AWC Plug-in User Guide 3.1.0

Configure CB Profile

AWC Plug-in > Operation Reference > Channel Blanket > Configure CB Profile

Create CB Profile
Edit CB Profile
Delete CB Profile

This section describes how to create, edit and delete a CB Profile.

Create CB Profile

  1. Select "Wireless Configuration" > "CB Profile" from the AWC Plug-in menu.
    The CB Profile list will appear.


  2. Click "Create" at the top right of the Content section.
    The "Create CB Profile" screen will appear.



    Table 1: CB Profile
    Item Name Description
    Profile Configuration

    CB Profile Name Enter a name for the CB Profile. Max 100 characters (mandatory).
    Management Group
    		 Select a Management Group that you want apply this CB Profile to. You cannot uncheck "Default Wireless Group" (mandatory).
    • Search Wireless Management Group: Groups in the list can be filtered by entering a partial name in the search box.
      The Search field lets you enter a partial string to match. The screen displays entries with that string in their name.
      To remove the filter, delete the string from the Search field and press Enter.
      Note
      The search is case-sensitive.
    VAP (Multiple SSID) Configuration

    CB VAP List
    		 Shows a list of configured CB VAPs.
    This includes the status, radio band, VAP number, SSID and security setting of the CB VAP.
    + Add VAP
    		 Creates a new CB VAP.

    A CB VAP name is assigned a number sequentially from 1. Note that the number in the CB VAP Name has nothing to do with the "VAP Number" (described later) for the CB VAP. You can create two CB VAPs for each radio band (Radio 1 - 2.4GHz and Radio 2 - 5GHz W52), therefore a total of 4 CB VAPs can be created.
    Note
    With this version, you can create 5 or more CB VAPs, but settings exceeding the above limit are not supported.
    Note
    It is recommended to use 5 or less VAPs per radio band in total, including both multi-channel and blanket VAPs.
    Radio
    		 Select a radio band to use for this CB VAP, from Radio 1 (2.4GHz) and Radio 2 (5GHz W52). (mandatory).
    Note
    "Radio 2 - 5GHz W53" and "Radio 3 - W56" cannot be used for CB VAPs.
    VAP
    		 Specify a CB VAP Number in the range of 1 to 8 (mandatory).
    If you specify the same number for a CB Profile as an existing AP Profile, the CB VAP is used for the number (the AP Profile's VAP with the number is not used because it is overriden by the CB VAP with the same number).
    Note
    If you do not use multi-channel networks, create a dummy multi-channel VAP 1 in an AP Profile, then create a CB VAP with the "VAP number" of 1 to override the dummy multi-channel VAP. We recommend you configure security on the dummy VAP too.
    Channel
    		 Select a channel to use for this CB VAP (mandatory).

    • Radio 1: 1ch to 13ch
    • Radio 2 (W52) : 36ch, 40ch, 44ch, 48ch
    Note
    Select a channel according to the bandwidth used for the corresponding band set in the AP Profile.
    For example, if the bandwidth used for Radio 2 is 40MHz, when creating CB VAP for Radio 2, select the channel from either 36ch or 44ch. 40ch and 48ch are not supported.
    Channels that can be selected can be confirmed by "Auto Channel Selection" in the AP Profile.
    VAP Status
    		 Enable or disable the CB VAP.

    • If you select "Enable", the CB VAP is enabled on the APs that are applied to the CB Profile.
    • If you select "Disable", the CB VAP is not used.

    The default is "Enable".
    VLAN ID
    		 Specify a VLAN ID used for communication between the CB VAP and associated clients (mandatory).
    Note
    Specify a VLAN ID that is different from the AP's management VLAN. When the AP is detected as a guest node, a parent AMF node is configured to collect the guest node information automatically ("dynamic discovery"), and wireless clients get their IP addresses via DHCP.
    SSID
    		 Specify an SSID (network name) to use on the CB VAP.

    The SSID is mapped to the VLAN ID. Enter a name with 1 to 32 alphanumeric characters.
    The default is "Default-X" (where X is an automatically assigned CB VAP number). (mandatory)
    Broadcast SSID
    		 Specify whether to broadcast the SSID on the CB VAP.

