Allied Telesis AT-WR4500 Series User manual

PN 613-000813 Rev. B
AT-WR4500 Series
IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide

2 AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide
Copyright © 2009 Allied Telesis International
All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Teles
is
International.
Microsoft and Internet Explorer are registered trademarks of Microsoft Corporation. Mikrotik and RouterO are
trademarks of Mikrotikls IA. All other product names, company names, logos or other designations mentioned herein
are trademarks or registered trademarks of their respective owners.
Parts of this manual reproduced with Mikrotik permission from Mikrotik RouterO v3.0 Reference Manual.
Allied Telesis, Inc. reserves the right to make changes in specifications and other information co
ntained in this document
without prior written notice. The information provided herein is subject to change without notice. In no event shall
Allied Telesis, Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever, includi
ng but not
limited to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesis,
Inc. has been advised of, known, or should have known, the possibility of such damages.

AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers 3
RouterO v3 Configuration and User Guide
LIMITATION
OF
LIABILITY
AND
DAMAGES
THE PRODUCT AND THE OFTWARE WITHIN ARE PROVIDED "A I ," BA I . THE
MANUFACTURER AND MANUFACTURER’ RE ELLER (COLLECTIVELY REFERRED TO A
“THE ELLER ”) DI CLAIM ALL WARRANTIE , EXPRE , IMPLIED OR TATUTORY,
INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIE OF NON-
INFRINGEMENT,
MERCHANTABILITY OR FITNE FOR A PARTICULAR PURPO E, OR ANY WARRANTIE
ARI ING FROM COUR E OF DEALING, COUR E OF PERFORMANCE, OR U AGE OF TRADE.
IN NO EVENT WILL THE ELLER BE LIABLE FOR D
AMAGE OR LO , INCLUDING BUT
NOT LIMITED TO DIRECT, INDIRECT, PECIAL WILFUL, PUNITIVE, INCIDENTAL,
EXEMPLARY, OR CON EQUENTIAL, DAMAGE , DAMAGE FOR LO OF BU INE
PROFIT , OR DAMAGE FOR LO OF BU INE OF ANY CU TOMER OR ANY THIRD
PARTY ARI ING OUT
OF THE U E OR THE INABILITY TO U E THE PRODUCT OR THE
OFTWARE , INCLUDING BUT NOT LIMITED TO THO E RE ULTING FROM DEFECT IN
THE PRODUCT OR OFTWARE OR DOCUMENTATION, OR LO OR INACCURACY OF
DATA OF ANY KIND, WHETHER BA ED ON CONTRACT, TORT OR ANY OTHER
LEGAL
THEORY, EVEN IF THE PARTIE HAVE BEEN ADVI ED OF THE PO IBILITY OF UCH
DAMAGE . THE ENTIRE RI K A TO THE RE ULT AND PERFORMANCE OF THE PRODUCT
OR IT OFTWARE I A UMED BY CU TOMER. BECAU E OME TATE DO NOT ALLOW
THE EXCLU ION OR LIMITATION
OF LIABILITY FOR DAMAGE , THE ABOVE LIMITATION
MAY NOT APPLY TO THE PARTIE . IN NO EVENT WILL THE ELLER ’ TOTAL CUMULATIVE
LIABILITY OF EACH AND EVERY KIND IN RELATION TO THE PRODUCT OR IT
OFTWARE EXCEED THE AMOUNT PAID BY CU TOMER FOR THE PRODUCT.

4 AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide
CONTENTS
1 Introduction.............................................................................................................................................................12
1.1 Features ............................................................................................................................................................13
1.2 oftware License ............................................................................................................................................13
2 Configuring RouterO ..........................................................................................................................................14
2.1 Logging in the AT-WR4500 Router..........................................................................................................14
2.2 Accessing the WR4500 through WinBox ...............................................................................................14
2.3 Accessing the CLI...........................................................................................................................................15
3 Configuration and oftware Management........................................................................................................18
3.1 General Information......................................................................................................................................18
3.1.1 ystem Backup ...............................................................................................................................18
3.1.2 The Export Command .................................................................................................................19
3.1.3 The Import Command.................................................................................................................19
3.1.4 Configuration Reset......................................................................................................................20
3.2 oftware Version Management...................................................................................................................20
3.2.1 General Information .....................................................................................................................20
3.2.2 ystem Upgrade.............................................................................................................................21
3.2.3 Adding Package ource................................................................................................................22
3.3 oftware Package Management ..................................................................................................................22
3.3.1 General Information .....................................................................................................................22
3.3.2 Installation (Upgrade)...................................................................................................................23
3.3.3 Uninstallation..................................................................................................................................23
3.3.4 Downgrading ..................................................................................................................................24
3.3.5 Disabling and Enabling ..................................................................................................................25
3.3.6 Unscheduling...................................................................................................................................25
3.3.7 ystem Upgrade.............................................................................................................................26
3.3.8 Adding Package ource................................................................................................................27
3.3.9 oftware Package List...................................................................................................................27
4 Configuring Interfaces ...........................................................................................................................................30
4.1 General Interface ettings............................................................................................................................30
4.1.1 General Information .....................................................................................................................30
4.1.2 Interface tatus ..............................................................................................................................30
4.1.3 Traffic Monitoring .........................................................................................................................30
4.2 Ethernet Interfaces ........................................................................................................................................31
4.2.1 General Information .....................................................................................................................31
4.2.2 Ethernet Interface Configuration ..............................................................................................31
4.2.3 Monitoring the Interface tatus.................................................................................................32
4.2.4 Troubleshooting ............................................................................................................................33
4.3 Wireless Interfaces........................................................................................................................................33
4.3.1 General Information .....................................................................................................................33
4.3.2 Wireless Interface Configuration..............................................................................................35
4.3.3 Nstreme ettings...........................................................................................................................40
4.3.4 Nstreme2 Group ettings...........................................................................................................41
4.3.5 Registration Table .........................................................................................................................43
4.3.6 Connect List ...................................................................................................................................45
4.3.7 Access List.......................................................................................................................................45
4.3.8 Info command.................................................................................................................................46
4.3.9 Virtual Access Point Interface....................................................................................................50
4.3.10 WD Interface Configuration ....................................................................................................51
4.3.11 Align ..................................................................................................................................................52
4.3.12 Align Monitor .................................................................................................................................53
4.3.13 Frequency Monitor .......................................................................................................................54
4.3.14 Manual Transmit Power Table...................................................................................................54

AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers 5
RouterO v3 Configuration and User Guide
4.3.15 Network can.................................................................................................................................55
4.3.16 ecurity Profiles .............................................................................................................................56
4.3.17 niffer................................................................................................................................................58
4.3.18 niffer niff.......................................................................................................................................58
4.3.19 niffer Packets.................................................................................................................................59
4.3.20 nooper............................................................................................................................................59
4.3.21 Application Examples....................................................................................................................60
4.3.22 Troubleshooting.............................................................................................................................74
4.4 VLAN Interfaces .............................................................................................................................................75
4.4.1 General Information .....................................................................................................................75
4.4.2 VLAN etup ....................................................................................................................................75
4.4.3 Application Example......................................................................................................................76
4.5 Bridge Interfaces.............................................................................................................................................77
4.5.1 General Information .....................................................................................................................77
4.5.2 Bridge Interface etup ..................................................................................................................78
4.5.3 Port ettings....................................................................................................................................79
4.5.4 Bridge Monitoring..........................................................................................................................80
4.5.5 Bridge Port Monitoring ................................................................................................................80
4.5.6 Bridge Host Monitoring ...............................................................................................................81
4.5.7 Bridge Firewall General Description ........................................................................................81
4.5.8 Bridge Packet Filter .......................................................................................................................84
4.5.9 Bridge NAT.....................................................................................................................................84
4.5.10 Bridge Brouting Facility ................................................................................................................85
4.5.11 Troubleshooting.............................................................................................................................86
5 IP and Routing .........................................................................................................................................................87
5.1 IP Addresses and ARP...................................................................................................................................87
5.1.1 General Information .....................................................................................................................87
5.1.2 IP Addressing ..................................................................................................................................87
5.1.3 Address Resolution Protocol .....................................................................................................88
5.1.4 Proxy-ARP feature ........................................................................................................................89
5.1.5 Unnumbered Interfaces ...............................................................................................................91
5.1.6 Troubleshooting.............................................................................................................................92
5.2 RIP: Routing Information Protocol ............................................................................................................92
5.2.1 General Information .....................................................................................................................92
5.2.2 General etup .................................................................................................................................93
5.2.3 Interfaces..........................................................................................................................................94
5.2.4 Networks.........................................................................................................................................95
5.2.5 Neighbors ........................................................................................................................................95
5.2.6 Routes...............................................................................................................................................95
5.2.7 Application Examples....................................................................................................................96
5.3 O PF..................................................................................................................................................................98
5.3.1 General Information .....................................................................................................................98
5.3.2 General etup .................................................................................................................................99
5.3.3 O PF Areas .................................................................................................................................. 100
5.3.4 Networks...................................................................................................................................... 101
5.3.5 Interfaces....................................................................................................................................... 102
5.3.6 Virtual Links ................................................................................................................................. 102
5.3.7 Neighbors ..................................................................................................................................... 103
5.3.8 Application Examples................................................................................................................. 104
5.4 Routes, Equal Cost Multipath Routing, Policy Routing...................................................................... 110
5.4.1 General Information .................................................................................................................. 110
5.4.2 Routes............................................................................................................................................ 111
5.4.3 Policy Rules .................................................................................................................................. 112
5.4.4 Application Examples................................................................................................................. 113
6 DHCP and DN ................................................................................................................................................... 116
6.1 DHCP Client and erver........................................................................................................................... 116
6.1.1 General Information .................................................................................................................. 116

