Allied Telesis AT-TQ Series User manual

613-001867 Rev. A
AT-TQ Series
Enterprise-class Wireless Access Points
with IEEE802.11a/b/g/n Dual Radios
Management Software
User’s Guide

Copyright 2014 Allied Telesis, Inc.
All rights reserved.
This product includes software licensed under the BSD License. As such, the following language applies for those
portions of the software licensed under the BSD License:
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following
conditions are met:
* Redistributions of source code must retain the above copyright notice, this list of conditions and the following
disclaimer.
* Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following
disclaimer in the documentation and/or other materials provided with the distribution.
* Neither the name of Allied Telesis, Inc. nor the names of the respective companies above may be used to endorse or
promote products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY
EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT
SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Copyright (c) [dates as appropriate to package] by The Regents of the University of California - All rights reserved.
Copyright (c) 2000-2003 by Intel Corporation - All rights reserved. Copyright (c) 1997-2003, 2004 by Thomas E. Dickey
<[email protected]et> - All rights reserved. Copyright (c) 2001-2009 by Brandon Long (ClearSilver is now
licensed under the New BSD License.) Copyright (c) 1984-2000 by Carnegie Mellon University - All rights reserved.
Copyright (c) 2002,2003 by Matt Johnston - All rights reserved. Copyright (c) 1995 by Tatu Ylonen <yl[email protected]> - All
rights reserved. Copyright 1997-2003 by Simon Tatham. Portions copyright by Robert de Bath, Joris van Rantwijk,
Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, and CORE SDI S.A.
Copyright (c) 1989, 1991 by Free Software Foundation, Inc. (GNU General Public License, Version 2, June 1991).
Copyright (c) 2002-2005 by Jouni Malinen <[email protected]i> and contributors. Copyright (c) 1991, 1999 by Free
Software Foundation, Inc. (GNU Lesser General Public License, Version 2.1, February 1999). Copyright (c) 1998-2002
by Daniel Veillard - All rights reserved. Copyright (c) 1998-2004 by The OpenSSL Project - All rights reserved.
Copyright (c) 1995-1998 by Eric Young ([email protected]) - All rights reserved.
This product also includes software licensed under the GNU General Public License available from:
http://www.gnu.org/licenses/gpl2.html
Allied Telesis is committed to meeting the requirements of the open source licenses including the GNU General Public
License (GPL) and will make all required source code available.
If you would like a copy of the GPL source code contained in this product, please send us a request by registered mail
including a check for US$15 to cover production and shipping costs, and a CD with the GPL code will be mailed to you.
GPL Code Request
Allied Telesis Labs (Ltd)
PO Box 8011
Christchurch, New Zealand
No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc.
Allied Telesis™and the Allied Telesis logo are trademarks of Allied Telesis, Incorporated.
Ethernet™is a trademark of the Xerox Corporation.
Wi-Fi®, Wi-Fi Alliance®, WMM®, Wi-Fi Protected Access®(WPA), the Wi-Fi CERTIFIED logo, the Wi-Fi logo, the
Wi-Fi ZONE logo, and the Wi-Fi Protected Setup logo are registered trademarks of the Wi-Fi Alliance. Wi-Fi
CERTIFIED™, Wi-Fi Multimedia™, WPA2™and the Wi-Fi Alliance logo are trademarks of the Wi-Fi Alliance.
Microsoft is a registered trademark of Microsoft Corporation.

All other product names, company names, logos or other designations mentioned herein are trademarks or registered
trademarks of their respective owners.
Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document
without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied
Telesis, Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited
to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesis, Inc. has
been advised of, known, or should have known, the possibility of such damages.

