s Guide VLAN Status From the VLAN Status page, you can view the information about VLAN’s on the WLAN Controller. To view the information about VLAN’s, do the following: 1. From the Navigation pane, click Switching > VLAN > Status. The VLAN Status page is displayed as shown in Figure 74. Figure 74. VLAN Status Page 2. Observe the fields described in Table 35. Table 35. VLAN Status Field Description VLAN ID Displays the ID of the VLAN.
Chapter 3: Switching VLAN Port Configuration From the VLAN Port Configuration page, you can modify the properties of the port interface. Note The WLAN Controller has only one port interface that you can modify its properties. To modify the port interface 0/1, do the following: 1. From the Navigation pane, go to Switching > VLAN > Port Configuration. The VLAN Port Configuration page is displayed as shown in Figure 75. Figure 75. VLAN Port Configuration Page 2. Specify the fields described in Table 36.
AT-UWC WLAN Controller Web GUI User’s Guide Table 36. VLAN Port Configuration (Continued) Fields Acceptable Frame Types Ingress Filtering Port Priority 3. Click Submit. 132 Description Specify one of the following options: Admit ALL - The port accepts any frame types. It forwards tagged frames as defined in IEEE802.1Q. This is the default setting. AdmitTaggedOnly - The port accepts only tagged frames and forwards them as defined in IEEE 802.1Q.
Chapter 3: Switching VLAN Port Summary From the VLAN Port Summary page, you can view the port setting. To view the port setting, do the following: 1. From the Navigation pane, go to Switching> VLAN > VLAN Port Summary. The VLAN Port Summary page is displayed as shown in Figure 76. Figure 76. VLAN Port Summary Page 2. Observed the fields described in Table 37. Table 37. VLAN Port Summary Field Description Interface Displays the port interface.
AT-UWC WLAN Controller Web GUI User’s Guide Table 37. VLAN Port Summary (Continued) Field Ingress Filtering Configured Port Priority Description Indicates one of the following options for tagged frames: Enable- The port discards the tagged frames with other than the specified port VLAN ID. When receiving untagged frames, the port applies the specified port VLAN ID to the frames. Disable - The port forwards frames as defined in IEEE802.1Q.
Chapter 3: Switching Reset VLAN Configuration From the Reset VLAN Configuration page, you can reset the VLAN configuration to the default settings. Default VLAN Settings Here are the default VLAN settings: Only VLAN 1 is on the WLAN Controller, which is the default VLAN. The Port VLAN ID is set to VLAN 1. The Acceptable Frame Type on the port is the “Admit All” option. The Ingress Filtering on the port is set to “disable.” The port sends only untagged frames.
AT-UWC WLAN Controller Web GUI User’s Guide 136
Chapter 4 Security This chapter includes the following topics: Captive Portal “CP Global Configuration” on page 138 “CP Configuration Summary” on page 140 “CP Web Customization” on page 146 “Local User Summary” on page 155 “Interface Association” on page 159 “CP Status” on page 161 “Interface Status” on page 164 “Client Connection Status” on page 167 RADIUS “RADIUS Configuration” on page 172 “RADIUS Server Configuration” on page 175 “RADIUS Named Server Status”
AT-UWC WLAN Controller Web GUI User’s Guide CP Global Configuration From the Captive Portal (CP) Global Configuration page, you can enable Captive Portal, view and modify the CP global configuration on the WLAN Controller. Captive Portal is the feature that blocks AP clients from accessing the network until the AP clients are authenticated. Captive Portal also directs the user of the AP clients to the authentication web page when the AP clients send the first HTTP or HTTPS packets.
Chapter 4: Security Table 38. CP Global Configuration (Continued) Field CP Global Disable Reason Additional HTTP Port Description Displays the reason when Captive Portal is disabled on the WLAN Controller. The options are: Administrator Disabled No IPv4 Address Routing Enabled, but no IPv4 routing interface None - None of the above reasons is applicable. Specifies the number of other HTTP ports that are addition to port 80. The value 0 indicates that no additional HTTP port is specified.
AT-UWC WLAN Controller Web GUI User’s Guide CP Configuration Summary From the Captive Portal (CP) Summary page, you can view a list of CP profiles, add CP profiles, and delete them. You can apply a Captive portal profile to wireless network interfaces. Viewing a List of CP Profiles To view a list of CP profiles, do the following: 1. From the Navigation pane, go to System > Captive Portal > CP Configuration. The CP Summary page is displayed as shown in Figure 79. Figure 79. CP Summary Page 2.
Chapter 4: Security Table 39. CP Summary (Continued) Field Verification Languages Description Displays the verification type of the CP profile. The options are: Guest - No verification is implemented. Local - Verification is implemented on the specified local users. RADIUS server - Verification is implemented by the RADIUS server. Displays the number of languages for the welcome page specified to the CP profile. 3. If you want to view the most current information, click Refresh.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 80. CP Configuration Page 3. Specify the fields described in Table 40. Table 40. CP Configuration Field Enable Captive Portal Check the checkbox to enable the CP profile. Configuration Name Specify the name of the CP profile. Protocol Mode Select the protocol mode: HTTP or HTTPS. Verification Mode Select the verification type of the CP profile. The options are: Mode 142 Description Guest - No verification is implemented.
Chapter 4: Security Table 40. CP Configuration (Continued) Field Description Enable Redirect Mode Check the checkbox to direct the authenticated clients to the specified URL. The welcome page in the specified language is displayed. Redirect URL Specify the URL that the verified users of the AP client are directed. You must check the checkbox of Enable Redirect Mode to specify this field. RADIUS Auth Server Specify or select the name of the RADIUS server when Verification Mode is set to RADIUS.
AT-UWC WLAN Controller Web GUI User’s Guide Table 40. CP Configuration (Continued) Field Description Session Timeout (secs) Specify the time period in seconds to allow a user to stay connected. When Session Timeout has passed, the user is automatically logged out. Max Up Rate (bytes/sec) Specify the maximum transmission rate that AP clients send traffic to the network when Captive Portal is activated.
Chapter 4: Security The changes are saved. Deleting a CP Profile To delete a CP profile, do the following: 1. From the Navigation pane, go to Security > Captive Portal > CP Configuration. The CP Summary page is displayed as shown in Figure 79 on page 140. 2. Check the checkbox of the CP profile that you want to delete. 3. Click Delete. The CP profile is deleted from the list.
AT-UWC WLAN Controller Web GUI User’s Guide CP Web Customization From the CP Web Customization page, you can customize the web pages to be displayed to the browser of AP clients. When the AP client sends the first HTTP or HTTPS packet, Captive Portal directs the AP client to the authentication page in the specified language.
Chapter 4: Security Figure 81. CP Web Customization (Global Parameter) Page Global Parameters 5. Modify the fields described in Table 41. Table 41. CP Web Customization (Global Parameter) Field Available Images Description View the available images, delete an image file, or download a new image file for the web pages. Perform one of the following tasks as needed: To view the image that have already downloaded, select the file name from the select list, click the ... button.
AT-UWC WLAN Controller Web GUI User’s Guide Table 41. CP Web Customization (Global Parameter) (Continued) Field Script Text Description Specify the text to require the user to activate JavaScript. To display the logout window for AP client users, JavaScript must be activated. Script Text is only available when Mode is enabled. See Table 40 on page 142. Popup Text Specify the text to require the user to allow popup windows.
Chapter 4: Security Figure 82. CP Web Customization (Authentication Page) Page 9. Modify the fields described in Table 42. Table 42. CP Web Customization (Authentication Page) Field Description Background Image Displays the image file for the background on the Authentication page. This image is specified in the Global Parameters. Branding Image Displays the image file for the branding image on the Authentication page. The specified image is displayed at the upper left corner of the Web page.
AT-UWC WLAN Controller Web GUI User’s Guide Table 42. CP Web Customization (Authentication Page) (Continued) Field Description Account Title Specify the text to prompt the user to authenticate. User Label Specify the text to be displayed next to the user name text box. Password Label Specify the text to be displayed next to the password text box. Button Label Specify the text to be displayed on the button to connect to the network.
Chapter 4: Security Welcome Page 11. Select Welcome Page from the select list. 12. The CP Web Customization (Welcome Page) page is displayed as shown in Figure 83. Figure 83. CP Web Customization (Welcome Page) Page 13. Modify the fields described in Table 43. Table 43. CP Web Customization (Welcome Page) Field Description Background Image Displays the image file for the background on the Welcome page. The image is specified in the Global Parameters.
AT-UWC WLAN Controller Web GUI User’s Guide Note To save your changes to the startup configuration file, see “Save All Applied Changes” on page 39. Logout Page 15. Select Logout Page from the select list. You can customize the Logout page settings only when Mode is enabled. See Table 40 on page 142. 16. The CP Web Customization (Logout Page) page is displayed as shown in Figure 84. Figure 84. CP Web Customization (Logout Page) Page 17. Modify the fields described in Table 44. Table 44.
Chapter 4: Security Clear — Reset to the default settings. Submit — Makes the changes effective and saves them to the running configuration file. Note To save your changes to the startup configuration file, see “Save All Applied Changes” on page 39. Logout Success Page 19. Select Logout Success Page from the select list. You can customize the Logout Success page settings only when Mode is enabled. See Table 40 on page 142. 20.
AT-UWC WLAN Controller Web GUI User’s Guide Table 45. CP Web Customization (Logout Success Page) (Continued) Field Content Description Specify the text to be displayed when the authentication is cancelled. 22. Click the following buttons as needed: Preview — Displays the web page with the current settings. Clear — Reset to the default settings. Submit — Makes the changes effective and saves them to the running configuration file.
Chapter 4: Security Local User Summary From the Local User Summary page, you can view a list of local users, add or delete local users, and modify the properties. You can also assign users to the user group specified for the CP profiles. Viewing a List of Local Users To view a list of local users, do the following: 1. From the Navigation pane, go to System > Captive Portal > Local User. The Local User Summary page is displayed as shown in Figure 86. Figure 86. Local User Summary Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide The Local User Summary page is displayed as shown in Figure 86 on page 155. 2. Perform one of the following steps. To add a new local user, click Add. To modify an existing local user, click the name of the local user that you want to modify. The Local User Configuration page is displayed as shown in Figure 87. Figure 87. Local User Configuration Page 3. Specify the fields described in Table 47. Table 47.
Chapter 4: Security Table 47. Local User Configuration (Continued) Field Description Session Timeout (secs) Specify the time period in seconds to allow a user to stay connected. When Session Timeout has passed, the user is automatically logged out. Max Up Rate (bytes/sec) Specify the maximum transmission rate that AP clients send traffic to the network when Captive Portal is activated.
AT-UWC WLAN Controller Web GUI User’s Guide 3. Click the following buttons as needed: 158 Delete ALL — Deletes all the local users on the list. Delete — Deletes the selected local user.
Chapter 4: Security Interface Association From the Interface Association page, you can view a list of wireless network interfaces or Service Set Identifiers (SSID’s) that are associated to a CP profile. You can also associate a CP profile to a wireless network interface and delete an associated wireless network interface from a CP profile.
AT-UWC WLAN Controller Web GUI User’s Guide Table 48. Interface Association (Continued) Field Associated Interfaces Description Displays a list of wireless network interfaces that are associated to the CP profile. To delete an Associated Interface, select one or more Associated Interfaces and click Delete. To select more than one Associated Interface, hold the Ctrl key and click another Associated Interface. Delete (button) Click Delete to delete the selected Associated Interfaces from the list.
