altai certification training configuration

97
Altai Super WiFi 1 Not for Distribution – Altai Confidential Not for Distribution – Altai Confidential Altai Super WiFi Altai Certification Training Configuration Professional Services Altai Technologies Limited

Upload: roden

Post on 23-Feb-2016

226 views

Category:

Documents


53 download

DESCRIPTION

Altai Certification Training Configuration. Professional Services Altai Technologies Limited. Module Outline. AP Default Settings A8 Basic Configurations A8 Advanced Configurations 5GHz Bridge Mode Configuration A8-A2 Bridge Mode Configuration A8-C1 CPE Mode Configuration - PowerPoint PPT Presentation

TRANSCRIPT

Page 1: Altai Certification Training Configuration

Altai Super WiFi

1

Not for Distribution – Altai ConfidentialNot for Distribution – Altai Confidential

Altai Super WiFi

Altai Certification Training

ConfigurationProfessional Services

Altai Technologies Limited

Page 2: Altai Certification Training Configuration

Altai Super WiFi

2

Not for Distribution – Altai ConfidentialNot for Distribution – Altai Confidential

Altai Super WiFi

Module Outline

• AP Default Settings• A8 Basic Configurations• A8 Advanced Configurations• 5GHz Bridge Mode Configuration• A8-A2 Bridge Mode Configuration• A8-C1 CPE Mode Configuration• A8-Ein/A8n Configurations

Page 3: Altai Certification Training Configuration

Altai Super WiFi

3

Not for Distribution – Altai ConfidentialNot for Distribution – Altai Confidential

Altai Super WiFiAP Default Settings

• A8/A8-Ei/A8-i default IP address

• 192.168.1.222• 255.255.255.0• FW 2.2.3.101• Username: altai• Password: wag

• A2/A2e default IP address• 192.168.1.20• 255.255.255.0• FW 1.0.0.26• Username: altai• Password: wag

• A8-Ein/A8n default IP address• 192.168.1.222• 255.255.255.0• FW 1.2.0.621• Username: root• Password: superwifi123

• C1 management IP address• 192.168.99.99• 255.255.255.0• FW 1.0.0.19• Username: altai• Password: wag

Page 4: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

4

A8 Basic Configuration

Page 5: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

555

Configuration Case• A8 Basic configurations:

• Regulatory domain: RoW• Disable DHCP Client (Static IP Address)

• IP Address: 10.6.127.185• Subnet mask: 255.255.255.0• Default gateway: 10.6.127.1

• Wireless mode: 802.11b/g mode• Radio frequency: To be determined by Channel Scan result• Transmitting power: 25dBm• VAP 0 (Management and normal service VAP)

• SSID: WiFi_mgt• Suppressed SSID: Enabled• Maximum Clients: 10• Wireless security: WPA-PSK + AES

• VAP 1 (For service only VAP)• SSID: WiFi_Service• Maximum Clients: 256• Wireless security: WPA-PSK + AES

Page 6: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

666

Tools>Channel Scan

Click to start channel scan

All the clients traffic would be interrupted during the channel scan test.

Page 7: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

777

Click to show Noise Floor

Channel Scan Success

Tools>Channel Scan

Page 8: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

888

Key Considerations:1. Num of SSID2. Neighbor SSID3. Usage4. Noise level

Tools>Channel Scan

Page 9: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

999

FCC (US Standard) – 2.4GHz Max EIRP 36dBmETSI (European Standard)– 2.4GHz Max EIRP 20dBmRoW (Rest of the world)– 2.4GHz Max EIRP 60dBm

Select A8

Click Save to batch the changes

Configuration>System

Page 10: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

101010

Recommend “Static IP”

Static IP, subnet mask and default gateway configuration(Default IP address: 192.168.1.222)

Click Save to batch the changes

Configuration>Network

Page 11: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

1111

Configuration>2.4G Wireless AP>General

Select channel:ETSI/RoW Ch1-13FCC Ch1-11

Wireless mode (802.11b Max 11Mbps, 802.11b/g Max 54Mbps, 802.11g Max 54Mbps)

Page 12: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

1212

Configuration>2.4G Wireless AP>Sectors

Maximum Tx Power 25dBmAntenna Gain - Cable Loss + Tx Power ≤ Max EIRP

Page 13: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

1313

Configuration>2.4G Wireless AP>VAP Basic

Set SSIDA8 will not broadcast SSID

Default value: 256

Enabled allows traffic to pass between stations in a VAP. For mgt VAP, recommended enable. For normal service VAP, disable.

