Configure AP Profiles

Note

This item is not supported.

• Search Wireless Management Group: Groups in the list can be filtered by entering a partial name in the search box.
  The Search field lets you enter a partial string to match. The screen displays entries with that string in their name.
  To remove the filter, delete the string from the Search field and press Enter.
  

  Note

  The search is case-sensitive.

• Username
  
• Password
  
• Password (Confirm)
  
• AP's User Settings
  

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.
Other APs must be configured individually through AP-specific settings.

• Tri[11ax], Tri[11ax] GEN2, Dual[11ax] GEN2, Dual[11ax] GEN2 With External Antenna, Dual[11ax], Tri[11ac Wave2], Tri[11ac Wave2] With External Antenna, Dual[11ac Wave2]
  Described as a region name and a city name (e.g. "(UTC+09:00) Asia/Tokyo"). The default is "Not Set".
  If you select one of the time zones, additional items described below will appear.
  
  
• Dual[11ac], 11ac with External Antenna
  Described as a country name (e.g. "(UTC+09:00) Japan"). By default, it is set to "(UTC+09:00) Japan".
  If Daylight Saving Time is established for the selected time zone, additional items described below will be displayed.
  

Note

Some timezones (e.g. "(UTC+09:00) Asia/Tokyo" and "(UTC+09:00) Japan") don't support Daylight Saving Time.

• Daylight Saving Time
  
  (When Daylight Saving Time is set to Enable)
  
  • DST Start (24HR)
    
  • DST End (24HR)
    
  • DST Offset
    

• When enabled, AP clocks are synchronized to the NTP server. By using NTP, you can keep multiple systems' time as accurate as possible.
  
• When disabled, AP clocks are synchronized to the system clock of the PC (server) running Vista Manager EX and the AWC Plug-in.
  

• NTP Server IP Address / Hostname
  
• NTP Synchronization Interval
  

• Syslog Server IP Address / Hostname
  
• Port Number
  
• Severity
  

• Version
  
• Read Only Community Name
  
• Port Number
  
• Full Name
  
• Password
  
• Restrict the source of SNMP requests
  
• Only allow from the designated hosts or subnets
  
• Community name for traps
  
• Trap types
  
• Trap Host IP Address/Hostname
  

Note

This item is displayed if you select "TQ Series" or "TQ Series - SDN/OpenFlow" for Series, and "Dual[11ac]" for Profile Type.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for the Profile Type.
This item is displayed if you select "TQ Series" and "Dual[11ac Wave2]" for Series and Profile Type respectively. However, it is not supported.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.
Other APs must be configured individually through AP-specific settings.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.
Other APs must be configured individually through AP-specific settings.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

Note

FQDN consists of labels (strings) and periods (.).
Alphanumeric characters and hyphens can be used for each label. Labels can begin with a number. Labels cannot begin or end with a hyphen. Each label should be 63 or fewer characters in length.
If the Profile Type is "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Dual [11ac Wave2]", "Tri [11ac Wave2]", or "Tri [11ac Wave2] with External Antenna", you cannot enter only the label. Use an FQDN which contains at least two labels and a period.

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", or "Dual[11ac]" for the Profile Type.

Note

When you use the AWC function, do not use an interval larger than the default of 10 minutes.

Note

FQDN consists of labels (strings) and periods (.).
Alphanumeric characters and hyphens can be used for each label. Labels can begin with a number. Labels cannot begin or end with a hyphen. Each label should be 63 or fewer characters in length.
If the Profile Type is "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Dual [11ac Wave2]", "Tri [11ac Wave2]", or "Tri [11ac Wave2] with External Antenna", you cannot enter only the label. Use an FQDN which contains at least two labels and a period.

• 0 : Emergency: System is unusable.
  
• 1 : Alert: Immediate action is required.
  
• 2 : Critical: System is in a critical condition.
  
• 3 : Error: An error has occured.
  
• 4 : Warning: Something has occurred that requires attention.
  
• 5 : Notice: A normal but important message.
  
• 6 : Informational: An informational message.
  
• 7 : Debug: Detailed information for debugging.
  

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type.

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type, and specified "v1/v2c" as the SNMP Version.

Note

If the AP is managed by the SNMP plug-in and the port number has not been changed in the SNMP Plug-in Settings Utility, there is no need to change the settings in this item.

Note

This item is only displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type, and specified "v3" as the SNMP Version.

Note

This item is only displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type, and specified "v3" as the SNMP Version.

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type, and specified "v1/v2c" as the SNMP Version.

Note

FQDN consists of labels (strings) and periods (.).
Alphanumeric characters and hyphens can be used for each label. Labels can begin with a number. Labels cannot begin or end with a hyphen. Each label should be 63 or fewer characters in length.
If the Profile Type is "Dual [11ac Wave2]", "Tri [11ac Wave2]", or "Tri [11ac Wave2] with External Antenna", you cannot enter only the label. Use an FQDN which contains at least two labels and a period.

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type, and specified "v1/v2c" as the SNMP Version.

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type, and specified "v1/v2c" as the SNMP Version.

• Tri[11ax], Tri[11ax] GEN2, Dual[11ax] GEN2, Dual[11ax] GEN2 with External Antenna, Dual[11ax], Tri[11ac Wave2], Tri[11ac Wave2] With External Antenna, Dual[11ac Wave2]
  
  • Cold Start: sent when the SNMP Agent starts.
    
  • Link Up/Down: sent when a wireless interface link up or down.
    
  • Authentication: sent when an SNMP authentication fails.
    
• Dual[11ac], 11ac with External Antenna
  
  • Cold Start: sent when the SNMP Agent starts.
    
  • Link Up/Down: sent when a wireless interface link up or down.
    
  • DFS: sent when a radio wave that seems like a weather radar is detected in the currently used channel.
    
  • Authentication: sent when an SNMP authentication fails.
    
  • Association: sent when a wireless client associates or disassociates.
    
  • Filtered STA: sent when a wireless client is blocked by MAC Address List.
    
  • RADIUS Authentication(Success): sent when a RADIUS authentication succeeds.
    
  • RADIUS Authentication(Fail): sent when a RADIUS authentication fails.
    

Note

FQDN consists of labels (strings) and periods (.).
Alphanumeric characters and hyphens can be used for each label. Labels can begin with a number. Labels cannot begin or end with a hyphen. Each label should be 63 or fewer characters in length.
If the Profile Type is "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Dual [11ac Wave2]", "Tri [11ac Wave2]", or "Tri [11ac Wave2] with External Antenna", you cannot enter only the label. Use an FQDN which contains at least two labels and a period.

• Static LAG:
  Enables link aggregation. A static LAG should also be configured on the switch ports to which the AP connects.
  
  
• Cascade:
  Enables cascading function, the LAN2 port will work as a cascade port.
  

  Note

  This item is displayed if you select "TQ Series" for Series.

  
  
• LACP:
  Enables LACP. If LACP is enabled on the switch to which the AP connects, a trunk group will be automatically configured.
  

  Note

  This setting is displayed when "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2" or "Dual[11ax]" is selected as Profile Type.

  
  
• Disable:
  Neither link aggregation nor cascading function will be enabled. The LAN2 port is also disabled. The AP can only use the LAN1/PoE port.
  

Note

If you disable all radios on an AP Profile, it is possible to apply the profile to APs of other Profile Types, this profile will not be valid. Make sure you apply an appropriate AP Profile to APs.

Note

This item is not supported.

• TQ series
  
  • Tri[11ax]
    
    • Radio 1: b/g, b/g/n/ax (default)
      
    • Radio 2: a, a/n/ac/ax (default)
      
    • Radio 3: ax (default)
      

    Note

    To use IEEE 802.11n, IEEE 802.11ac or IEEE 802.11ax, "Wi-Fi Multimedia (WMM)" must be enabled.

