Allied Telesis AT-TQ Series User manual

613-001867 Rev. C
AT-TQ Series
Enterprise-class Wireless Access Points
with 2.4GHz and 5GHz Dual-band Radios
Management Software
User’s Guide

Copyright ©2015 Allied Telesis, Inc.
All rights reserved.
This product includes software licensed under the BSD License. As such, the following language applies for those
portions of the software licensed under the BSD License:
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following
conditions are met:
* Redistributions of source code must retain the above copyright notice, this list of conditions and the following
disclaimer.
* Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following
disclaimer in the documentation and/or other materials provided with the distribution.
* Neither the name of Allied Telesis, Inc. nor the names of the respective companies above may be used to endorse or
promote products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY
EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT
SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Copyright (c) [dates as appropriate to package] by The Regents of the University of California - All rights reserved.
Copyright (c) 2000-2003 by Intel Corporation - All rights reserved. Copyright (c) 1997-2003, 2004 by Thomas E. Dickey
<[email protected]et> - All rights reserved. Copyright (c) 2001-2009 by Brandon Long (ClearSilver is now
licensed under the New BSD License.) Copyright (c) 1984-2000 by Carnegie Mellon University - All rights reserved.
Copyright (c) 2002,2003 by Matt Johnston - All rights reserved. Copyright (c) 1995 by Tatu Ylonen <yl[email protected]> - All
rights reserved. Copyright 1997-2003 by Simon Tatham. Portions copyright by Robert de Bath, Joris van Rantwijk,
Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, and CORE SDI S.A.
Copyright (c) 1989, 1991 by Free Software Foundation, Inc. (GNU General Public License, Version 2, June 1991).
Copyright (c) 2002-2005 by Jouni Malinen <[email protected]i> and contributors. Copyright (c) 1991, 1999 by Free
Software Foundation, Inc. (GNU Lesser General Public License, Version 2.1, February 1999). Copyright (c) 1998-2002
by Daniel Veillard - All rights reserved. Copyright (c) 1998-2004 by The OpenSSL Project - All rights reserved.
Copyright (c) 1995-1998 by Eric Young ([email protected]) - All rights reserved.
This product also includes software licensed under the GNU General Public License available from:
http://www.gnu.org/licenses/gpl2.html
Allied Telesis is committed to meeting the requirements of the open source licenses including the GNU General Public
License (GPL) and will make all required source code available.
If you would like a copy of the GPL source code contained in this product, please send us a request by registered mail
including a check for US$15 to cover production and shipping costs, and a CD with the GPL code will be mailed to you.
GPL Code Request
Allied Telesis Labs (Ltd)
PO Box 8011
Christchurch, New Zealand
No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc.
Allied Telesis™and the Allied Telesis logo are trademarks of Allied Telesis, Incorporated.
Ethernet™is a trademark of the Xerox Corporation.
Wi-Fi®, Wi-Fi Alliance®, WMM®, Wi-Fi Protected Access®(WPA), the Wi-Fi CERTIFIED logo, the Wi-Fi logo, the
Wi-Fi ZONE logo, and the Wi-Fi Protected Setup logo are registered trademarks of the Wi-Fi Alliance. Wi-Fi
CERTIFIED™, Wi-Fi Multimedia™, WPA2™and the Wi-Fi Alliance logo are trademarks of the Wi-Fi Alliance.
Microsoft is a registered trademark of Microsoft Corporation.

All other product names, company names, logos or other designations mentioned herein are trademarks or registered
trademarks of their respective owners.
Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document
without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied
Telesis, Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited
to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesis, Inc. has
been advised of, known, or should have known, the possibility of such damages.