    • When enabled, the SSID is included in beacons. When you configure a wireless client, you may be able to see the SSID in a list of wireless networks to connect. This setting also allows wireless clients to connect using an "ANY" connection.

    • When disabled, the SSID is not included in beacons. You may not be able to see the SSID in a wireless network list on a wireless client. In this case, you have to enter the same SSID as the AP on a wireless client. This setting also denies wireless clients from connecting using an "ANY" connection.

    The default is "Enable".
    Note
    An "ANY" connection is a connection where a wireless client tries to connect to an AP by specifying a wildcard or null as the SSID. Even when an "ANY" connection is allowed, clients cannot connect to APs without knowing the correct security key.
    Security
    		 Select the security protocol for the CB VAP; one of "None", "Static WEP", "WPA Personal" or "WPA Enterprise".

    The default is "None".
    Note
    "Static WEP" can be configured only on VAP1 of each radio. Do not use a "Mode" that contains IEEE 802.11n in the AP Profile of APs using channel blanket.

    • None:
      No authentication or encryption is performed. Everyone can connect to the CB VAP.
      Note
      If you use "None" to build a network such as a guest hotspot, you should consider the consequences for the overall security of your entire network.

    • Static WEP:
      Uses RC4 encryption with fixed keys. Per-client authentication is not performed. We recommend using "WPA Personal" for fixed key security because WEP is vulnerable.

    • WPA Personal:
      Performs authentication and encryption between an AP and a wireless client. It uses per-client keys which are generated from a pre-shared key (PSK). It uses CCMP (AES) as the encryption algorithm.

    • WPA Enterprise:
      Performs authentication and encryption between an AP and a wireless client. It uses per-client keys which are generated on a RADIUS server. It uses CCMP (AES) as the encryption algorithm.

    ◼Static WEP Configuration:

    • Key Length:
      Select the WEP key length. The default is 128bit.
      • 64bit:
        You can directly enter a WEP key with 10 hex digits. Or you can enter 5 ASCII characters to automatically generate a WEP key.
      • 128bit:
        You can directly enter a WEP key with 26 hex digits. Or you can enter 13 ASCII characters to automatically generate a WEP key.

    • Key Type:
      Select a generation method for the WEP key. The default is "Hex".
      • ASCII:
        Lets you enter an arbitrary string to automatically generate a WEP key. The string is case-sensitive.
      • Hex:
        Lets you directly enter a WEP key with hexadecimal characters (0 to 9, A to F, a to f). Hex characters are not case-sensitive.

    • Key Index:
      Specify a key to use. The default is 1.

    • Security Key (WEP Key):
      Enter a WEP key (in hex) or a seed of a key (in ASCII) according to the selected "Key Length" and "Key Type".
      You have to enter the same WEP key as the one specified by "Key Index" on the wireless client.

    • WEP Authentication Method:
      "Open System" is the recommended option here. The default is "Open System".
      It is recommended to use the default "Open System" for security.
      • Open System:
        All wireless clients are allowed to connect regardless of whether they have the correct WEP key. But as wireless clients are only allowed to connect, they cannot communicate without a valid WEP key.
        This option is not only for "WEP" but is also used for "None", "WPA Personal" and "WPA Enterprise".
      • Shared Key:
        Only wireless clients with the correct WEP key can connect. Wireless clients cannot connect without a valid key.
      • Open System and Shared Key:
        A client configured to use Shared Key can connect if it has a valid WEP key.
        A client configured to use Open System can connect regardless of whether it has a correct key.

    ◼WPA Personal Configuration:

    • Security Key (WPA-PSK):
      Specify an encryption key for the VAP. The key should contain 8 to 63 alphanumeric and symbol characters. The key is case-sensitive.

    • WPA Versions:
      Select the WPA version(s) to use.
      You can select "WPA2" only, or both "WPA2" and "WPA".
      The default is "WPA2". Select both for a mixed environment. In that case, the security level of the wireless network is the same as WPA.
      Note
      WPA is based on a draft of IEEE 802.11i while WPA2 is based on the final version of IEEE 802.11i and therefore meets all mandatory items required by the standard.