  • Tri[11ax] GEN2
    
    • Radio 1: b/g, b/g/n/ax (default)
      
    • Radio 2: a, a/n/ac/ax (default)
      
    • Radio 3: a, a/n/ac/ax (default)
      

    Note

    To use IEEE 802.11n, IEEE 802.11ac or IEEE 802.11ax, "Wi-Fi Multimedia (WMM)" must be enabled.

  • Dual[11ax] GEN2
    
    • Radio 1: b/g, b/g/n, b/g/n/ax (default)
      
    • Radio 2: a, a/n, a/n/ac, a/n/ac/ax (default)
      

    Note

    To use IEEE 802.11n, IEEE 802.11ac or IEEE 802.11ax, "Wi-Fi Multimedia (WMM)" must be enabled.

  • Dual[11ax] GEN2 with External Antenna, Dual[11ax]
    
    • Radio 1: b/g, b/g/n/ax (default)
      
    • Radio 2: a, a/n/ac/ax (default)
      

    Note

    To use IEEE 802.11n, IEEE 802.11ac or IEEE 802.11ax, "Wi-Fi Multimedia (WMM)" must be enabled.

  • Tri[11ac Wave2]
    
    • Radio 1: b/g, b/g/n (default)
      
    • Radio 2: a, a/n/ac (default)
      
    • Radio 3: a, a/n/ac (default)
      

    Note

    To use IEEE 802.11n, IEEE 802.11ac, or IEEE 802.11ax, "Wi-Fi Multimedia (WMM)" must be enabled.

  • Tri[11ac Wave2] with External Antenna
    
    • Radio 1: b/g, b/g/n (default)
      
    • Radio 2: none
      
    • Radio 3: a, a/n/ac (default)
      

    Note

    To use IEEE 802.11n, IEEE 802.11ac, or IEEE 802.11ax, "Wi-Fi Multimedia (WMM)" must be enabled.

  • Dual[11ac Wave2]
    
    • Radio 1: b/g, b/g/n (default)
      
    • Radio 2: a, a/n/ac (default)
      

    Note

    To use IEEE 802.11n, IEEE 802.11ac, or IEEE 802.11ax, "Wi-Fi Multimedia (WMM)" must be enabled.

  • Dual[11ac]
    
    • Radio 1: b/g, b/g/n (default), n(2.4GHz)
      
    • Radio 2: a, a/n/ac (default), n/ac(5GHz)
      
  
  
• TQ series (SDN/OpenFlow-capable firmware)
  
  • Dual[11ac]
    
    • Radio 1: b/g, b/g/n (default), n(2.4GHz)
      
    • Radio 2: a, a/n/ac (default), n/ac(5GHz)
      

• Select either "20MHz" or "40MHz" for IEEE 802.11n.
  
• Select either "20MHz", "40MHz", or "80MHz" for IEEE 802.11ac.
  
• In IEEE 802.11ax, the available bandwidth varies depending on the wireless band.
  
  • Radio 1: "20MHz" and "40MHz"
    
  • Radio 2: "20MHz", "40MHz", "80MHz", and "80+80MHz" (TQ6602 only)
    
  • Radio 3: "20MHz", "40MHz", "80MHz", and "160MHz" (TQ6403 GEN2/TQ7403, TQm6403 GEN2 only)
    

Note

Emergency Mode cannot be used with channel blanket. You cannot use a channel blanket as an emergency Wi-Fi network.
Do not set this item to "Emergency mode only" for the radio used for channel blanket.

• Dual[11ax] GEN2:
  Specify "Within AP" to block communication between wireless clients connected to all VAPs within the AP, use "Within VAP" to block communication between wireless clients connected to the same VAP, or use "Disabled" to not block communication. The default is "Disable".
  When this product is set to "Disabled", you can select "Within AP", "Within VAP", or "Disabled" for each VAP in "Wireless Client Isolation" in the VAP (Multi-SSID) settings. When this item is set to "Within AP" or "Within VAP", only "Within AP" or "Within VAP" will be displayed in "Wireless Client Isolation" in the VAP (Multi-SSID) settings, respectively.
  
  
• Tri[11ax], Tri[11ax] GEN2, Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna:
  Select "Disable" to allow communications between wireless clients. Otherwise select "Enable". The default is "Disable".
  When this is set to "Disable", you can select "Enable" or "Disable" for each VAP in "Wireless Client Isolation" in the VAP (Multi-SSID) settings. Setting this as "Enable" will activate Wireless Client Isolation for all VAPs, which blocks the communications between the clients connecting to the same VAP.
  
  
• Others:
  Select "Disable" to allow communications between wireless clients. Otherwise select "Enable". The default is "Disable".
  Setting this as "Enable" will activate Wireless Client Isolation for all VAPs, which blocks the communications between the clients connecting to the same VAP.
  Per-VAP setting can not performed.
  

• Tri[11ax], Tri[11ax] GEN2
  Choose from the following three options.
  
  • Select "Manual" to set the priority airtime to be allocated to each VAP in the VAP (Multiple SSID) configuration.
    All associated clients of a VAP are provided with airtime, divided "Pre-allocated Airtime Percentage" equally with the clients.
    The airtime of each VAP in the same radio band must be set so that the total airtime does not exceed 100%.
    The remaining bandwidth, that the whole bandwidth minus the airtime allocated in priority to each VAP in the same radio band, is pro rata according to the ratio of airtime allocated. This means that a VAP with an airtime allocation rate of 0% will not be able to communicate when the total airtime consumed by other VAPs reaches 100%.
    
  • Select "Evenly" to provide equal airtime to all connected clients in the radio band.
    
  • If "Disable" is selected, no airtime adjustment is provided to connected clients.
    If a slow wireless client and a fast wireless client try to receive large amounts of data at the same time, more time may be allocated to the slow wireless client, depriving the fast wireless client of communication opportunities and slowing down the entire network.
    

  Note

  To use the manual setting of airtime fairness, the AP must have the following firmware applied:
  

  • TQ6403 GEN2 and TQm6403 GEN2 Firmware Version 9.0.4-0.1 or later
    
  • TQ7403 GEN2 Firmware Version 10.0.4-0.1 or later
    

• Dual[11ax] GEN2
  Choose from the following two options.
  
  • Select "Evenly" to provide equal airtime to all connected clients in the radio band.
    
  • If "Disable" is selected, no airtime adjustment is provided to connected clients.
    If a slow wireless client and a fast wireless client try to receive large amounts of data at the same time, more time may be allocated to the slow wireless client, depriving the fast wireless client of communication opportunities and slowing down the entire network.
    

  Note

  When "Dual [11ax] GEN2" is selected as the Profile Type, "Manual" appears as an option but is not supported.

  Note

  When restoring to this version from a backup file acquired with an AWC plug-in older than software version 3.12.0, if Airtime Fairness is set to "Enable" in the AP Profile with setting type "Dual[11ax] GEN2", it is set to "Evenly".

  
  
• Dual[11ax] GEN2 with External Antenna, Dual[[11ax], Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna, Dual[11ac Wave2], Dual[11ac]
  
  • Selecting "Enable" provides equal airtime to all connected clients in the radio band.
    
  • If "Disable" is selected, no airtime adjustment is provided to connected clients.
    If a slow wireless client and a fast wireless client try to receive large amounts of data at the same time, more time may be allocated to the slow wireless client, depriving the fast wireless client of communication opportunities and slowing down the entire network.
    

Note

This setting is displayed when "Dual[11ac]" is selected as Profile Type.

Note

If you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type, configure per VAP in the "VAP (Multiple SSID) Configuration" section.

Note

If "TQ Series" or "TQ Series - SDN/OpenFlow" is selected for the Series, and "Dual[11ac]" is selected for the Profile Type, the maximum number of wireless clients is counted as the sum of all radio bands (Radio 1 to Radio 2).

• TQ series
  
  
  • Tri[11ax], Tri[11ax] GEN2
    Radio 1/2: Specify a number between 0 to 500. The default is 500.
    Radio 3: Specify a number between 0 to 256. The default is 256.
    
