FCC ID: RSL-TQ3600 Wireless access point with PoE powered device function

 

AT-TQ Series Enterprise-class Wireless Access Points with IEEE802.11a/b/g/n Dual Radios Management Software Users Guide 613-001867 Rev. B Review Draft - May 9, 2014 Copyright 2014 Allied Telesis, Inc. All rights reserved. This product includes software licensed under the BSD License. As such, the following language applies for those portions of the software licensed under the BSD License:

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

* Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

* Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

* Neither the name of Allied Telesis, Inc. nor the names of the respective companies above may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Copyright (c) [dates as appropriate to package] by The Regents of the University of California - All rights reserved. Copyright (c) 2000-2003 by Intel Corporation - All rights reserved. Copyright (c) 1997-2003, 2004 by Thomas E. Dickey

<dickey@invisible-island.net> - All rights reserved. Copyright (c) 2001-2009 by Brandon Long (ClearSilver is now licensed under the New BSD License.) Copyright (c) 1984-2000 by Carnegie Mellon University - All rights reserved. Copyright (c) 2002,2003 by Matt Johnston - All rights reserved. Copyright (c) 1995 by Tatu Ylonen <ylo@cs.hut.fi> - All rights reserved. Copyright 1997-2003 by Simon Tatham. Portions copyright by Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, and CORE SDI S.A. Copyright (c) 1989, 1991 by Free Software Foundation, Inc. (GNU General Public License, Version 2, June 1991). Copyright (c) 2002-2005 by Jouni Malinen <jkmaline@cc.hut.fi> and contributors. Copyright (c) 1991, 1999 by Free Software Foundation, Inc. (GNU Lesser General Public License, Version 2.1, February 1999). Copyright (c) 1998-2002 by Daniel Veillard - All rights reserved. Copyright (c) 1998-2004 by The OpenSSL Project - All rights reserved. Copyright (c) 1995-1998 by Eric Young (eay@cryptsoft.com) - All rights reserved. This product also includes software licensed under the GNU General Public License available from:

http://www.gnu.org/licenses/gpl2.html Allied Telesis is committed to meeting the requirements of the open source licenses including the GNU General Public License (GPL) and will make all required source code available. If you would like a copy of the GPL source code contained in this product, please send us a request by registered mail including a check for US$15 to cover production and shipping costs, and a CD with the GPL code will be mailed to you. GPL Code Request Allied Telesis Labs (Ltd) PO Box 8011 Christchurch, New Zealand No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc. Allied Telesis and the Allied Telesis logo are trademarks of Allied Telesis, Incorporated. Ethernet is a trademark of the Xerox Corporation. Wi-Fi, Wi-Fi Alliance, WMM, Wi-Fi Protected Access (WPA), the Wi-Fi CERTIFIED logo, the Wi-Fi logo, the Wi-Fi ZONE logo, and the Wi-Fi Protected Setup logo are registered trademarks of the Wi-Fi Alliance. Wi-Fi CERTIFIED, Wi-Fi Multimedia, WPA2 and the Wi-Fi Alliance logo are trademarks of the Wi-Fi Alliance. Microsoft is a registered trademark of Microsoft Corporation. Review Draft - May 9, 2014 All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners. Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesis, Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesis, Inc. has been advised of, known, or should have known, the possibility of such damages. Review Draft - May 9, 2014 Review Draft - May 9, 2014 Contents Preface ............................................................................................................................................................13 Safety Symbols Used in this Document ...........................................................................................................14 Contacting Allied Telesis ..................................................................................................................................15 Chapter 1: Overview ......................................................................................................................................17 AT-TQ Series of Wireless Access Points .........................................................................................................18 Features ...........................................................................................................................................................19 Management Modes and Methods ...................................................................................................................21 Starting a Management Session on the Access Point......................................................................................22 Starting the Initial Management Session on the Access Point .........................................................................23 Starting the Initial Management Session with a Direct Connection............................................................24 Starting the Initial Management Session without a DHCP Server .............................................................24 Starting the Initial Management Session with a DHCP Server ..................................................................25 Using the Management Menus and Windows ..................................................................................................26 Web Browser Menus..................................................................................................................................26 Saving Your Changes ................................................................................................................................28 Logging Off.................................................................................................................................................28 Chapter 2: Basic Settings Menu ...................................................................................................................29 Displaying Basic Information ............................................................................................................................30 Changing the Managers Login Name and Password ......................................................................................32 Changing the System Name, Contact, and Location........................................................................................33 Chapter 3: Manage Menu ..............................................................................................................................35 Assigning a Static IP Address to the Access Point...........................................................................................36 Assigning a Dynamic IP Address from a DHCP Server to the Access Point....................................................38 Setting VLAN IDs..............................................................................................................................................39 Management VLAN ID ...............................................................................................................................39 VLAN ID for Untagged Traffic ....................................................................................................................39 Enabling or Disabling Broadcast Ping Replies .................................................................................................40 Setting the Country Setting...............................................................................................................................41 Configuring Basic Radio Settings .....................................................................................................................43 Configuring the Radio Settings.........................................................................................................................46 Configuring Virtual Access Points ....................................................................................................................58 No Security.................................................................................................................................................61 IEEE 802.1x Security .................................................................................................................................61 Static WEP.................................................................................................................................................63 WPA Enterprise..........................................................................................................................................66 WPA Personal............................................................................................................................................69 Managing Wireless Distribution System Bridges..............................................................................................71 Configurations of WDS Bridges .................................................................................................................71 Radio..........................................................................................................................................................73 Radio Mode................................................................................................................................................73 Radio Channel ...........................................................................................................................................73 VAP0..........................................................................................................................................................73 Encryption ..................................................................................................................................................74 Dynamic Frequency Selection ...................................................................................................................74 Guidelines ..................................................................................................................................................75 5 Review Draft - May 9, 2014 Contents Preparing the Access Point for the WDS Bridge ....................................................................................... 76 Configuring the WDS Bridge ..................................................................................................................... 77 Static WEP ................................................................................................................................................ 79 WPA Personal ........................................................................................................................................... 80 Configuring the MAC Address Filter ................................................................................................................ 82 Generating Event Messages for Unknown Access Points............................................................................... 85 Enabling Event Messages for Unknown Access Points ............................................................................ 85 Disabling Event Messages for Unknown Access Points ........................................................................... 87 Configuring the Access Point for the Optional AT-UWC Program ................................................................... 88 Enabling the Controller Client.................................................................................................................... 88 Disabling the Controller Client ................................................................................................................... 91 Chapter 4: Cluster Menu .............................................................................................................................. 93 Overview .......................................................................................................................................................... 94 Planning a Cluster.......................................................................................................................................... 101 Creating or Adding Access Points to a Cluster .............................................................................................. 102 Managing the Access Points of a Cluster ...................................................................................................... 105 Removing an Access Point from a Cluster .................................................................................................... 106 Viewing the Wireless Clients of a Cluster ...................................................................................................... 107 Using Automatic Channel Assignments......................................................................................................... 109 Enabling Automatic Channel Assignments.............................................................................................. 109 Disabling Automatic Channel Assignments............................................................................................. 112 Viewing the Neighboring Access Points of the Cluster .................................................................................. 113 Chapter 5: Status Menu .............................................................................................................................. 117 Viewing the Associated Clients of an Access Point ....................................................................................... 118 Viewing Event Messages............................................................................................................................... 120 Viewing System Event Messages ........................................................................................................... 121 Configuring the Event Log ....................................................................................................................... 123 Configuring the Syslog Client .................................................................................................................. 124 Disabling the Syslog Client...................................................................................................................... 125 Viewing Neighboring Access Points .............................................................................................................. 126 Displaying the IP Addresses of AT-UWC Programs ...................................................................................... 129 Displaying Statistics ....................................................................................................................................... 130 Viewing Basic IP and Radio Information........................................................................................................ 134 Chapter 6: Services Menu .......................................................................................................................... 135 Configuring Quality of Service ....................................................................................................................... 136 Configuring SNMPv1 and v2c........................................................................................................................ 143 Enabling or Disabling the LEDs ..................................................................................................................... 150 Configuring the HTTP Server......................................................................................................................... 151 Enabling the HTTP Server....................................................................................................................... 151 Disabling the HTTP Server...................................................................................................................... 152 Configuring the HTTPS Server ...................................................................................................................... 153 Enabling the HTTPS Server .................................................................................................................... 153 Disabling the HTTPS Server ................................................................................................................... 154 Configuring the Maximum Number of Active Management Sessions............................................................ 155 Configuring the Management Session Timer................................................................................................. 156 Manually Setting the Date and Time.............................................................................................................. 157 Setting the Date and Time with the Network Time Protocol Client ................................................................ 159 Chapter 7: Maintenance Menu ................................................................................................................... 161 Restoring the Default Settings to the Access Point ....................................................................................... 162 Downloading the Configuration from the Access Point to Your Computer..................................................... 164 Restoring a Configuration to the Access Point .............................................................................................. 165 Rebooting the Access Point........................................................................................................................... 166 Enabling or Disabling the Reset Button ......................................................................................................... 167 6 Review Draft - May 9, 2014 Switching the Primary and Secondary Management Software Images..........................................................168 Uploading New Versions of the Management Software to the Access Point .................................................170 AT-TQ Wireless Access Point Series Users Guide 7 Review Draft - May 9, 2014 Contents 8 Review Draft - May 9, 2014 Figures Figure 1: AT-TQ2450 and AT-TQ3600 Access Points .................................................................................... 18 Figure 2: Log On Window................................................................................................................................ 22 Figure 3: Horizontal Menus ............................................................................................................................. 26 Figure 4: Vertical Menus.................................................................................................................................. 27 Figure 5: Dropdown Menus ............................................................................................................................. 27 Figure 6: Provide Basic Settings Window........................................................................................................ 30 Figure 7: Modify Ethernet (Wired) Settings Window........................................................................................ 36 Figure 8: Modify Wireless Settings Window .................................................................................................... 41 Figure 9: Modify Radio Settings Window......................................................................................................... 47 Figure 10: Modify Virtual Access Point Settings Window ................................................................................ 60 Figure 11: 802.1x Authentication for VAPs...................................................................................................... 61 Figure 12: Static WEP Encryption for VAPs .................................................................................................... 63 Figure 13: WPA Enterprise for VAPs............................................................................................................... 66 Figure 14: WPA Personal for VAPs................................................................................................................. 69 Figure 15: WDS Bridge Used to Connect LAN Segments............................................................................... 71 Figure 16: WDS Bridge Used to Extend a Network......................................................................................... 71 Figure 17: Valid Configurations of WDS Bridges............................................................................................. 72 Figure 18: Invalid Loop Configuration of Access Points .................................................................................. 72 Figure 19: Invalid Loop Configuration of Access Points to a Wired Network Device ...................................... 73 Figure 20: Invalid Configuration of Four Wireless Access Points.................................................................... 73 Figure 21: Configure WDS Bridges to Other Access Points Window.............................................................. 77 Figure 22: Remote Address List ...................................................................................................................... 78 Figure 23: Static WEP on WDS Bridges.......................................................................................................... 79 Figure 24: WPA Personal on WDS Bridges .................................................................................................... 80 Figure 25: Configure MAC Filtering of Client Stations Window ....................................................................... 83 Figure 26: Event Message for Unknown Access Points.................................................................................. 85 Figure 27: Configure Pre-Configured Rogue AP Window ............................................................................... 86 Figure 28: Configure Managed Access Point Parameters Window................................................................. 88 Figure 29: Manage Access Points in the Cluster Window............................................................................. 102 Figure 30: Active Cluster in the Manage Access Points in the Cluster Window............................................ 104 Figure 31: Manage Sessions Associated with the Cluster Window............................................................... 107 Figure 32: Automatically Manage Channel Assignments Window ................................................................ 109 Figure 33: Automatically Manage Channel Assignments Window - Automatic Channel Assignment Enabled ......................................................................................................................................................... 110 Figure 34: View Neighboring Access Points Window.................................................................................... 113 Figure 35: Neighbor Details........................................................................................................................... 114 Figure 36: View List of Currently Associated Client Stations......................................................................... 118 Figure 37: View Events Generated by this Access Point Window................................................................. 122 Figure 38: View Neighboring Access Points Window.................................................................................... 126 Figure 39: Displaying View List of Managing Switch IP Addresses and Base IP Port Obtained via DHCP .. 129 Figure 40: Status Table in the View Transmit and Receive Statistics for this Access Point Window............ 130 Figure 41: Transmit Statistics Table of the View Transmit and Receive Statistics for this Access Point Window.......................................................................................................................................................... 131 Figure 42: Receive Statistics Table of the View Transmit and Receive Statistics for this Access Point Window.......................................................................................................................................................... 132 9 Review Draft - May 9, 2014 List of Figures Figure 43: View Settings for Network Interfaces Window .............................................................................. 134 Figure 44: Modify QoS Queue Parameters.................................................................................................... 137 Figure 45: SNMP Configuration Window ....................................................................................................... 144 Figure 46: Control LEDs Window................................................................................................................... 150 Figure 47: Configure Web Server Settings Window....................................................................................... 151 Figure 48: Disable HTTP Server Prompt ....................................................................................................... 152 Figure 49: Generate SSL Certificate Prompt ................................................................................................. 153 Figure 50: Disable HTTPS Server Prompt..................................................................................................... 154 Figure 51: Modify How the Access Point Discovers the Time Window - Manually Setting the Date and Time ............................................................................................................................................................... 157 Figure 52: Daylight Savings Time Fields ....................................................................................................... 158 Figure 53: Modify How the Access Point Discovers the Time Window - Configuring the NTP Client............ 159 Figure 54: Manage this Access Points Configuration Window...................................................................... 163 Figure 55: Manage Firmware Window ........................................................................................................... 168 10 Review Draft - May 9, 2014 Tables Table 1. Review Description of this Access Point .......................................................................................... 31 Table 2. Modify Wireless Settings Window .................................................................................................... 44 Table 3. Modify Radio Settings Window ......................................................................................................... 48 Table 4. IEEE 802.1x ...................................................................................................................................... 61 Table 5. Static WEP ....................................................................................................................................... 63 Table 6. WPA Enterprise ................................................................................................................................ 67 Table 7. WPA Personal .................................................................................................................................. 69 Table 8. Available Encryption Settings on WDS Bridges ............................................................................... 74 Table 9. Static WEP on WDS Links ................................................................................................................ 79 Table 10. WPA Personal on WDS Links ........................................................................................................ 81 Table 11. Shared and Non-shared Parameters on the Access Points in a Cluster ........................................ 94 Table 12. Manage Sessions Associated with the Cluster Window ............................................................... 107 Table 13. Current Channel Assignments ...................................................................................................... 110 Table 14. Channel Reassignment Parameters ............................................................................................. 111 Table 15. View Neighboring Access Points Window .................................................................................... 114 Table 16. Neighbor Details Window ............................................................................................................. 115 Table 17. View List of Currently Associated Client Stations Window ........................................................... 118 Table 18. Event Messages Table ................................................................................................................. 122 Table 19. Neighboring Access Point Settings Window ................................................................................. 126 Table 20. Status Table Information .............................................................................................................. 131 Table 21. Transmit Statistics Table .............................................................................................................. 132 Table 22. Receive Statistics Table ............................................................................................................... 133 Table 23. Modify QoS Queue Parameters Window ...................................................................................... 137 Table 24. SNMP ........................................................................................................................................... 145 11 Review Draft - May 9, 2014 List of Tables 12 Review Draft - May 9, 2014 Preface This guide explains how to configure the AT-TQ2450 and AT-TQ3600 Wireless Access Points with the web browser management windows. This preface contains the following sections:

Safety Symbols Used in this Document on page 14 Contacting Allied Telesis on page 15 13 Review Draft - May 9, 2014 Preface Safety Symbols Used in this Document This document uses the following conventions. Note Notes provide additional information. Caution Cautions inform you that performing or omitting a specific action may result in equipment damage or loss of data. Warning Warnings inform you that performing or omitting a specific action may result in bodily injury. Warning Laser warnings inform you that an eye or skin hazard exists due to the presence of a Class 1 laser device. 14 Review Draft - May 9, 2014 Contacting Allied Telesis AT-TQ Wireless Access Point Series Users Guide If you need assistance with this product, you may contact Allied Telesis technical support by going to the Support & Services section of the Allied Telesis web site at www.alliedtelesis.com/support. You can find links for the following services on this page:

24/7 Online Support Enter our interactive support center to search for answers to your product questions in our knowledge database, to check support tickets, to learn about RMAs, and to contact Allied Telesis technical experts. USA and EMEA phone support Select the phone number that best fits your location and customer type. Hardware warranty information Learn about Allied Telesis warranties and register your product online. Replacement Services Submit a Return Merchandise Authorization (RMA) request via our interactive support center. Documentation View the most recent installation and user guides, software release notes, white papers, and data sheets for your products. Software Downloads Download the latest software releases for your managed products. For sales or corporate information, go to www.alliedtelesis.com/

purchase. 15 Review Draft - May 9, 2014 Preface 16 Review Draft - May 9, 2014 Chapter 1 Overview This chapter describes how to start the initial management session on the access point. This chapter contains the following sections:

AT-TQ Series of Wireless Access Points on page 18 Features on page 19 Management Modes and Methods on page 21 Starting a Management Session on the Access Point on page 22 Starting the Initial Management Session on the Access Point on page 23 Using the Management Menus and Windows on page 26 17 Review Draft - May 9, 2014 Chapter 1: Overview AT-TQ Series of Wireless Access Points The AT-TQ Series of wireless access points consists of the AT-TQ2450 and AT-TQ3600 Access Points. Refer to Figure 1. AT-TQ2450 Access Point AT-TQ3600 Access Point Figure 1. AT-TQ2450 and AT-TQ3600 Access Points 18 Review Draft - May 9, 2014 Features AT-TQ Wireless Access Point Series Users Guide The access points share the following features:

Independent 2.4 and 5 GHz radios IEEE 802.11a/b/g Wireless Distribution System (WDS) bridges Access point clustering Rogue access point detection Multiple SSIDs One 10/100/1000Base-T Ethernet port with Auto-Negotiation, auto MDI/MDIX, and IEEE 802.3af Power over Ethernet (PoE) MAC address filtering for wireless access security Broadcast and multicast rate limiting Virtual access points for multiple broadcast domains DHCP client RADIUS accounting with external RADIUS server Network Time Protocol (NTP) client Domain name server (DNS) client IEEE 802.1x authentication WPA-Personal and WPA-Enterprise with WPA, WPA2, TKIP, and CCMP (AES) authentication and encryption Static WEP encryption HTTP and HTTPS web browser management SNMPv1 and v2c management Quality of Service Event log Syslog client Table, wall, or ceiling installation Differences between the access points are listed here:

The AT-TQ2450 Access Point has external, adjustable antennas. The AT-TQ3600 Access Point has internal antennas. The AT-TQ2450 Access Point features IEEE 802.11n 2x2 MIMO chains with antenna diversity. The AT-TQ3600 Access Point features IEEE 802.11n 3x3 MIMO chains. 19 Review Draft - May 9, 2014 Chapter 1: Overview Both radios in the AT-TQ2450 Access Point have a data rate of 300 Mbps. Both radios in the AT-TQ3600 Access Point have a data rate of 450 Mbps. 20 Review Draft - May 9, 2014 Management Modes and Methods AT-TQ Wireless Access Point Series Users Guide The access point has two management modes:

Stand-alone mode: Access points in the stand-alone mode have to be managed individually. To configure a unit in this mode, you have to know its IP address or domain name, and the username and password of the manager account. This is the default setting for the access point. Cluster mode: The cluster management mode is intended for two or more access points that have similar configuration settings. When you change the parameter settings on an access point in a cluster, your changes are automatically communicated to the other access points. This reduces the need for having to configure the units individually. For cluster instructions, refer to Chapter 4, Cluster Menu on page 93. Here are the methods for managing the access point:

Web browser: The management software on the access point has management windows for you to use with the web browser on your management workstations. They make it easy for you to configure all the parameter settings and features. The access point supports both non-secure HTTP and secure HTTPS management sessions. The default is HTTP. For instructions on how to enable or disable the HTTP and HTTPS servers on the access point, refer to Configuring the HTTP Server on page 151 and Configuring the HTTPS Server on page 153 AT-UWC Unified Wireless Controller program: This optional program allows you to manage the access points from a central point. For instructions on how to configure the unit for the wireless controller program, refer to Configuring the Access Point for the Optional AT-UWC Program on page 88. SNMPv1 and v2c: You may also use SNMP to manage some of the parameter settings of the device. The MIB is available from the Allied Telesis web site. It should be noted that you can configure only a limited number of parameters on the access point with SNMP. To manage all the parameters, you must use a web browser or the optional AT-UWC program. For instructions on how to configure the unit for SNMP, refer to Configuring SNMPv1 and v2c on page 143. The default setting for SNMP is disabled. The product does not support SNMPv3. 21 Review Draft - May 9, 2014 Chapter 1: Overview Starting a Management Session on the Access Point This section explains how to start a management session on the access point from your management workstation. The procedure assumes that the access point has already been assigned an IP address. The address can be a static address that was manually assigned to the unit or it can be a dynamic address from a DHCP server. Note If the access point has not been assigned an IP address and is using its default address 192.168.1.230, refer to Starting the Initial Management Session on the Access Point on page 23 for instructions on how to start a management session. To start a management session on the access point, perform the following procedure:

1. Open the web browser on your management workstation. 2. Enter the IP address of the access point in the URL field of the web browser. You should now see the logon window, shown in Figure 2. Figure 2. Log On Window 3. Enter the username and password for the unit. The default values are manager for the username and friend for the password. The username and password are case-sensitive. 4. Click the Logon button. 22 Review Draft - May 9, 2014 Starting the Initial Management Session on the Access Point AT-TQ Wireless Access Point Series Users Guide If you just installed the device and are powering it on for the first time, it queries the subnet on the LAN port for a DHCP server. If a DHCP server responds to its query, the unit uses the IP address the server assigns to it. If there is no DHCP server, the access point uses the default IP address 192.168.1.230. There are a several ways to start the initial management session on the access point. One way is to establish a direct connection between your computer and the unit by connecting an Ethernet cable to the Ethernet port on the computer and the LAN port on the access point. This procedure requires changing the IP address on your computer to make it a member of the same subnet as the default IP address on the access point. You might perform this procedure if your network does not have a DHCP server and you want to configure the access point before connecting it to your network. The initial management session may also be performed while the device is connected to your network. However, If your network does not have a DHCP server, you still have to change the IP address of your computer to match the subnet of the default address of the access point. Furthermore, if your network is divided into virtual LANs (VLANs), you have to be sure to connect the access port and your computer to ports on an Ethernet switch that are members of the same VLAN. If your network has a DHCP server, use the IP address the server assigns it to it to start the management session. The instructions for starting the initial management session are found in the following sections:

Starting the Initial Management Session with a Direct Connection on page 24 Starting the Initial Management Session without a DHCP Server on page 24 Starting the Initial Management Session with a DHCP Server on page 25 Note The initial management session of the access point has to be conducted through the LAN port because the default setting for the radios is off. 23 Review Draft - May 9, 2014 Chapter 1: Overview Starting the Initial Management Session with a Direct Connection Starting the Initial Management Session without a DHCP Server 24 To start the management session with a direct Ethernet connection between your computer and the access port, perform the following procedure:

Note If the access point is using PoE, you may not perform this procedure because it involves a direct connection between your computer and the LAN port on the access point. You may either temporarily attach the power supply to the unit until after you have completed the initial management session or you may instead perform one of the other procedures for starting the initial management session. 1. Connect one end of a network cable to the LAN port on the access point and the other end to the Ethernet network port on your computer.