Chapter 4: Security CP Status From the CP Status page, you can view the information about Captive Portal on the WLAN Controller. Viewing the CP Global Status To view the information about Captive Portal, do the following: 1. From the Navigation pane, go to System > Captive Portal > CP Status. The CP Global Status page is displayed as shown in Figure 89. Figure 89. CP Global Status Page 2. Observed the fields described in Table 49. Table 49.
AT-UWC WLAN Controller Web GUI User’s Guide Table 49. CP Global Status (Continued) Field Description System Supported Users Displays the number of authenticated users that the system supports. CP IP Address Displays the IP address of Captive Portal. Supported Captive Portals Displays the number of CP profiles that the system supports. Configured Captive Portals Displays the number of CP profiles that are defined to the WLAN Controller.
Chapter 4: Security The information about the CP profile displayed. 4. Observe the fields described in Table 50. Table 50. CP Activation and Activity Status Field Description Operational Status Displays the status whether the CP profile is enabled or disabled. Disable Reason Displays the reason when the CP profile is disabled. The options are: Blocked Status Authenticated Users No display - The CP profile is enabled.
AT-UWC WLAN Controller Web GUI User’s Guide Interface Status From the Interface Activation Status page, you can view the information about the wireless network interface that is associated to a CP profile. Viewing the Interface Activation Status To view the information about Captive Portal, do the following: 1. From the Navigation pane, go to System > Captive Portal > Interface Status. The Interface Activation Status page is displayed as shown in Figure 91. Figure 91. Interface Activation Status Page 2.
Chapter 4: Security Table 51. Interface Activation Status (Continued) Field Blocked Status Authenticated Users Description Displays the CP blocking status. The options are: Block - Users cannot access the network via Captive Portal authentication. Unblock - Users can access the network via Captive Portal authentication. Displays the number of users that are currently authenticated in all the CP instances. 5. If you want to view the most current information, click Refresh.
AT-UWC WLAN Controller Web GUI User’s Guide Table 52. Interface Capability Status Field Description Bytes Received Counter Displays whether the counter of the bytes received from the AP clients is supported by the wireless network interface or not. Bytes Transmitted Counter Displays whether the counter of the bytes transmitted from the AP clients is supported by the wireless network interface or not.
Chapter 4: Security Client Connection Status From the Client Connection Status page, you can view the information about connected AP clients. You can also disconnect the AP clients from the page. You can visit 5 pages from the Client Connection Status page: Client Summary Client Summary page Client Detail page Client Statistics page Interface - Client Status page CP - Client Status page To view the information about connected AP clients, do the following: 1.
AT-UWC WLAN Controller Web GUI User’s Guide Client Detail Delete — Deletes the selected AP client. Delete All — Deletes all the AP clients. Refresh — Refreshes the display on this page. To view the detailed information about connected AP clients, do the following: 1. From the Navigation pane, go to Security > Captive Portal > Client Connection Status. The Client Summary page is displayed. 2. Click the Client Detail tab. The Client Detail page is displayed. 3.
Chapter 4: Security Table 54. Client Detail (Continued) Field Controller IP Address Description Displays the IP address of the WLAN Controller that authenticated the AP client. When clustering is supported, the IP address of the peer controller may be shown. 4. If you want to view the most current information, click Refresh. Client Statistics To view the statistics of connected AP clients, do the following: 1. From the Navigation pane, go to Security > Captive Portal > Client Connection Status.
AT-UWC WLAN Controller Web GUI User’s Guide 3. Select the wireless network interface from the select list. The information about the selected wireless network interface is displayed. 4. Observe the fields described in Table 56. Table 56. Interface - Client Status Field Description MAC Address Displays the MAC address of the AP client. When the * symbol is marked at the end of the MAC address, the AP client was authenticated by the peer controller. IP Address Displays the IP address of the AP client.
Chapter 4: Security Table 57. CP - Client Status Field Description MAC Address Displays the MAC address of the AP client. When the * symbol is marked at the end of the MAC address, the AP client was authenticated by the peer controller. IP Address Displays the IP address of the AP client. Interface Displays the interface that the AP client is using. Protocol Displays the protocol that is connected through: HTTP or HTTPS. 5. If you want to view the most current information, click Refresh.
AT-UWC WLAN Controller Web GUI User’s Guide RADIUS Configuration From the RADUUS Configuration page, you can view and modify the RADIUS settings. To view or modify the RADIUS settings, do the following: 1. From the Navigation pane, go to Security > RADIUS > Configuration. The RADIUS Configuration page is displayed as shown in Figure 93. Figure 93. RADIUS Configuration Page 2. Observed the fields described in Table 58. Table 58.
Chapter 4: Security Table 58. RADIUS Configuration (Continued) Field Description Number of Named Authentication Server Groups Displays the number of the RADIUS server groups that are configured on the WLAN Controller used for authentication. Number of Named Accounting Server Groups Displays the number of the RADIUS server groups that are configured on the WLAN Controller used for accounting information.
AT-UWC WLAN Controller Web GUI User’s Guide Table 58. RADIUS Configuration (Continued) Field Character Case User-Password Description Specifies an option for the character case to present a MAC address in the RADIUS attribute for authentication. The options are: Lower-Case - The MAC address are presented in lower-case, for example: abcd-ef-01-23-45. This is the default setting. Upper-Case - The MAC address are presented in upper-case, for example, ABCD-EF-01-23-45.
Chapter 4: Security RADIUS Server Configuration From the RADIUS Server Configuration page, you can add a RADIUS server to the WLAN Controller. To view and modify the network interface properties, do the following: 1. From the Navigation pane, go to Security > RADIUS > Server Configuration. The RADIUS Server Configuration page is displayed as shown in Figure 94. Figure 94. RADIUS Server Configuration Page 2. Specify the fields described in Table 59. Table 59.
AT-UWC WLAN Controller Web GUI User’s Guide RADIUS Named Server Status From the RADIUS Named Server Status page, you can view a list of configured RADIUS servers on the WLAN Controller. To view a list of configured RADIUS servers, do the following: 1. From the Navigation pane, go to Security > RADIUS > Named Server Status. The RADIUS Named Server Status page is displayed as shown in Figure 95. Figure 95. RADIUS Named Server Status Page 2. Observed the fields described in Table 60. Table 60.
Chapter 4: Security Table 60. RADIUS Named Server Status (Continued) Field Description Port Number Displays the UDP port number of the RADIUS server. Server Type Displays the server type. The options are: Secret Configured Message Authenticator Primary- indicates that the RADIUS server is the primary server. Secondary - indicates that the RADIUS server is a secondary server. Displays if the password to access the RADIUS server is assigned. The options are: Yes - The password is assigned.
AT-UWC WLAN Controller Web GUI User’s Guide RADIUS Server Statistics From the RADIUS Server Statistics page, you can view information about a RADIUS server. To view information about a RADIUS server, do the following: 1. From the Navigation pane, go to Security > RADIUS > Server Statistics. The RADIUS Server Statistics page is displayed as shown in Figure 96. Figure 96. RADIUS Server Statistics Page 2. Select the IPv4 address of a RADIUS server from the RADIUS Server Host Address select list.
Chapter 4: Security Table 61. RADIUS Server Statistics (Continued) Field Description Access Requests Displays the number of RADIUS Access-Request packets that the RADIUS client on the WLAN Controller sent to the RADIUS server. Access Retransmissions Displays the number of RADIUS Access-Request packets that the RADIUS client on the WLAN Controller re-sent to the RADIUS server.
AT-UWC WLAN Controller Web GUI User’s Guide 4. If you want to view the most current information, click Refresh.
Chapter 4: Security Accounting Server Configuration From the Port Configuration page, you can modify the network interface properties. To modify the network interface properties, do the following: 1. From the Navigation pane, go to Security > RADIUS > Accounting Server Configuration. The RADIUS Accounting Server Configuration page is displayed as shown in Figure 97. Figure 97. RADIUS Accounting Server Configuration Page 2. Specify the fields described in Table 62. Table 62.
AT-UWC WLAN Controller Web GUI User’s Guide Named Accounting Server Status From the RADIUS Named Accounting Server Status page, you can view a list of configured RADIUS accounting servers on the WLAN Controller. To view a list of configured RADIUS accounting servers, do the following: 1. From the Navigation pane, go to Security > RADIUS > Named Accounting Server Status. The RADIUS Named Accounting Server Status page is displayed as shown in Figure 98. Figure 98.
Chapter 4: Security Table 63. RADIUS Named Accounting Server Status (Continued) Field Secret Configured Description Displays if the password to access the RADIUS accounting server is assigned. The options are: Yes - The password is assigned. No - No password is assigned. 3. If you want to view the most current information, click Refresh.
AT-UWC WLAN Controller Web GUI User’s Guide Accounting Server Statistics From the Accounting Server Statistics page, you can view information about a RADIUS accounting server. To view information about an Accounting server, do the following: 1. From the Navigation pane, go to Security > RADIUS > Accounting Server Statistics. The Accounting Server Statistics page is displayed as shown in Figure 99. Figure 99. Accounting Server Statistics Page 2.
Chapter 4: Security Table 64. Accounting Server Statistics (Continued) Field Description Accounting Requests Displays the number of RADIUS Accounting Request packets that the RADIUS client on the WLAN Controller sent to the RADIUS server. Accounting Retransmissions Displays the number of RADIUS Accounting Request packets that the RADIUS client on the WLAN Controller re-sent to the RADIUS server.
AT-UWC WLAN Controller Web GUI User’s Guide RADIUS Clear Statistics From the RADIUS Clear Statistics page, you can clear all the RADIUS counters. To clear the RADIUS authentication and accounting counters, do the following: 1. From the Navigation pane, go to Security > RADIUS > Clear Statistics. The RADIUS CLEAR Statistics page is displayed as shown in Figure 100. Figure 100. RADIUS Clear Statistics Page 2. Click Clear. All the counters for RADIUS authentication and accounting servers.
Chapter 4: Security Secure HTTP On the Secure HTTP (HTTPS) Configuration page, you can enable or disable HTTPS, modify the properties for HTTPS connections, generate a certificate, and delete a certificate. To modify HTTPS settings, do the following: 1. From the Navigation pane, go to Security > Secure HTTP > Configuration. The Secure HTTP Configuration page is displayed as shown in Figure 101. Figure 101. Secure HTTP Configuration Page 2. Modify the property settings described in Table 65. Table 65.
AT-UWC WLAN Controller Web GUI User’s Guide Table 65. HTTPS Configuration (Continued) Field Description SSL Version 3 Enables or disables SSL Version 3. By default, the SSL version 3 is disabled. HTTPS Port Specifies the HTTPS port number. The default number is 443. HTTPS Session Soft Timeout (Minutes) Specifies a period of time in minutes. When this specified time has passed since the last userinteraction to the system, the system ends the session. The default setting is 5 minutes.