5
Preface ............................................................................................................................................................13
Safety Symbols Used in this Document ...........................................................................................................14
Contacting Allied Telesis..................................................................................................................................15
Chapter 1: Overview ......................................................................................................................................17
AT-TQ Series of Wireless Access Points.........................................................................................................18
Features ...........................................................................................................................................................19
Management Modes and Methods...................................................................................................................21
Starting a Management Session on the Access Point......................................................................................22
Starting the Initial Management Session on the Access Point .........................................................................23
Starting the Initial Management Session with a Direct Connection............................................................24
Starting the Initial Management Session without a DHCP Server .............................................................24
Starting the Initial Management Session with a DHCP Server ..................................................................25
Using the Management Menus and Windows..................................................................................................26
Web Browser Menus..................................................................................................................................26
Saving Your Changes................................................................................................................................28
Logging Off.................................................................................................................................................28
Chapter 2: Basic Settings Menu ...................................................................................................................29
Displaying Basic Information............................................................................................................................30
Changing the Manager’s Login Name and Password......................................................................................32
Changing the System Name, Contact, and Location........................................................................................33
Chapter 3: Manage Menu ..............................................................................................................................35
Assigning a Static IP Address to the Access Point...........................................................................................36
Assigning a Dynamic IP Address from a DHCP Server to the Access Point....................................................38
Setting VLAN IDs..............................................................................................................................................39
Management VLAN ID...............................................................................................................................39
VLAN ID for Untagged Traffic ....................................................................................................................39
Enabling or Disabling Broadcast Ping Replies .................................................................................................40
Setting the Country Setting...............................................................................................................................41
Configuring Basic Radio Settings.....................................................................................................................43
Configuring the Radio Settings.........................................................................................................................47
Configuring Virtual Access Points ....................................................................................................................59
No Security.................................................................................................................................................62
IEEE 802.1x Security.................................................................................................................................62
Static WEP.................................................................................................................................................64
WPA Enterprise..........................................................................................................................................67
WPA Personal............................................................................................................................................70
Managing Wireless Distribution System Bridges..............................................................................................72
Configurations of WDS Bridges .................................................................................................................72
Radio..........................................................................................................................................................74
Radio Mode................................................................................................................................................74
Radio Channel ...........................................................................................................................................74
VAP0..........................................................................................................................................................74
Encryption..................................................................................................................................................75
Dynamic Frequency Selection ...................................................................................................................75
Guidelines..................................................................................................................................................76
Contents

Contents
6
Preparing the Access Point for the WDS Bridge ....................................................................................... 77
Configuring the WDS Bridge ..................................................................................................................... 78
Static WEP ................................................................................................................................................ 80
WPA Personal........................................................................................................................................... 82
Configuring the MAC Address Filter ................................................................................................................ 83
Generating Event Messages for Unknown Access Points............................................................................... 86
Enabling Event Messages for Unknown Access Points ............................................................................ 86
Disabling Event Messages for Unknown Access Points ........................................................................... 88
Configuring the Access Point for the Optional AT-UWC Program ................................................................... 89
Enabling the Controller Client.................................................................................................................... 89
Disabling the Controller Client................................................................................................................... 92
Chapter 4: Cluster Menu .............................................................................................................................. 93
Overview.......................................................................................................................................................... 94
Planning a Cluster.......................................................................................................................................... 101
Creating or Adding Access Points to a Cluster.............................................................................................. 102
Managing the Access Points of a Cluster ...................................................................................................... 105
Removing an Access Point from a Cluster .................................................................................................... 106
Viewing the Wireless Clients of a Cluster ...................................................................................................... 107
Using Automatic Channel Assignments......................................................................................................... 109
Enabling Automatic Channel Assignments.............................................................................................. 109
Disabling Automatic Channel Assignments............................................................................................. 112
Viewing the Neighboring Access Points of the Cluster.................................................................................. 113
Chapter 5: Status Menu .............................................................................................................................. 117
Viewing the Associated Clients of an Access Point....................................................................................... 118
Viewing Event Messages............................................................................................................................... 120
Viewing System Event Messages ........................................................................................................... 121
Configuring the Event Log....................................................................................................................... 123
Configuring the Syslog Client.................................................................................................................. 124
Disabling the Syslog Client...................................................................................................................... 125
Viewing Neighboring Access Points .............................................................................................................. 126
Displaying the IP Addresses of AT-UWC Programs...................................................................................... 129
Displaying Statistics....................................................................................................................................... 130
Viewing Basic IP and Radio Information........................................................................................................ 134
Chapter 6: Services Menu .......................................................................................................................... 135
Configuring Quality of Service ....................................................................................................................... 136
Configuring SNMPv1 and v2c........................................................................................................................ 143
Enabling or Disabling the LEDs ..................................................................................................................... 150
Configuring the HTTP Server......................................................................................................................... 151
Enabling the HTTP Server....................................................................................................................... 151
Disabling the HTTP Server...................................................................................................................... 152
Configuring the HTTPS Server ...................................................................................................................... 153
Enabling the HTTPS Server.................................................................................................................... 153
Disabling the HTTPS Server ................................................................................................................... 154
Configuring the Maximum Number of Active Management Sessions............................................................ 155
Configuring the Management Session Timer................................................................................................. 156
Configuring Link Layer Discovery Protocol.................................................................................................... 157
Manually Setting the Date and Time.............................................................................................................. 158
Setting the Date and Time with the Network Time Protocol Client ................................................................ 160
Chapter 7: Maintenance Menu ................................................................................................................... 163
Restoring the Default Settings to the Access Point ....................................................................................... 164
Downloading the Configuration from the Access Point to Your Computer..................................................... 167
Restoring a Configuration to the Access Point .............................................................................................. 168
Rebooting the Access Point........................................................................................................................... 169