(This requires removing the LAN cable you connected earlier in the hardware installation instructions.) 2. Change the IP address on your computer to 192.168.1.n, where n is a number from 1 to 254, but not 230. Refer to the documentation that accompanies your computer for instructions on how to set the IP address. 3. Set the subnet mask on your computer to 255.255.255.0. 4. Power on the access point. 5. Start the web browser on your computer. 6. Enter the IP address 192.168.1.230 in the URL field of the browser and press the Return key. You should now see the logon window, shown in Figure 2 on page 22. 7. Enter manager for the username and friend for the password. The username and password are case-sensitive. 8. Click the Logon button. This procedure explains how to start the initial management session on the access port when the LAN port is connected to an Ethernet switch on a network that does not have a DHCP server. To start the management session, perform the following procedure:

1. If your network has VLANs, check to be sure that your computer and the access port are connected to ports on the Ethernet switch that are members of the same VLAN. This might require accessing the management software on the switch and listing the VLANS and their port assignments. For example, if the access port is connected to a port that is a member of the Sales VLAN, your computer must be Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide connected to a port that is also a member of that VLAN. If your network is small and does not have VLANs or routers, you may connect your computer to any port on the Ethernet switch. 2. Change the IP address on your computer to 192.168.1.n, where n is a number from 1 to 254, but not 230. Refer to the documentation that accompanies your computer for instructions on how to set the IP address. 3. Set the subnet mask on your computer to 255.255.255.0. 4. Power on the access point. 5. Start the web browser on your computer. 6. Enter the IP address 192.168.1.230 in the URL field of the browser and press the Return key. You should now see the logon window, shown in Figure 2 on page 22. 7. Enter manager for the username and friend for the password. The username and password are case-sensitive. 8. Click the Logon button. Starting the Initial Management Session with a DHCP Server This procedure explains how to start the initial management session on the access port when the LAN port is connected to a network that has a DHCP server. This procedure assumes that you have already configured the DHCP server with the appropriate information for the access point

(e.g., IP address and default gateway). To start the management session, perform the following procedure:

1. Power on the access point. 2. Start the web browser on your computer. 3. Enter the IP address of the access point in the URL field of the browser and press the Return key. This is the IP address assigned to the access point by the DHCP server. If you do not know the address, refer to the DHCP server. You should now see the logon window, shown in Figure 2 on page 22. 4. Enter manager for the username and friend for the password. The username and password are case-sensitive. 5. Click the Logon button. 25 Review Draft - May 9, 2014 Chapter 1: Overview Using the Management Menus and Windows Web Browser Menus Here is general information about the management menus and windows. You may control the appearance of the menus with the Navigator pull-

down menu in the upper right corner of the web browser windows. The menu options are Horizontal Tabs, Vertical Tabs, and Dropdown Menus. The Horizontal Tabs selection displays the main menu in a row near the top of the windows. Clicking a menu selection displays the menu options in a row beneath the main menu. Figure 3 shows the Manage menu. Figure 3. Horizontal Menus The Vertical Tabs selection displays the menus in a column on the left side of the management windows, as shown in Figure 4 on page 27. 26 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Figure 4. Vertical Menus The Dropdown Menu option displays the main menu in a horizontal row near the top of the window. Menu options are displayed vertically when you move the mouse over the options in the main menu. Figure 5 shows the Manage menu. Figure 5. Dropdown Menus 27 Review Draft - May 9, 2014 Chapter 1: Overview Saving Your Changes The menus contain the same selections and perform the same functions regardless of the format. You may switch between formats without interrupting your current session or having to stop and start it again. You need to remember to click the Update button when you are finished configuring the parameters in a management window. The button is located in the bottom of the windows. When you click the button, the access point immediately activates your changes and saves them in the configuration file. If you navigate to a different window without clicking the Update button, your changes are lost and have to be reentered. Logging Off You should always log off when you are finished managing the unit. To log off, click the Log Off option in the upper right corners of the management windows. 28 Review Draft - May 9, 2014 Chapter 2 Basic Settings Menu This chapter describes the management functions of the menu selections in the Basic Settings menu. The chapter contains the following sections:

Displaying Basic Information on page 30 Changing the Managers Login Name and Password on page 32 Changing the System Name, Contact, and Location on page 33 29 Review Draft - May 9, 2014 Chapter 2: Basic Settings Menu Displaying Basic Information This section explains how to display the following information about the access point:

IP address MAC address Firmware version number Build number Operational time To display the information, select Basic Settings from the main menus to display the Provide basic settings window. The information is contained in the Review Description of the Access Point section of the window. Refer to Figure 6. The fields are defined in Table 1 on page 31. Figure 6. Provide Basic Settings Window 30 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 1. Review Description of this Access Point Field IP Address MAC Address Firmware Version Build Number Time since system-up Description Displays the IP address of the access point. For instructions on how to set the IP address, refer to Assigning a Static IP Address to the Access Point on page 36 or Assigning a Dynamic IP Address from a DHCP Server to the Access Point on page 38. Displays is the MAC address of the device and radio 1. Radio 2 has a different MAC address. You may not change the MAC addresses of the device or radios. Displays is the version number of the management software on the access point. Displays the build number. This number and the firmware version number identify the management software. Displays the amount of time since the unit was reset or powered on. 31 Review Draft - May 9, 2014 Chapter 2: Basic Settings Menu Changing the Managers Login Name and Password This procedure explains how to change the login name and password of the manager account on the access point. The default values are manager and friend, respectively. The access point can have only one manager account. Changing the name and password does not affect your current management session of the access point. To change the login name and password for the manager account, perform the following procedure:

1. Select Basic Settings from the main menus. The access point displays the Provide basic settings window, shown in Figure 6 on page 30. 2. To change the manager name, select the Administrator Name field in the Provide Network Settings section of the window and enter the new name. Refer to Figure 6 on page 30. The name can be up to 12 alphanumeric characters. The first character must be a letter. It cannot be a number or special character. The name is case-sensitive. 3. To change the password, perform these steps:

a. Select the Current Password field in the Provide Network Settings section of the window and enter the accounts current password. b. Select the New Password field and enter a new password of up to 32 alphanumeric characters. It may not contain spaces or any of these special characters: , $, :, <, >, , &, *. The password is case-

sensitive. The new password is displayed as a series of asterisks on your screen. c. Select the Confirm New Password field and enter the new password again. 4. After editing the fields, click the Update button at the bottom of the window to activate your changes and save them in the configuration file on the access point. You must use the new manager name and password for all future management sessions on the unit. 32 Review Draft - May 9, 2014 Changing the System Name, Contact, and Location AT-TQ Wireless Access Point Series Users Guide This procedure explains how to identify the access point by defining the system name, the person responsible for managing the device, and its location. This information is optional. To change the system name, contact, and location information, perform the following procedure:

1. Select Basic Settings from the main menus. The access point displays the Provide basic settings window. Refer to Figure 6 on page 30. 2. To change the system name, select the System Name field in the System Settings section of the window and enter a new name. The name can be up to 64 alphanumeric characters. Spaces are allowed. The default name is AT-TQ2450 or AT-TQ3600. 3. To enter the name of the person responsible for managing the unit, select the System Contact field and enter a name. You might also include the phone number and email address of the individual in this field. The name can be up to 64 alphanumeric characters. Spaces are allowed. The default name is unknown. 4. To specify the location of the access point, select the System Location field and enter the location. The location can be up to 64 alphanumeric characters. Spaces are allowed. The default location is unknown. 5. After editing the fields, click the Update button at the bottom of the window to activate your changes and save them in the configuration file on the device. 33 Review Draft - May 9, 2014 Chapter 2: Basic Settings Menu 34 Review Draft - May 9, 2014 Chapter 3 Manage Menu This chapter describes the management functions of the menu selections in the Manage menu. The chapter contains the following sections:

Assigning a Static IP Address to the Access Point on page 36 Assigning a Dynamic IP Address from a DHCP Server to the Access Point on page 38 Setting VLAN IDs on page 39 Enabling or Disabling Broadcast Ping Replies on page 40 Setting the Country Setting on page 41 Configuring Basic Radio Settings on page 43 Configuring the Radio Settings on page 46 Configuring Virtual Access Points on page 58 Managing Wireless Distribution System Bridges on page 71 Configuring the MAC Address Filter on page 82 Generating Event Messages for Unknown Access Points on page 85 Configuring the Access Point for the Optional AT-UWC Program on page 88 35 Review Draft - May 9, 2014 Chapter 3: Manage Menu Assigning a Static IP Address to the Access Point This section explains how to manually assign an IP address to the access point. The unit uses the address to communicate with devices on your network, such as management workstations, syslog servers, and RADIUS servers. The access point may have only one IP address. If you have a DHCP server on your network and prefer the access point obtain its IP configuration from the server, refer to Assigning a Dynamic IP Address from a DHCP Server to the Access Point on page 38. Note Changing the IP address of the access point interrupts your management session. To resume managing the device, you may have to change the IP address of your management workstation. To manually assign an IP address to the unit, perform the following procedure:

1. From the Manage menu, select Ethernet Settings. The access point displays the Modify Ethernet (Wired) Settings window in Figure 7. Figure 7. Modify Ethernet (Wired) Settings Window 2. From the Connection Type pull-down menu, select Static IP. 36 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide The Static IP Address, Subnet Mask, and Default Gateway fields in the window are activated so that you can change their values. 3. Select the Static IP Address field and enter the new IP address for the access point. The default address is 192.168.1.230. 4. Select the Subnet Mask fields and enter the subnet mask for the IP address. The default subnet mask is 255.255.255.0. 5. Select the Default Gateway fields and enter the default gateway address for the unit. The default gateway address is 192.168.1.254. The default gateway is an IP address of an interface on a router or other Layer 3 routing device. It specifies the first hop to reaching the subnets or networks where your management devices, such as management workstations and syslog servers, reside. The access point can have only one default gateway and the network portion of the address must be the same as the IP address entered in step 3. You have to assign a default gateway to the access point. If your network does not have a default gateway or you do not want to assign one to the access point at this time, enter an unused IP address of the same network as the IP address entered in step 3. 6. If you want to specify the IP addresses of Domain Name servers, enter up to two IP addresses in the DNS Nameservers fields. If you have only one DNS IP address, you must enter it in the top field. 7. Click the Update button at the bottom of the window to activate and save your changes on the access point. Your management session is interrupted. 8. Start a new management session using the new IP address of the device. 37 Review Draft - May 9, 2014 Chapter 3: Manage Menu Assigning a Dynamic IP Address from a DHCP Server to the Access Point This section explains how to assign an IP address to the access point from a DHCP server. The unit uses the address to communicate with devices on your network, such as management workstations, syslog servers, and RADIUS servers. The access point may have only one IP address. If you network does not have a DHCP server or you prefer to manually assign it an IP address, refer to Assigning a Static IP Address to the Access Point on page 36. Note Changing the IP address of the access point interrupts your management session. To resume managing the device, you may have to change the IP address of your management workstation. To activate the DHCP client to have the access point obtain its IP address configuration from a DHCP server, perform the following procedure:

1. From the Manage menu, select Ethernet Settings. The access point displays the Modify Ethernet (Wired) settings window in Figure 7 on page 36. 2. From the Connection Type menu, select DHCP. This is the default setting. 3. If you want to manually specify the IP addresses of Domain Name servers, click Manual dialog button for DNS Nameservers and enter up to two IP addresses. If you have only one DNS IP address, you must enter it in the top address field. If you want the access point to use the DNS addresses provided by the DHCP server, click the Dynamic dialog circle. 4. Click the Update button at the bottom of the window to activate and save your changes on the access point. Your management session is interrupted. The DHCP client on the unit queries the subnet on the LAN port for a DHCP server. If it receives a response, it uses the IP configuration the server provides. If there is no response, the unit uses the default IP address 192.168.1.230. 5. To resume your management session on the device, enter the new IP address of the access point in the URL field of your web browser. 38 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Setting VLAN IDs The Modify Ethernet (Wired) settings window has two settings for VLAN IDs (VIDs). One setting is used to specify the management VLAN and the other is used to designate a VLAN for untagged traffic. Management VLAN ID The Management VLAN ID field in the Modify Ethernet (Wired) settings window is used to specify the VLAN of your management workstations. To specify the management VID, perform the following procedure:

1. From the Manage menu, select Ethernet Settings. The access point displays the Modify Ethernet (Wired) settings window in Figure 7 on page 36. 2. Select the Management VLAN ID field and enter a value of 1 to 4094. The number should be the VID of the VLAN where your management workstation is located. You may specify only one VID. 3. Click the Update button to activate and save your changes on the access point. VLAN ID for Untagged Traffic The Untagged VLAN and Untagged VLAN ID fields in the Modify Ethernet

(Wired) settings window allow you to specify a VLAN for untagged traffic. To specify the VLAN, perform the following procedure:

1. From the Manage menu, select Ethernet Settings. The access point displays the Modify Ethernet (Wired) settings window in Figure 7 on page 36. 2. For the Untagged VLAN field, do one of the following:

Click Enabled if you want to be able to designate one VLAN on the access point as an untagged VLAN. This is the default setting. Click Disabled if the access point is to handle only tagged packets. 3. If your selected Enabled, select the Untagged VLAN ID field and enter the ID number of the VLAN which is to carry untagged packets. You may enter only one VID. The default value is 1. 4. Click the Update button to activate and save your changes on the access point. 39 Review Draft - May 9, 2014 Chapter 3: Manage Menu Enabling or Disabling Broadcast Ping Replies You may configure the access point to either ignore or reply to ICMP echo requests to IP broadcast addresses, also referred to as broadcast pings. To configure broadcast ping replies, perform the following procedure:

1. From the Manage menu, select Ethernet Settings. The access point displays the Modify Ethernet (Wired) settings window in Figure 7 on page 36. 2. In the Directed Broadcast ICMP Reply field, do one of the following:

If you want the access point to respond to broadcast pings, click the Enabled dialog circle. If you do not want the access point to respond to broadcast pings, click the Disabled dialog circle. 3. Click the Update button to activate and save your changes on the access point. 40 Review Draft - May 9, 2014 Setting the Country Setting AT-TQ Wireless Access Point Series Users Guide You should set the country setting of the access point as soon as you install the unit. This ensures that the device operates in compliance with the codes and regulations of your region or country. Note Changing the country setting of the access point disables both radios. Consequently, this procedure is disruptive to the operations of your network if the unit is actively forwarding network traffic. To set the country setting, perform the following procedure:

1. Select Wireless Settings from the Manage menu. The access point displays the Modify wireless settings window, shown in Figure 8. Figure 8. Modify Wireless Settings Window 2. Select the Country pull-down menu and select your country or region. 41 Review Draft - May 9, 2014 Note If the Country pull-down menu is deactivated, the country parameter was set by the manufacturer and cannot be changed. Contact your Allied Telesis sales representative for assistance if the setting is not correct for your country or region. The access point displays a confirmation prompt. 3. Click OK to change the country setting or Cancel to cancel the procedure. If you click OK, the access point changes the country setting and disables both radios on the access point. For instructions on how to enable the radios and configure their settings, refer to Configuring Basic Radio Settings on page 43 and Configuring the Radio Settings on page 46. This procedure does not require clicking the Update button. You must now reboot the access point. The new country setting is not active until the unit is rebooted. To reboot the unit, either power off and on the unit or continue with these steps:

4. From the Maintenance menu, select Configuration. 5. Click the Reboot button in the To Reboot the Access Point section of the Manage the Access Points Configuration window. 6. When the access point displays a confirmation prompt, click OK to reboot the unit or Cancel to cancel the procedure. 7. To resume managing the unit, wait for it to complete initializing its management software and then start a new management session. Chapter 3: Manage Menu 42 Review Draft - May 9, 2014 Configuring Basic Radio Settings AT-TQ Wireless Access Point Series Users Guide The management software has two windows for configuring the operational settings of the radios in the access point. The Modify radios settings window, described in Configuring the Radio Settings on page 46, is the main window for adjusting the radio parameters because it contains all the parameters, everything from operational mode to broadcast/multicast rate limiting. This is the window to use when you need to fine tune the properties of the radios. If you are only interested in configuring basic radio parameters, you may find everything you need in the Modify wireless settings window, which is the topic of this section. From this window you can perform these basic radio functions:

Enable or disable a radio Select the operational mode Select the channel Enable or disable the station isolation mode When you change a radio parameter in the Modify wireless settings window, the change is reflected in the Modify radios settings window. So you could enable a radio here and perhaps select the channel, and then move to the Modify radio settings window to adjust additional parameters. The Modify wireless settings window does contain one parameter, however, that is not in the Modify radio settings window, and that is the station isolation mode parameter. The parameter determines whether the clients of a VAP can communicate with each other through the access point. That parameter can only be set from this window. To configure basic radio settings from the Modify wireless settings window, perform the following procedure:

1. From the Manage menu, select Wireless Settings. The access point displays the Modify wireless settings window. An example is shown in Figure 8 on page 41. 2. Configure the settings as needed. The parameters are described in Table 2 on page 44. 3. When you are finished configuring the parameters, click the Update button to activate and save your changes on the access point. 43 Review Draft - May 9, 2014 Chapter 3: Manage Menu Table 2. Modify Wireless Settings Window Field Radio On Off MAC Address Mode Description Enables or disables the radio. The selections are described here:

- On: Enables the radio. You have to enable a radio before you can configure its parameter settings.

- Off: Disables the radio. This is the default setting. Displays the MAC address of the radio. This value cannot be changed Specifies the Physical Layer (PHY) standard of the radio. The available modes depend on the radio and country. The modes are:

- IEEE 802.11a: The access point accepts only 802.11a clients.