Chapter 5 Wireless LAN This chapter includes the following topics: WLAN “WLAN Basic Setup > Global” on page 191 “WLAN Basic Setup > Discovery” on page 194 “WLAN Basic Setup > Valid AP” on page 198 WLAN > AP Management “AP Management Reset” on page 204 “RF Management > Configuration” on page 205 “RF Management > Channel Plan History” on page 208 “RF Management > Manual Channel Plan” on page 210 “Access Point Software Download” on page 212 “Managed AP Advanced Settings” o
AT-UWC WLAN Controller Web GUI User’s Guide “WLAN Advanced Configuration > Centralized L2 Tunneling” on page 310 “WLAN Advanced Configuration > Known Client” on page 312 “WLAN Advanced Configuration > Networks” on page 316 “Access Point Profile List” on page 325 “Access Point Profile Global Configuration” on page 328 “Access Point Profile Radio Configuration” on page 331 “Access Point Profile VAP Configuration” on page 339 “Access Point Profile QoS Configuration” on page 342
Chapter 5: Wireless LAN WLAN Basic Setup > Global From the Wireless Global Configuration page, you can enable or disable the WLAN Controller. You can also view and modify the basic settings. To enable or disable the WLAN Controller, view, and modify the basic settings, do the following: 1. From the Navigation pane, go to WLAN > Basic Setup. The Wireless Global Configuration page is displayed as shown in Figure 102. Figure 102. Wireless Global Configuration Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide Table 66. Wireless Global Configuration (Continued) Field WLAN Controller Operational Status WLAN Controller Disable Reason IP Address Description Displays the status of the WLAN Controller. The options are: Enabled Disabled Enable Pending Disable Pending Displays the reason why the WLAN Controller is disabled. The options are: None - The WLAN Controller is enabled or the reason is unknown.
Chapter 5: Wireless LAN Table 66. Wireless Global Configuration (Continued) Field Description RADIUS Accounting Server Name Specifies the name of the RADIUS accounting server. This server is used for accounting when no RADIUS accounting server is configured on the WLAN Controller. To see configured RADIUS accounting servers, see “Named Accounting Server Status” on page 182. RADIUS Accounting Server Status Displays whether the RADIUS accounting server is configured on the WLAN Controller.
AT-UWC WLAN Controller Web GUI User’s Guide WLAN Basic Setup > Discovery To manage access points, the WLAN Controller discovers access points or access points discover the WLAN Controller. Note To configure access points to be discovered, see the documents for the access points. The WLAN Controller discovers access points by sending discovery packets to a list of the IP addresses and/or sending broadcast discovery frames to VLAN’s.
Chapter 5: Wireless LAN Table 67. Wireless Discovery Configuration (L3/IP) Field Description L3/IP Discovery Check the checkbox to enable L3/IP discovery. IP List Displays a list of the IP addresses that the WLAN Controller sends discovery packets to. You can add up to 256 IP addresses. To delete IP addresses from the list, select one or more IP addresses. IP Address Specify an IP address to add to the list.
AT-UWC WLAN Controller Web GUI User’s Guide Guidelines for Importing a CVS file Here are guidelines for importing a CVS file to upload IP addresses: Spaces are not allowed in the name of the CVS file. Commas are not allowed as delimiters in the CVS file. Enter one access point in a row. Figure 104 shows an example of the CVS file created with Microsoft Excel. Figure 104.
Chapter 5: Wireless LAN Table 68. Wireless Discovery Configuration (L2/VLAN) (Continued) Field (Buttons) Description Click one of the buttons as needed: Add - The VLAN specified in VLAN is added to the VLAN List. Delete - The selected VLAN is deleted from the VLAN List. 3. Click the following buttons as needed: Refresh — Refreshes the display on this page. Submit — Makes the changes effective and saves them to the running configuration file.
AT-UWC WLAN Controller Web GUI User’s Guide WLAN Basic Setup > Valid AP From the Valid Access Point Summary page, you can view a list of valid access points. The valid access point is an access point to be managed by the WLAN Controller. You can also add access points to the valid AP list, delete them, and modify the properties. Note You can add the MAC addresses of peer controllers to the valid AP list. The WLAN Controller discovers peer controllers as well as access points.
Chapter 5: Wireless LAN The Valid Access Point Summary page is displayed as shown in Figure 105. Figure 105. Valid Access Point Summary Page 2. Observe the fields described in Table 69. Table 69. Valid Access Point Summary Field MAC address Description Displays the MAC address of an access point on the valid AP list on the WLAN Controller. Click the MAC address, Figure 106 on page 200 is displayed. Location Displays the location information of the access point.
AT-UWC WLAN Controller Web GUI User’s Guide The Valid Access Point Summary page is displayed as shown in Figure 105 on page 199. 2. Specify the fields described in Table 70. Table 70. Valid Access Point Summary (Adding) Field Description MAC Address Specify the MAC address of the access point. Location Specify the location information of the access point. This is optional. The location can be up to 32 alphanumeric characters. 3. Click Add.
Chapter 5: Wireless LAN Table 71. Valid Access Point Configuration Field AP Mode Description Select the AP mode of the access point. The options are: Managed - Managed by the WLAN Controller Standalone - Managed independently Rogue - Classified as a threat by WIDS Location Specify the location information of the access point. This is optional. The location can be up to 32 alphanumeric characters. Authentication Password Specify the authentication password.
AT-UWC WLAN Controller Web GUI User’s Guide 3. Import a CVS file onto the system. Guidelines for Importing a CVS file Here are guidelines for importing a CVS file to upload a list of access points: Spaces are not allowed in the name of the CVS file. Commas are not allowed as delimiters in the CVS file. Enter one access point in a row. Figure 107 shows an example of the CVS file created with Microsoft Excel. Figure 107.
Chapter 5: Wireless LAN To delete all the access points on the list, skip this step. 3. Click the following buttons as needed: Delete — Deletes the selected access point. Delete All — Deletes all the access points on the list.
AT-UWC WLAN Controller Web GUI User’s Guide AP Management Reset From the Managed AP (Access Point) Reset page, you can reboot the selected access points. To reboot access points, do the following: 1. From the Navigation pane, go to WLAN > AP Management > Reset. The Managed AP Reset page is displayed as shown in Figure 108. Figure 108. Managed AP Reset Page 2. Check the checkbox next to the MAC address of the access point that you want to reboot. 3.
Chapter 5: Wireless LAN RF Management > Configuration From the RF Configuration page, you can view and modify the RF settings on managed access points. Guidelines for the Channel Plan Algorithm The WLAN Controller has the channel plan algorithm that evaluates interference of the channels used by the access points and changes the channels when interference is detected.
AT-UWC WLAN Controller Web GUI User’s Guide Table 72. RF Configuration Field Channel Plan Channel Plan Mode Channel Plan History Depth Description Specifies the RF band that the access points use to send and receive data. The options are: 5 GHz (802.11 a/n) - This is the default setting. 2.4 GHz (802.11 b/g/n) Specifies the channel plan mode. The options are: Fixed Time - The channel plan algorithm runs at the time specified in Channel Plan Fixed Time (hh:mm) in the day.
Chapter 5: Wireless LAN Table 72. RF Configuration (Continued) Field Power Threshold (dBm) Description Specifies the RF power threshold. The access points managed by the WLAN Controller adjust the RF power using the power threshold. For example, access point 1 transmits the RF and other access points detect the RF from access point 1. Among the other access points, access point 2 detects the highest level of RF power from access point 1.
AT-UWC WLAN Controller Web GUI User’s Guide RF Management > Channel Plan History From the Channel Plan History page, you can view the channel history for managed access points. To view the channel history, do the following: 1. From the Navigation pane, go to WLAN > AP Management > RF Management and click the Channel Plan History tab. The Channel Plan History page is displayed as shown in Figure 110. Figure 110. Channel Plan History Page 2. Select one of the following radio bands: 5 GHz (802.
Chapter 5: Wireless LAN Table 73. Channel Plan History (Continued) Field Description Last Iteration Displays how many time the channel plan algorithm runs since the current channel was assigned. When this value reaches to the channel plan history depth, the channel plan algorithm reassigns a new channel to the access point. See “Channel Plan History Depth” on page 206. Last Algorithm Time Displays the date and time when the channel plan algorithm run last time. 4.
AT-UWC WLAN Controller Web GUI User’s Guide RF Management > Manual Channel Plan From the RF Management > Manual Channel Plan page, you can start the channel plan algorithm manually and apply the suggested new channel to the access points. Note The channel plan algorithm only suggests a new channel. You must click the Apply button to apply the new channel. To start the channel plan algorithm and apply the change, do the following: 1.
Chapter 5: Wireless LAN Table 74. Manual Channel Plan Field Current Status Description Displays the status of executing the channel plan algorithm. The options are: Algorithm In Progress - The channel plan algorithm is running. Algorithm Complete - The channel plan algorithm is completed and the result is displayed. Apply In Progress - The result of channel plan algorithm is applying to the access point. Apply Complete - The application of the channel plan algorithm is completed.
AT-UWC WLAN Controller Web GUI User’s Guide Access Point Software Download From the Access Point Software Download page, you can upgrade software on the access points that the WLAN Controller manages. To upgrade software on the access points, do the following: 1. From the Navigation pane, click System or go to WLAN > AP Management > Software Download. The Access Point Software Download page is displayed as shown in Figure 112. Figure 112. Access Point Software Download Page 2.
Chapter 5: Wireless LAN Table 75. Access Point Software Download (Continued) Field Description File Path Specify the path of the AT-TQ3600 software file on the TFTP server. File Name Specify the name of the AT-TQ3600 software file. image4: AT-TQ2450 File Path Specify the path of the AT-TQ2450 software file on the TFTP server. File Name Specify the name of the AT-TQ2450 software file.
AT-UWC WLAN Controller Web GUI User’s Guide Table 76. Access Point Software Download after Start Field Status Description Displays the progress of upgrading the software to access points. The options are: Not Started - The WLAN Controller has not started downloading the software. Requested - The WLAN Controller requested access points to download software. Code Transfer in Progress - Downloading is in progress. Failure - Downloading failed.
Chapter 5: Wireless LAN Managed AP Advanced Settings From the Managed AP Advanced Settings page, you can view AP advanced settings, change the debug status, channel, and power level. Viewing the AP Advanced Settings To view the AP advanced settings, do the following: 1. From the Navigation pane, go to WLAN > AP Management > Advanced Settings. The Managed AP Advanced Settings page is displayed as shown in Figure 113. Figure 113. Managed AP Advanced Settings Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide Table 77. Managed AP Advanced Settings (Continued) Field Description Channel Displays the channel assigned to the access point. Power Displays the RF power level of the access point. 3. If you want to refresh the display, click Refresh. Changing the Debug Status To change the debug status, do the following: 1. From the Navigation pane, go to WLAN > AP Management > Advanced Settings.
Chapter 5: Wireless LAN Table 78. Managed AP Debug (Continued) Field Status Description Displays the debug status. The options are: None - No setting. Set Requested - The request of changing the debug status is made. Set Complete - The process of enabling or disabling the debug status is completed. Password Enter the password for logging in to the Web console of the access point. The default password is “friend.” Confirm Password Re-enter the password.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 115. Managed AP Channel/Power Adjust Page 3. Specify the fields described in Table 79. Table 79. Managed AP Channel/Power Adjust Field Description AP MAC address Displays the MAC address of the access point. Radio Displays the radio band of the access point. Channel Status Displays the status of channel status of the access point. The options are: Channel None - No setting. Set Requested - The request is made.
Chapter 5: Wireless LAN 4. Click the following buttons as needed: Cancel — Cancels the changes. Apply — Applies the changes.