AT-TQ Wireless Access Point Series User’s Guide
7
Enabling or Disabling the Reset Button..........................................................................................................170
Switching the Primary and Secondary Management Software Images..........................................................171
Uploading New Versions of the Management Software to the Access Point .................................................173

Contents
8

9
Figures
Figure 1: AT-TQ2450, AT-TQ3600, and AT-TQ4600 Access Points .............................................................. 18
Figure 2: Log On Window................................................................................................................................ 22
Figure 3: Horizontal Menus ............................................................................................................................. 26
Figure 4: Vertical Menus.................................................................................................................................. 27
Figure 5: Dropdown Menus............................................................................................................................. 27
Figure 6: Provide Basic Settings Window........................................................................................................ 30
Figure 7: Modify Ethernet (Wired) Settings Window........................................................................................ 36
Figure 8: Modify Wireless Settings Window .................................................................................................... 41
Figure 9: Modify Radio Settings Window......................................................................................................... 48
Figure 10: Modify Virtual Access Point Settings Window................................................................................ 61
Figure 11: 802.1x Authentication for VAPs...................................................................................................... 62
Figure 12: Static WEP Encryption for VAPs.................................................................................................... 64
Figure 13: WPA Enterprise for VAPs............................................................................................................... 67
Figure 14: WPA Personal for VAPs................................................................................................................. 70
Figure 15: WDS Bridge Used to Connect LAN Segments............................................................................... 72
Figure 16: WDS Bridge Used to Extend a Network......................................................................................... 72
Figure 17: Valid Configurations of WDS Bridges............................................................................................. 73
Figure 18: Invalid Loop Configuration of Access Points.................................................................................. 73
Figure 19: Invalid Loop Configuration of Access Points to a Wired Network Device ...................................... 74
Figure 20: Invalid Configuration of Four Wireless Access Points.................................................................... 74
Figure 21: Configure WDS Bridges to Other Access Points Window.............................................................. 78
Figure 22: Remote Address List...................................................................................................................... 79
Figure 23: Static WEP on WDS Bridges.......................................................................................................... 80
Figure 24: WPA Personal on WDS Bridges .................................................................................................... 82
Figure 25: Configure MAC Filtering of Client Stations Window....................................................................... 84
Figure 26: Event Message for Unknown Access Points.................................................................................. 86
Figure 27: Configure Pre-Configured Rogue AP Window ............................................................................... 87
Figure 28: Configure Managed Access Point Parameters Window................................................................. 89
Figure 29: Manage Access Points in the Cluster Window............................................................................. 102
Figure 30: Active Cluster in the Manage Access Points in the Cluster Window............................................ 104
Figure 31: Manage Sessions Associated with the Cluster Window............................................................... 107
Figure 32: Automatically Manage Channel Assignments Window ................................................................ 109
Figure 33: Automatically Manage Channel Assignments Window - Automatic Channel Assignment
Enabled ......................................................................................................................................................... 110
Figure 34: View Neighboring Access Points Window.................................................................................... 113
Figure 35: Neighbor Details........................................................................................................................... 114
Figure 36: View List of Currently Associated Client Stations......................................................................... 118
Figure 37: View Events Generated by this Access Point Window................................................................. 122
Figure 38: View Neighboring Access Points Window.................................................................................... 126
Figure 39: Displaying View List of Managing Switch IP Addresses and Base IP Port Obtained via DHCP.. 129
Figure 40: Status Table in the View Transmit and Receive Statistics for this Access Point Window............ 130
Figure 41: Transmit Statistics Table of the View Transmit and Receive Statistics for this Access Point
Window.......................................................................................................................................................... 132
Figure 42: Receive Statistics Table of the View Transmit and Receive Statistics for this Access Point
Window.......................................................................................................................................................... 133