- IEEE 802.11b/g: The access point accepts only 802.11b and 802.11g clients.

- IEEE 802.11a/n: The access point accepts only 802.11a and 802.11n clients operating at 5 GHz. This is the default setting for the 5 GHz radio.

- IEEE 802.11b/g/n: The access point accepts 802.11b, 802.11g, and 802.11n clients operating at 2.4 GHz. This is the default setting for the 2.4 GHz radio.

- 2.4 GHz IEEE 802.11n: The access point accepts only 802.11n clients operating at 2.4 GHz.

- 5 GHz IEEE 802.11n: The access point accepts only 802.11n clients operating at 5 GHz. 44 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 2. Modify Wireless Settings Window (Continued) Field Channel Station Isolation Description Specifies the channel for the radio in the access point. The number of available channels varies by radio, mode, and country. Here are the guidelines:

- At the Auto setting, the access point sets the channel automatically. The access point listens on the channels and selects the one with the least traffic.This is the default setting.

- You can select a channel from the pull-

down menu. You may select only one channel.

- The Auto selection is not available if you use the cluster feature to automatically assign the channels to the radios in the access points. For information, refer to Using Automatic Channel Assignments on page 109. Enables or disables station isolation. When station isolation is enabled, the access point does not allow the wireless clients of a VAP to communicate with each other, but does allow them to communicate with clients in other VAPs and with the wired LAN. The feature is disabled when the dialog box is empty and enabled when the dialog box has a check mark. The default setting is disabled. To activate or deactivate the feature, click the dialog box to insert or remove the check mark. 45 Review Draft - May 9, 2014 Chapter 3: Manage Menu Configuring the Radio Settings To configure the parameter settings of the 2.4 and 5 GHz radios, perform the following procedure:

1. From the Manage menu, select Radio. The management software displays the Modify radio settings window, shown in Figure 9 on page 47. 2. From the Radio pull-down menu, select a radio. Options 1 and 2 are the 2.4 and 5 GHz radios, respectively. The default is radio 1. You can configure only one radio at a time. 3. To activate a radio, click the On dialog circle for the Status option. You cannot configure a radio when its status is off. To deactivate a radio, click the Off dialog circle. 4. Configure the radio parameters, which are defined in Table 3 on page 48. 5. When you are finished configuring the parameters, click the Update button to activate and save your changes on the access point. 46 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Figure 9. Modify Radio Settings Window 47 Review Draft - May 9, 2014 Chapter 3: Manage Menu Mode Table 3. Modify Radio Settings Window Parameter Description Specifies the Physical Layer (PHY) standard of the radio. The available modes depend on the radio and country. The modes are:

- IEEE 802.11a: The access point accepts only 802.11a clients.

- IEEE 802.11b/g: The access point accepts only 802.11b and 802.11g clients.

- IEEE 802.11a/n: The access point accepts only 802.11a and 802.11n clients operating at 5 GHz. This is the default setting for the 5 GHz radio.

- IEEE 802.11b/g/n: The access point accepts 802.11b, 802.11g, and 802.11n clients operating at 2.4 GHz. This is the default setting for the 2.4 GHz radio.

- 2.4 GHz IEEE 802.11n: The access point accepts only 802.11n clients operating at 2.4 GHz.

- 5 GHz IEEE 802.11n: The access point accepts only 802.11n clients operating at 5 GHz. 48 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 3. Modify Radio Settings Window (Continued) Parameter Description Channel Eligible Channels Specifies the radio channel. The available channels vary by radio, mode, and country. Here are the guidelines:

- The Auto setting, the default setting, sets the channel automatically. The access point selects the channel with the least traffic. This is the default setting.

- You can set the channel manually using the Channel pull-down menu.

- The Auto selection is not available when automatic channel reassignment in the cluster feature is activated, as explained in Chapter 4, Cluster Menu on page 93.

- If you select Auto, you may use the Eligible Channels parameter to restrict the channels from which the access point may choose.

- You must set the channel manually if you are using the Wireless Distribution System (WDS) bridge feature, as explained in Managing Wireless Distribution System Bridges on page 71. Specifies the available channels when the channel is selected automatically. This selection is unavailable when the channel is selected manually. The available channels vary by radio, mode, and country. To deselect a channel, click its dialog box to remove the check mark. The default is all available channels. 49 Review Draft - May 9, 2014 Chapter 3: Manage Menu Table 3. Modify Radio Settings Window (Continued) Parameter Periodical Channel Refresh Channel Bandwidth Description Specifies whether the access point periodically reruns the channel selection process. Here are the guidelines:

- This selection is only available when the Channel parameter is set to Auto.

- Adding a check mark to the dialog box enables the feature.

- Removing the check mark from the dialog box disables the feature. This is the default setting.

- The access point runs the channel selection process every 24 hours, but only if the radio is not forwarding traffic from wireless clients. If it detects traffic, the access point delays the selection process for thirty minutes. Specifies whether the radio should use a 40 MHz-wide channel or the legacy 20 MHz-wide channel. Here are the guidelines:

- The 40 MHz-wide channel allows for higher data rates, but reduces the number of available channels for other wireless devices.

- This parameter is only available with 802.11n modes. 50 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 3. Modify Radio Settings Window (Continued) Parameter Primary Channel Description Specifies the location of the Primary channel when a radio is operating at 40 MHz. A 40 MHz channel consists of two 20 MHz channels. They are contiguous in the frequency domain and referred to as the Primary and Secondary channels. The Primary channel is used by 802.11n clients that support only a 20 MHz channel bandwidth, and for legacy clients. You may use this parameter to specify the Primary channel of the 40 MHz bandwidth. The options are described here:

- Upper: Designates the upper 20 MHz channel of the 40 MHz bandwidth as the Primary channel.

- Lower: Designates the lower 20 MHz channel of the 40 MHz bandwidth as the Primary channel. This is the default setting. This parameter is only available with 802.11n modes. 51 Review Draft - May 9, 2014 Chapter 3: Manage Menu Table 3. Modify Radio Settings Window (Continued) Parameter Short Guard Interval Supported Description Specifies the dead time interval, in nanoseconds, between OFDM symbols. The guard interval prevents Inter-Symbol and Inter-Carrier Interference (ISI, ICI). The 802.11n mode supports a reduction in the interval from 800 nanoseconds, defined in the a and g standards, to 400 nanoseconds. This may provide up to a 10% improvement in data throughput. The selections are described here:

- Yes: The access point uses a 400 ns guard interval when communicating with clients that also support the feature. This is the default setting.

- No: The access point uses an 800 ns guard interval. This parameter is only available with the 802.11n modes. 52 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 3. Modify Radio Settings Window (Continued) Parameter Description Multidomain Regulatory Mode Specifies whether a radio should operate in the Multidomain Regulatory Mode

(World Mode) and include the country code in its beacons and probe responses. This allows client stations to operate in any country without reconfiguration. This feature only applies to radio 1 because it operates in the g band (2.4 GHz band). This selection does not apply to radio 2 because it operates in the a band (5 GHz band) and always includes the country code in its beacons, as specified in the 802.11h standard. The settings are described here:

- Enabled: Activates the Multidomain Regulatory Mode (World Mode) and includes the country code in the beacons and probe responses.

- Disabled: Disables the Multidomain Regulatory Mode (World Mode) and prevents the transmission of the country code in beacons and probe responses. 53 Review Draft - May 9, 2014 Chapter 3: Manage Menu Table 3. Modify Radio Settings Window (Continued) Parameter Description Protection Beacon Interval DTIM Period Enables or disables rules that guarantee that transmissions do not cause interference with legacy stations or applications. The possible settings are describe here:

- Auto: This setting enables protection when legacy devices are within range of the radio.

- Off: This setting disables the protections. Legacy clients and access points within range may be affected by 802.11n transmissions. Here are the guidelines:

- The protection applies to 802.11n and 802.11b/g.