AT-UWC WLAN Controller Web GUI User’s Guide Status/Statistics > Global From the Wireless Global Status/Statistics page, you can view the status and statistics: Viewing Global Status and Statistics Global Status and Statistics - Access points and AP clients managed by the peer group Controller Status - Status about each WLAN Controller in the peer group IP Discovery - Communications between the WLAN Controller and peer controllers or access points Configuration received - Configuration rece
Chapter 5: Wireless LAN Figure 116. Wireless Global Status/Statistics Page 2. Observe the fields described in Table 80 on page 221. Table 80. Wireless Global Status/Statistics Field Description WLAN Controller Operational Status Displays whether the WLAN Controller is enabled or disabled. Peer Controllers Displays the number of the peer controllers in the peer group. IP Address Displays the IP address of the WLAN Controller.
AT-UWC WLAN Controller Web GUI User’s Guide Table 80. Wireless Global Status/Statistics (Continued) Field Cluster Controller Description Displays whether the WLAN Controller is the cluster controller or not. The cluster controller is a root controller in a peer group setting. WLAN Controllers under the peer group report information of all the managed access points and their AP clients as well as the results of RF scans to the cluster controller.
Chapter 5: Wireless LAN Table 80. Wireless Global Status/Statistics (Continued) Field Description Maximum Preauthentication History Entires Displays the maximum number of Client PreAuthentication entries that the WLAN Controller can store. Maximum Roam History Entries Displays the maximum number of roam history entires. You can specify detected AP clients to have roam history entries up to this number.
AT-UWC WLAN Controller Web GUI User’s Guide Table 80. Wireless Global Status/Statistics (Continued) 224 Field Description Total Roam History Entires Displays the current number of roam history entires in the WLAN Controller. Maximum Channel Load History Displays the maximum number of channel load history entires that the WLAN Controller can store. WLAN Bytes Transmitted Displays the data size in bytes that all the managed access points have transmitted.
Chapter 5: Wireless LAN Table 80. Wireless Global Status/Statistics (Continued) Field Description Total Voice Traffic Streams Displays the total number of voice traffic that all AP clients have transmitted through the access points managed by the WLAN Controller. The traffic stream is a group of packets with the same priority that the access point assigned.
AT-UWC WLAN Controller Web GUI User’s Guide 2. Select the IP address of the WLAN Controller that you want to view the status and statistics. The status and statistics about the selected WLAN Controller is displayed. Note To view the status and statistics about other WLAN Controllers, your local WLAN Controller must be the cluster controller. 3. Observe the fields described in Table 81. Table 81.
Chapter 5: Wireless LAN Table 81. Controller Status/Statistics (Continued) Field Description Authenticated Clients Displays the number of authenticated AP clients. IP Address Displays the IP address of the WLAN Controller. Cluster Priority Displays the cluster priority of the WLAN Controller. In the peer group, a WLAN Controller with the highest cluster priority becomes the cluster controller.
AT-UWC WLAN Controller Web GUI User’s Guide Table 81. Controller Status/Statistics (Continued) Field Description WLAN Packets Receive Dropped Displays the total number of packets that all the access points managed by WLAN Controller have received but discarded. 4. If you want to refresh the display, click Refresh. Viewing IP Discovery To view the information about communication between the WLAN Controller and access points or peer controllers, do the following: 1.
Chapter 5: Wireless LAN Table 82. Wireless Discovery Status (Continued) Field Description Total Number of Configured Entries Displays the number of IP addresses that are currently registered in the IP List. Total Number of Polled Entries Displays the number of IP addresses in the IP List that the WLAN Controller sent discovery packets to. Total Number of Non-Polled Entries Displays the number of IP addresses in the IP List that the WLAN Controller has not sent discovery packets to.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 119. Peer Controller Configuration Status Page 2. Observe the fields described in Table 83 on page 230. Table 83. Peer Controller Configuration Received Status Field Current Receive Status Description Displays the status of receiving a configuration from another peer controller.
Chapter 5: Wireless LAN Table 83. Peer Controller Configuration Received Status (Continued) Field Configuration Timestamp Description Displays the type of configuration that the WLAN Controller received. The options are: Global Discovery Channel/Power AP Database AP Profiles Known Client Captive Portal RADIUS Client None Displays the time when the WLAN Controller received the configuration. 3. If you want to refresh the display, click Refresh.
AT-UWC WLAN Controller Web GUI User’s Guide Status/Statistics > Managed AP > Status From the Managed Access Point Status page, you can view the status of access points, AP clients, and wireless network managed by the WLAN Controllers. Viewing a List of Managed AP’s and Deleting an AP To view the status of the managed access points and delete access pints from the list, do the following: 1. From the Navigation pane, go to WLAN > Status/Statistics > Managed AP.
Chapter 5: Wireless LAN Table 84. Managed Access Point Status (Continued) Field Description Location Displays the location information of the access point. IP Address Displays the IP address of the access point. Profile Displays the AP profile that the WLAN Controller applies to the access point. Software Version Displays the software version of the access point. Status Displays the status of the access point.
AT-UWC WLAN Controller Web GUI User’s Guide Viewing the Detailed Status of a Managed AP To view the detailed status of the managed access points, do the following: 1. From the Navigation pane, go to WLAN > Status/Statistics > Managed AP and clicked the Detail subtab. The Managed Access Point Status (Detail) page is displayed as shown in Figure 121. Figure 121. Managed Access Point Status (Detail) Page 2. Select the MAC address of the access point that you want to view the status.
Chapter 5: Wireless LAN Table 85. Managed Access Point Status (Detail) (Continued) Field Description Software Version Displays the software version of the access point. Code Download Status Displays information about downloading the software.
AT-UWC WLAN Controller Web GUI User’s Guide Table 85. Managed Access Point Status (Detail) (Continued) Field Description Controller IP Address Displays the IP address of the WLAN Controller that manages the access point. Profile Displays the AP profile that applied to the access point. Discovery Reason Displays the reason why the access point was discovered. IP Poll Received - The WLAN Controller polled and discovered the access point.
Chapter 5: Wireless LAN Figure 122. Managed Access Point Radio Status Detail Page 2. Select the MAC address of the access point that you want to view the radio information. 3. Select the radio band: 802.11b/g/n or 802.11a/n. The radio information about the selected access point is displayed. 4. Observe the fields described in Table 86. Table 86. Managed Access Point Radio Status Detail Field Description Supported Channels Displays a list of supported channels.
AT-UWC WLAN Controller Web GUI User’s Guide Table 86. Managed Access Point Radio Status Detail (Continued) Field Manual Channel Adjustment Status Description Displays information about manually applying the channel plan. The options are: Not Started Requested In Progress Success Failure WLAN Utilization Displays the utilization of the wireless network by the managed access points. Authenticated Clients Displays the number of authenticated AP clients per radio band.
Chapter 5: Wireless LAN Figure 123. Managed Access Point Neighbor AP Status Page 2. Select the MAC address of the access point that you want to view the neighbor access point information. 3. Select the radio band: 802.11b/g/n or 802.11a/n. The neighbor access point information on the selected access point is displayed. 4. Observe the fields described in Table 87. Table 87. Managed Access Point Neighbor AP Status Field Description Neighbor AP MAC Displays the MAC address of a neighbor access point.
AT-UWC WLAN Controller Web GUI User’s Guide Table 87. Managed Access Point Neighbor AP Status (Continued) Field Age Description Displays the time period since the neighbor access point was detected through the RF scan. 5. Click the following buttons as needed: Viewing the Status of Neighbor Clients Delete All Neighbors — Deletes all the entires on the Managed Access Point Neighbor AP Status and Managed Access Point Neighbor Client Status pages. Refresh — Refreshes the display on this page.
Chapter 5: Wireless LAN 4. Observe the fields described in Table 88. Table 88. Managed Access Neighbor Client Status Field Description Neighbor Client MAC Displays the MAC address of a neighbor AP client. RSSI Displays the RSSI of the neighbor AP client. Channel Displays the channel of the access point that received frames from the AP client. Discovery Reason Displays how the AP client was discovered.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 125. Managed Access Point VAP Status Page 2. Select the MAC address of the access point that you want to view the Virtual Access Points. 3. Select the radio band: 802.11b/g/n or 802.11a/n. The VAP information on the selected access point is displayed. 4. Observe the fields described in Table 89 on page 242. Table 89. Managed Access VAP Status Field Description VAP ID Displays the VAP identification number. The range is 0 to 15.
Chapter 5: Wireless LAN The Managed Access Point Distributed Tunneling Status page is displayed as shown in Figure 126. Figure 126. Managed Access Point Distributed Tunneling Status Page 2. Select the MAC address of the access point that you want to view the distributed tunneling information. 3. Observe the fields described in Table 90. Table 90.
AT-UWC WLAN Controller Web GUI User’s Guide Status/Statistics > Managed AP > Statistics From the Managed Access Point Statistics page, you can view the traffic information on managed access points, Ethernet, radio, VAP, and distributed tunneling. Viewing the Statistics of Managed Access Points To view the statistics about the managed access points, do the following: 1. From the Navigation pane, go to WLAN > Status/Statistics > Managed AP and click the Statistics tab.
Chapter 5: Wireless LAN Table 91. Managed Access Point Statistics Field Bytes Transmitted Description Displays the data size in bytes that the access point has transmitted to the wireless network. 3. If you want to refresh the display, click Refresh. Viewing The Statistics of Ethernet To view the Ethernet statistics about the managed access points, do the following: 1.
AT-UWC WLAN Controller Web GUI User’s Guide Table 92. Managed Access Point Ethernet Statistics (Continued) Field Description Packets Transmitted Displays the number of packets that the access point has transmitted to the Ethernet. Bytes Transmitted Displays the data size in bytes that the access point has transmitted to the Ethernet. 3. If you want to refresh the display, click Refresh.
Chapter 5: Wireless LAN Table 93. Managed Access Point Detail Statistics (Continued) Field Description WLAN Packets Transmitted Displays the number of packets that the access point has transmitted to the wireless network. WLAN Packets Receive Dropped Displays the number of packets that the access point has received from the wireless network, but discarded. WLAN Packets Transmitted Dropped Displays the number of packets that the access point has transmitted to the wireless network, but discarded.
AT-UWC WLAN Controller Web GUI User’s Guide Table 93. Managed Access Point Detail Statistics (Continued) Field 248 Description WLAN Packets Transmitted Displays the number of packets that the access point has transmitted to the wireless network. WLAN Packets Receive Dropped Displays the number of packets that the access point has received from the wireless network, but discarded.
Chapter 5: Wireless LAN Table 93. Managed Access Point Detail Statistics (Continued) Field Description WLAN Bytes Transmitted Dropped Displays the data size in bytes that the access point has transmitted to the wireless network, but discarded. Ethernet Bytes Received Displays the data size in bytes that the access point has received from the LAN. Ethernet Bytes Transmitted Displays the data size in bytes that the access point has transmitted to the LAN.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 130. Managed Access Point Radio Statistics Page 2. Select the MAC address of the access point that you want to view the radio information. 3. Select the radio band: 802.11b/g/n or 802.11a/n. The radio information about the selected access point is displayed. 4. Observe the fields described in Table 94. Table 94.