List of Figures
10
Figure 43: View Settings for Network Interfaces Window.............................................................................. 134
Figure 44: Modify QoS Queue Parameters.................................................................................................... 137
Figure 45: SNMP Configuration Window ....................................................................................................... 144
Figure 46: Control LEDs Window................................................................................................................... 150
Figure 47: Configure Web Server Settings Window....................................................................................... 151
Figure 48: Disable HTTP Server Prompt ....................................................................................................... 152
Figure 49: Generate SSL Certificate Prompt ................................................................................................. 153
Figure 50: Disable HTTPS Server Prompt..................................................................................................... 154
Figure 51: LLDP Configuration Window......................................................................................................... 157
Figure 52: Modify How the Access Point Discovers the Time Window - Manually Setting the Date and
Time............................................................................................................................................................... 158
Figure 53: Daylight Savings Time Fields ....................................................................................................... 159
Figure 54: Modify How the Access Point Discovers the Time Window - Configuring the NTP Client............ 160
Figure 55: Manage this Access Point’s Configuration Window...................................................................... 165
Figure 56: Manage Firmware Window........................................................................................................... 172

11
Table 1. Review Description of this Access Point .......................................................................................... 31
Table 2. Modify Wireless Settings Window .................................................................................................... 44
Table 3. Modify Radio Settings Window ......................................................................................................... 49
Table 4. IEEE 802.1x ...................................................................................................................................... 62
Table 5. Static WEP ....................................................................................................................................... 64
Table 6. WPA Enterprise ................................................................................................................................ 68
Table 7. WPA Personal .................................................................................................................................. 70
Table 8. Available Encryption Settings on WDS Bridges ............................................................................... 75
Table 9. Static WEP on WDS Links ................................................................................................................ 80
Table 10. WPA Personal on WDS Links ........................................................................................................ 82
Table 11. Shared and Non-shared Parameters on the Access Points in a Cluster ........................................ 94
Table 12. Manage Sessions Associated with the Cluster Window ............................................................... 107
Table 13. Current Channel Assignments ...................................................................................................... 110
Table 14. Channel Reassignment Parameters ............................................................................................. 111
Table 15. View Neighboring Access Points Window .................................................................................... 114
Table 16. Neighbor Details Window ............................................................................................................. 115
Table 17. View List of Currently Associated Client Stations Window ........................................................... 118
Table 18. Event Messages Table ................................................................................................................. 122
Table 19. Neighboring Access Point Settings Window ................................................................................. 126
Table 20. Status Table Information .............................................................................................................. 131
Table 21. Transmit Statistics Table .............................................................................................................. 132
Table 22. Receive Statistics Table ............................................................................................................... 133
Table 23. Modify QoS Queue Parameters Window ...................................................................................... 138
Table 24. SNMP ........................................................................................................................................... 145
Tables

List of Tables
12

13
Preface
This guide explains how to use the web browser windows in the
AT-TQ2450, AT-TQ3600, and AT-TQ4600 Wireless Access Points to
configure and manage the features of the units. This preface contains the
following sections:
“Safety Symbols Used in this Document” on page 14
“Contacting Allied Telesis” on page 15

Preface
14
Safety Symbols Used in this Document
This document uses the following conventions.
Note
Notes provide additional information.
Caution
Cautions inform you that performing or omitting a specific action
may result in equipment damage or loss of data.
Warning
Warnings inform you that performing or omitting a specific action
may result in bodily injury.
Warning
Laser warnings inform you that an eye or skin hazard exists due to
the presence of a Class 1 laser device.