- Activating protection does not prevent clients from associating with the access point. Specifies the time interval, in milliseconds, for transmissions of beacon frames. The access point transmits beacon frames to announce the existence of the wireless network. The range is 20 to 2000 milliseconds. The default setting is 100 milliseconds (10 beacon frames per second). Specifies the Delivery Traffic Information Map (DTIM) period. This value specifies how often clients sleeping in low power mode should check the access point for buffered traffic. The interval is defined in beacon frames. The range is 1 to 255 beacons frames. The default is 2 beacon frames. 54 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 3. Modify Radio Settings Window (Continued) Parameter Description Fragmentation Threshold RTS Threshold Maximum Stations Specifies packet size for fragmentation. The fragmentation threshold lets you control the maximum size of packets the access point transmits. Packets that exceed the threshold are transmitted as multiple 802.11 packets. The range is 256 to 2346 bytes. Setting the threshold to the maximum value effectively disables fragmentation. Fragmentation involves more overhead because of the extra work in dividing up and reassembling frames, which can reduce throughput. But fragmentation can be useful in controlling interference. Specifies the size in octets of MPDUs that initiate a Request to Send (RTS) and Clear to Send (CTS) handshake. The range is 0 to 2347 octets. You may use this parameter to control the use of RTS/CTS handshakes when the access point transmits MPDUs. The access point uses the handshake before transmitting MPDUs that exceed the defined threshold. If you specify a low value, RTS packets are sent more frequently. This may consume more bandwidth and reduce the throughput. But more RST packets may help a network recover from interference or collisions, which might occur on a busy network. Specifies the maximum number of clients the access point supports. The value is 0 to 200. When this parameter is set to 0, the access point rejects all clients. Allied Telesis recommends setting this parameter to 30 clients. The default is 200 clients. 55 Review Draft - May 9, 2014 Chapter 3: Manage Menu Table 3. Modify Radio Settings Window (Continued) Parameter Transmit Power Fixed Multicast Rate Legacy Rate Sets MCS (Data Rate) Settings 56 Description Specifies the transmission power of the access point. The power is selected from a list of percentages, in the range of 1% to 100%. The default is 100%. Here are the guidelines:

- High transmission power levels are more cost-effective than low settings because the access point has a greater range. This reduces the number of access points required to cover a particular area.

- Low transmission power settings can be useful in reducing overlap and interference between access points or increasing security by limiting the wireless signals to a physical location. Specifies the multicast transmission rate of the access point. At the default Auto setting, the multicast transmission rate is fixed to the minimum rate in the Legacy Rate Sets setting. The value is in Mbps. Specifies the supported and advertised data transmission rates of the access point. Here are the guidelines:

- The Supported row specifies the data rates the access point supports. The default setting is all data rates.

- The Basic row specifies the data rates the access point advertises to other access points and wireless clients.

- The access point is generally more efficient when it advertises a subset of its supported data rates. Specifies the Modulation and Coding Scheme (MCS) index the radio should advertise to 802.11n clients. The MCS indexes (also known as MCS data rates) are defined in the 802.11n standard. Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 3. Modify Radio Settings Window (Continued) Parameter Description Broadcast/Multicast Rate Limiting Enables or disables rate limiting of broadcast and multicast packets. Here are the guidelines

- To activate rate limiting, click the dialog box to add a check mark. To deactivate rate limiting, click the box to remove the check mark. The default setting is disabled.

- The Rate Limit parameter defines the maximum number of broadcast and multicast packets per second of the access point. The parameter has a range of 1 to 50 packets per second. The default is 50 packets per second.

- The Rate Limit Burst parameter allows intermittent bursts of traffic on the access point above the rate limit. The default is 75 packets per second.

- The Rate Limit Burst parameter must be greater than the Rate Limit parameter. 57 Review Draft - May 9, 2014 Chapter 3: Manage Menu Configuring Virtual Access Points Virtual access points (VAPs) function as independent broadcast domains and are the wireless equivalent of Ethernet VLANs. They are seen by clients as independent access points, with their own VIDs, SSIDs, and security methods. Here are the guidelines to VAPs:

Each radio can have up to 16 VAPs. Allied Telesis recommends no more than five VAPs per radio. The VAPs are numbered from 0 to 15. If you use the cluster feature, VAPs are shared among the access points of the cluster. For further information, refer to Chapter 4, Cluster Menu on page 93. You can enable and disable the VAPs individually, except for the default VAP, VAP0, which can only be disabled by disabling the radio itself. The security methods for the VAPs are 802.1x, static WEP, Enterprise WPA, and Personal WPA. The VAPs of a radio can have different security methods. VAPs can have the same or different VLAN IDs. The access point does not forward traffic on disabled VAPs. To configure VAPs, perform the following procedure:

1. From the Manage menu, select VAP. The management software displays the Modify Virtual Access Point settings window, shown in Figure 10 on page 60. 2. Use the Radio pull-down menu above the list of VAPs to select a radio. Menu options 1 and 2 are the 2.4 and 5 GHz radios, respectively. The default is radio 1. You can configure only one radio at a time. 3. Click the Enabled dialog box of the VAP you want to edit. You cannot edit a VAP when it is disabled. A VAP is enabled when the Enabled dialog box has a check mark and disabled when the dialog box is empty. You can configure more than one VAP at a time. Note If you remove the check mark from the Enabled dialog box, you disable the VAP. A disabled VAP does not forward network traffic. 4. Enter the VID for the VAP in the VLAN ID field. 58 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Here are the guidelines for VIDs:

The range is 1 to 4094. The default is VID 1. You may assign the same VID to more than one VAP. A VAP can have only one VID. The number is ignored for wireless clients who are assigned VIDs from a RADIUS server because VIDs from a RADIUS server take precedence over the number in this field. Consequently, if you configure the security on a VAP to 802.1X or WPA Enterprise, both of which require a RADIUS server, the value in this field is ignored for clients who have VIDs in their RADIUS accounts. If you use 802.1x security for a VAP and activate Require VLAN ID in Dynamic VLAN, the VID for the dynamic VLAN must come from the client accounts on the RADIUS server. 5. Select the SSID field and enter a name for the VAP. Here are the guidelines:

A VAP must have a name. A name can be from 1 to 32 characters. Spaces are allowed. You may assign the same name to more than one VAP. 6. Click the Broadcast SSID dialog box to either enable or disable the broadcast of the SSID of the VAP by the radio on the access point. When the dialog box has a check mark, the default setting, the access point transmits the SSID to advertise the VAP to the clients. When the dialog box is empty, the access point does not advertise the VAP. Clients who want to connect to a VAP that is not advertised have to know its name. 7. From the Security pull-down menu, select the security method for the VAP and configure the security settings. The security options are described in the following sections:

No Security on page 61 IEEE 802.1x Security on page 61 Static WEP on page 63 WPA Enterprise on page 66 WPA Personal on page 69 The default security level for VAPs is None, which does not provide authentication or packet encryption for VAPs. 59 Review Draft - May 9, 2014 Chapter 3: Manage Menu 8. If you want to control access to your network through the VAP by filtering clients by their MAC addresses, select the MAC Filtering pull-

down menu and select Enabled. To disable MAC address filtering, select Disabled, the default setting. For instructions on how to configure the filter, refer to Configuring the MAC Address Filter on page 82. 9. Click the Update button to activate and save your changes on the access point. The + button to the right of each VAP row displays the security settings. Figure 10. Modify Virtual Access Point Settings Window 60 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide No Security IEEE 802.1x Security The None security level is intended for VAPs with wireless clients that do not require encryption or authentication. This is the default setting. The guidelines for IEEE 802.1x security are listed here:

This security method requires an external RADIUS server capable of EAP. The authentication server must have Protected EAP (PEAP) and MSCHAP V2 to support Windows clients. The clients and VAPs must use the same authentication method. The IEEE 802.1x security parameters are shown in Figure 11 and described in Table 4. Figure 11. 802.1x Authentication for VAPs Field RADIUS IP Address Secondary RADIUS IP Address Table 4. IEEE 802.1x Description Enter the IPv4 address of the primary RADIUS server. Enter the IPv4 address of the secondary RADIUS server. This field is optional. The access point sends authentication requests to this address if the primary RADIUS server does not respond to requests. 61 Review Draft - May 9, 2014 Chapter 3: Manage Menu Table 4. IEEE 802.1x (Continued) Field RADIUS Key Secondary RADIUS Key RADIUS Port (Range: 0 -