Chapter 5: Wireless LAN Table 94. Managed Access Point Radio Statistics (Continued) Field Description Multicast Frames Received Displays the number of multicast MSDU frames that the access point received. Duplicate Frame Count Displays the number of duplicate frames that the access point received. The duplicate frame is determined based on the sequence control field of the MAC header. Transmit Retry Count Displays the number of MSDU frames that were transmitted successfully after one retry.
AT-UWC WLAN Controller Web GUI User’s Guide Table 94. Managed Access Point Radio Statistics (Continued) Field Description RTS Failure Count Displays the number of CTS frames that the access point did not receive as a response to RTS frames. FCS Error Count Displays the number of FCS errors from the MPDU frames that the access point received. WEP Undecryptable Count Displays the number of frames that are not required to be encrypted or discarded because the receiving device has no privacy option. 5.
Chapter 5: Wireless LAN 5. Observe the fields described in Table 95. Table 95. Managed Access Point VAP Statistics Field Description WLAN Packets Received Displays the number of packets that the VAP has received from the wireless network. WLAN Packets Transmitted Displays the number of packets that the VAP has transmitted to the wireless network. WLAN Packets Receive Dropped Displays the number of packets that the VAP has received from the wireless network, but discarded.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 132. Managed Access Point Distributed Tunneling Statistics Page 2. Select the MAC address of the access point to display information about the distributed tunneling. The distributed tunneling information about the access point is displayed. 3. Observe the fields described in Table 96. Table 96.
Chapter 5: Wireless LAN Table 96. Managed Access Point Distributed Tunneling Statistics Field Description Total Roamed Clients of AP Displays the number of AP clients that used the access point through distributed tunnels. This number includes AP clients that roam to and from this access point. Roam Clients Idle Timed Out Displays the number of AP clients that exceeded the timeout limit because they were away from the access point.
AT-UWC WLAN Controller Web GUI User’s Guide Status/Statistics > Associated Client From WLAN > Status/Statistics > Associated Client page, you can view the status and statistics of AP clients. This page has several pages to go to with tabs and subtabs as described in Table 97. Table 97. Associated Client Tab Subtab Status Summary Displays the basic information of the access point and AP clients. You can also disconnect AP clients from this page.
Chapter 5: Wireless LAN Figure 133. Associated Client Status Summary Page 2. Observe the fields described in Table 98. Table 98. Associated Client Status Summary Field Description MAC Address Displays the MAC address of the AP client. The asterisk following the MAC address indicates that the AP client is connected to the access point managed by the peer controller. Detected IP Address Displays the IP address of the AP client if available. NetBIOS Name Displays the NetBIOS name of the AP client.
AT-UWC WLAN Controller Web GUI User’s Guide Table 98. Associated Client Status Summary (Continued) Field Status Network Time Description Displays the status of the AP client. The options are: Associated Authenticated Disassociate - The AP client is not associated with the access point. Displays the time that has passed since the AP client was authenticated. 3. If you want to disconnect an AP client, check the checkbox next to the MAC address of the AP client. 4.
Chapter 5: Wireless LAN Table 99. Associated Client Status Detail (Continued) Field Status Description Displays the status of the AP client. The options are: Associated Authenticated Disassociate - The AP client is not associated with the access point. Channel Displays the channel that the AP client is using. User Name Displays the user name of the AP client authenticated by 802.1x. When AP client uses other 802.1x, the user name is not shown.
AT-UWC WLAN Controller Web GUI User’s Guide Table 99. Associated Client Status Detail (Continued) Field Description VLAN Displays the VLAN ID that is assigned to the AP client if the AP client is associated with the VAP in the VLAN forwarding mode. Transmit Data Rate Displays the transmit data rate of the AP client. Network Time Displays the time that has passed since the AP client was authenticated. Detected IP Address Displays the IP address of the AP client if available.
Chapter 5: Wireless LAN Table 100. Associated Client Status Neighbor APs (Continued) Field Discovery Reason Description Displays how the access point was discovered. The options are: RF Scan Probe Request - The access point received probe requests from the AP client. Associated to Managed AP - The AP client is associated with the access point. Associated to Peer AP - The AP client is associated with the access point managed by the peer controller.
AT-UWC WLAN Controller Web GUI User’s Guide Table 101. Associated Client Status Distributed Tunneling (Continued) Field Description Client Roam Status Displays the roaming status of the AP client. The options are: Home - The AP client is not using the distributed tunnel. Roaming - The AP client is associated through the distributed tunnel, or the distributed tunneling is disabled. Home AP MAC Address Displays the MAC address of the home access point of the AP client.
Chapter 5: Wireless LAN Viewing the Status of VAP To view the VAP status of the AP clients and disassociate an AP client form the wireless network, do the following: 1. From the Navigation pane, go to WLAN > Status/Statistics > Associated Client and click the VAP Status tab. The Associated Client VAP Status page is displayed. 2. Observe the fields described in Table 103. Table 103.
AT-UWC WLAN Controller Web GUI User’s Guide Table 104. Associated Client Controller Status Field Description Controller IP Address Displays the IP address of the WLAN Controller that manges the access point, which the AP client is associated with. Client MAC Address Displays the MAC address of the AP client. 3. If you want to disconnect an AP client, check the checkbox next to the MAC address of the AP client. 4.
Chapter 5: Wireless LAN Viewing the Detailed Statistics of Association To view the detailed statistics of the traffic between the access point and AP clients, do the following: 1. From the Navigation pane, go to WLAN > Status/Statistics > Associated Client and click the Association Detail Statistics tab. The Association Detail Statistics page is displayed. 2. Observe the fields described in Table 106. Table 106.
AT-UWC WLAN Controller Web GUI User’s Guide Status/Statistics > Peer Controller From WLAN > Status/Statistics > Peer Controller page, you can view the information about peer controllers. Viewing the Status of Peer Controllers To view a list of peer controllers in the same peer group as the WLAN Controller, do the following: 1. From the Navigation pane, go to WLAN > Status/Statistics > Peer Controller. The Peer Controller Status page is displayed as shown in Figure 134. Figure 134.
Chapter 5: Wireless LAN Table 107. Peer Controller Status (Continued) Field Description Managed AP Count Displays the number of access points that the peer controller currently manages. Age Displays the time period since the WLAN Controller communicated with the peer controller last time. 3. If you want to refresh the display, click Refresh.
AT-UWC WLAN Controller Web GUI User’s Guide Table 108. Peer Controller Configuration (Continued) Field Description Configuration Displays the type of the configuration that the peer controller received. The options are: Timestamp Global Discovery Channel/Power AP Database AP Profiles Known Client Captive Portal RADIUS Client None Displays the UTC time when the peer controller received the configuration. 3. If you want to refresh the display, click Refresh.
Chapter 5: Wireless LAN Table 109. Managed AP by Peer Controller (Continued) Field Hardware Type Description Displays the hardware ID of the access point. 3. If you want to refresh the display, click Refresh.
AT-UWC WLAN Controller Web GUI User’s Guide Status/Statistics > WDS Managed APs From WLAN > Status/Statistics > WDS Managed APs, you can view the information about Wireless Distribution System (WDS). Viewing WDS Group Status To view the status of the WDS group, do the following: 1. From the Navigation pane, go to WLAN > Status/Statistics > WDS Managed APs. The WDS Group Status page is displayed as shown in Figure 135. Figure 135. WDS Group Status Page 2. Observe the fields described in Table 110.
Chapter 5: Wireless LAN Table 110. WDS Group Status (Continued) Field Connected Satellite AP Count Description Displays the number of satellite access points in the WDS group that are managed by the WLAN Controller. The satellite access point is an access point connected to the WLAN Controller through the WDS connection. Configured WDS Link Count Displays the number of WDS connections that are configured in the WDS group.
AT-UWC WLAN Controller Web GUI User’s Guide 3. Observe the fields described in Table 111. Table 111. WDS AP Status Field Description AP MAC Address Displays the MAC address of the access point. AP Connection Status Displays whether the access point is connected to the WLAN Controller or not. Satellite Mode Displays the mode of the access point. The options are: Satellite Wired - Root access point None - No WDS connection Ethernet Port Mode Displays the Ethernet port mode.
Chapter 5: Wireless LAN 2. Observe the fields described in Table 112. Table 112. WDS Link Status Field Description WDS Group Id Displays the unique WDS group ID. Source AP MAC Address Displays the MAC address of the source access point of the WDS group. Source AP Radio Displays the radio band of the source access point. The options are: 1 - 2.4GHz 2 - 5GHz Destination AP MAC Address Displays the MAC address of the destination access point of the WDS group.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 138. WDS Link Statistics Page 2. Observe the fields described in Table 113. Table 113. WDS Link Statistics Field 274 Description WDS Group Id Displays the unique WDS group ID. Source AP MAC Address Displays the MAC address of the source access point of the WDS group. Source AP Radio Displays the radio band of the source access point. The options are: 1 - 2.
Chapter 5: Wireless LAN Table 113. WDS Link Statistics (Continued) Field Description Source AP Packets Received Displays the number of packets that the source access point received. Source AP Bytes Received Displays the data size in bytes that the source access point received. Destination AP Packets Sent Displays the number of packets that the destination access point transmitted. Destination AP Bytes Sent Displays the data size in bytes that the destination access point transmitted.
AT-UWC WLAN Controller Web GUI User’s Guide Rogue/RF Scan The access point scans the specified channels in the radio band, classifies detected access points or AP clients as rogue if they fail to the tests, and reports the results to the WLAN Controller. From the Rogue/RF Scan page, you can view a list of access points that the managed access points detected through RF scanning. To view a list of AP clients that are detected, see “Detected Clients” on page 284.
Chapter 5: Wireless LAN Table 114. Access Point RF Scan Status (Continued) Field Description SSID Displays the SSID in the beacon frames from the access point. Physical Mode Displays the mode of IEEE 802.11 that the access point uses. Channel Displays the channel that the access point is using to communicates. Status Displays the status of the access point.
AT-UWC WLAN Controller Web GUI User’s Guide The Access Point RF Scan Status page is displayed as shown in Figure 139 on page 276. 2. Click a MAC address from the Access Point RF Scan Status. The Access Point RF Scan Status Detail page is displayed as shown in Figure 140. Figure 140. Access Point RF Scan Status Detail Page 3. Observe the fields described in Table 115. Table 115. Access Point RF Scan Status Detail Field 278 Description MAC Address Displays the MAC address of the access point or VAP.
Chapter 5: Wireless LAN Table 115. Access Point RF Scan Status Detail (Continued) Field Status Initial Status Description Displays the status of the access point.
AT-UWC WLAN Controller Web GUI User’s Guide Table 115. Access Point RF Scan Status Detail (Continued) Field Description Security Mode Displays the security mode that the access point is using. 802.11n Mode Displays whether or not the access point supports IEEE 802.11n mode. Beacon Interval Displays the time interval between sending beacons. Highest Supported Rate Displays the highest supported rate in Mbps that the access point informs of in the beacon frames.
Chapter 5: Wireless LAN Figure 141. AP Triangulation Status Page 4. Observe the fields described in Table 116 on page 281. Table 116. AP Triangulation Status Field Sentry Description Displays the sentry mode of the access point. The options are: Sentry Not Sentry MAC Address Displays the MAC address of the access point or VAP. Radio Displays the radio band that the access point is detected in.