    • Encryption Protocol: You can select "CCMP" only.
      "CCMP" uses the standard encryption algorithm approved by the US Secretary of Commerce. This standard has a strong algorithm.
      Note
      According to the WPA standard, TKIP is mandatory while CCMP is optional. However, CB VAP only supports CCMP.

    • Broadcast Key Refresh Interval:
      Specify an interval, between 0 and 86400 seconds, at which to refresh the broadcast key that is sent to clients on the VAP. A value of 0 means that the key is never refreshed. The default is 0.
      Note
      When multiple CB VAPs are being used, all the CB VAPs uses the Broadcast Key Refresh Interval configured for the CB VAP with the smallest CB VAP Number.

    ◼WPA Enterprise Configuration:

    • RADIUS Server IP Address:
      Enter the IP address of the primary RADIUS server
      You can configure primary and secondary RADIUS servers. The primary IP address is mandatory while the secondary is optional.

    • RADIUS Server Secret:
      Enter a password to connect to the RADIUS server with 64 or less alphanumeric and symbol characters. The password can contain spaces.
      Enter a password for each of the primary and secondary RADIUS server.

    • RADIUS Server Port Number:
      Enter a port number between 1 and 65535 on which the primary and secondary RADIUS server is listening. The default is 1812.

    • WPA Versions:
      Select the WPA version(s) to use.
      You can select "WPA2" only, or both "WPA2" and "WPA".
      The default is "WPA2". Select both for a mixed environment. In that case, the security level of the wireless network is the same as WPA.
      Note
      WPA is based on a draft of IEEE 802.11i while WPA2 is based on the final version of IEEE 802.11i and therefore meets all mandatory items required by the standard.

    • Encryption Protocol: You can select "CCMP" only.
      "CCMP" uses the standard encryption algorithm approved by the US Secretary of Commerce. This standard has a strong algorithm.
      Note
      According to the WPA standard, TKIP is mandatory while CCMP is optional. However, CB VAP only supports CCMP.

    • Broadcast Key Refresh Interval:
      Specify an interval, between 0 and 86400 seconds, at which to refresh the broadcast key that is sent to clients on the VAP. A value of 0 means that the key is never refreshed. The default is 0.
      Note
      Changing the Broadcast Key Refresh Interval is not supported with channel blanket. Do not change its value from the default "0".

    • RADIUS Accounting:
      Specify whether or not to use RADIUS accounting server to record the resources (such as connection time) used by each user. Select "Enable" to perform accounting. Otherwise select "Disable". The default is "Disable".

    • RADIUS Accounting Port Number:
      Specify a port number on which the RADIUS accounting server is listening. This is valid only when RADIUS Accounting is enabled. The default is 1813.
      Note
      This item is not supported. Do not enable it.

    Note
    The RADIUS Session-Timeout attribute is not supported on a CB VAP (It is discarded by the APs).
    MAC Address Authentication
    		 Specify whether to use MAC Address Authentication on the VAP.

    • When you select "MAC Filtering", filtering is performed using the "MAC Address List" that is specified in the AP Profile's "System" section.
    • If you select "Disable", no MAC address authentication is performed.

    The default is "Disable".
    Fast Roaming
    		 Specify whether to use Fast Roaming of wireless clients.
    When you select "Enable", you can configure various fast roaming functions.
    The default is "Disable".

    ◼Fast Roaming Configuration Items
    • Fast Transition:
      Specify whether or not to use IEEE 802.11r (Fast Basic Service Set Transition).
      When enabled, wireless clients can do IEEE 802.11r fast transition when they roam from one AP to another.
      The default is "Disable".

    • Distributed System:
      Specify whether or not to request authentication via distributed system (DS).
      When enabled, wireless clients send an authentication request to the destination AP via the current (source) AP. (Over The DS.)
      When disabled, wireless clients send an authentication request to the destination AP directly over the radio. (Over The Air.)
      The default is "Disable".

    • Mobility Domain:
      Specify a mobility domain with 4 hexadecimal digits (0 to 9, A to F, a to f). This is not case-sensitive.
      A wireless client can perform IEEE 802.11r fast transition between the APs in the same mobility domain.
      The default is "a1b2".

    • PMK-R0 Lifetime
      Specify a PMK-R0 lifetime, between 1 and 65535 minutes.
      Once the lifetime expires, IEEE 802.11r fast transition is not performed.
      The default is 10000.