6 AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide
6.1.2 DHCP Client etup.....................................................................................................................117
6.1.3 DHCP erver etup....................................................................................................................118
6.1.4 tore Leases on Disk..................................................................................................................120
6.1.5 DHCP Networks.........................................................................................................................121
6.1.6 DHCP erver Leases..................................................................................................................121
6.1.7 DHCP Alert ..................................................................................................................................123
6.1.8 DHCP Option ..............................................................................................................................123
6.1.9 DHCP Relay..................................................................................................................................124
6.1.10 Questions & Answers ................................................................................................................125
6.1.11 Application Examples..................................................................................................................126
6.2 DN Client and Cache ...............................................................................................................................129
6.2.1 General Information ...................................................................................................................129
6.3 DN Cache etup........................................................................................................................................129
6.3.1 Cache Monitoring........................................................................................................................130
6.3.2 tatic DN Entries ......................................................................................................................130
6.4 All DN Entries ............................................................................................................................................130
6.5 tatic DN Entries .......................................................................................................................................130
6.6 Flushing DN cache.....................................................................................................................................131
7 AAA Configuration ..............................................................................................................................................132
7.1 RADIU client...............................................................................................................................................132
7.1.1 General Information ...................................................................................................................132
7.1.2 RADIU Client etup .................................................................................................................132
7.1.3 Connection Terminating from RADIU ................................................................................133
7.1.4 uggested RADIU ervers ......................................................................................................134
7.1.5 upported RADIU Attributes ................................................................................................134
7.1.6 Troubleshooting ..........................................................................................................................140
7.2 PPP User AAA ..............................................................................................................................................141
7.2.1 General Information ...................................................................................................................141
7.2.2 Local PPP User Profiles..............................................................................................................141
7.2.3 Local PPP User Database ..........................................................................................................143
7.2.4 Monitoring Active PPP Users...................................................................................................144
7.2.5 PPP User Remote AAA .............................................................................................................145
7.3 Router User AAA........................................................................................................................................145
7.3.1 General Information ...................................................................................................................145
7.3.2 Router User Groups ..................................................................................................................146
7.3.3 Router Users ................................................................................................................................147
7.3.4 Monitoring Active Router Users.............................................................................................148
7.3.5 Router User Remote AAA .......................................................................................................148
7.3.6 H keys ........................................................................................................................................149
8 VPNs and Tunneling ............................................................................................................................................150
8.1 EoIP..................................................................................................................................................................150
8.1.1 General Information ...................................................................................................................150
8.1.2 EoIP etup .....................................................................................................................................151
8.1.3 EoIP Application Example..........................................................................................................152
8.1.4 Troubleshooting ..........................................................................................................................153
8.2 Interface Bonding .........................................................................................................................................154
8.3 General Information....................................................................................................................................154
8.3.1 ummary ........................................................................................................................................154
8.3.2 Quick etup Guide......................................................................................................................154
8.3.3 Related Documents ....................................................................................................................154
8.4 IPIP Tunnel Interfaces .................................................................................................................................158
8.4.1 General Information ...................................................................................................................158
8.4.2 IPIP etup.......................................................................................................................................159
8.4.3 Application Examples..................................................................................................................160
8.5 L2TP Interface...............................................................................................................................................161
8.5.1 General Information ...................................................................................................................161
8.5.2 L2TP Client etup .......................................................................................................................162

AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers 7
RouterO v3 Configuration and User Guide
8.5.3 Monitoring L2TP Client ............................................................................................................ 163
8.5.4 L2TP erver etup...................................................................................................................... 164
8.5.5 L2TP erver Users ..................................................................................................................... 164
8.5.6 L2TP Application Examples...................................................................................................... 166
8.5.7 Troubleshooting.......................................................................................................................... 170
8.6 PPPoE ............................................................................................................................................................. 170
8.6.1 General Information .................................................................................................................. 170
8.6.2 PPPoE Client etup .................................................................................................................... 172
8.6.3 Monitoring PPPoE Client .......................................................................................................... 173
8.6.4 PPPoE erver etup (Access Concentrator)....................................................................... 173
8.6.5 PPPoE Users................................................................................................................................. 175
8.6.6 PPPoE erver User Interfaces ................................................................................................. 175
8.6.7 Application Examples................................................................................................................. 176
8.6.8 Troubleshooting.......................................................................................................................... 178
8.7 PPTP................................................................................................................................................................ 178
8.7.1 General Information .................................................................................................................. 178
8.7.2 PPTP Client etup ...................................................................................................................... 180
8.7.3 Monitoring PPTP Client ............................................................................................................ 181
8.7.4 PPTP erver etup...................................................................................................................... 181
8.7.5 PPTP Users................................................................................................................................... 182
8.7.6 PPTP Tunnel Interfaces ............................................................................................................. 182
8.7.7 PPTP Application Examples...................................................................................................... 183
8.7.8 Troubleshooting.......................................................................................................................... 187
8.8 IP ecurity...................................................................................................................................................... 187
8.8.1 General Information .................................................................................................................. 187
8.8.2 Policy ettings .............................................................................................................................. 189
8.8.3 Peers .............................................................................................................................................. 191
8.8.4 Remote Peer tatistics .............................................................................................................. 192
8.8.5 Installed As ................................................................................................................................. 193
8.8.6 Flushing Installed A Table ....................................................................................................... 194
8.8.7 Application Examples................................................................................................................. 195
9 Firewall and Qo ................................................................................................................................................. 198
9.1 Filter................................................................................................................................................................ 198
9.1.1 General Information .................................................................................................................. 198
9.1.2 Firewall Filter ............................................................................................................................... 198
9.1.3 Filter Applications....................................................................................................................... 203
9.2 Mangle ............................................................................................................................................................ 204
9.2.1 General Information .................................................................................................................. 204
9.2.2 Mangle............................................................................................................................................ 205
9.2.3 Application Examples................................................................................................................. 209
9.3 Packet Flow................................................................................................................................................... 210
9.3.1 General Information .................................................................................................................. 210
9.3.2 Packet Flow .................................................................................................................................. 210
9.3.3 Connection Tracking ................................................................................................................. 212
9.3.4 Connection Timeouts................................................................................................................ 213
9.3.5 ervice Ports................................................................................................................................ 214
9.3.6 General Firewall Information................................................................................................... 215
9.4 NAT................................................................................................................................................................ 216
9.4.1 General Information .................................................................................................................. 216
9.4.2 NAT ............................................................................................................................................... 217
9.4.3 NAT Applications....................................................................................................................... 221
10 Hot pot ervice.................................................................................................................................................. 222
10.1 Hot pot Gateway........................................................................................................................................ 222
10.1.1 General Information .................................................................................................................. 222
10.1.2 Question&Answer-Based etup.............................................................................................. 226
10.1.3 Hot pot Interface etup ........................................................................................................... 227
10.1.4 Hot pot erver Profiles ............................................................................................................ 228