AT-UWC WLAN Controller Web GUI User’s Guide Viewing WIDS AP Rogue Classification To view the WIDS AP Rogue Classification, do the following: 1. From the Navigation pane, go to WLAN > Intrusion Detection > Rogue/RF Scan. The Access Point RF Scan Status page is displayed as shown in Figure 139 on page 276. 2. Click a MAC address from the Access Point RF Scan Status. The Access Point RF Scan Status Detail page is displayed as shown in Figure 140 on page 278. 3. Click the WIDS AP Rogue Classification tab.
Chapter 5: Wireless LAN Table 117. WIDS AP Rogue Classification (Continued) Field Description Radio Displays the radio band of the wireless network interface. Test Config Displays the test condition: Enabled or Disabled. Test Result Displays whether the test reports that the access point is rogue or not. Time Since First Report Displays the time period since the current test result was reported for the first time.
AT-UWC WLAN Controller Web GUI User’s Guide Detected Clients The WLAN Controller detects the AP clients that are connected to access points or send messages to access points. From the Detected Clients page, you can view a list of detected AP clients. Viewing a List of Detected Clients To view a list of deleted clients, do the following: 1. From the Navigation pane, go to WLAN > Intrusion Detection > Detected Clients. The Detected Client Status page is displayed as shown in Figure 143. Figure 143.
Chapter 5: Wireless LAN Table 118. Detected Client Status (Continued) Field Client Status Description Displays the status of the AP client. The options are: Authenticated Detected - Not authenticated, but not classified as rogue. Black-Listed - Access is denied because the AP client is on the MAC Authentication Black-List. Rogue - The AP client is classified as a threat by WIDS. Age Displays the time period since the AP client was updated on the Detected Client list last time.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 144. Detected Client Status Detail Page 3. Observe the fields described in Table 119. Table 119. Detected Client Status Detail Field 286 Description MAC Address Displays the MAC address of the AP client. Client Status Displays the status of the AP client. The options are: Authenticated Detected - Not authenticated nor on the Known Client list, but not classified as rogue.
Chapter 5: Wireless LAN Table 119. Detected Client Status Detail (Continued) Field Description Threat Mitigation Status Displays whether the mitigation is implemented or not. Time Since Entry Last Updated Displays the time period since the AP client was updated on the Detected Client list. Time Since Entry Create Displays the time period since the AP client was added to the Detected Client list for the first time.
AT-UWC WLAN Controller Web GUI User’s Guide Table 119. Detected Client Status Detail (Continued) Field 288 Description Auth Collection Interval Displays the time period since the current interval started. The interval is set in Authentication Requests Threshold Interval. See “WIDS Client Configuration” on page 354. Highest Auth Msgs Displays the highest number of authentication messages that the AP client received in an interval. De-Auth Msgs Recorded Displays the number of IEEE 802.
Chapter 5: Wireless LAN Table 119. Detected Client Status Detail (Continued) Field Treat Mitigation Sent Description Displays whether the mitigation is implemented or not. 4. Click the following buttons as needed: Viewing Rogue Classification Acknowledge All Rogues — Clears the classification of all the rogue AP clients. Refresh — Refreshes the display on this page. To view a list of tests that classified failed AP clients as rogue, do the following: 1.
AT-UWC WLAN Controller Web GUI User’s Guide Table 120. Rogue Classification Field Description MAC Address Displays the MAC address of the AP client. Test Description Displays the test description. Condition Detected Displays the result of the test: True or False. Reporting MAC Address Displays the MAC address of the access point that reported the test result. Radio Displays the radio band in that the test result is observed. Test Config Displays the test status.
Chapter 5: Wireless LAN 3. Click the Pre-Auth History tab. The Pre-Auth History page is displayed. 4. Observe the fields described in Table 121. Table 121. Pre-Auth History Field Description MAC Address Displays the MAC address of the AP client. AP MAC Address Displays the MAC address of the access point that pre-authenticated the AP client. Radio Interface Number Displays the radio band of the wireless network interface.
AT-UWC WLAN Controller Web GUI User’s Guide The Detected Client Status Detail page is displayed as shown in Figure 144 on page 286. 3. Click the Triangulation tab. The Detected Client Triangulation page is displayed as shown in Figure 146. Figure 146. Detected Client Triangulation Page 4. Observe the fields described in Table 122. Table 122. Detected Client Triangulation Field 292 Description Detected Client MAC Address Displays the MAC address of the AP client.
Chapter 5: Wireless LAN Table 122. Detected Client Triangulation (Continued) Field Description Noise Level (dBm) Displays the noise level that the non-sentry access point reported. Age Displays the time that passed since the access point detected the AP client. 5. If you want to refresh the display, click Refresh. Viewing Roam History To view the roaming history of the AP client, do the following: 1. From the Navigation pane, go to WLAN > Intrusion Detection > Detected Clients.
AT-UWC WLAN Controller Web GUI User’s Guide Table 123. Detected Client Roam History Field Description MAC Address Displays the MAC address of the AP client. AP MAC Address Displays the MAC address of the access point that the AP client connected to. Radio Interface Number Displays the radio band of the wireless network interface of the access point. VAP MAC Address Displays the MAC address of VAP that the AP client roamed. SSID Displays the SSID that the VAP is serving.
Chapter 5: Wireless LAN Ad Hoc Clients From the Ad Hoc Client page, you can view AP clients connected to wireless LAN via another AP client. To view ad hoc clients, do the following: 1. From the Navigation pane, go to WLAN > Intrusion Detection > Ad Hoc Clients. The Ad Hoc Clients page is displayed. 2. Observe the fields described in Table 124. Table 124. Ad Hoc Clients Field Description MAC Address Displays the MAC address of the AP client.
AT-UWC WLAN Controller Web GUI User’s Guide Client list and the Authentication Action is Grant, this button is not effective. 296 Allow — Allows the ad-hoc client. When the client is on the Known Client list and the Authentication Action is Deny, this button is not effective. Refresh — Refreshes the display on this page.
Chapter 5: Wireless LAN AP Authentication Failure From the AP Authentication Failure page, you can view a list of access points that failed to connect to the WLAN Controller. You can also add failed access points to the Valid AP list. Viewing Failed Access Points and Adding Them to Valid AP List To view failed access points and add them to the valid AP list, do the following: 1. From the Navigation pane, go to WLAN > Intrusion Detection > AP Authentication Failures.
AT-UWC WLAN Controller Web GUI User’s Guide Table 125. Access Point Authentication Failure Status (Continued) Field Last Failure type Age Description Displays the type of connection failure. The options are: Local Authentication No Database Entry Not Managed Profile Mismatch-Hardware Type Displays the time period since the access point failed to connect. 3.
Chapter 5: Wireless LAN Figure 149. Access Point Authentication Failure Status Detail Page 3. Observe the fields described in Table 126. Table 126. Access Point Authentication Failure Status Detail Field Description MAC Address Displays the MAC address of the access point. IP Address Displays the IP address of the access point. Last Failure type Displays the type of connection failure.
AT-UWC WLAN Controller Web GUI User’s Guide Table 126. Access Point Authentication Failure Status Detail (Continued) Field Description Controller IP Address Displays the IP address of the WLAN Controller that reported the connection failure. Validation Failure Displays how many times that the access point failed to connect. Authentication Failure Displays how many times that the access point failed to be authenticated. Age Displays the time period since the access point failed to connect. 4.
Chapter 5: Wireless LAN De-Auth Attack Status From the AP De-Auth Attack Status page, you can view a list of access points that the WLAN Controller is targeting for the de-authentication attack. When the de-authentication attack is enabled, the WLAN Controller calls the managed access points to send IEEE802.11 de-authentication management frames to rogue access points in order to disconnect them from the wireless network. To enable the de-authentication attack, see “WIDS AP Configuration” on page 351.
AT-UWC WLAN Controller Web GUI User’s Guide WLAN Advanced Configuration > Global From the WLAN Advanced Configuration page, you can modify the advanced settings including the settings of a peer group. One WLAN Controller can manage up to 210 access points; however, to manage more than 210 access points in a large network, you must create a peer group of WLAN Controllers. One peer group can consists of up to 64 WLAN Controllers. To modify the advanced settings, do the following: 1.
Chapter 5: Wireless LAN Table 128. Wireless Global Configuration (Advanced) (Continued) Field Description Client Roam Timeout (secs) Specify the time period in seconds used by the WLAN Controller to remove the entry of an AP client from the “Associated Client Status” list after the AP client is disconnected from the access point.
AT-UWC WLAN Controller Web GUI User’s Guide Table 128. Wireless Global Configuration (Advanced) (Continued) Field Base IP Port Description Specify the base port. The WLAN Controller sends packets out of a port from the range between the number of the base port and the number of the base port plus 9. The default base port is 57775. For example, by default, the WLAN Controller sends packets out of a port between 57775 and 57784.
Chapter 5: Wireless LAN WLAN Advanced Configuration > SNMP Traps From the Wireless SNMP Trap Configuration page, you can enable and disable sending traps to SNMP servers. Note The WLAN Controller sends traps based on its own events and the events learned from the access points that the WLAN Controller manages. The access points do not send traps to SNMP servers. To enable and disable SNMP traps, do the following: 1.
AT-UWC WLAN Controller Web GUI User’s Guide Table 129. Wireless SNMP Trap Configuration (Continued) Field AP State Change Traps Enable or disable sending AP state Change traps. When it is enabled, the WLAN Controller sends a trap in the following events: Managed AP Discovered - The WLAN Controller discovers the access point on the valid AP list. Managed AP Failed - The WLAN Controller detects an error on the access point.
Chapter 5: Wireless LAN Table 129. Wireless SNMP Trap Configuration (Continued) Field Description Rogue AP Traps Enable or disable sending Rogue AP traps. When it is enabled, the WLAN Controller sends a trap when a rogue access point is detected. WIDS Status Traps Enable or disable sending WIDS Status traps. When it is enabled, the WLAN Controller sends a trap when the Wireless Intrusion Detection System (WIDS) generates a message.
AT-UWC WLAN Controller Web GUI User’s Guide WLAN Advanced Configuration > Distributed Tunneling From the Distributed Tunneling Configuration page, you can modify the settings for Distributed Tunneling. To modify the settings for Distributed Tunneling, do the following: 1. From the Navigation pane, go to WLAN > Advanced Configuration > Global and click the Distributed Tunneling tab. The Distributed Tunneling Configuration page is displayed as shown in Figure 152. Figure 152.
Chapter 5: Wireless LAN Table 130. Distributed Tunneling Configuration (Continued) Field Distributed Tunnel Max Multicast Replications Allowed Description Specifies the maximum number of distributed tunnels that the access points is allowed to send copies of a multicast frame to. 3. Click the following buttons as needed: Refresh — Refreshes the display on this page. Submit — Makes the changes effective and saves them to the running configuration file.
AT-UWC WLAN Controller Web GUI User’s Guide WLAN Advanced Configuration > Centralized L2 Tunneling From the Centralized Tunneling Configuration page, you can add or delete VLAN’s for Centralized Layer 2 Tunneling. Centralized L2 Tunneling enables AP clients to roam among the access points in different subnets.
Chapter 5: Wireless LAN 3. Click Add. The VLAN is added to the VLAN List. 4. Click the following buttons: Refresh — Refreshes the display on this page. Submit — Makes the changes effective and saves them to the running configuration file. Note To save your changes to the startup configuration file, see “Save All Applied Changes” on page 39. Deleting VLAN’s to the List To delete a VLAN for Centralized L2 Tunneling from the list, do the following: 1.