    • AES Key
      Specify an AES key that is used to exchange PMK-R1 between APs with 32 hexadecimal digits (0 to 9, A to F, a to f). This is not case-sensitive. The default is empty.
      Note
      This is mandatory for every function in the "Fast Roaming" section. Configure this item even if you only use IEEE 802.11k or IEEE 802.11v and you are not going to use IEEE 802.11r fast transition.

    • IEEE 802.11k RRM
      Specify whether or not to use IEEE 802.11k RRM (Radio Resource Management).
      The default is "Disable".

    • IEEE 802.11v WNM
      Specify whether or not to use IEEE 802.11v WNM (Wireless Network Management).
      The default is "Disable".
    Wireless Client Isolation Specify whether to block communications between wireless clients connected to the same CB VAP. Select "Disable" to allow communications between wireless clients. Otherwise select "Enable". The default is "Disable".
    Inactivity Timer
    		 Specify the time, between 5 and 65535 seconds, after which a client will be disconnected if it disappears without disassociation from an AP.
    The default is 300.
    Duplicate AUTH received
    		 Select how to process connection requests from clients that have maintained a connection.
    If you select "Disconnect", it disconnects the previous connection and then accepts the new connection.
    If you select "Ignore", it connects as normal, without disconnecting.
    The default is "Disconnect".
    Note
    When "Management Frame Protection" is set to "Enable", "Disconnect" is used regardless of this item's setting.
    DTIM Period
    		 Specify how frequently to insert a DTIM (Delivery Traffic Indication Map) in the AP's beacons (every 1 to 5 beacons)
    The default is 1. The value of 1 means that a DTIM is inserted in every beacon.

    For example, if you set the DTIM Interval to 2, one in two beacons has a DTIM inserted (i.e. a beacon with a DTIM and one without a DTIM are transmitted in turn).

    When a wireless client operates in power-saving mode, DTIM notifies the client that there is a packet to send to the client. The AP will send the packet to the client once the client is ready to communicate.
    Increasing the DTIM Interval reduces power consumption but also makes communication less responsive.
    Note
    This setting is used for support purposes. Normally, do not change the value.
    RSSI Threshold
    		 Specify the numerical value of the parameter related to beacon control of CB VAP, in the range of 0 to 91.
    Adjusting this parameter may improve the connection / communication status in a Channel Blanket environment.
    The default is 0.
    Note
    This setting is used for support purposes. Normally, do not change the value.
    Tx Power
    		 The AP's transmission power can be selected from five levels: "Min", "Low", "Middle", "High" and "Max".
    The default is "Max".
    Note
    This setting is used for support purposes. Normally, do not change the value.
    Note
    If you change the Tx Power in the AP-specific configuration settings, the AP-specific setting has priority.
    Channel Blanket List

      Lets you create channel blanket wireless networks.
    Refer to Operation Reference > Channel Blanket > Create Channel Blanket for more details.
  3. Configure items in the "Profile Configuration" and "VAP (Multiple SSID) Configuration" sections as required.

  4. Click "Save" at the top right of the Content section to save the configuration.
    After saving the CB Profile, create a channel blanket, starting from step 4 of Operation Reference > Channel Blanket > Create Channel Blanket.

Edit CB Profile

  1. Select "Wireless Configuration" > "CB Profile" from the AWC Plug-in menu.

  2. Click "Detail" (magnifying glass icon) to the right of the CB Profile you want to edit.

  3. Configuration information for the CB Profile is displayed. Click "Edit" at the top right of the Content section.

  4. Change the information as needed.

  5. Click "Save" at the top right of the Content section.


Delete CB Profile

  1. Select "Wireless Configuration" > "CB Profile" from the AWC Plug-in menu.

  2. Click "Detail" (magnifying glass icon) to the right of the CB Profile you want to edit.

  3. Configuration information for the CB Profile is displayed. Click "Delete" at the top right of the Content section.

  4. The "Confirm" dialog box will appear.

  5. Click "Delete".


(C) 2020 Allied Telesis, Inc. All rights reserved.

C613-04083-00 Rev B

13 Mar 2020 16:32