5
Preface ............................................................................................................................................................11
Safety Symbols Used in this Document ...........................................................................................................12
Contacting Allied Telesis ..................................................................................................................................13
Chapter 1: Overview ......................................................................................................................................15
AT-TQ Series of Wireless Access Points .........................................................................................................16
Features ...........................................................................................................................................................17
Management Modes and Methods ...................................................................................................................19
Starting a Management Session on the Access Point......................................................................................20
Starting the Initial Management Session on the Access Point .........................................................................21
Starting the Initial Management Session with a Direct Connection............................................................22
Starting the Initial Management Session without a DHCP Server .............................................................22
Starting the Initial Management Session with a DHCP Server ..................................................................23
Using the Management Menus and Windows ..................................................................................................24
Web Browser Menus..................................................................................................................................24
Saving Your Changes ................................................................................................................................26
Logging Off.................................................................................................................................................26
Chapter 2: Basic Settings Menu ...................................................................................................................27
Displaying Basic Information ............................................................................................................................28
Changing the Manager’s Login Name and Password ......................................................................................30
Changing the System Name, Contact, and Location........................................................................................31
Chapter 3: Manage Menu ..............................................................................................................................33
Assigning a Static IP Address to the Access Point...........................................................................................34
Assigning a Dynamic IP Address from a DHCP Server to the Access Point....................................................36
Setting VLAN IDs..............................................................................................................................................37
Management VLAN ID ...............................................................................................................................37
VLAN ID for Untagged Traffic ....................................................................................................................37
Enabling or Disabling Broadcast Ping Replies .................................................................................................38
Setting the Country Setting...............................................................................................................................39
Configuring Basic Radio Settings .....................................................................................................................41
Configuring the Radio Settings.........................................................................................................................44
Configuring Virtual Access Points ....................................................................................................................56
No Security.................................................................................................................................................59
IEEE 802.1x Security .................................................................................................................................59
Static WEP.................................................................................................................................................61
WPA Enterprise..........................................................................................................................................64
WPA Personal............................................................................................................................................67
Managing Wireless Distribution System Bridges..............................................................................................69
Configurations of WDS Bridges .................................................................................................................69
Radio..........................................................................................................................................................71
Radio Mode................................................................................................................................................71
Radio Channel ...........................................................................................................................................71
VAP0..........................................................................................................................................................71
Encryption ..................................................................................................................................................72
Guidelines ..................................................................................................................................................72
Preparing the Access Point for the WDS Bridge........................................................................................73
Contents

Contents
6
Configuring the WDS Bridge ..................................................................................................................... 74
Static WEP ................................................................................................................................................ 76
WPA Personal ........................................................................................................................................... 77
Configuring the MAC Address Filter ................................................................................................................ 79
Generating Event Messages for Unknown Access Points............................................................................... 82
Enabling Event Messages for Unknown Access Points ............................................................................ 82
Disabling Event Messages for Unknown Access Points ........................................................................... 84
Configuring the Access Point for the Optional AT-UWC Program ................................................................... 85
Enabling the Controller Client.................................................................................................................... 85
Disabling the Controller Client ................................................................................................................... 88
Chapter 4: Cluster Menu .............................................................................................................................. 89
Overview .......................................................................................................................................................... 90
Planning a Cluster............................................................................................................................................ 97
Creating or Adding Access Points to a Cluster ................................................................................................ 98
Managing the Access Points of a Cluster ...................................................................................................... 101
Removing an Access Point from a Cluster .................................................................................................... 102
Viewing the Wireless Clients of a Cluster ...................................................................................................... 103
Using Automatic Channel Assignments ......................................................................................................... 105
Enabling Automatic Channel Assignments.............................................................................................. 105
Disabling Automatic Channel Assignments............................................................................................. 108
Viewing the Neighboring Access Points of the Cluster .................................................................................. 109
Chapter 5: Status Menu .............................................................................................................................. 113
Viewing the Associated Clients of an Access Point ....................................................................................... 114
Viewing Event Messages............................................................................................................................... 116
Viewing System Event Messages ........................................................................................................... 117
Configuring the Event Log ....................................................................................................................... 119
Configuring the Syslog Client .................................................................................................................. 120
Disabling the Syslog Client...................................................................................................................... 121
Viewing Neighboring Access Points .............................................................................................................. 122
Displaying the IP Addresses of AT-UWC Programs ...................................................................................... 125
Displaying Statistics ....................................................................................................................................... 126
Viewing Basic IP and Radio Information........................................................................................................ 130
Chapter 6: Services Menu .......................................................................................................................... 131
Configuring Quality of Service ....................................................................................................................... 132
Configuring SNMPv1 and v2c ........................................................................................................................ 139
Enabling or Disabling the LEDs ..................................................................................................................... 146
Configuring the HTTP Server......................................................................................................................... 147
Enabling the HTTP Server....................................................................................................................... 147
Disabling the HTTP Server...................................................................................................................... 148
Configuring the HTTPS Server ...................................................................................................................... 149
Enabling the HTTPS Server .................................................................................................................... 149
Disabling the HTTPS Server ................................................................................................................... 150
Configuring the Maximum Number of Active Management Sessions ............................................................ 151
Configuring the Management Session Timer................................................................................................. 152
Manually Setting the Date and Time.............................................................................................................. 153
Setting the Date and Time with the Network Time Protocol Client ................................................................ 155
Chapter 7: Maintenance Menu ................................................................................................................... 157
Restoring the Default Settings to the Access Point ....................................................................................... 158
Downloading the Configuration from the Access Point to Your Computer..................................................... 160
Restoring a Configuration to the Access Point .............................................................................................. 161
Rebooting the Access Point ........................................................................................................................... 162
Enabling or Disabling the Reset Button ......................................................................................................... 163
Switching the Primary and Secondary Management Software Images ......................................................... 164
Uploading New Versions of the Management Software to the Access Point................................................. 166