AT-UWC WLAN Controller Web GUI User’s Guide WLAN Advanced Configuration > Known Client From the Known Client Summary page, you can view a list of AP clients that the WLAN Controller manages. You can also add or delete AP clients from the lis. The Known Client list is used for local MAC authentication or with a RADIUS server. Viewing a List of Known Clients To view a list of access points that the WLAN Controller manages, do the following: 1.
Chapter 5: Wireless LAN Table 132. Known Client Summary (Continued) Field Authentication Action Description Displays the authentication action that the WLAN Controller takes.The options are: Grant - Allows the network access. Deny - Denies the network access. Global Action - The action depends upon the setting of The MAC Authentication Mode in the Wireless Global Configuration. See “WLAN Advanced Configuration > Global” on page 302.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 155. Known Client Configuration Page 4. Observe the fields described in Table 133. Table 133. Known Client Configuration Field Description MAC Address Displays the MAC address of an AP client to add. Name Specify the name of the AP client. Authentication Action Select the authentication action. The options are: Grant Deny Global Action For more information, see Table 132, “Known Client Summary” on page 312. 5.
Chapter 5: Wireless LAN 2. Click Import.... The page moves to the Known Client Database Importing page. Upload a CVS file on the system. Guidelines for Importing a CVS file Here are guidelines for importing a CVS file to upload AP clients: Spaces are not allowed in the name of the CVS file. Commas are not allowed as delimiters in the CVS file. Enter one AP client in a row. Figure 156 shows an example of the CVS file created with Microsoft Excel. Figure 156.
AT-UWC WLAN Controller Web GUI User’s Guide WLAN Advanced Configuration > Networks From the Networks page, you can add or delete wireless network that the WLAN Controller manages. The WLAN Controller has 16 wireless networks by default. You can modify these properties, but cannot delete them. You can add up to 239 wireless networks. With the default wireless networks, the WLAN Controller can have total 255 wireless networks.
Chapter 5: Wireless LAN Figure 158. Wireless Network Configuration Page 4. Specify the fields described in Table 134. Table 134. Wireless Network Configuration Field Description SSID Specify a Server Set Identifier (SSID) with up to 32 alphanumeric characters. SSID is the name of a wireless LAN. All wireless devices on a WLAN must have the same SSID to communicate with each other. Hide SSID Check the checkbox not to broadcast the SSID.
AT-UWC WLAN Controller Web GUI User’s Guide Table 134. Wireless Network Configuration (Continued) Field MAC Authentication Description Select the MAC authentication mode. To authenticate clients with the MAC address, the WLAN Controller or RADIUS server must have a known client list. The options are: Local - Authenticates using the known client list on the WLAN Controller. Radius - Authenticates using the known client list on a RADIUS server. Disable - Does not authenticate clients.
Chapter 5: Wireless LAN Table 134. Wireless Network Configuration (Continued) Field Description RADIUS Authentication Server Status Displays the configuration status of a RADIUS authentication server. RADIUS Accounting Server Name Specify the name of RADIUS server for accounting. When the RADIUS Use Network Configuration on the page is enabled, this RADIUS server overrides the setting in the WLAN Basic Setup page. See “WLAN Basic Setup > Global” on page 191.
AT-UWC WLAN Controller Web GUI User’s Guide 5. When you select WEP the Security field, the page adds the following fields shown in Figure 159. 6. If you select WPA/WPA2, go to step 8. Figure 159. Wireless Network Configuration - WEP Page 7. Specify the relevant fields described in Table 135. Table 135. Wireless Network Configuration - WEP Field Security Description Displays the WEP selection. Select one of the WEP types.
Chapter 5: Wireless LAN Table 135. Wireless Network Configuration - WEP Field WEP Key Type WEP Key Length (bits) WEP Keys Description Select the one of the WEP key type. The options are: ASCII - A WEP key is generated from ASCII characters. HEX - A WEP key is generated from Hex decimal numbers. Select the WEP key length in bits. The options are: 64bits 128bits Specify four keys and select one of the keys.
AT-UWC WLAN Controller Web GUI User’s Guide Table 136. Wireless Network Configuration - WPA/WPA2 Field Security Description Displays the WPA/WPA2 selection. Select one of the WPA/WPA2 types. The options are: WPA Versions WPA Ciphers Bcast Key Refresh Rate WPA Personal - Uses the WPA key specified manually to the access point and AP clients. WPA Enterprise- Uses the WPA key generated dynamically to the access point and AP clients. It requires a RADIUS server.
Chapter 5: Wireless LAN Table 136. Wireless Network Configuration - WPA/WPA2 Field Description Pre-Authentication Limit Specifies the maximum number of preauthentication that the access point can proceed at a time. Limiting the number of preauthentication processes prevents a RADIUS server from being overloaded. Key Cashing Hold Time Specifies time in minutes that the access point hold Pairwise Master Keys (PMK).
AT-UWC WLAN Controller Web GUI User’s Guide 4. Click the following buttons: Refresh — Refreshes the display on this page. Clear — Clears the changes you made before clicking Submit. Submit — Makes the changes effective and saves them to the running configuration file. Note To save your changes to the startup configuration file, see “Save All Applied Changes” on page 39. Deleting a Wireless Network from the List To delete a wireless network from the list, do the following: 1.
Chapter 5: Wireless LAN Access Point Profile List From the Access Point (AP) Profile List page, you can view the access point profile list, add, delete, or modify an access point profile, and apply an access point profile to the access point. Guidelines for Applying an AP Profile Viewing and Adding Access Point Profiles Here are guidelines for applying an access point profile to access points.
AT-UWC WLAN Controller Web GUI User’s Guide Table 137. Access Point Profile List Field Description Profile Displays the name of the access point profile. Profile Status Displays the status of the access point profile. The options are: Associated - One or more managed access points are associated with the profile. Associated-Modified - The profile is modified after one or more managed access points are associated with the profile. The profile must be re-applied to these access points.
Chapter 5: Wireless LAN Modifying An Access Point Profile To modify an access point profile, do the following: 1. From the Navigation pane, go to WLAN > Advanced Configuration > AP Profiles. The Access Point Profile List page is displayed as shown in Figure 161 on page 325. 2. Click the name of the profile that you want to modify the properties. To configure the AP profile, go to “Access Point Profile Global Configuration” on page 328.
AT-UWC WLAN Controller Web GUI User’s Guide Access Point Profile Global Configuration From the Access Point (AP) Profile Global Configuration page, you can modify the properties of an access point profile. To modify the properties of an AP profile, do the following: 1. From the Navigation pane, go to WLAN > Advanced Configuration > AP Profiles. The Access Point Profile List page is displayed as shown in Figure 161 on page 325. 2.
Chapter 5: Wireless LAN Table 138. Access Point Profile Global Configuration Field Description Profile Name Specifies the name of the AP profile. Hardware Type ID Specifies the model of the access point that the profile is applied to. The options are: Disconnected AP Data Forwarding Mode Disconnected AP Management Mode 0 - Any - Either AT-TQ3600 or AT-TQ2450 5 - AT-TQ3600 9 - AT-TQ2450 Specifies how the access point behaves when disconnected from the WLAN Controller.
AT-UWC WLAN Controller Web GUI User’s Guide Submit — Makes the changes effective and saves them to the running configuration file. Note To save your changes to the startup configuration file, see “Save All Applied Changes” on page 39.
Chapter 5: Wireless LAN Access Point Profile Radio Configuration From the Access Point Profile Global Configuration page, you can modify the properties of an access point profile. To modify the properties of an AP profile, do the following: 1. From the Navigation pane, go to WLAN > Advanced Configuration > AP Profiles. The Access Point Profile List page is displayed as shown in Figure 161 on page 325. 2.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 163. Access Point Profile Radio Configuration Page 4. Select the radio button, either 1 or 2 on the top of the table. The values of 1 and 2 depends on the country code. For the description of the country code, see Table 66 on page 191. 5. Modify the fields described in Table 139 on page 333.
Chapter 5: Wireless LAN Table 139. Access Point Profile Radio Configuration Field State Description Turn on or off the radio signal from the access point. The options are: On - The access point emits the radio signal. Off - The access point sends a disconnect frame to the AP clients before shutting down. RTS Threshold (bytes) Specifies the Request To Send (RTS) threshold in bytes. Before sending a packet larger than the RTS threshold, the access point sends an RTS packet.
AT-UWC WLAN Controller Web GUI User’s Guide Table 139. Access Point Profile Radio Configuration (Continued) Field RF Scan Sentry Channels Displays which band is used when the access point is a RF scan sentry. Always both of 802.11a and 802.1b/g are selected. RF Scan Duration (msecs) Specifies the time period in milliseconds that the access point scan one channel. Rate Limiting Check the checkbox to control transmission of redundancy packets.
Chapter 5: Wireless LAN Table 139. Access Point Profile Radio Configuration (Continued) Field No ACK Description Specifies whether sending ACK frames or not. The options are: Enable - Requests AP clients not to send ACK frames. The access point also does not send ACK frames. Disable - No ACK frames to be sent. Minimum Power (%) Specifies the minimum power in percentage for the automatic power adjustment algorithm. See “RF Management > Configuration” on page 205.
AT-UWC WLAN Controller Web GUI User’s Guide Table 139. Access Point Profile Radio Configuration (Continued) Field Description Short Retries Specifies the maximum number of re-tires for short frames. The short frame is a frame whose length is the specified RTS threshold or shorter. Long Retries Specifies the maximum number of re-tires for long frames. The long frame is a frame whose length is longer than the specified RTS threshold.
Chapter 5: Wireless LAN Table 139. Access Point Profile Radio Configuration (Continued) Field Multicast Tx Rate (Mbps) Description Specifies the rate of multicast transmission in Mbps.The rate is also applied to broadcast and beacon transmissions. When the rate is set to Auto, the lowest basic rate is applied. The options for 802.11b/g/n are: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, or 54. The options for 802.11a/n are: 6, 9, 12, 18, 24, 36, 48, or 54.
AT-UWC WLAN Controller Web GUI User’s Guide Modulation and Coding Scheme Table Table 140 describes the IEEE 802.11n Modulation and Coding Scheme (MCS). Table 140. Modulation and Coding Scheme Data Rate (Mbit/s) Number of Streams Index 400ns 20MHz 40MHz 20MHz 0 6.5 13.5 7.2 15 1 13 27 14.4 30 2 1935 40.5 21.7 45 26 54 28.9 60 39 81 43.3 90 5 52 108 57.8 120 6 58.5 121.5 65 135 7 65 135 72.2 150 8 13 27 14.4 30 9 26 54 28.9 60 10 39 81 43.
Chapter 5: Wireless LAN Access Point Profile VAP Configuration From the Access Point Profile Virtual Access Point (VAP) Configuration page, you can associate VAP’s with the access point profile. You can also go to the Wireless Network Configuration page to edit each VAP. To associate VAP’s to the access point profile, do the following: 1. From the Navigation pane, go to WLAN > Advanced Configuration > AP Profiles. The Access Point Profile List page is displayed as shown in Figure 161 on page 325. 2.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 164. Access Point Profile VAP Configuration Page 4. Select 1-802.11b/g/n or 2-802.11a/n to configure. 5. Check the checkbox of a VAP. The VAP is enabled on the access point profile. You can enable multiple VAP’s on one access point profile. 6. Observe the fields described in Table 141. Table 141. Access Point Profile VAP Configuration Field 340 Description Network Displays the name of the wireless network.