  • Dual[11ax] GEN2
    Specify a number between 0 to 500. The default is 500.
    
  • Dual[11ax]
    Specify a number between 0 to 320. The default is 200.
    
  • Dual[11ac Wave2]
    Radio 1: Specify a number between 0 to 120. The default is 120.
    Radio 2: Specify a number between 0 to 200. The default is 200.
    
    
  • Other than above
    Specify a number between 0 to 200. The default is 200.
    
  
  
• TQ Series (SDN/OpenFlow-capable firmware)
  Specify a number between 0 to 200. The default is 200.
  

• Dual[11ac]
  
  • "Auto" uses the lowest selected rate in "2.4G/5G Supported Rate" in "Legacy Rate Sets".
    
  • "Fast" selects and uses the rate from selected rate in "2.4G/5G Supported Rate" in "Legacy Rate Sets", which is nearest to the lowest rate of the clients in the same VAP. The default is "Fast".
    
    
  • "Fixed" uses the "Fixed Tx Rate".
    
• Tri[11ax], Tri[11ax] GEN2, Dual[11ax] GEN2, Dual[11ax] GEN2 with External Antenna, Dual[11ax], Tri[11ac Wave2], Dual[11ac Wave2]
  Select rates to support.
  
  • Radio 1:
    11 5.5 2 1 (Mbps)
    
    
  • Radio 2 and Radio 3:
    24 12 6 (Mbps)
    

• Radio 1:
  54 48 36 24 18 12 11 9 6 5.5 2 1 (Mbps)
  
  
• Radio 2 and Radio 3:
  54 48 36 24 18 12 9 6 (Mbps)
  

Note

This setting is displayed when "Dual[11ac]" is selected as Profile Type.

• Tri[11ax], Tri[11ax] GEN2, Dual[11ax], Dual[11ax] GEN2 with External Antenna, Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna, Dual[11ac Wave2]
  Select required rates that must be supported on wireless stations (client or other APs) to be allowed to connect to the APs.
  When a station does not support one or more rates in this list, the station is not allowed to connect. Check the rates to select.
  All supported rates are selected by default.
  
  • 2.4GHz:
    54 48 36 24 18 12 11 9 6 5.5 2 1 (Mbps)
    
  • 5GHz:
    54 48 36 24 18 12 9 6 (Mbps)
    
  
  
• Dual[11ac]
  
  • 2.4G/5G Supported Rate
    Select the rates to be supported. Check the rates to select.
    All supported rates are selected by default.
    
    • 2.4GHz:
      54 48 36 24 18 12 11 9 6 5.5 2 1 (Mbps)
      
    • 5GHz:
      54 48 36 24 18 12 9 6 (Mbps)
      
    
    
  • 2.4G/5G Basic Rate
    Select required 2.4G/5G Supported Rates which must be supported on wireless stations (client or other APs) to be allowed to connect to the APs.
    When a station's 2.4G/5G Supported Rate lacks one or more rates in this 2.4G/5G Basic Rate list, the station is not allowed to connect. In general, if a station's 2.4G/5G Supported Rate contains higher rates than ones in 2.4G/5G Basic Rate, the station connects at higher rate.
    Select rates from the ones selected in "Supported Rate". Check the rates to select. Most of the time it is not necessary to change this setting. Each band has the following default:
    
    • 2.4GHz:
      11 5.5 2 1 (Mbps)
      
    • 5GHz:
      24 12 6 (Mbps)
      

Note

This item is displayed if you select "TQ Series" for Series.

• If you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type, specify RTS Threshold in the range of 0 to 2347. Specifying "2347" disables RTS transmission.
  The default is 2347 (do not transmit RTS).
  
  
• If you select "Dual[11ac]" for Profile Type, specify Enable or Disable RTS Threshold.
  
  • If you want to enable RTS transmission, select "Enable" and enter a threshold between 0 and 2347 (Bytes).
    When a packet to send is larger than the specifed size, RTS is transmitted before the packet is sent. Specifying "2347" disables RTS transmission.
    
  • Select "Disable" if you want to disable RTS transmission.
    
  The default is "Disable". Default threshold value is 2347 just after setting it to "Enable".
  

Note

If you select "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type, and "IEEE 802.11a/n/ac" for Mode, RTS packets are not sent to wireless clients connected by IEEE 802.11a. This setting is ignored.

Note

If you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for Profile Type, configure per VAP in the "VAP (Multiple SSID) Configuration" section.

• When enabled, the AP encourages clients supporting both 2.4GHz and 5GHz to prefer a less congested frequency in order to reduce overall congestion.
  
  
• When disabled, the AP doesn't encourage clients to use other frequencies. In that case, a client keeps using the same band with which they connect, even if the client supports both 2.4GHz and 5GHz and the other band is less crowded.
  

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", or "Dual[11ac Wave2]" for the Profile Type.
If you select "Dual[11ac]", Band Steering can be configured per VAP in the "VAP (Multiple SSID) Configuration" section.

Note

Band Steering cannot be used with channel blanket. Disable Band Steering on the AP Profile for APs using channel blanket.

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", or "Dual[11ac Wave2]" for the Profile Type.

Note

To use IEEE 802.11n IEEE 802.11ac or IEEE 802.11ax, this must be enabled.

• Dual[11ax]:
  Enable
  
  
• Tri[11ax], Tri[11ax] GEN2, Dual[11ax] GEN2, Dual[11ax] GEN2 with External Antenna, Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna, Dual[11ac Wave2]:
  Disable
  

Note

This item is displayed if you select "Dual[11ax] GEN2", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", or "Dual[11ac Wave2]" for the Profile Type.

Note

If Neighbor AP Detection is supported on the management web interface of the AP system and set to "Enable" in the AWC Plug-in management, the Neighbor AP Detection setting will remain as "Enable". This is supported on TQ5403, TQ5403e and TQm5403 with firmware version 5.3.1 or later, TQ1402 and TQm1402 with firmware version 6.0.0-0.2 or later, and TQ6602 with firmware version 7.0.0 or later.
If Neighbor AP Detection is not supported on the management web interface of the AP system, this feature is disabled in the AWC Plug-in management.

Note

When neighbor APs are detected on TQ6602 GEN2/6702 GEN2 and TQm6602 GEN2/6702 GEN2, packet loss or communication delay shorter than 3 seconds (firmware version 8.0.3-0.1 or later) or 10 seconds (firmware version 8.0.2-x.x or earlier) may occur repeatedly up to 4 times, for approximately 20 seconds total. In environments where temporary performance degradation is unacceptable, disable neighbor AP detection in the AP profile for profile type "Dual [11ax] GEN2".
If the Neighborhood AP Detection feature is disabled, the following features of the AWC plug-in are affected:

• AWC calculation cannot select channels that take into account the signal conditions of unmanaged APs.
  
• Intrusion detection function is not available.
  

Note

This item is displayed when "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", or "Dual[11ax]" is selected as the Profile Type, and a mode "ac" or "ax" is selected for the Radio Configuration.

Note

This item is displayed when "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", or "Dual[11ax]" is selected as the Profile Type, and a mode "ax" is selected for the Radio Configuration.

Note

This setting is displayed on "Radio 2" when "Dual[11ax] GEN2" or "Dual[11ax] GEN2 with External Antenna" is selected as Profile Type. Other Profile Types will not show this setting.

• TQ series
  
  • Dual[11ax] GEN2-R
    
    • Radio 1: b/g, b/g/n/ax (default)
      
    • Radio 2: a, a/n/ac/ax (default)
      

• In IEEE 802.11ax, the available bandwidth varies depending on the wireless band.
  