Click Save to batch the changesRemark:VAP 0 usually acts as management VAP so it only allows small number of wireless clients and hidden its SSID. VAP 1 acts as normal service VAP so it sets maximum clients.

• Normal Service: Allow to access Internet• Management: Allow to access the A8 web interface. Only VAP 0 has this configuration.

Enable VAP

Page 14: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

14

Inter/Intra-VAP Traffic Control

The feature: Traffic among clients of the same SSID/VAP can be blocked Traffic among clients of different SSID/VAP can be blocked

The user benefit: Improved network

security Better network traffic

control

SSID 1

SSID 1 SSID 2

SSID 2

Inter-VAP traffic blocked

Intra-VAP traffic blocked

A8

Page 15: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

1515

Configuration>2.4G Wireless AP>VAP Basic

Click Save to batch the changesRemark:VAP 0 usually acts as management VAP so it only allows small number of wireless clients and hidden its SSID. VAP 1 acts as normal service VAP so it sets maximum clients.

Default: AccessCan change to “Trunk”

Page 16: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

1616

Configuration>2.4G Wireless AP>VAP Security

Authentication Open Shared Key WPA WPA-PSK WPA2 WPA2-PSK

Cipher Disable WEP WEP AES/TKIP AES

Key 4 Keys RADIUS PassPhrase RADIUS PassPhrase

Page 17: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

17

Highly Secure

The user benefit: Latest encryption and

authentication support Radio channel scanning and

auto alarm for rogue AP

The Altai technology: SSID suppression, inter/intra-VAP traffic blocking Rogue AP detection WPA, WPA2-PSK, 802.1x (PEAP, TLS, TTLS) authentication, MAC address

filtering WEP, TKIP and AES encryption Backup RADIUS server support

Page 18: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

1818

Reboot AP

Click Reboot AP to apply all changes

Click OK

Wait for 30s to reload the web page

Page 19: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

19

A8 Advanced Configuration

Page 20: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

202020

Configuration Case

• A8 configurations:• Similar to basic configuration, except• Network Operation Mode: Gateway• Local IP Address: 192.168.125.1/24• NAT Mode: Enabled• 2.4GHz DHCP Snooping Trusted Port: Disabled• Bandwidth Control:

Airtime: DL 30%, UL 30%• Multicast Data Rate Control• QoS and DiffServ Tag: Enabled• Congestion Avoidance: FW-RED• Access Link Safe Mode: Enabled

• Ping Host: 10.6.127.1• Ping interval: 30s

Page 21: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

212121

Configuration Case• VAP 0 (Management and normal service

VAP)• QoS Profile: Very High

• VAP 1 (For normal WiFi service only)• QoS Profile: ToS/802.1Q

• VAP 2 (For surveillance camera, authenticated by RADIUS)• SSID: WiFi_camera• Maximum Clients: 15• QoS Profile: High• Wireless security: WPA + AES

• Primary RADIUS Server: 10.6.127.120• RADIUS Port: 1812• RADIUS secret: test

Page 22: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

2222

Configuration > Network>General

Enable Gateway ModeConfigure LAN port IP, subnet mask

Recommended: FWRED

Configuration > Network>NAT

Enable NAT Mode

Click Save to batch the changes

Page 23: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

23

Congestion Avoidance

The feature: A8 can avoid congestion by dropping selected frames in the Tx queue

when it is full based on one of the following mechanisms: 1) Tail Drop2) Random Early Drop (RED)3) Fair Weighted Random Early Drop (FWRED) (Altai patent pending)