7
Figures
Figure 1: AT-TQ2450 and AT-TQ3600 Access Points .................................................................................... 16
Figure 2: Log On Window................................................................................................................................ 20
Figure 3: Horizontal Menus ............................................................................................................................. 24
Figure 4: Vertical Menus.................................................................................................................................. 25
Figure 5: Dropdown Menus ............................................................................................................................. 25
Figure 6: Provide Basic Settings Window........................................................................................................ 28
Figure 7: Modify Ethernet (Wired) Settings Window........................................................................................ 34
Figure 8: Modify Wireless Settings Window .................................................................................................... 39
Figure 9: Modify Radio Settings Window......................................................................................................... 45
Figure 10: Modify Virtual Access Point Settings Window ................................................................................ 58
Figure 11: 802.1x Authentication for VAPs...................................................................................................... 59
Figure 12: Static WEP Encryption for VAPs .................................................................................................... 61
Figure 13: WPA Enterprise for VAPs............................................................................................................... 64
Figure 14: WPA Personal for VAPs................................................................................................................. 67
Figure 15: WDS Bridge Used to Connect LAN Segments............................................................................... 69
Figure 16: WDS Bridge Used to Extend a Network......................................................................................... 69
Figure 17: Valid Configurations of WDS Bridges............................................................................................. 70
Figure 18: Invalid Loop Configuration of Access Points .................................................................................. 70
Figure 19: Invalid Loop Configuration of Access Points to a Wired Network Device ...................................... 71
Figure 20: Invalid Configuration of Four Wireless Access Points.................................................................... 71
Figure 21: Configure WDS Bridges to Other Access Points Window.............................................................. 74
Figure 22: Remote Address List ...................................................................................................................... 75
Figure 23: Static WEP on WDS Bridges.......................................................................................................... 76
Figure 24: WPA Personal on WDS Bridges .................................................................................................... 77
Figure 25: Configure MAC Filtering of Client Stations Window ....................................................................... 80
Figure 26: Event Message for Unknown Access Points.................................................................................. 82
Figure 27: Configure Pre-Configured Rogue AP Window ............................................................................... 83
Figure 28: Configure Managed Access Point Parameters Window................................................................. 85
Figure 29: Manage Access Points in the Cluster Window............................................................................... 98
Figure 30: Active Cluster in the Manage Access Points in the Cluster Window............................................ 100
Figure 31: Manage Sessions Associated with the Cluster Window............................................................... 103
Figure 32: Automatically Manage Channel Assignments Window ................................................................ 105
Figure 33: Automatically Manage Channel Assignments Window - Automatic Channel Assignment
Enabled ......................................................................................................................................................... 106
Figure 34: View Neighboring Access Points Window .................................................................................... 109
Figure 35: Neighbor Details........................................................................................................................... 110
Figure 36: View List of Currently Associated Client Stations......................................................................... 114
Figure 37: View Events Generated by this Access Point Window................................................................. 118
Figure 38: View Neighboring Access Points Window .................................................................................... 122
Figure 39: Displaying View List of Managing Switch IP Addresses and Base IP Port Obtained via DHCP .. 125
Figure 40: Status Table in the View Transmit and Receive Statistics for this Access Point Window............ 126
Figure 41: Transmit Statistics Table of the View Transmit and Receive Statistics for this Access Point
Window.......................................................................................................................................................... 127
Figure 42: Receive Statistics Table of the View Transmit and Receive Statistics for this Access Point
Window.......................................................................................................................................................... 128