  • Radio 1: "20MHz" and "40MHz"
    
  • Radio 2: "20MHz", "40MHz", and "80MHz"
    

• TQ Series
  
  • Tri[11ax], Tri[11ax] GEN2
    16 VAPs per band (Radio 1, Radio 2, Radio 3)
    
  • Dual[11ax] GEN2, Dual[11ax] GEN2 with External Antenna, Dual[11ax]
    16 VAPs per band (Radio 1, Radio 2)
    
  • Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna, Dual[11ac Wave2]
    8 VAPs per band (Radio 1, Radio 2, Radio 3)
    
  • Dual[11ac]
    16 VAPs per band (Radio 1, Radio 2)
    
  
  
• TQ Series - SDN/OpenFlow
  
  • Dual[11ac]
    16 VAPs per band (Radio 1, Radio 2)
    

Note

It is recommended to use 5 or less VAPs per radio band in total, including both multi-channel and blanket VAPs.

• When set to Enabled, the VAP is always used on the APs to which this AP Profile is applied.
  
• When set to Disabled, the VAP is not used.
  
• When set to Emergency, the VAP becomes active only when the Emergency Mode is enabled in the management group.
  

Note

Emergency Mode cannot be used with channel blanket. You cannot use a channel blanket as an emergency Wi-Fi network.
Do not set this item to "Emergency" for the VAP whose number is the same as the CB VAP (VAP for channel blanket).

Note

Specify a VLAN ID that is different from the AP's management VLAN. When the AP is detected as a guest device, a parent AMF device is configured to collect the guest device information automatically ("dynamic discovery"), and wireless clients get their IP addresses via DHCP.

• When enabled, the SSID is included in beacons. When you configure a wireless client, you may be able to see the SSID in a list of wireless networks to connect. This setting also allows wireless clients to connect using an "ANY" connection.
  
  
• When disabled, the SSID is not included in beacons. You may not be able to see the SSID in a wireless network list on a wireless client. In this case, you have to enter the same SSID as the AP on a wireless client. This setting also denies wireless clients from connecting using an "ANY" connection.
  

Note

An "ANY" connection is a connection where a wireless client tries to connect to an AP by specifying a wildcard or null as the SSID. Even when an "ANY" connection is allowed, clients cannot connect to APs without knowing the correct security key.

• When enabled, the AP encourages clients supporting both 2.4GHz and 5GHz to prefer 5GHz in order to reduce congestion in 2.4GHz.
  
  
• When disabled, the AP doesn't encourage clients to use 5GHz. In that case, a client keeps using the same band with which they connect, even if the client supports both 2.4GHz and 5GHz and the other band is less crowded.
  

Note

This item is displayed if you select "TQ Series" for Series, and "Dual[11ac]" for Profile Type.
If you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", or "Dual[11ac Wave2]", this option is set in the "Radio Configuration" section and affects overall VAPs.

• None:
  No authentication or encryption is performed. Everyone can connect to the VAP.
  

  Note

  If you use "None" to build a network such as a guest hotspot, you should consider the consequences for the overall security of your entire network.

  
  
• Static WEP:
  Uses RC4 encryption with fixed keys. Per-client authentication is not performed. We recommend using "WPA Personal" for fixed key security because WEP is vulnerable.
  

  Note

  "Static WEP" is not displayed when the selected Mode contains "IEEE 802.11n". This can be configured only on VAP 1 of each radio.

  Note

  "Static WEP" cannot be specified when "TQ Series" is selected for Series and "Tri[11ax]" or "Tri[11ax] GEN2" is selected for Profile Type.

  
  
• Enhanced Open:
  Open authentication enables connection to the network without entering a user ID or password, but after open authentication, data between the AP and client is encrypted using the Opportunistic Wireless Encryption (OWE) protocol (128-bit CCMP/AES).
  

  Note

  "Enhanced Open" is displayed when "TQ Series" is selected for the Series and "Tri[11ax]" for the Profile Type.

  
  
• Enhanced Open Transition Mode:
  Uses VAP1 and VAP2 in a mode that can be configured without concern for whether the wireless client supports Enhanced Open or not. Enhanced Open-enabled clients communicate with the product using VAP2 encrypted with the OWE protocol after open authentication, while Enhanced Open-unenabled clients communicate with the product using VAP1 without OWE encryption after open authentication.
  

  Note

  When VAP1 security is set to "Enhanced Open Transition Mode", VAP2 security will be also set to "Enhanced Open Transition Mode" and the VAP status will be "Enabled". In this case, the VAP2 broadcast is also set to "Disable".

  Note

  The "Enhanced Open Transition Mode" is only displayed in Radio 1 and Radio 2 when "TQ Series" is selected for the Series and "Tri[11ax]" for the Profile Type.

  
  
• WPA Personal:
  Performs authentication and encryption between an AP and a wireless client. It uses per-client keys which are generated from a pre-shared key (PSK). It uses CCMP (AES) or TKIP for the encryption algorithm.
  
  
• WPA Enterprise:
  Performs authentication and encryption between an AP and a wireless client. It uses per-client keys which are generated on a RADIUS server. It uses CCMP (AES) or TKIP for the encryption algorithm.
  
  
• OSEN:
  Used by the VAP for online sign-up and to configure security settings when communicating with the OSU server.
  

  Note

  "OSEN" is displayed if you select "TQ Series", and "Tri[11ac]" or "Tri[11ac] with External Antenna" for Profile Type.

• External RADIUS:
  The APs will query the RADIUS server.
  
  
• Click-through:
  The APs will display a Click-through page instead of performing RADIUS authentication. The Click-through page does not require authentication with a username/password, but can be configured to show an arbitrary "Terms of Use" that users have to accept before use, or to redirect to an external page.
  
  
• External Page Redirect:
  The clients will be able to connect using third-party web credentials such as social networking sites.
  
  
• Disable:
  Select to not use Captive Portal.
  

Note

"Click-through" is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", "Dual[11ac Wave2]" or "Dual[11ac]" for Profile Type.

Note

"External Page Redirect" will appear when you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for Profile Type.
This item is displayed if you select "TQ Series" and "Dual[11ac Wave2]" for Series and Profile Type respectively. However, it is not supported.

Note

You can not enable Captive Portal on the radio used for the WDS connection.

• MAC Address List:
  Selecting this option will allow or deny connections only to the MAC addresses recorded in the list, according to the MAC address list selected in the MAC Address List field at the top of the screen.
  
  
• External RADIUS:
  The APs will query the RADIUS server.
  
  
• MAC Address List + External RADIUS:
  Selecting this option allows or denies connections only to the MAC addresses recorded in the list. This list refers to both the MAC address list selected in the MAC address list field at the top of the screen and the external RADIUS server.
  Firstly, it will try to authenticate using the MAC address list. If a connection cannot be established, it will try to authenticate using an External RADIUS server. If the preceding MAC address list allows a user to connect, the user can still connect even if the external RADIUS server does not grant the access.
  
  
• AMF Application Proxy:
  Selecting "AMF Application Proxy" allows you to query the whitelist and blacklist of our AMF-SECurity Controller AT-SecureEnterpriseSDN Controller (AT-SESC) or AMF Security mini. You can then take actions such as allowing, denying or quarantining client devices that attempt to connect to the wireless AP, disconnecting connected devices or changing VLANs.
  
  
• Disable:
  No MAC access control is performed.
  

Note

"MAC Address List" and "MAC Address List + External RADIUS" are only available when "TQ Series" is selected for Series, and any of MAC Address List is selected in the "Basic Configuration" section.

Note

"MAC Address List + External RADIUS" will appear when you select "TQ Series" for Series, and "Tri[11ax]", Tri[11ax] GEN2", "Dual[11ax] GEN2", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for Profile Type.
This item is displayed if you select "TQ Series" and "Dual[11ac Wave2]" for Series and Profile Type respectively. However, it is not supported.

Note

"AMF Application Proxy" will appear when you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax]GEN2", "Dual[11ax] GEN2", "Dual[11ax]", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for Profile Type.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type. Take note that "Dual[11ac Wave2]" does not support the Area Authentication in this version.