Chapter 5: Wireless LAN Table 141. Access Point Profile VAP Configuration (Continued) Field Hide SSID Security Description Displays whether the SSID is included in the broadcast AP beacon frames. The options are: Enabled — The SSID is not included in the broadcast AP beacon frames. Disabled — The SSID is included in the broadcast AP beacon frames. Displays the security setting for the access point profile. 7. Click the following buttons: Refresh — Refreshes the display on this page.
AT-UWC WLAN Controller Web GUI User’s Guide Access Point Profile QoS Configuration From the Access Point Profile Quality of Service (QoS) Configuration page, you can configure QoS on the access point profile. The QoS settings are applied to the access points, not to the AP clients. To configure QoS on the access point profile, do the following: 1. From the Navigation pane, go to WLAN > Advanced Configuration > AP Profiles. The Access Point Profile List page is displayed as shown in Figure 161 on page 325.
Chapter 5: Wireless LAN Figure 165. Access Point Profile QoS Configuration Page 4. Select 1-802.11b/g/n or 2-802.11a/n to configure. 5. Observe the fields described in Table 142. Table 142. Access Point Profile QoS Configuration Field Description AP EDCA Parameters Queue Displays four queues. You can specify AIFS, cwMin, cwMax, and Max. Burst for each queue. AIFS (msecs) Specifies the interval with a slot time between frames being transmitted. The range is from 1 to 255 slot time.
AT-UWC WLAN Controller Web GUI User’s Guide Table 142. Access Point Profile QoS Configuration (Continued) Field Description cwMax (msecs) Specifies the maximum Contention Window (cwMax). Max. Burst (microsecs) Specifies the time period in microseconds to transmit multiple packets continuously. The range is 0 to 999,900 microseconds. The value must be 1, 3, 7, 15, 31, 63, 127, 255, 511, or 1023 and equal to larger than cwMin.
Chapter 5: Wireless LAN Note To save your changes to the startup configuration file, see “Save All Applied Changes” on page 39.
AT-UWC WLAN Controller Web GUI User’s Guide Peer Controller > Configuration Request Status From the Peer Controller Configuration Request page, you can request other peer controllers in the peer group to download the configuration of the WLAN Controller and view the status of the request. To view the status and make a configuration request, do the following: 1. From the Navigation pane, go to WLAN > Advanced Configuration > Peer Controller.
Chapter 5: Wireless LAN Table 143. Peer Controller Configuration Request Status Field Configuration Request Status Description Displays the status of the configuration request made to peer controllers. The options are: Not Started Receiving Configuration Saving Configuration Success Failure-Invalid Code Version Failure-Invalid Hardware Version Failure-Invalid Configuration Total Count Displays the number of peer controllers that the configuration request is made to.
AT-UWC WLAN Controller Web GUI User’s Guide Peer Controller > Configuration Enable/Disable From the Peer Controller Configuration Enable/Disable page, you can specify which categories of the configuration for peer controllers to download. To enable or disable configuration categories, do the following: 1. From the Navigation pane, go to WLAN > Advanced Configuration > Peer Controller and click the Configuration Enable/Disable tab.
Chapter 5: Wireless LAN Table 144. Peer Controller Configuration Enable/Disable Field Global Description Check the checkbox to specify the Global configuration of the WLAN Controller to be downloaded to the peer controllers. The Global configuration does not include the IP address of the controller. See “WLAN Basic Setup > Global” on page 191 and “WLAN Advanced Configuration > Global” on page 302.
AT-UWC WLAN Controller Web GUI User’s Guide Table 144. Peer Controller Configuration Enable/Disable (Continued) Field Captive Portal Description Check the checkbox to specify the Captive Portal configuration of the WLAN Controller to be downloaded to the peer controllers. See “CP Global Configuration” on page 138. RADIUS Client Check the checkbox to specify the RADIUS Client configuration of the WLAN Controller to be downloaded to the peer controllers. See “RADIUS Configuration” on page 172.
Chapter 5: Wireless LAN WIDS AP Configuration From the Wireless Intrusion Detection System (WIDS) AP Configuration page, you can enable or disable each WIDS feature on access points and specify the properties. To enable or disable WIDS and specify the properties, do the following: 1. From the Navigation pane, go to WLAN > Advanced Configuration > WIDS Security. The WIDS AP Configuration page is displayed as shown in Figure 168. Figure 168. WIDS AP Configuration Page 2.
AT-UWC WLAN Controller Web GUI User’s Guide Table 145. WIDS AP Configuration (Continued) Field Description Managed SSID from an unknown AP Enables or disables detecting the unknown AP that sends the beacon frames including the SSID managed by the WLAN Controller and marking the access point as a rogue access point. The unknown AP can be malicious; however, in a large network with multiple peer groups, a unknown AP sending the managed SSID can be legitimate.
Chapter 5: Wireless LAN Table 145. WIDS AP Configuration (Continued) Field Description Standalone AP with unexpected configuration Enables or disables detecting an access point with the standalone mode that is not operating as its settings. The standalone access point is tested in the channel, SSID, security method, WDS mode, and wired connection.
AT-UWC WLAN Controller Web GUI User’s Guide WIDS Client Configuration From the Wireless Intrusion Detection System (WIDS) Client Configuration page, you can enable or disable WIDS types on access point clients and specify the properties. To enable or disable WIDS and specify the properties, do the following: 1. From the Navigation pane, go to WLAN > Advanced Configuration > WIDS Security and click the Client Configuration tab. The WIDS Client Configuration page is displayed as shown in Figure 169.
Chapter 5: Wireless LAN Table 146. WIDS Client Configuration Field Description Known Client Database Test Displays whether or not detecting an AP client on the Known Client list with the Deny setting or on the blacklist. Configured Authentication Rate Test Enables or disables detecting an AP client that exceeds the maximum transmission rate when sending 802.11 Authentication messages.
AT-UWC WLAN Controller Web GUI User’s Guide Table 146. WIDS Client Configuration (Continued) Field Description De-Authentication Requests Threshold Value Specifies the maximum number of DeAuthentication requests during a DeAuthentication Requests Threshold Interval. Authentication Requests Threshold Interval (seconds) Specifies the time interval to count the number of Authentication requests.
Chapter 5: Wireless LAN Local OUI Database Summary The first three bytes of the MAC address is called an Organizationally Unique Identifier (OUI), which identifies the vendor, manufacturer, or other organization of a device. With a built-in OUI database, the WLAN Controller displays the vendor, manufacturer, or organization of an access point and peer controller on the Detected Client Status list. See “Detected Clients” on page 284.
AT-UWC WLAN Controller Web GUI User’s Guide Table 147. Local OUI Database Summary Field Description OUI Value Displays an OUI. The OUI is the first 3 bytes of the MAC address. The format is FF:FF:FF. OUI Description Displays the name of vendor, manufacturer or organization up to 32 alphanumeric characters. 3. Check the checkbox of the OUI entry that you want to delete. 4. Click the following buttons as needed: Adding an OUI Entry Refresh — Refreshes the display on this page.
Chapter 5: Wireless LAN WDS Group Configuration From the WDS Group Configuration page, you can view a list of WDS groups and add a new WDS group. You can also delete existing WDS groups. Wireless Distribution System (WDS) enables access points to connect with one another and allows the WLAN Controller to manage these access points. Figure 171 illustrates an example of a topology using WDS. Figure 171.
AT-UWC WLAN Controller Web GUI User’s Guide Configuring WDS To configure WDS, do the following: 1. Configure the root and satellite access points for a WDS bridge. To include the root and satellite access points in the same WDS group, these access points must be set to the same radio band, channel, and security level. See the documentations for the access point. 2. Create a WDS network. See “WLAN Advanced Configuration > Networks” on page 316.
Chapter 5: Wireless LAN Viewing a List of WDS Groups and Adding a New Group To view a list of WDS groups and add a WDS group, do the following: 1. From the Navigation pane, go to WLAN > WDS Configuration > Group Configuration. The WDS Group Configuration page is displayed as shown in Figure 172. Figure 172. WDS Group Configuration Page 2. Observe the following fields described in Table 148. Table 148. WDS Group Configuration Field Description ID Displays the ID of the WDS group.
AT-UWC WLAN Controller Web GUI User’s Guide Figure 173. WDS Group Configuration Page 2 5. Check the Edit checkbox. You can enter a password in the WDS Group Password field. 6. Enter the same password as the WDS group password for the satellite AP. 7. Click Submit. 8. From the Navigation pane, go to WLAN > WDS Configuration > Group Configuration. The WDS Group Configuration page is displayed as shown in Figure 172 on page 361. 9. Click Push Config.
Chapter 5: Wireless LAN Pushing the WDS Information to Peer Controllers To push the WDS group information to the peer controllers, do the following: 1. From the Navigation pane, go to WLAN > WDS Configuration > Group Configuration. The WDS Group Configuration page is displayed as shown in Figure 172 on page 361. 2. Check the checkbox of the WDS group to push the WDS group information to the peer controllers. 3. Click Push Config.
AT-UWC WLAN Controller Web GUI User’s Guide WDS AP Configuration From the WDS AP Configuration page, you can view access point members that belong to a WDS group and add a new access point member. Viewing a List of AP Members and Adding an AP To view access point members that belong to a WDS group and add a new access point member, do the following: 1. From the Navigation pane, go to WLAN > WDS Configuration > AP Configuration. The WDS AP Configuration page is displayed as shown in Figure 174.
Chapter 5: Wireless LAN Figure 175. WDS AP Configuration Page 2 4. Select the MAC address of the AP to add from the Valid AP MAC Address select list. 5. Click Submit. Deleting AP Members To delete access point members from the list, do the following: 1. From the Navigation pane, go to WLAN > WDS Configuration > AP Configuration. The WDS AP Configuration page is displayed as shown in Figure 174 on page 364. 2. Select a WDS group ID to view its access point members from the select list.
AT-UWC WLAN Controller Web GUI User’s Guide WDS Link Configuration From the WDS Link Configuration page, you can view a list of link combinations of two access points and add a new link combination. Viewing Link Combinations and Adding a New Link To view AP members that belong to a WDS group and add a new AP member, do the following: 1. From the Navigation pane, go to WLAN > WDS Configuration > Link Configuration. The WDS Link Configuration page is displayed as shown in Figure 176. Figure 176.
Chapter 5: Wireless LAN Figure 177. WDS Link Configuration Page 2 4. Enter the following fields described in Table 149. Table 149. WDS Link Configuration Field Description Source AP MAC Address Specify the source AP MAC address. It can be either the MAC address of the root access point or the satellite access point. The MAC address must be associated with the WDS group. See “Viewing a List of AP Members and Adding an AP” on page 364. Source AP Radio Specify the radio band. The options are: 1 - 2.
AT-UWC WLAN Controller Web GUI User’s Guide Deleting a Link Combination To delete a link combination from the list, do the following: 1. From the Navigation pane, go to WLAN > WDS Configuration > Link Configuration. The WDS Link Configuration page is displayed as shown in Figure 176 on page 366. 2. Check the checkbox of the link combination that you want to delete. 3. Click Delete. 4. If you want to refresh the displays on this page, click Refresh.