8 AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide
10.1.5 Hot pot User Profiles................................................................................................................229
10.2 HotSpot Users.................................................................................................................................................229
10.2.1 Description ...................................................................................................................................229
10.3 Hot pot Active Users.................................................................................................................................229
10.3.1 Description ...................................................................................................................................229
10.3.2 Hot pot Cookies.........................................................................................................................229
10.3.3 HTTP-level Walled Garden ......................................................................................................230
10.3.4 IP-level Walled Garden..............................................................................................................231
10.3.5 One-to-one NAT static address bindings.............................................................................231
10.3.6 Active Host List ...........................................................................................................................232
10.3.7 Command Description ..............................................................................................................232
10.3.8 ervice Port ..................................................................................................................................232
10.3.9 Customizing Hot pot: Firewall ection.................................................................................233
10.3.10 Customizing Hot pot: HTTP ervlet Pages .........................................................................236
10.3.11 Possible Error Messages ............................................................................................................242
10.3.12 Hot pot How-to's.......................................................................................................................243
10.4 Hot pot User AAA .....................................................................................................................................244
10.4.1 General Information ...................................................................................................................244
10.4.2 Hot pot User Profiles................................................................................................................244
10.4.3 Hot pot Users .............................................................................................................................246
10.4.4 Hot pot Active Users ................................................................................................................247
11 High Availability protocols and techniques....................................................................................................249
11.1 VRRP ...............................................................................................................................................................249
11.1.1 General Information ...................................................................................................................249
11.1.2 VRRP Routers ..............................................................................................................................249
11.1.3 Virtual IP addresses.....................................................................................................................251
11.1.4 A simple example of VRRP fail over.......................................................................................251
11.2 ystem Watchdog........................................................................................................................................253
11.2.1 General Information ...................................................................................................................253
11.2.2 Hardware Watchdog Management.........................................................................................253
12 Monitoring and Management................................................................................................................255
12.1 Log Management ..........................................................................................................................................255
12.1.1 General Information ...................................................................................................................255
12.1.2 General ettings...........................................................................................................................255
12.1.3 Actions ...........................................................................................................................................256
12.1.4 Log Messages ................................................................................................................................256
12.2 NMP ervice................................................................................................................................................257
12.2.1 General Information ...................................................................................................................257
12.3 Traffic Flow....................................................................................................................................................258
12.3.1 General Information ...................................................................................................................258
12.3.2 Related Documents ....................................................................................................................258
12.3.3 General Configuration ...............................................................................................................258
12.3.4 Traffic-Flow Target .....................................................................................................................259
12.3.5 Application Examples..................................................................................................................259
12.4 Graphing.........................................................................................................................................................262
12.4.1 General Information ...................................................................................................................262
12.4.2 General Options..........................................................................................................................262
12.4.3 Health Graphing...........................................................................................................................263
12.4.4 Interface Graphing.......................................................................................................................263
12.4.5 imple Queue Graphing.............................................................................................................263
12.4.6 Resource Graphing .....................................................................................................................264

AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers 9
RouterO v3 Configuration and User Guide
FIGURES
Figure 1: AT-WR4500 eries typical application ..................................................................................................................12
Figure 2: WinBox Loader discovering .....................................................................................................................................14
Figure 3: WinBox main window................................................................................................................................................15
Figure 4: WinBox with terminal window open .....................................................................................................................15
Figure 5: tation and AP mode example .................................................................................................................................60
Figure 6: WD Network example............................................................................................................................................62
Figure 7: Nstreme network example.......................................................................................................................................66
Figure 8: Nstreme dual network example..............................................................................................................................68
Figure 9: WEP security example ...............................................................................................................................................70
Figure 10: WPA security example ............................................................................................................................................73
Figure 11: Proxy ARP...................................................................................................................................................................90
Figure 12: Proxy ARP with PPPoE ............................................................................................................................................91
Figure 13: O PF Backup ........................................................................................................................................................... 104
Figure 14: O PF Routing tables.............................................................................................................................................. 108
Figure 15: O PF Backup ........................................................................................................................................................... 109
Figure 16: tatic Equal Cost Multi-Path Routing example ............................................................................................... 113
Figure 17: tandard Policy-Based Routing with Failover.................................................................................................. 114
Figure 18: DHCP Relay............................................................................................................................................................. 126
Figure 19: DHCP with RADIU ............................................................................................................................................. 128
Figure 20: EoIP Application Example..................................................................................................................................... 152
Figure 21: Bonding two EoIP tunnels .................................................................................................................................... 156
Figure 22: IPIP Tunnel example network............................................................................................................................. 160
Figure 23: Router-to-Router ecure Tunnel Example...................................................................................................... 166
Figure 24: ecure Remote office connection through L2TP tunnel.............................................................................. 167
Figure 25: Client to Office secure connection via L2TP tunnel..................................................................................... 169
Figure 26: PPPoE Example ....................................................................................................................................................... 176
Figure 27: Network etup without PPTP enabled............................................................................................................. 183
Figure 28: Network etup with encrypted PPTP Tunnel ................................................................................................ 184
Figure 29: Connecting a Remote Client via and Encrypted PPTP Tunnel................................................................... 186
Figure 30: transport mode example using E P with automatic keying......................................................................... 195
Figure 31: Add accept and masquerading rules in RC-NAT......................................................................................... 196
Figure 32: Packet Flow Diagram............................................................................................................................................. 211
Figure 33: Firewall Connection Tracking timeouts ........................................................................................................... 213
Figure 34: Hot pot example network .................................................................................................................................. 223
Figure 35: imple VRRP fail over example........................................................................................................................... 251
Figure 36: Host Information.................................................................................................................................................... 260
Figure 37: Network Load tatistics Matrix ......................................................................................................................... 260
Figure 38: Network load profile by time ............................................................................................................................. 261
Figure 39: Traffic Load by protocol....................................................................................................................................... 261

10 AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide
PREFACE
Purpose o This Guide
This guide describes the AT-WR4500 eries Outdoor Wireless Routers RouterO command structure
and configuration for allowing users or network managers to correctly configure the router getting the
most of it.
How This Guide is organized
This guide contains the following chapters and appendices:
Chapter 1 Introduction describes the features, functions, LEDs, and ports on the equipment.
Please refer to the relevant Quick Installation guides for information on how to
install and setup each router.
Chapter 2 Configuring RouterO describes how to access the router’s command facility and
perform the basic configuration tasts through the Command Line Interface, The
Web GUI and the WinBox application.
Chapter 3 Configuration and oftware Management describes how to backup, export, and
restore the router’s configuration.
Chapters rom 4 on describe all the available commands and parameters with some
configuration examples.
Document Conventions
This guide uses several conventions that you should become familiar with before you begin to install the
product:


 Note
A note provides additional information. Please go to the Allied Telesis website
http://www.alliedtelesis.com for the translated safety statement in your language.
Warning
A warning indicates that performing or omitting a specific action may result in bodily injury.
Caution
A caution indicates that performing or omitting a specific action may result in equipment damage
or loss of data.

AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers 11
RouterO v3 Configuration and User Guide
CONTACTING ALLIED TELESIS
This section provides Allied Telesis contact information for technical support as well as sales and
corporate information.
Online Support
You can request technical support online by accessing the Allied Telesis Knowledge Base:
http://www.alliedtelesis.com/kb/. You can use the Knowledge Base to submit questions to our
technical support staff and review answers to previously asked questions.
Email and Telephone Support
For Technical upport via email or telephone, refer to the upport & ervices section of the Allied Telesis
web site: http://www.alliedtelesis.com/support/.
Warranty
For product registration and warranty conditions please visit Allied Telesis website:
http://www.alliedtelesis.com/support/warranty/
Where to Find Web-based Guides
The installation and user guides for all Allied Telesis products are available in portable document format
(PDF) on our web site at www.alliedtelesis.com. You can view the documents online or download
them onto a local workstation or server.
Returning Products
Products for return or repair must first be assigned a return materials authorization (RMA) number. A
product sent to Allied Telesis without an RMA number will be returned to the sender at the sender’s
expense.
To obtain an RMA number, contact Allied Telesis Technical upport through our web site:
http://www.alliedtelesis.com/support/.
Sales or Corporate In ormation
You can contact Allied Telesis for sales or corporate information through our web site:
http://www.alliedtelesis.com/. To find the contact information for your country, select Contact Us ->
Worldwide Contacts.
Management So tware Updates
New releases of management software for our managed products are available from either of the
following Internet sites:
•Allied Telesis web site: http://www.alliedtelesis.com/support/so tware/
•Allied Telesis FTP server: tp:// tp.alliedtelesis.com/
If you prefer to download new software from the Allied Telesis FTP server from your workstation’s
command prompt, you will need FTP client software and you must log in to the server. Enter
“anonymous” for the user name and your email address for the password.
Tell Us What You Think
If you have any comments or suggestions on how we might improve this or other Allied Telesis
documents, please contact us at http://www.alliedtelesis.com.

12 AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide
1Introduction
Thank you for purchasing an AT-WR4500 series Wireless Router.