Note

To use the Area Authentication on a VAP defined in a AP Profile, the following conditions must be met:

• "Associated Client Location Estimation History" is set effectively in the System Setting screen.
  
• AP profile including area authentication enabled is applied to the supported AP in the installed area, and channel blanket is operated.
  
• Wireless client has requested connection to the CB VAP of the corresponding channel blanket.
  

For more details about channel blanket and floor map, refer to Operation Reference > Floor Map > Configure Floor Maps and Operation Reference > Channel Blanket > Overview respectively.

Note

Area Authentication cannot be used in combination with MAC Access Control.

• 802.11r FT
  
• FT over DS
  
• Mobility Domain
  
• R0 key Lifetime
  
• AES Key
  
• IEEE 802.11k RRM
  
• IEEE 802.11v WNM
  

Note

This item is displayed if you select "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type, and "WPA Personal", "WPA Enterprise" or "OSEN" for Security of VAP.

• Dual[11ax] GEN2:
  
  • If "Wireless Client Isolation" for the entire radio is set to "Within AP" or "Within VAP", only the same option as selected will be displayed in this field.
    
  • If Wireless Client Isolation for the entire radio is set to "Disable", you can specify whether or not to allow communication between wireless clients in individual VAPs in this field.
    Specify "Within AP" to block communication between wireless clients connected to all VAPs within the AP, use "Within VAP" to block communication between wireless clients connected to the same VAP, or use "Disabled" to not block communication.
    The default is "Disable".
    
  
  
• Tri[11ax], Tri[11ax] GEN2, Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna:
  
  • If "Wireless Client Isolation" for the entire radio is set to "Enable", only "Enable" will be displayed in this field.
    
  • If Wireless Client Isolation for the entire radio is set to "Disable", you can specify whether or not to allow communication between wireless clients in individual VAPs in this field. Select "Disable" to allow communications between wireless clients connected to the same VAP. Otherwise select "Enable".
    The default is "Disable".
    

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax]", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for Profile Type.

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", or "Dual[11ac Wave2]" for the Profile Type.

Note

This feature cannot be used with the OpenFlow feature. Use the default setting.

Note

If you select "TQ Series" for Series and "Dual[11ax]" for the Profile Type, the setting of this item in any VAP will take effect on the VAPs in the same radio band.

Note

If you select "TQ Series" for Series and "Dual[11ac]" for the Profile Type, this setting is not supported for Radio 1. Use the default setting.

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", or "Dual[11ac Wave2]" for the Profile Type.

Note

This feature cannot be used with the OpenFlow feature. Use the default setting.

Note

When "Management Frame Protection" is set to "Enable", "Disconnect" is used regardless of this item's setting.

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", or "Dual[11ac Wave2]" for the Profile Type.

Note

To make this function take effect, APs on the same subnet must have "Roaming Notification" set to "Enable" for each other.

Note

If you select "Dual[11ac]" for the Profile Type, you specify this item for each band on "Wireless Configuration".

• If enabled, when a managed wireless AP receives an ARP request for a connected client, the wireless AP that has a connection to the client will send an ARP response on behalf of the client. The wireless AP that does not have a connection to the client will discard the ARP request, thereby reducing unnecessary traffic.
  
• If you select "Disable", Proxy ARP will not be activated. That means ARP requests are broadcasted from all wireless APs to their subordinate clients. The corresponding clients send ARP responses themselves.
  The default is "Disable".
  

Note

This item is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type.

Note

Enabling this function may result in reduced throughput.

Note

This setting is displayed when "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2" or "Dual[11ax]" is selected as Profile Type.

Note

This setting appears when "Tri[11ax]" or "Tri[11ax] GEN2" is selected as the Profile Type and the Airtime Fairness of the Radio Configuration is set to "Manual".
When "Dual[11ax] GEN2" is selected as the Profile Type, "Manual" will still appear as the Airtime Fairness option in the Radio Configuration, but it is not supported.

Note

To enable Passpoint, WPA Enterprise must be used as security mode. When enabling this item, confirmation dialog will appear asking if you allow to change the security mode to WPA Enterprise to continue Passpoint setting.

Note

"Passpoint" is displayed if you select "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type.

• TQ Series
  
  • Dual[11ax] GEN2-R
    16 VAPs per band (Radio 1, Radio 2)
    

Note

It is recommended to use 5 or less VAPs per radio band in total.

• When set to Enabled, the VAP is always used on the APs to which this AP Profile is applied.
  
• When set to Disabled, the VAP is not used.
  

• 64bit:
  You can directly enter a WEP key with 10 hex digits. Or you can enter 5 ASCII characters to automatically generate a WEP key.
  
• 128bit:
  You can directly enter a WEP key with 26 hex digits. Or you can enter 13 ASCII characters to automatically generate a WEP key.
  

• ASCII:
  Lets you enter an arbitrary string to automatically generate a WEP key. The string is case-sensitive.
  
• Hex:
  Lets you directly enter a WEP key with hexadecimal characters (0 to 9, A to F, a to f). Hex characters are not case-sensitive.
  

• Open System:
  All wireless clients are allowed to connect regardless of whether they have the correct WEP key. But as wireless clients are only allowed to connect, they cannot communicate without a valid WEP key.
  This option is not only for "WEP" but is also used for "None", "WPA Personal" and "WPA Enterprise".
  
• Shared Key:
  Only wireless clients with the correct WEP key can connect. Wireless clients cannot connect without a valid key.
  
• Open System and Shared Key:
  A client configured to use Shared Key can connect if it has a valid WEP key.
  A client configured to use Open System can connect regardless of whether it has a correct key.
  

• TQ Series
  
  • Tri[11ax], Tri[11ax] GEN2, Dual[11ax] GEN2, Dual[11ax] GEN2 with External Antenna, Dual[11ax]
    You can select "WPA3" only, both "WPA3" and "WPA2", "WPA2" only, or both "WPA" and "WPA2".
    However, you cannot select both "WPA3" and "WPA". Additionally, you cannot select "WPA" only.
    
  • Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna
    You can select "WPA3" only, both "WPA3" and "WPA2", "WPA2" only, or both "WPA" and "WPA2".
    However, you cannot select both "WPA3" and "WPA". Additionally, you cannot select "WPA" only.
    
  • Dual[11ac Wave2]
    You can select "WPA3" only, both "WPA3" and "WPA2", "WPA2" only, or both "WPA" and "WPA2".
    However, you cannot select both "WPA3" and "WPA". Additionally, you cannot select "WPA" only.
    
  • Dual[11ac]
    You can select "WPA2" only, or both "WPA2" and "WPA".
    
• TQ Series - SDN/OpenFlow
  
  • Dual[11ac]
    Only "WPA2" can be selected.
    

Note

WPA is based on a draft of IEEE 802.11i while WPA2 is based on the final version of IEEE 802.11i and therefore meets all mandatory items required by the standard.

• TQ Series
  
  • Tri[11ax], Tri[11ax] GEN2, Dual[11ax] GEN2, Dual[11ax] GEN2 with External Antenna, Dual[11ax]
    You can select "CCMP" only, or both "TKIP" and "CCMP".
    
  • Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna, Dual[11ac Wave2]
    You can select "CCMP" only, or both "TKIP" and "CCMP".
    
  • Dual[11ac]
    You can select "CCMP" only, or both "TKIP" and "CCMP".
    
• TQ Series - SDN/OpenFlow
  
  • Dual[11ac]
    You can select "CCMP" only.
    

Note

According to the WPA standard, TKIP is mandatory while CCMP is optional. Our products implement both algorithms.

Note

If the WPA version includes "WPA3", only "CCMP" can be selected. "TKIP" is not displayed.