The user benefit: Avoid congestion due

to a few problem clients

Higher average throughput for the majority

A8Tx queue is FULL

Tail drop – all last incoming packets will be dropped

RED – most frequently occurred client packets will be dropped

FWRED – highest airtime usage client packets will be dropped

Page 24: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

2424

Configuration > 2.4G Wireless AP>General

Click Save to batch the changes

• 2.4GHz (unselected by default)

Page 25: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

2525

Configuration > 2.4G Wireless AP>General

Click Save to batch the changes

• Ethernet (Trusted by default)• 5GHz (Optional)• 2.4GHz (Optional)

Page 26: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

2626

Client4

Client3 (DHCP Server)

Client2 (DHCP Server)

DHCP Snooping Trusted Port

A8-1 A8-2

Client1

5G

2.4G 2.4G2.4G

2.4G

DHCP Server

Suppose A8 is in switch mode, all clients should get IP address from ethernet DHCP server, to avoid getting from client’s DHCP server, need to disable two A8s’ 2.4GHz trusted port and A8-1’s 5GHz trusted port.

Ethernet

xx xxx

x means untrusted interfaceBy default, Ethernet is trusted port

Page 27: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

27

Bandwidth Control on Airtime/Throughput

The operation: 2 modes of control - Throughput (in kbps) or Airtime (in % of

occupancy) Bandwidth limit can be set per VPA/client/uplink/downlink for both

modes Airtime control can prevent the low data rate (11b) clients from

occupying too much airtime (throughput mode cannot solve this problem)

Airtime controlled to 5% per station

Throughput controlled to 250 Kbps per station

Page 28: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

2828

Configuration > 2.4G Wireless AP>Bandwidth Control

Enabled Throughput

VAP: Total bandwidth for one SSIDStation: Total bandwidth for each wireless client

Set value to specify the maximum bandwidth

Page 29: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

2929

Configuration > 2.4G Wireless AP>Bandwidth Control

Enabled Airtime

Set airtime value, default setting is 5%. Used to limit the use time of low data rate user.

Page 30: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

30

Bandwidth Control Example

Using the airtime bandwidth control feature with VAP set to 15% and Station set to 5%, the congestion problem was totally resolved. CPE client ping time improved from 3000 ms to 50 ms

There are many low speed free WiFi users dragging down the performance of premium WiFi users

BEFORE

AFTER

3000 ms response time

50 ms response time

Page 31: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

3131

Configuration > 2.4G Wireless AP>General

Enabled Multicast TrafficChoose Multicast Data Rate.Enabled IGMP Snooping

Recommended low multicast data rate and IGMP snooping enabled

Click Save to batch the changes

Protection Mode (Auto)When 11b only client exists, protection mode is automatically enabled to use protection rate for either CTS or RTS-CTS packet.

Page 32: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

32

Multicast Traffic Filter

The feature: A8 can be set to drop all multicast traffic A8 can be set to limit multicast traffic to certain data rate

The user benefit: Limit unnecessary

multicast traffic Improve bandwidth

utilization

SourceMulticast packets at high data rate

Multicast packets can be limited to lower data rate

Page 33: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

33

IGMP Snooping

The feature: Multicast traffic from a client in one SSID will only broadcast to the

clients within that multicast group of the same SSID

The user benefit: Reduce multicast

storm and unnecessary traffic

Improve bandwidth utilization

SSID 1 SSID 3

SSID 2

Source

Multicast packets

SSID 1 SSID 3

SSID 2

Source

With IGMP snooping, multicast packets will only be transmitted to the registered clients under the same SSID

Without IGMP snooping, multicast packets will be transmitted to all clients across all SSIDs

A8

IGMP: Internet Group Management Protocol

Page 34: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

3434

Configuration > Network>Backhaul Link Integrity

Enable access link safe modeA8 pings to 10.6.127.1 for every other 30s.If ping request timeout for 3 times, it reboots and enters safe mode with SSID: “SafeMode<MAC address>”.