List of Figures
8
Figure 43: View Settings for Network Interfaces Window .............................................................................. 130
Figure 44: Modify QoS Queue Parameters.................................................................................................... 133
Figure 45: SNMP Configuration Window ....................................................................................................... 140
Figure 46: Control LEDs Window................................................................................................................... 146
Figure 47: Configure Web Server Settings Window....................................................................................... 147
Figure 48: Disable HTTP Server Prompt ....................................................................................................... 148
Figure 49: Generate SSL Certificate Prompt ................................................................................................. 149
Figure 50: Disable HTTPS Server Prompt..................................................................................................... 150
Figure 51: Modify How the Access Point Discovers the Time Window - Manually Setting the Date and
Time ............................................................................................................................................................... 153
Figure 52: Daylight Savings Time Fields ....................................................................................................... 154
Figure 53: Modify How the Access Point Discovers the Time Window - Configuring the NTP Client............ 155
Figure 54: Manage this Access Point’s Configuration Window...................................................................... 159
Figure 55: Manage Firmware Window ........................................................................................................... 164

9
Table 1. Review Description of this Access Point .......................................................................................... 29
Table 2. Modify Wireless Settings Window .................................................................................................... 42
Table 3. Modify Radio Settings Window ......................................................................................................... 46
Table 4. IEEE 802.1x ...................................................................................................................................... 59
Table 5. Static WEP ....................................................................................................................................... 61
Table 6. WPA Enterprise ................................................................................................................................ 65
Table 7. WPA Personal .................................................................................................................................. 67
Table 8. Available Encryption Settings on WDS Bridges ............................................................................... 72
Table 9. Static WEP on WDS Links ................................................................................................................ 76
Table 10. WPA Personal on WDS Links ........................................................................................................ 78
Table 11. Shared and Non-shared Parameters on the Access Points in a Cluster ........................................ 90
Table 12. Manage Sessions Associated with the Cluster Window ............................................................... 103
Table 13. Current Channel Assignments ...................................................................................................... 106
Table 14. Channel Reassignment Parameters ............................................................................................. 107
Table 15. View Neighboring Access Points Window .................................................................................... 110
Table 16. Neighbor Details Window ............................................................................................................. 111
Table 17. View List of Currently Associated Client Stations Window ........................................................... 114
Table 18. Event Messages Table ................................................................................................................. 118
Table 19. Neighboring Access Point Settings Window ................................................................................. 122
Table 20. Status Table Information .............................................................................................................. 127
Table 21. Transmit Statistics Table .............................................................................................................. 128
Table 22. Receive Statistics Table ............................................................................................................... 129
Table 23. Modify QoS Queue Parameters Window ...................................................................................... 133
Table 24. SNMP ........................................................................................................................................... 141
Tables

List of Tables
10

11
Preface
This guide explains how to configure the AT-TQ2450 and AT-TQ3600
Wireless Access Points with the web browser management windows. This
preface contains the following sections:
“Safety Symbols Used in this Document” on page 12
“Contacting Allied Telesis” on page 13

Preface
12
Safety Symbols Used in this Document
This document uses the following conventions.
Note
Notes provide additional information.
Caution
Cautions inform you that performing or omitting a specific action
may result in equipment damage or loss of data.
Warning
Warnings inform you that performing or omitting a specific action
may result in bodily injury.
Warning
Laser warnings inform you that an eye or skin hazard exists due to
the presence of a Class 1 laser device.

AT-TQ Wireless Access Point Series User’s Guide
13
Contacting Allied Telesis
If you need assistance with this product, you may contact Allied Telesis
technical support by going to the Support & Services section of the Allied
Telesis web site at www.alliedtelesis.com/support. You can find links for
the following services on this page:
24/7 Online Support — Enter our interactive support center to
search for answers to your product questions in our knowledge
database, to check support tickets, to learn about RMAs, and to
contact Allied Telesis technical experts.
USA and EMEA phone support — Select the phone number that
best fits your location and customer type.
Hardware warranty information — Learn about Allied Telesis
warranties and register your product online.
Replacement Services — Submit a Return Merchandise
Authorization (RMA) request via our interactive support center.
Documentation — View the most recent installation and user
guides, software release notes, white papers, and data sheets for
your products.
Software Downloads — Download the latest software releases for
your managed products.
For sales or corporate information, go to www.alliedtelesis.com/
purchase.