Please refer to the ATWR45xx Quick nstallation Guide for information on how to install connect and
initially setup each router model.
The WR4500 family of dual band outdoor wireless base routers and routing CPEs allow the building of
wireless only or hybrid IP networks that are scalable, reliable and fully controllable.
Wireless I Ps can easily and quickly provide homes in rural areas with broadband Internet access and
VoIP telephony and, at the same time, can set-up WiFi hot spots for nomadic users.
Enterprises can connect remote buildings without the need for expensive leased lines and can extend
WiFi coverage to outdoor yards providing users with mobile intranet and Internet access everywhere.
Municipalities can build wireless IP networks for connecting remote offices and for increasing public safety
with real time monitored surveillance cameras and continuous communication with local police patrols.
Local utilities can easily control their remote equipments and read, in real time, gas, water and electricity
meters without any need for expensive fiber cabling.
Hot spot services can be provided to hotel guests and hospital patients ‘illuminating’ rooms from outside
the building with a reduced impact on medical equipments because no transmit radio will be installed
inside the hospital.
The single radio AT-WR4561 model can be used as either a base router, a hot spot or a wireless CPE
while the dual radio AT-WR4562 can be deployed at the same time as both a wireless only base router
and hot spot or base station in a Point to Multipoint configuration.
The AT-WR4542 with its embedded high gain antenna is best suited for being used as a wireless CPE
connecting to an AT-WR4561 or AT-WR4562 base router or can be deployed in couples for realizing
long reach high performances Point to Point links.
Flexibility is the primary advantage of the WR4500 family of wireless base routers. All products share the
same software and features and differ only in the number of radio interfaces.
Landline
IP Net
5GHz
Access
Network
Backbone
Network
5GHz
5GHz
2.4GHz
2.4GHz
2.4 / 5GHz
Figure 1: AT-WR4500 Series typical application

AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers 13
RouterO v3 Configuration and User Guide
1.1 Features
The AT-WR4500 series RouterO firmware is very rich of features and very flexible. Among others:
•Real IP routing functionalities
•2.4 GHz and 5 GHz dual band operations
•IEEE 802.11a/b/g/h compliant
•Certified for HiperLAN bands operation in Europe with DF and TPC
•IEEE 802.3af compliant PoE powering
•IP66/67 rated outdoor robust construction
•Professional look suitable for indoor installation too
•Embedded IP firewalling functionalities
•Highly configurable Qo management for multimedia applications
•High sensitivity radio interface for longer reach and higher throughput on wireless links
•Wide choice of omnidirectional, directional and sector antennas
•RoH compliant
1.2 So tware License
RouterO licensing scheme is based on software IDs. To license the software, you must know the
software ID that is displayed during installation process or can be read from the CLI system console or
WinBox. In order to get the software ID from system console, first log in (the default user is “admin”
with no password) and type: “/system license print”.
[admin@AT-WR4541g] > /system license print
software-id: "NCL8-3TT"
upgradable-to: v4.x
nlevel: 4
features:
[admin@AT-WR4541g] >

14 AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide
2Con iguring RouterOS
2.1 Logging in the AT-WR4500 Router
There are many options for accessing your AT-WR4500 Router command facility:
•Accessing the router Command Line Interface either via Telnet or H using any text-mode Telnet
or H client software
•Accessing the Web based Graphical User Interface via HTTP using a Web browser
•Running the M Windows based WinBox graphical menu based configuration utility.
Every AT-WR4500 Wireless Router is factory configured with the static IP address 192.168.1.1/24 (net
mask 255.255.255.0) and both CLI and Web GUI can be accessed through this IP address.
2.2 Accessing the WR4500 through WinBox
hould the router come with a different IP address or if you do not want to change the IP address of
your PC or Workstation then it is possible to access the Router using the discovery facility of the
WinBox utility. ince WinBox can open a Layer 2 connection to the equipments, no change to the PC IP
address is needed. Please refer to the following section for instructions on how to get and use WinBox.
Downloading WinBox loader
The M Windows based utility WinBox can be downloaded from the Allied Telesis web site accessing
http://www.alliedtelesis.com/. elect you country; access the “ oftware and Documentation” section
under the “ ervice/ upport” menu; select “Wireless” in the “Product Category” drop down menu and
“AT-WR45421” in the “Product” drop down menu.
croll down the page and select the “AT-WR4500 WinBox loader” from the list of available oftware.
Using WinBox
Connect the AT-WR4500 router with a LAN cable to your PC and launch the WinBox loader utility that
you have just downloaded.
Please make sure that the only LAN port enabled on your PC is the one connected to the WR4500
Router. Any other LAN port, either wired or wireless, shall be disabled.
Figure 2: WinBox Loader discovering
When the WinBox loader startup window appears click on the button placed besides the “Connect
To:” field and wait for some seconds. A list of AT-WR4500 connected equipments (at least one) will
appear (see Figure 2). elect the one you want to access and then click on the “Connect” button. Every
AT-WR4500 router is configured in factory with “admin” as the login user with no password set.
The first time that you use it, the WinBox Loader will start downloading the rest of the WinBox
application from the WR4500 router. Wait up to one minute until the entire application has been
downloaded and the WinBox main window will appear.

AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers 15
RouterO v3 Configuration and User Guide
Figure 3: WinBox main window
elect from the menu bar located in the leftmost part of the window the command or menu that you
want to access and start configuring the equipment. For instance you can click on the “New Terminal”
button for opening a Telnet terminal window connected and logged into your router as shown in Figure
4.
Figure 4: WinBox with terminal window open
You can keep open as many WinBox internal windows as you need at the same time.
2.3 Accessing the CLI
When logging into the router via terminal console in telnet or H, you will be presented with the
RouterO login prompt. Use 'admin' and no password (hit [Enter]) for logging into the router for the first
time
AT-WR4500 v3.0
Login: admin
Password:
The password can be changed with the /password command.
[admin@AT-WR4562] > password
old password:
new password: ************
retype new password: ************
[admin@AT-WR4562] >

16 AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide
After logging into the router you will be presented with the RouterO ™ Welcome creen and command
prompt, for example:
AA TTTTTTTTTTTTTTTTTT ooooo
AAAAA TTTTTTTTTTTTTTT oooooooo
AAAAAAAA TTTTTTTT I oooooo
AAAAAAAAAAA TTTTTTT IIIIIIIIII
AAAAAAA AAAAA TTTT IIIIIIIIII
AAAAAAA AAAAA T IIIIIIIIII
AT-WR4500 RouterOS 3.10 (c) 1999-2008 http://www.alliedtelesis.com/
[admin@AT-WR4562] >
The command prompt shows the identity name of the router and the current menu level, for example:
[admin@AT-WR4562] >interface
[admin@AT-WR4562] interface>
[admin@AT-WR4562] >ip address
[admin@AT-WR4562] ip address>
The list of available commands at any menu level can be obtained by entering the question mark '?',
[admin@AT-WR4541g] > ?
blink --
certificate -- Certificate management
driver -- Driver management
file -- Local router file storage.
import --
interface -- Interface configuration
ip --
log -- System logs
password -- Change password
ping -- Send ICMP Echo packets
port -- Serial ports
ppp -- Point to Point Protocol
queue -- Bandwidth management
quit -- Quit console
radius -- Radius client settings
redo -- Redo previously undone action
routing --
setup -- Do basic setup of system
snmp -- SNMP settings
special-login -- Special login users
system -- System information and utilities
tool -- Diagnostics tools
undo -- Undo previous action
user --
export -- Print or save an export script that can be used to restore configuration
[admin@AT-WR4541g] >
The list of available commands and menus has short descriptions next to the items. You can move to the
desired menu level by typing its name and hitting the [Enter] key, for example:
[admin@AT-WR4562] > | Base level menu
[admin@AT-WR4562] > driver | Enter 'driver' to move to the driver
| level menu
[admin@AT-WR4562] driver> / | Enter '/' to move to the base level menu
| from any level
[admin@AT-WR4562] > interface | Enter 'interface' to move to the
| interface level menu
[admin@AT-WR4562] interface> /ip | Enter '/ip' to move to the IP level menu
| from any level
[admin@AT-WR4562] ip> |

AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers 17
RouterO v3 Configuration and User Guide
A command or an argument does not need to be completed, if it is not ambiguous. For example, instead
of typing interface you can type just in or int. To complete a command use the [Tab] key.



The completion is optional and you can just use short command and parameter names
The commands may be invoked from the menu level, where they are located, by typing its name. If the
command is in a different menu level than the current one, then the command should be invoked using its
full (absolute) or relative path, for example:
[admin@AT-WR4562] ip route> print | Prints the routing table
[admin@AT-WR4562] ip route> .. address print | Prints the IP address table
[admin@AT-WR4562] ip route> /ip address print | Prints the IP address table
The commands may have arguments. The arguments have their names and values. ome commands, may
have a required argument that has no name.
Command Action
command [Enter] Executes the command
[?] hows the list of all available commands
command [?] Displays help on the command and the list of arguments
command argument
[?] Displays help on the command's argument
[Tab] Completes the command/word. If the input is ambiguous, a second [Tab] gives
possible options
/ Moves up to the base level
/command Executes the base level command
.. Moves up one level
"" pecifies an empty string
"word1 word2" pecifies a string of 2 words that contain a space
You can abbreviate names of levels, commands and arguments.
For the IP address configuration, instead of using the address and netmask arguments, in most cases you
can specify the address together with the number of true bits in the network mask, i.e., there is no need
to specify the netmask separately. Thus, the following two entries would be equivalent:
/ip address add address 10.0.0.1/24 interface ether1
/ip address add address 10.0.0.1 netmask 255.255.255.0 interface ether1



You must specify the size of the network mask in the address argument, even if it is the 32-bit subnet,
i.e., use 10.0.0.1/32 for address=10.0.0.1 netmask=255.255.255.255.
At the factory an P address (192.168.1.1/24) is pre-configured to allow to use application such us
Telnet, WinBox or HTTP Web GU , from the Ethernet interface ether1 connecting a PC configured with
an P Address on the same P subnet, i.e. 192.168.1.100/24. Whenever the AT-WR4500 will be reset
back the default setting, via the command /system reset-configuration, this P address will not be
restored into the router running configuration. Connecting the console cable is possible to configure the P
address using the commands reported here above.