Click Save to batch the changes

Page 35: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

35

Highly Resilient

The user benefit: Complete backhaul

protection Mission critical proof Improve network stability Saves downtime cost

The Altai technology: Link Integrity – check link status from client up to the application

servers Backhaul Link Self Healing – automatic backhaul failover and recovery Access redundancy – clients are at least covered by 2 or more A8 Access Link Safe Mode –

automatic reboot with new SSID forcing client to release

Multiple coverage by A8 A8

A2

Resilient Backhaul Architecture

Backhaul link self healing

Page 36: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

3636

Configuration > Network>QoS

Enabling QoS adds traffic priority tag in the packets.DiffServ Tagging is effective after enabling QoS. ToS field of IP packets will be changed based on QoS policy configuration.

QoS Profile:Very High, High, Normal, Low, ToS/802.1Q, IPToS/802.1Q changes the tag basing on the packet typeIP changes the tag basing on the port range and protocol

Click Save to batch the changes

Enabled QoS and DiffServ

Page 37: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

3737

Configuration > 2.4G Wireless AP>VAP Basic

Enable VAP2

Set SSID

Set 15 clients

High QoS

Click Save to batch the changes

Page 38: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

3838

Configuration > 2.4G Wireless AP>VAP Security

Select WPAClick UpdateSelect AES

Enter RADIUS Server information

Click Save to batch the changes

Page 39: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

39

5GHz Bridge Configuration

Page 40: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

4040

Bridge Combinations

• A8-A2 802.11a Mode Maximum Data Rate: 54 Mbps• A2-A2 802.11na HT40 ext ch +1/-1 Maximum Data Rate: 300 Mbps• A8-A8 802.11a Turbo + Bursting Mode + Fast Mode Maximum Data Rate: 108 Mbps

Page 41: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

41

A8-A2 5GHz Bridge Configuration

Page 42: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

424242

Sample Solution Layout

A8-A2 Bridge

Page 43: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

434343

5GHz Bridge

A8 for large outdoor coverage

A2: 450 m LOS

Up to 1km LOS

A2 for coverage & capacity enhancement

Access

• Bridge: a backhaul link at 5GHz signal (802.11a)• Example Configurations:

• A2 setups 5GHz bridge with A8 5GHz MAC address• Enable 802.11a• Channel 56• Enable AES (Recommended bridge security)

• A8 setups 5GHz bridge with A2 5GHz MAC address• Enable 802.11a• Channel 56• Enable AES

• All configurations on both sides must be the same, except MAC address

2km

Page 44: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

44

Rogue AP Detection

Page 45: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

45

Rogue AP Detection

The feature: Neighboring APs’ information is obtained by the channel scan function The scanned neighboring AP list will be validated against the defined

legitimate AP list (BSSID with MAC address info, SSID) Rogue AP is declared if the validation with the legitimate AP list fails

The user benefit: Reduce security

threats to the network

Auto alert & reporting with the use of AWMS

Useful tool for deployment

Rogue AP

Check against legitimate AP list in A8Legitimat

e AP list

A8 is scheduled to perform channel scan

Reporting through AWMS or remote access

Page 46: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

464646

A8: Status > Overview

A8 5GHz MAC address

Remark: The backside of AP unit also has 5GHz MAC address

Page 47: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

4747

A2: Configuration > 5G Radio

1. Select 802.11a mode

2. Click Update

3. Select Frequency

4. Type in Bridge Distance

5. A8 5GHz radio MAC address

6. Select AES

7. Type in Key

8. Click Update

Page 48: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

48

A8: Configuration>5G Wireless Bridge

1. Select 802.11a mode

2. Click Save

3. Select Frequency

4. Type in Bridge Distance

Click Save to batch the changes

Page 49: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

49

A8: Configuration>5G Wireless Bridge>Remote Bridge

5. Type in A2 5GHz radio MAC address and click Add to List

A8: Configuration>5G Wireless Bridge>Security

6. Select AES

7. Type in Key

Click Save to batch the changes

Page 50: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

5050

A8: Status > 5G Wireless Bridge

StateUp: associatedInactive: disconnected

Page 51: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

5151

A8: Status > 5G Wireless Bridge

Maximum Data Rate11a mode: 54Mbps

Page 52: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

52

A2-A2 5GHz Bridge Configuration

Page 53: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

535353

5GHz Bridge

A2 for small area coverage & capacity enhancement

A2: 450 m LOS

A2: 450m LOS

Access

• Bridge: a backhaul link at 5GHz signal (802.11a)• Example Configurations:

• A2 setups 5GHz bridge with A2 5GHz MAC address• Enable 802.11na HT40ext ch+1• Channel 36• Enable AES (Recommended bridge security)

• A2 setups 5GHz bridge with A2 5GHz MAC address• Enable 802.11na HT40ext ch+1• Channel 36• Enable AES

• All configurations on both sides must be the same, except MAC address

2km

Page 54: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

5454

Wireless modes: • 802.11a - Max 54Mbps • 802.11na HT20 - Max 130Mbps• 802.11na HT40ext ch+1 - Max 300Mbps• 802.11na HT40ext ch-1 - Max 300Mbps

A2: Configuration > 5G Radio

2. Click Update

3. Select Frequency

4. Type in Bridge Distance

5. A2 5GHz radio MAC address

6. Select AES

7. Type in Key

8. Click Update

1. Select 11na HT40ext ch + 1

Different channel sets

Page 55: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

55

A8-A8 5GHz Bridge Configuration

Page 56: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

5656

Up to 1km LOS

A8 for large outdoor coverage

Access

56

5GHz Bridge

• Bridge: a backhaul link at 5GHz signal (802.11a Turbo Mode)• Example Configurations:

• A8 setups 5GHz bridge with A8 5GHz MAC address• Enable 802.11a Turbo Mode +Bursting Mode + Fast Mode• Channel 56• Enable AES (Recommended bridge security)

• A8 setups 5GHz bridge with A2 5GHz MAC address• Enable 802.11a Turbo Mode +Bursting Mode + Fast Mode• Channel 56• Enable AES

• All configurations on both sides must be the same, except MAC address

2km

Up to 1km LOS

Page 57: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

5757

A8: Configuration>5G Wireless Bridge>General

1. Select Turbo mode

2. Click Save

3. Select Frequency

4. Type in Bridge Distance

5. Enable Bursting and Fast Frame

Click Save to batch the changes

Page 58: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

5858

A8: Configuration>5G Wireless Bridge>Remote Bridge

5. Type in A8 5GHz radio MAC address and click Add to List

A8: Configuration>5G Wireless Bridge>Security

6. Select AES

7. Type in Key

Click Save to batch the changes

Page 59: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

59

C1 CPE Configuration

Page 60: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

6060

• A8 Configurations:• VAP1

• SSID: A8_CPE• Maximum Clients: 256• Wireless security: Open

• C1 Configurations:• CPE Mode: also named station mode• VAP 0

• Connect to A8_CPE• Wireless security: Open

Configuration Case

Page 61: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

6161

A8 Configurations

Set SSID

Set VAP Security

Page 62: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

6262

C1 ConfigurationsConfiguration>2.4GHz Radio

Enable Station Mode

Click Edit to modify VAP config

Page 63: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

6363

C1 ConfigurationsConfiguration>2.4GHz Radio>VAP 0

Enable VAP0

Click Scan to scan available SSID

Click Edit to set security config, the same with A8

Only connect to a particular AP with the specific MAC. Usefull when SSIDs are the same.

Page 64: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

6464

Choose one SSID

C1 Configurations

RSSI level Channel

Page 65: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

6565

A8:Status>2.4G Wireless AP>Association List

C1 is connected to A8

Page 66: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

66

A8-Ein/A8n Configurations

Page 67: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

67

A8-Ein:Configuration>Network>General

Recommend “Static IP”

Static IP, subnet mask and default gateway configuration(Default IP address: 192.168.1.222)

Click Submit to batch the changes

Page 68: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

68

A8-Ein:Tools>Channel Scan

Click to start channel scan

All the clients traffic would be interrupted during the channel scan test.