Note

If the Profile Type is set to other than "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2" or "Dual[11ax] GEN2 with External Antenna", and the WPA version is set to "WPA2", or both "WPA2" and "WPA", "TKIP" can be selected as necessary.
If the Profile Type is set to "Tri[11ax]", "Tri[11ax]GEN2", "Dual[11ax] GEN2" or "Dual[11ax] GEN2 with External Antenna", and the WPA version is set to "WPA2" solely, only "CCMP" can be selected. In this case, "TKIP" is not supported. If you set the WPA version to "WPA2" and "WPA", both "CCMP" and "TKIP" will be selected.

• Dual[11ax], Dual[11ac Wave2]
  Select "Enable" to use MFP. Otherwise select "Disable". The default is "Enable".
  
• Dual[11ax] GEN2, Dual[11ax] GEN2 with External Antenna, Tri[11ac Wave2], and Tri[11ac Wave2] with External Antenna
  Specify "Required" if you want the MFP mandatory for client association, "Capable" if you want it optionally, or "Disabled" if you don't want the management frames protected. The default is "Capable".
  

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

Note

If you select "Dual[11ac]" for Profile Type, you specify this item for each band on "Wireless Configuration".

Note

If the WPA version includes "WPA3", "Disable" can not be selected. If the WPA version includes "WPA", only "Disable" can be selected.

Note

This setting is displayed when Profile Types other than "Dual[11ax]" is selected.

Note

If Profile Type is "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Tri[11ac Wave2]" or "Dual [11ac Wave2]", this item can be configured only on VAP1 of each radio. When you select "Enable", this function is valid for all VAP.

• TQ Series
  
  • Tri[11ax], Tri[11ax] GEN2, Dual[11ax] GEN2, Dual[11ax] GEN2 with External Antenna
    You can select "WPA3" only, both "WPA3" and "WPA2", "WPA2" only, or both "WPA" and "WPA2".
    You cannot select both "WPA3" and "WPA". Additionally, "WPA" can be selected only together with "WPA2".
    
  • Dual[11ax]
    Radio 2: You can select "WPA3" only, "WPA2" only, or both "WPA" and "WPA2".
    You cannot select both "WPA3" and "WPA2", or both "WPA3" and "WPA". Additionally, "WPA" can be selected only together with "WPA2".
    
  • Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna
    Radio 2: You can select "WPA3" only, "WPA2" only, or both "WPA" and "WPA2".
    You cannot select both "WPA3" and "WPA2", or both "WPA3" and "WPA". Additionally, "WPA" can be selected only together with "WPA2".
    
  • Dual[11ac Wave2]
    Radio 1: You can select "WPA2" only, or both "WPA" and "WPA2".
    Radio 2: You can select "WPA3" only, "WPA2" only, or both "WPA" and "WPA2".
    
  • Dual[11ac]
    You can select "WPA2" only, or both "WPA2" and "WPA".
    
• TQ Series - SDN/OpenFlow
  
  • Dual[11ac]
    Only "WPA2" can be selected.
    

Note

WPA is based on a draft of IEEE 802.11i while WPA2 is based on the final version of IEEE 802.11i and therefore meets all mandatory items required by the standard.

• TQ Series
  
  • Tri[11ax], Tri[11ax] GEN2, Dual[11ax] GEN2, Dual[11ax] GEN2 with External Antenna
    You can select "CCMP" only, or both "TKIP" and "CCMP".
    In addition, if the WPA version is "WPA3", only "GCMP" can be selected. If the WPA versions are both "WPA3" and "WPA2", only "CCMP" can be selected.
    
  • Dual[11ax]
    You can select "CCMP" only, or both "TKIP" and "CCMP".
    In addition, if the WPA version is "WPA3", only "GCMP" can be selected.
    
  • Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna, Dual[11ac Wave2]
    You can select "CCMP" only, or both "TKIP" and "CCMP".
    In addition, if the WPA version is "WPA3", only "GCMP" can be selected.
    
  • Dual[11ac]
    You can select "CCMP" only, or both "TKIP" and "CCMP".
    
• TQ Series - SDN/OpenFlow
  
  • Dual[11ac]
    You can select "CCMP" only.
    

Note

According to the WPA standard, TKIP is mandatory while CCMP is optional. Our products implement both algorithms.

Note

If the Profile Type is set to other than "Dual[11ax] GEN2", and the WPA version is set to "WPA2", or both "WPA2" and "WPA", "TKIP" can be selected as necessary.
If the Profile Type is set to "Tri[11ax]", "Tri[11ax]GEN2", "Dual[11ax] GEN2" or "Dual[11ax] GEN2 with External Antenna", and the WPA version is set to "WPA2" solely, only "CCMP" can be selected. In this case, "TKIP" is not supported. If you set the WPA version to "WPA2" and "WPA", both "CCMP" and "TKIP" will be selected.

• Dual[11ax], Dual[11ac Wave2]
  Select "Enable" to use MFP. Otherwise select "Disable". The default is "Enable".
  
• Tri[11ax], Tri[11ax] GEN2, Dual[11ax] GEN2, Dual[11ax] GEN2 with External Antenna, Tri[11ac Wave2], Tri[11ac Wave2] with External Antenna
  Specify "Required" if you want the MFP mandatory for client association, "Capable" if you want it optionally, or "Disabled" if you don't want the management frames protected. The default is "Capable".
  

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

Note

If you select "Dual[11ac]" for Profile Type, you specify this item for each band on "Wireless Configuration".

Note

If the WPA version includes "WPA3", "Disable" can not be selected. If the WPA version includes "WPA", only "Disable" can be selected.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", "Dual[11ac Wave2]", or "Dual[11ac]" for Profile Type, or if you selected "TQ Series - SDN/OpenFlow" for Series and "Dual[11ac]" for Profile Type.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

Note

This can be configured only on VAP1 of each radio. When you select "Enable", this function is valid for all VAP.

Note

WPA is based on a draft of IEEE 802.11i while WPA2 is based on the final version of IEEE 802.11i and therefore meets all mandatory items required by the standard.

Note

According to the WPA standard, TKIP is mandatory while CCMP is optional. Our products implement both algorithms.

Note

If the WPA version includes "WPA3", only "CCMP" can be selected. "TKIP" is not displayed.

Note

If the WPA version is set to "WPA2", or both "WPA2" and "WPA", "TKIP" can be selected as necessary.

Note

If the WPA version includes "WPA3", only "CCMP" can be selected. If the WPA version includes "WPA", only "Disable" can be selected.

Note

If the Profile Type is set to "Dual[11ax] GEN2", and the WPA version is set to "WPA2" solely, please do not set to "Required".

• Enable:
  shows an external authentication page. Specify the page URL in "Base URL".
  
  • Base URL:
    Specify the base URL of the external web authentication page.
    Clients will access the page through the AP's proxy feature instead of direct connection.
    The HTML filename of the external authentication page must be "radius_login.html".
    The AP's proxy will get the page from "Base URL/radius_login.html" and send it back to clients.
    For example, when you specify "http://www.example.com/captive_portal" in "Base URL", the APs will present the content of the page at "http://www.example.com/captive_portal/radius_login.html" to connecting clients.
    For details of the format of radius_login.html, refer to Operation Reference > Authentication > Web Authentication with Captive Portal.
    
• Disable:
  Shows an authentication page embedded in the APs.
  

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

• Enable:
  Uses RADIUS Accounting. With an external RADIUS server that has authenticated the user, it is possible to record the resources (such as connection time) used by each user during the session. You can also use features such as those provided by external RADIUS. Specify the "RADIUS accounting port" in addition.
  
  • RADIUS Accounting Port Number:
    Enter the port number of the accounting port of the external RADIUS server in the range 0-65535. The default is 1813.
    
• Disable: Does not use RADIUS Accounting.
  

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.
This item is displayed if you select "TQ Series" and "Dual[11ac Wave2]" for Series and Profile Type respectively. However, it is not supported.

• Keep Session:
  Show the original URL that was entered in the client's browser before web authentication.
  
• Fixed URL:
  Always show a fixed URL that you specify. Should be 1 to 128 characters in length, with alphabets, numbers and symbols (including spaces).
  