Preface
14

15
Chapter 1
Overview
This chapter describes how to start the initial management session on the
access point. This chapter contains the following sections:
“AT-TQ Series of Wireless Access Points” on page 16
“Features” on page 17
“Management Modes and Methods” on page 19
“Starting a Management Session on the Access Point” on page 20
“Starting the Initial Management Session on the Access Point” on
page 21
“Using the Management Menus and Windows” on page 24

Chapter 1: Overview
16
AT-TQ Series of Wireless Access Points
The AT-TQ Series of wireless access points consists of the AT-TQ2450
and AT-TQ3600 Access Points. Refer to Figure 1.
Figure 1. AT-TQ2450 and AT-TQ3600 Access Points
AT-TQ2450 Access Point
AT-TQ3600 Access Point

AT-TQ Wireless Access Point Series User’s Guide
17
Features
The access points share the following features:
Independent 2.4 and 5 GHz radios
IEEE 802.11a/b/g
Wireless Distribution System (WDS) bridges
Access point clustering
Rogue access point detection
Multiple SSIDs
One 10/100/1000Base-T Ethernet port with Auto-Negotiation, auto
MDI/MDIX, and IEEE 802.3af Power over Ethernet (PoE)
MAC address filtering for wireless access security
Broadcast and multicast rate limiting
Virtual access points for multiple broadcast domains
DHCP client
RADIUS accounting with external RADIUS server
Network Time Protocol (NTP) client
Domain name server (DNS) client
IEEE 802.1x authentication
WPA-Personal and WPA-Enterprise with WPA, WPA2, TKIP, and
CCMP (AES) authentication and encryption
Static WEP encryption
HTTP and HTTPS web browser management
SNMPv1 and v2c management
Quality of Service
Event log
Syslog client
Table, wall, or ceiling installation
Differences between the access points are listed here:
The AT-TQ2450 Access Point has external, adjustable antennas.
The AT-TQ3600 Access Point has internal antennas.
The AT-TQ2450 Access Point features IEEE 802.11n 2x2 MIMO
chains with antenna diversity.
The AT-TQ3600 Access Point features IEEE 802.11n 3x3 MIMO
chains.

Chapter 1: Overview
18
Both radios in the AT-TQ2450 Access Point have a data rate of
300 Mbps.
Both radios in the AT-TQ3600 Access Point have a data rate of
450 Mbps.

AT-TQ Wireless Access Point Series User’s Guide
19
Management Modes and Methods
The access point has two management modes:
Stand-alone mode: Access points in the stand-alone mode have to
be managed individually. To configure a unit in this mode, you
have to know its IP address or domain name, and the username
and password of the manager account. This is the default setting
for the access point.
Cluster mode: The cluster management mode is intended for two
or more access points that have similar configuration settings.
When you change the parameter settings on an access point in a
cluster, your changes are automatically communicated to the other
access points. This reduces the need for having to configure the
units individually. For cluster instructions, refer to Chapter 4,
“Cluster Menu” on page 89.
Here are the methods for managing the access point:
Web browser: The management software on the access point has
management windows for you to use with the web browser on your
management workstations. They make it easy for you to configure
all the parameter settings and features. The access point supports
both non-secure HTTP and secure HTTPS management sessions.
The default is HTTP. For instructions on how to enable or disable
the HTTP and HTTPS servers on the access point, refer to
“Configuring the HTTP Server” on page 147 and “Configuring the
HTTPS Server” on page 149
AT-UWC Unified Wireless Controller program: This optional
program allows you to manage the access points from a central
point. For instructions on how to configure the unit for the wireless
controller program, refer to “Configuring the Access Point for the
Optional AT-UWC Program” on page 85.
SNMPv1 and v2c: You may also use SNMP to manage some of
the parameter settings of the device. The MIB is available from the
Allied Telesis web site. It should be noted that you can configure
only a limited number of parameters on the access point with
SNMP. To manage all the parameters, you must use a web
browser or the optional AT-UWC program. For instructions on how
to configure the unit for SNMP, refer to “Configuring SNMPv1 and
v2c” on page 139. The default setting for SNMP is disabled. The
product does not support SNMPv3.

Chapter 1: Overview
20
Starting a Management Session on the Access Point
This section explains how to start a management session on the access
point from your management workstation. The procedure assumes that
the access point has already been assigned an IP address. The address
can be a static address that was manually assigned to the unit or it can be
a dynamic address from a DHCP server.
Note
If the access point has not been assigned an IP address and is
using its default address 192.168.1.230, refer to “Starting the Initial
Management Session on the Access Point” on page 21 for
instructions on how to start a management session.
To start a management session on the access point, perform the following
procedure:
1. Open the web browser on your management workstation.
2. Enter the IP address of the access point in the URL field of the web
browser.
You should now see the logon window, shown in Figure 2.
Figure 2. Log On Window
3. Enter the username and password for the unit. The default values are
“manager” for the username and “friend” for the password. The
username and password are case-sensitive.
4. Click the Logon button.