18 AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide
3Con iguration and So tware Management
Document revision: 1.6 (Mon ep 19 12:55:52 GMT 2005)
Applies to: V2.9
3.1 General In ormation
ummary
This chapter introduces you with commands which are used to perform the following functions:
•system backup
•system restore from a backup
•configuration export
•configuration import
•system configuration reset
Description
The configuration backup can be used for backing up RouterO configuration to a binary file, which can
be stored on the router or downloaded from it using FTP for future use. The configuration restore can
be used for restoring the router's configuration, exactly as it was at the backup creation moment, from a
backup file. The restoration procedure (/system backup load) assumes the cofiguration is restored on
the same router, where the backup file was originally created (/system backup save), so it will create
partially broken configuration if the hardware has been changed.
The configuration export can be used for dumping out complete or partial RouterO configuration to the
console screen or to a text (script) file, which can be downloaded from the router using FTP protocol.
The configuration dumped is actually a batch of commands that add (without removing the existing
configuration) the selected configuration to a router. The configuration import facility executes a batch of
console commands from a script file.
ystem reset command is used to erase all configuration on the router. Before doing that, it might be
useful to backup the router's configuration.



n order to be sure that the backup will not fail, system backup load command must be used on the
same computer with the same hardware where system backup save was done.
3.1.1 System Backup
ubmenu level: /system backup
Description
The save command is used to store the entire router configuration in a backup file. The file is shown in
the / ile submenu. It can be downloaded via ftp to keep it as a backup for your configuration.
To restore the system configuration, for example, after a /system reset, it is possible to upload that file
via ftp and load that backup file using load command in /system backup submenu.
Command Description
load name=[ ilename] - Load configuration backup from a file
save name=[ ilename] - ave configuration backup to a file
Example
To save the router configuration to file test:
[admin@AT-WR4562] system backup> save name=test
Configuration backup saved
[admin@AT-WR4562] system backup>

AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers 19
RouterO v3 Configuration and User Guide
To see the files stored on the router:
[admin@AT-WR4562] > file print
# NAME TYPE SIZE CREATION-TIME
0 test.backup backup 12567 sep/08/2004 21:07:50
[admin@AT-WR4562] >
To load the saved backup file test:
[admin@AT-WR4562] system backup> load name=test
Restore and reboot? [y/N]:
Y
Restoring system configuration
System configuration restored, rebooting now
3.1.2 The Export Command
Command name: /export
Description
The export command prints a script that can be used to restore configuration. The command can be
invoked at any menu level, and it acts for that menu level and all menu levels below it. The output can be
saved into a file, available for download using FTP.
Command Description
ile=[ ilename] - saves the export to a file
Example
[admin@AT-WR4562] > ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 10.1.0.172/24 10.1.0.0 10.1.0.255 bridge1
1 10.5.1.1/24 10.5.1.0 10.5.1.255 ether1
[admin@AT-WR4562] >
To make an export file:
[admin@AT-WR4562] ip address> export file=address
[admin@AT-WR4562] ip address>
To see the files stored on the router:
[admin@AT-WR4562] > file print
# NAME TYPE SIZE CREATION-TIME
0 address.rsc script 315 dec/23/2003 13:21:48
[admin@AT-WR4562] >
3.1.3 The Import Command
Command name: /import
Description
The root level command /import [ ile_name] executes a script, stored in the specified file adds the
configuration from the specified file to the existing setup. This file may contain any console comands,
including scripts. is used to restore configuration or part of it after a /system reset event or anything
that causes configuration data loss.

20 AT-WR4500 eries - IEEE 802.11abgh Outdoor Wireless Routers
RouterO v3 Configuration and User Guide



t is impossible to import the whole router configuration using this feature. t can only be used to import
a part of configuration (for example, firewall rules) in order to spare you some typing.
Command Description
ile=[ ilename] - loads the exported configuration from a file to router
Example
To load the saved export file use the following command:
[admin@AT-WR4562] > import address.rsc
Opening script file address.rsc
Script file loaded successfully
[admin@AT-WR4562] >
3.1.4 Con iguration Reset
Command name: /system reset
Description
The command clears all configuration of the router and sets it to the default including the login name and
password ('admin' and no password), IP addresses and other configuration is erased, interfaces will
become disabled. After the reset command router will reboot.
Command Description
reset - erases router's configuration



f the router has been installed using netinstall and had a script specified as the initial configuration, the
reset command executes this script after purging the configuration. To stop it doing so, you will have to
reinstall the router.
Example
[admin@AT-WR4562] > system reset
Dangerous! Reset anyway? [y/N]: n
action cancelled
[admin@AT-WR4562] >
3.2 So tware Version Management
Document revision: 1.4 (Tue Oct 18 12:24:57 GMT 200 5)
Applies to: V2.9
3.2.1 General In ormation
ummary
To upgrade RouterO to a more recent version, you can simply transfer the packages to router via ftp,
using the binary transfer mode, and then just rebooting the router.
This manual discusses a more advanced method how to upgrade a router automatically. If you have more
than one router then this can be useful.
pecifications
Packages required: system
License required: Level1
ubmenu level: /system upgrade