• Disable:
  Do not redirect the browser after successful web authentication.
  

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", "Dual[11ac Wave2]" or "Dual[11ax]" for Profile Type.
If the Profile Type is "Dual[11ac]", you can only select "Fixed URL" or "Disable".

• Walled Garden List
  You can register addresses to use the Walled Garden feature.
  
  • Address:
    The address of the site that is accessible from inside the Walled Garden, in the form of an FQDN, an IP address or an IP address/mask. Max 50 entries can be registered.
    When "Dual[11ax] GEN2" is selected as the Profile Type, one asterisk (*) can be used as a wildcard when specifying the FQDN in the walled garden entry.
    For instance, using an asterisk wildcard in the front of "*.example.jp" will get hits for "www.example.jp", as well as "ftp.example.jp", etc. Similarly, "example.*", with the wildcard at the end, will get hits for "example.com", as well as "example.jp", etc. Up to one wildcard may be used per entry. Multiple wildcards (e.g., "*.example.*") are not allowed.
    
  • "Add" button:
    Registers the address entered in the Address field to the list.
    
  • "Clear" button:
    Deletes the entry of the Address field.
    
  • "Import from CSV file" button:
    Imports the addresses from a CSV file.
    The CSV file can contain one address per line, described in one of the following formats: FQDN, IP address or IP address/mask.
    
  • X Address:
    Shows the number of address entries registered to the list.
    
  • Search Walled Garden Address:
    Shows a list of registered addresses that contain the input string.
    
  • Address:
    Shows an address entry.
    
  • Delete:
    Deletes the selected entry.
    
  • "Save" button:
    Saves changes to the Walled Garden List.
    
  • "Close" button:
    Discard the changes to the Walled Garden List and close the Walled Garden List dialog box.
    

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for the Profile Type.
This item is displayed if you select "TQ Series" and "Dual[11ac Wave2]" for Series and Profile Type respectively. However, it is not supported.

• "Enable" or "Disable" can be selected if none of the walled garden entries have been registered using wildcards. The default is "Disable".
  
• If at least one wildcard is used in a walled garden entry, it is fixed as "Enable".
  

Note

This item is displayed if you select "TQ Series" for Series, and "Dual[11ax] GEN2" for the Profile Type.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for the Profile Type.
This item is displayed if you select "TQ Series" and "Dual[11ac Wave2]" for Series and Profile Type respectively. However, it is not supported.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

• Enable:
  shows an external authentication page. Specify the page URL in "Base URL".
  
  • Base URL:
    Specify the base URL of the external Click-through page.
    Clients will access the page through the AP's proxy feature instead of direct connection.
    The HTML filename of the external Click-through page must be "click_through_login.html".
    The AP's proxy will get the page from "Base URL/click_through_login.html" and send it back to clients.
    For example, when you specify "http://www.example.com/captive_portal" in "Base URL", APs will present the content of the page at "http://www.example.com/captive_portal/click_through_login.html" to connecting clients.
    For details of the format of click_through_login.html, refer to Operation Reference > Authentication > Web Authentication with Captive Portal.
    
• Disable:
  Shows an authentication page embedded in the APs.
  

  Note

  "Terms of Use" to show on the Authentication Page can be configured on each AP's web interface.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

• Keep Session:
  Show the original URL that was entered in the client's browser before web authentication.
  
• Fixed URL:
  Always show a fixed URL that you specify. Should be 1 to 128 characters in length, with alphabets, numbers and symbols (including spaces).
  
• Disable:
  Do not redirect the browser after successful web authentication.
  

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", "Dual[11ac Wave2]" or "Dual[11ax]" for Profile Type.
If the Profile Type is "Dual[11ac]", you can only select "Fixed URL" or "Disable".

• Walled Garden List
  You can register addresses to use the Walled Garden feature.
  
  • Address:
    The address of the site that is accessible from inside the Walled Garden, in the form of an FQDN, an IP address or an IP address/mask. Max 50 entries can be registered.
    When "Dual[11ax] GEN2" is selected as the Profile Type, one asterisk (*) can be used as a wildcard when specifying the FQDN in the walled garden entry.
    For instance, using an asterisk wildcard in the front of "*.example.jp" will get hits for "www.example.jp", as well as "ftp.example.jp", etc. Similarly, "example.*", with the wildcard at the end, will get hits for "example.com", as well as "example.jp", etc. Up to one wildcard may be used per entry. Multiple wildcards (e.g., "*.example.*") are not allowed.
    
  • "Add" button:
    Registers the address entered in the Address field to the list.
    
  • "Clear" button:
    Deletes the entry of the Address field.
    
  • "Import from CSV file" button:
    Imports the addresses from a CSV file.
    The CSV file can contain one address per line, described in one of the following formats: FQDN, IP address or IP address/mask.
    
  • X Address:
    Shows the number of address entries registered to the list.
    
  • Search Walled Garden Address:
    Shows a list of registered addresses that contain the input string.
    
  • Address:
    Shows an address entry.
    
  • Delete:
    Deletes the selected entry.
    
  • "Save" button:
    Saves changes to the Walled Garden List.
    
  • "Close" button:
    Discard the changes to the Walled Garden List and close the Walled Garden List dialog box.
    

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for the Profile Type.
This item is displayed if you select "TQ Series" and "Dual[11ac Wave2]" for Series and Profile Type respectively. However, it is not supported.

• "Enable" or "Disable" can be selected if none of the walled garden entries have been registered using wildcards. The default is "Disable".
  
• If at least one wildcard is used in a walled garden entry, it is fixed as "Enable".
  

Note

This item is displayed if you select "TQ Series" for Series, and "Dual[11ax] GEN2" for the Profile Type.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for the Profile Type.
This item is displayed if you select "TQ Series" and "Dual[11ac Wave2]" for Series and Profile Type respectively. However, it is not supported.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

• Enable:
  Uses RADIUS Accounting. With an external RADIUS server that has authenticated the user, it is possible to record the resources (such as connection time) used by each user during the session. You can also use features such as those provided by external RADIUS. Specify the "RADIUS accounting port" in addition.
  
  • RADIUS Accounting Port Number:
    Enter the port number of the accounting port of the external RADIUS server in the range 0-65535. The default is 1813.
    
• Disable:
  Does not use RADIUS Accounting.
  

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

• Keep Session:
  Show the original URL that was entered in the client's browser before web authentication.
  
• Fixed URL:
  Always show a fixed URL that you specify. Should be 1 to 128 characters in length, with alphabets, numbers and symbols (including spaces).
  
• Disable:
  Do not redirect the browser after successful web authentication.
  

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna", "Dual[11ac Wave2]" or "Dual[11ax]" for Profile Type.
If the Profile Type is "Dual[11ac]", you can only select "Fixed URL" or "Disable".

• Walled Garden List
  You can register addresses to use the Walled Garden feature.
  
  • Address:
    The address of the site that is accessible from inside the Walled Garden, in the form of an FQDN, an IP address or an IP address/mask. Max 50 entries can be registered.
    When "Dual[11ax] GEN2" is selected as the Profile Type, one asterisk (*) can be used as a wildcard when specifying the FQDN in the walled garden entry.
    For instance, using an asterisk wildcard in the front of "*.example.jp" will get hits for "www.example.jp", as well as "ftp.example.jp", etc. Similarly, "example.*", with the wildcard at the end, will get hits for "example.com", as well as "example.jp", etc. Up to one wildcard may be used per entry. Multiple wildcards (e.g., "*.example.*") are not allowed.
    
  • "Add" button:
    Registers the address entered in the Address field to the list.
    
  • "Clear" button:
    Deletes the entry of the Address field.
    
  • "Import from CSV file" button:
    Imports the addresses from a CSV file.
    The CSV file can contain one address per line, described in one of the following formats: FQDN, IP address or IP address/mask.
    
  • X Address:
    Shows the number of address entries registered to the list.
    