Page 69: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

69

A8-Ein:Tools>Channel Scan

Noise Floor

Channel Scan Success

Page 70: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

70

Configuration>Wireless>Radio0>General

• Wireless mode (802.11b, 802.11b/g, 802.11g, 802.11n, 802.11ng)• Channel Selection

Page 71: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

71

Configuration>Wireless>Radio0>Superwifi

Sector State

Range OptimizationAuto, 0~800m, 200~1000m, 400~1200m

Page 72: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

72

Configuration>Wireless>Radio0>WLAN

Edit SSID

Page 73: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

73

Configuration>Wireless>Radio0>WLAN>WLAN General

Will not broadcast SSID

Set SSID

Enabled allows traffic to pass between stations in a VAP. For mgt VAP, recommended enable. For normal service VAP, disable.

Default value: 512

Access Traffic Right: Full Access or Management Only/Disable

Page 74: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

74

Configuration>Wireless>Radio0>WLAN>WLAN Security

Authentication Open Shared Key WPA WPA-PSK WPA2 WPA2-PSK WAPI WAPI-PSK

Cipher Disable WEP WEP AES/TKIP AES SMS4

Key 4 Keys RADIUS Passphrase RADIUS Passphrase AS Passphrase

Page 75: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

75

Configuration>Wireless>Radio0>WLAN>QoS

Enable DSCP to WMM Mapping

Different Value is different priority level

Page 76: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

76

Configuration>Wireless>Radio0>WLAN>Bandwidth Control

Bandwidth Control for Total WLAN

Bandwidth Control for Each Station

Page 77: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

77

Save and Apply

Click Submit to apply all changes

Click Save & Apply or Unsaved

Page 78: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

78

A8-Ein/A8n & A8-Ein/A8n 5GHz Bridge Configuration

Page 79: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

79

Configuration>Wireless>Radio1>General

Enable Radio

Radio Mode as AP

Wireless Mode and Channel

Disable Inter-WLAN Forwarding

Page 80: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

80

Configuration>Wireless>Radio1>WLAN

Edit WLAN

Page 81: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

81

WLAN General Configuration

Enable WLAN

Enable VLAN Pass Through

SSID Name for the Bridge

Hide SSID

Page 82: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

82

WLAN Security Configuration

Authentication Mode as WPA2-PSK

Passphrase

Page 83: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

83

Configuration>Wireless>Radio1>General (Remote)

Enable Radio

Radio Mode as Station

Transmit Power

Page 84: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

84

Configuration>Wireless>Radio1>WLAN (Remote)

Edit

Page 85: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

85

Configuration>Wireless>Radio1>WLAN>WLAN General (Remote)

SSID and Target BSSID

Page 86: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

86

Configuration>Wireless>Radio1>WLAN>WLAN Security (Remote)

Authentication Mode and Pass Phrase

Page 87: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

87

Connection status

Connection StatusSSID Name

Status>Interface>Radio1>Association List

Page 88: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

88

A8-Ein/A8n & A2 5GHz Bridge Configuration

Page 89: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

89

When the A8-Ein and A2n make the Bridge, the A2n 5Ghz wireless should be as AP mode, and the A8-Ein 5Ghz wireless should be as Station mode, then it will pass through the VLAN.

Notice

A2n A8-Ein

AP Mode

Station Mode

5Ghz Wireless Bridge

Page 90: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

90

Configuration>5G Radio

Radio Operational as AP mode

Wireless Mode

Channel Selection

Edit VAP

Page 91: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

91

VAP Configuration

State as Up

SSID of VAP

Hide SSID

Disable Intra-VAP Forwarding

Enable VLAN Trunk Port

Edit Security Configuration

Page 92: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

92

Security Configuration

Authentication Mode as WPA2-PSK

Passphrase

Page 93: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

93

Configuration>Wireless>Radio>WLAN (Remote)

Edit WLAN

Page 94: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

94

5GHz Radio Configuration (Remote)

Enable WLAN

The SSID is 5GHz radio SSID from the master APThe BSSID is MAC address of the 5GHz radio from the master AP

Page 95: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

95

WLAN Security Configuration(Remote)

Authentication mode as WAP2-PSK,Passphrase should match with the master AP

Page 96: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

96

Connection status

RSSI Information

Page 97: Altai Certification Training Configuration

Altai Super WiFi

Not for Distribution – Altai Confidential

Altai Super WiFi

97

Thank You