AT-TQ Wireless Access Point Series User’s Guide
15
Contacting Allied Telesis
If you need assistance with this product, you may contact Allied Telesis
technical support by going to the Support & Services section of the Allied
Telesis web site at www.alliedtelesis.com/support. You can find links for
the following services on this page:
24/7 Online Support — Enter our interactive support center to
search for answers to your product questions in our knowledge
database, to check support tickets, to learn about RMAs, and to
contact Allied Telesis technical experts.
USA and EMEA phone support — Select the phone number that
best fits your location and customer type.
Hardware warranty information — Learn about Allied Telesis
warranties and register your product online.
Replacement Services — Submit a Return Merchandise
Authorization (RMA) request via our interactive support center.
Documentation — View the most recent installation and user
guides, software release notes, white papers, and data sheets for
your products.
Software Downloads — Download the latest software releases for
your managed products.
For sales or corporate information, go to www.alliedtelesis.com/
purchase.

Preface
16

17
Chapter 1
Overview
This chapter describes the wireless access points and explains how to
start a web browser management session. This chapter contains the
following sections:
“AT-TQ Series of Wireless Access Points” on page 18
“Features” on page 19
“Management Modes and Methods” on page 21
“Starting a Management Session on the Access Point” on page 22
“Starting the Initial Management Session on the Access Point” on
page 23
“Using the Management Menus and Windows” on page 26

Chapter 1: Overview
18
AT-TQ Series of Wireless Access Points
The AT-TQ Series of wireless access points consists of the AT-TQ2450,
AT-TQ3600, and AT-TQ4600 Access Points. Refer to Figure 1.
Figure 1. AT-TQ2450, AT-TQ3600, and AT-TQ4600 Access Points
AT-TQ2450 Access Point
AT-TQ3600 Access Point
AT-TQ4600 Access Point

AT-TQ Wireless Access Point Series User’s Guide
19
Features
The access points have the following common features:
Independent 2.4 and 5 GHz radios
Wireless Distribution System (WDS) bridges
Access point clustering
Rogue access point detection
Multiple SSIDs
One 10/100/1000Base-T Ethernet port with Auto-Negotiation and
auto MDI/MDIX
IEEE 802.3 (10Base-T), IEEE 802.3u (100Base-TX), and IEEE
802.3ab (1000Base-T) compliance on the Ethernet port.
MAC address filtering for wireless access security
Broadcast and multicast rate limiting
Virtual access points for multiple broadcast domains
DHCP client
RADIUS accounting with external RADIUS server
Network Time Protocol (NTP) client
Domain name server (DNS) client
IEEE 802.1x authentication
WPA-Personal and WPA-Enterprise with WPA, WPA2, TKIP, and
CCMP (AES) authentication and encryption
Static WEP encryption
HTTP and HTTPS web browser management
SNMPv1 and v2c management
Quality of Service
Event log
Syslog client
Table, wall, or ceiling installation
The differences between the access points are listed here:
The AT-TQ2450 and AT-TQ3600 Access Points are IEEE
802.11a/b/g/n compliant.
The AT-TQ4600 Access Point is IEEE 802.11a/b/g/n/ac compliant.
The AT-TQ2450 Access Point has external, adjustable antennas.
The AT-TQ3600 and AT-TQ4600 Access Points have internal
antennas.

Chapter 1: Overview
20
The AT-TQ2450 Access Point features IEEE 802.11n 2x2 MIMO
chains with antenna diversity.
The AT-TQ3600 Access Point features IEEE 802.11n 3x3 MIMO
chains.
The AT-TQ4600 Access Point features IEEE 802.11n/ac 3x3 3ss
MIMO chains.
Both radios in the AT-TQ2450 Access Point have a data rate of
300 Mbps.
Both radios in the AT-TQ3600 Access Point have a data rate of
450 Mbps.
The 2.4 and 5 GHz radios in the AT-TQ4600 Access Point have
data rates of 450 Mbps and 1300 Mbps, respectively.
The AT-TQ2450 and AT-TQ3600 Access Points are PoE devices.
The AT-TQ4600 Access Point is a PoE+ device.