  • Search Walled Garden Address:
    Shows a list of registered addresses that contain the input string.
    
  • Address:
    Shows an address entry.
    
  • Delete:
    Deletes the selected entry.
    
  • "Save" button:
    Saves changes to the Walled Garden List.
    
  • "Close" button:
    Discard the changes to the Walled Garden List and close the Walled Garden List dialog box.
    

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for the Profile Type.
This item is displayed if you select "TQ Series" and "Dual[11ac Wave2]" for Series and Profile Type respectively. However, it is not supported.

• "Enable" or "Disable" can be selected if none of the walled garden entries have been registered using wildcards. The default is "Disable".
  
• If at least one wildcard is used in a walled garden entry, it is fixed as "Enable".
  

Note

This item is displayed if you select "TQ Series" for Series, and "Dual[11ax] GEN2" for the Profile Type.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]" or "Tri[11ac Wave2] with External Antenna" for the Profile Type.
This item is displayed if you select "TQ Series" and "Dual[11ac Wave2]" for Series and Profile Type respectively. However, it is not supported.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

Note

This item is displayed if you select "TQ Series" for Series, and "Tri[11ax]", "Tri[11ax] GEN2", "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", "Dual[11ax]", "Tri[11ac Wave2]", "Tri[11ac Wave2] with External Antenna" or "Dual[11ac Wave2]" for Profile Type.

Note

You cannot use a different MAC Address List for each radio or VAP. A single list is used for all radios (Radio 1/Radio 2/Radio 3) and VAPs in an AP Profile.

• When you select "Enable", only the wireless clients which have been successful with both Captive Portal and MAC Access Control authentication will be able to communicate via the relevant VAP.
  
• When you select "Disable", the wireless clients which have been successful through either MAC Access Control or Captive Portal will be able to communicate via the relevant VAP.
  

Note

This item is displayed if you select "Dual[11ax] GEN2", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type.

• If you select "Fixed Password", a string specified in "User-Password Format Password" is always used as the value of the User-Password attribute.
  
• If you select "User Name", the same string as the User-Name attribute (MAC Address) is sent to the RADIUS server as the value of the User-Password attribute.
  

• When you select "Enable", only the wireless clients which have been successful with both Captive Portal and MAC Access Control authentication will be able to communicate via the relevant VAP.
  
• When you select "Disable", the wireless clients which have been successful through either MAC Access Control or Captive Portal will be able to communicate via the relevant VAP.
  

Note

This item is displayed if you select "Dual[11ax] GEN2", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type.

• When set to "Enable", you can specify the URL to which the wireless client detected as a suspected node by the IP Filter action is forwarded in the External page URL field that is displayed additionally.
  
• When set to "Disable", the Redirect-URL function is not used. The suspected node will not be allowed to connect to any page.
  

Note

Web page used in Redirect-URL should not be placed on a server that handles sensitive information.
When a Redirect-URL is used, the host (IP address or domain) specified in the "External Page URL" will be registered in the walled garden information inside the wireless AP.
Thus, even a suspected node that has not been authenticated can browse to any page on the server to which it has been redirected by entering the path in the address field of its Web browser.

Note

This item is displayed if you select "Dual[11ax] GEN2", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type.

Note

Redirect-URL cannot be used in conjunction with Captive Portal.

Note

If the suspected node uses HTTPS instead of HTTP for access, the user of the node may see screens such as "Your connection is not private", "Your connection is not secure", "Connect to Wi-Fi hotspot", "Connect to Wi-Fi", or "Log in to network". In that case, the user will be redirected to the Redirect-URL page by selecting Refresh, Reload or Connect button on her/his Web browser.
However, due to Web browser specifications, s/he may not be redirected to the Redirect-URL page even if s/he select Refresh or Connect button. In this case, the user will be redirected to the Redirect-URL page by accessing the site via HTTP.

Note

In this version, the secondary AMF Application Server is not available.

Note

In this version, the secondary AMF Application Server is not available.

• With "Enable" selected, in the event the connection between the AWC Plug-in and AMF Application Proxy server is lost, all new client connection requests will be allowed.
  

  Note

  When using the VAP security method together with AMF Application Proxy, only wireless clients that have successfully authenticated using the security method can communicate.

• When you select "Disable", all new client connection requests will be rejected.
  The clients that are already connected before the connection between the AWC Plug-in and AMF Application Proxy server got lost, can now continue the communication.
  

Note

This item is displayed if you select "Dual[11ax] GEN2", "Tri[11ac Wave2]", or "Tri[11ac Wave2] with External Antenna" for the Profile Type.

Note

Only "Disable" is available when you select "Dual[11ax]" for Profile Type, and "WPA2/WPA3" or "WPA3" for WPA versions.

• When the number of APs using this AP Profile changes, the configuration status of the APs that use this AP Profile becomes "Modified".
  
• If you make a change that affects the number of APs that use this AP Profile on the Wireless Configuration > AP Settings page, a dialog box will ask you whether to apply the configuration to all APs that use this AP Profile.
  If you click "OK", the configuration will be applied to all APs that use this AP Profile.
  

• When enabled, wireless clients send an authentication request to the destination AP via the current (source) AP. (Over The DS.)
  
• When disabled, wireless clients send an authentication request to the destination AP directly over the radio. (Over The Air)
  

Note

This is mandatory for every function in the "Fast Roaming" section. Configure this item even if you only use IEEE 802.11k or IEEE 802.11v and you are not going to use IEEE 802.11r fast transition.

Note

If you select "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", or "Dual[11ax]" for Profile Type, the selection of "IEEE 802.11k RRM" on VAP 1 will also affect VAP 2 to VAP 16.
When you want to use "IEEE 802.11k RRM" enabled on any of VAP 2 to 16, enable it on VAP 1.

Note

Only "Disable" is available when you select "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", or "Dual[11ax]" for Profile Type, and "WPA2/WPA3" or "WPA3" for WPA versions.

Note

Only "Disable" is available when you select "Dual[11ax] GEN2", "Dual[11ax] GEN2 with External Antenna", or "Dual[11ax]" for Profile Type, and "WPA2/WPA3" or "WPA3" for WPA versions.

• Private network:
  A network which unauthorized users cannot access.
  
• Private network with guest access:
  A private network that offers guest access to unauthorized users.
  
• Chargeable public network:
  A network that can be accessed by anyone at anytime for a charge. The billing system and other information can be obtained in other ways (IEEE 802.21, http/https redirect or DNS redirection)
  
• Free public network:
  A network that can be accessed by anyone at anytime for free.
  
• Personal device network:
  A network for personal devices such as a camera and printer.
  
• Emergency service-only network:
  A network for limited use for the emergency services (police or fire/disaster management).
  
• Test or experimental:
  A network for testing or experiments.
  
• Wildcard:
  A wildcard access network.
  

• EAP-TLS
  
• EAP-TTLS/MSCHAPv2
  
• EAP-SIM
  
• EAP-AKA
  

• When enabled, the communication with the OpenFlow controller is encrypted using SSL.
  
• When disabled, the communication with the OpenFlow controller is not encrypted (i.e. plain TCP connection is used).
  

Note

To use encrypted control plane, the OpenFlow controller must also be configured appropriately.

• When disabled, the Critical Mode is not used and the normal OpenFlow behavior is retained. When the connection to the controller is lost, no more new connections from a client are possible because new flow entries cannot be generated.
  Clients which are already connected to APs can continue to communicate, but once the flow entries for the client time out and are deleted, they can no longer communicate.
  
• If you select "Enable (Accept All)", all traffic is allowed when the "Fallback Time" expires after the connection to the controller is lost. In this case, the tagged VLAN configured for the VAP is used for all traffic.
  
• If you select "Enable (Drop All)", all traffic is discarded after the "Fallback Time" expires.
  

Note

Actual transition time varies depending on the timing of the health check interval for the OpenFlow controller.

Note

This item is not supported.