65535) RADIUS Accounting Port

(Range: 0 - 65535) Enable RADIUS Accounting Require VLAN ID in Dynamic VLAN Broadcast Key Refresh Rate (Range: 0 - 86400) Description Enter the shared secret key for the primary RADIUS server. The key can be up to 128 characters and can consist of letters, numbers, and special characters. The key is case-sensitive. This key must be the same as the key on the server. Enter the shared secret key for the secondary RADIUS server. Enter the RADIUS port number of the RADIUS server. If you entered IP addresses for both primary and secondary servers, the units must use the same port number. The default is 1812. Enter the RADIUS accounting port number of the RADIUS server. If you entered IP addresses for both primary and secondary servers, the units must use the same accounting port number. The default is 1813. Enable or disable RADIUS accounting by clicking the dialog box. The feature is enable when the dialog box has a check mark and disabled when the dialog box is empty. The default setting for accounting is disabled. Enable or disable whether wireless clients receive their VIDs from their accounts on the RADIUS server. When the dialog box has a check mark, the feature is enabled and the wireless clients receive their VIDs from the RADIUS server when they are authenticated. The feature is disabled when the dialog box is empty. The default setting is disabled. Specify the refresh rate for the broadcast

(group) key for the clients of the VAP. The range is 0 to 86400 seconds. The default is 0 seconds. The value 0 disables to refresh rate so that the broadcast key is not refreshed. 62 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 4. IEEE 802.1x (Continued) Field Description Session Key Refresh Rate

(Range: 0 - 86400) Specify the refresh rate for the session

(unicast) key for the clients of the VAP. The range is 0 to 86400 seconds. The default is 0 seconds. The value 0 disables the refresh rate so that the unicast key is not refreshed. Static WEP The parameter settings for static WEP security are shown in Figure 12 and defined in Table 5. Figure 12. Static WEP Encryption for VAPs Field Transfer Key Index Key Length Key Type Table 5. Static WEP Description Select the key the access point should use to encrypt network traffic. Select the key length of 64 or 128 bits. The default is 128 bits. Select whether the key is ASCII or hexadecimal. The default is hexadecimal. 63 Review Draft - May 9, 2014 Chapter 3: Manage Menu Table 5. Static WEP (Continued) Field WEP Keys Description Enter up to four WEP keys in the fields numbered 1 to 4. The key length and type settings determine the length and format of the keys. The order of the keys has be the same on the access point and clients. Here are the guidelines for ASCII keys:

An ASCII key may contain upper and lower characters and the numbers 0 to 9. An ASCII key is case-sensitive. The key length of 64 bits requires five ASCII characters. The key length of 128 bits requires 13 ASCII characters. Here are the guidelines for hexadecimal keys:

A hexadecimal key may contain the letters A to F and numbers 0 to 9. The key length of 64 bits requires 10 hexadecimal characters. The key length of 128 bits requires 26 hexadecimal characters. 64 Review Draft - May 9, 2014 Field Authentication AT-TQ Wireless Access Point Series Users Guide Table 5. Static WEP (Continued) Description Specify whether or not the access point authenticates VAP clients. The options are described here. Open System: The access point does not authenticate the VAP clients. All clients, even those without the correct WEP keys, are allowed to connect to the access point. This is the default setting. (Clients in an open system VAP still must have the correct WEP key to encrypt and decrypt the traffic they exchange with the access point.) Shared Key: Clients must have the correct WEP key to connect with the access point. Clients without the correct WEP key may not associate with the device. Both Open System and Shared Key:

Clients configured in WEP shared key mode must have the correct WEP key to connect to the access point. Clients configured in WEP open system mode do not need the correct WEP key to connect to the access point. 65 Review Draft - May 9, 2014 Chapter 3: Manage Menu WPA Enterprise The WPA Enterprise security parameters are shown in Figure 13 and defined in Table 6 on page 67. Figure 13. WPA Enterprise for VAPs 66 Review Draft - May 9, 2014 Field WPA Versions Cipher Suites RADIUS IP Address AT-TQ Wireless Access Point Series Users Guide Table 6. WPA Enterprise Description Select the WPA version. The options are listed here:

- WPA: Select this option if all the wireless clients of the VAP support WPA, but not WPA2.

- WPA2: Select this option if all the clients support WPA2, but not WPA. This is the default setting.

- Both WPA and WPA2 - Select both options if the VAP has both WPA and WPA2 clients.

- Enable-pre-authentication: Select this option if the VAP has WPA2 clients and you want the access point to share the pre-authentication packets from the clients with other access points. This can speed up authentication for roaming clients who connect to multiple access points. This option does not apply to WPA clients. Select the cipher suite for the VAP, The options are listed here:

- TKIP

- CCMP (AES)

- Both TKIP and CCMP (AES) When both TKIP and CCMP (AES) are selected, clients configured to use WPA with RADIUS must have one of the following:

- A valid TKIP RADIUS IP address and RADIUS key.

- A valid CCMP (AES) IP address and RADIUS key. Enter the IPv4 address of the primary RADIUS server. 67 Review Draft - May 9, 2014 Chapter 3: Manage Menu 68 Table 6. WPA Enterprise (Continued) Field Description Secondary RADIUS IP Address RADIUS Key Secondary RADIUS Key RADIUS Port (Range: 0 -

65535) RADIUS Accounting Port

(Range: 0 - 65535) Enable RADIUS Accounting Require VLAN ID in Dynamic VLAN Enter the IPv4 address of a secondary RADIUS server. This field is optional. The access point sends authentication requests to this address if the primary RADIUS server does not respond to requests. Enter the shared secret key for the primary RADIUS server. The key can be up to 128 characters and can consist of letters, numbers, and special characters. The key is case-sensitive. This key must be same on the access point and server. Enter the shared secret key for the secondary RADIUS server. Enter the RADIUS port number of the RADIUS server. If you entered IP addresses for both primary and secondary servers, the units must be using the same port number. The default is 1812. Enter the RADIUS accounting port number of the RADIUS server. If you entered IP addresses for both primary and secondary servers, the units must use the same accounting port number. The default is 1813. Enable or disable RADIUS accounting by clicking the dialog box. The feature is enable when the dialog box has a check mark and disabled when the dialog box is empty. The default setting for accounting is disabled. Enable this option to require that the wireless clients of the VAP be assigned VLAN IDs from the RADIUS server. When this option is enabled, the VAP does not accept clients that are not assigned VLAN IDs by the RADIUS severs. The option is enabled when it has a check mark. The default setting is disabled. Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 6. WPA Enterprise (Continued) Field Description Broadcast Key Refresh Rate (Range: 0 - 86400) Session Key Refresh Rate

(Range: 0 - 86400) Specify the refresh interval rate for the broadcast (group) key. The range is 0 to 86400 seconds. The value 0 prevents the key from being refreshed. Specify the refresh interval rate for the session (unicast) keys. The range is 0 to 86400 seconds. The value 0 prevents the keys from being refreshed. WPA Personal The options for WPA Personal are shown in Figure 14 and defined in Table 7. Field WPA Versions Figure 14. WPA Personal for VAPs Table 7. WPA Personal Description Select the WPA version. The options are listed here:

- WPA: Select this option if the VAP wireless clients support WPA, but not WPA2.

- WPA2: Select this option if the clients support WPA2, but not WPA. This is the default setting.

- Both WPA and WPA2 - Select both options if the VAP has both WPA and WPA2 clients. 69 Review Draft - May 9, 2014 Chapter 3: Manage Menu Table 7. WPA Personal (Continued) Field Cipher Suites Key Broadcast Key Refresh Rate (Range: 0 - 86400) Description Select the cipher suite for the VAP. The options are listed here:

- TKIP

- CCMP (AES)

- Both TKIP and CCMP (AES) When both TKIP and CCMP (AES) are selected, clients who are using WPA must have one of the following:

- A valid TKIP key.

- A valid CCMP (AES) key. Enter a shared secret key of 8 to 63 alphanumeric characters. The key can include special characters. Specify the refresh interval rate for the broadcast (group) key. The range is 0 to 86400 seconds. The value 0 prevents the key from being refreshed. The default is 0 seconds. 70 Review Draft - May 9, 2014 Managing Wireless Distribution System Bridges AT-TQ Wireless Access Point Series Users Guide A wireless distribution system (WDS) bridge is a wireless link between two access points. The link allows the units to forward traffic directly to each other over a wireless connection as if they were connected with a physical Ethernet wire. You can use WDS bridges to link network segments with wireless, rather than wired, connections. This is illustrated in Figure 15 where access points A and B form a WDS bridge to connect two LAN segments together. A B LAN Segment 1 WDS Bridge LAN Segment 2 Figure 15. WDS Bridge Used to Connect LAN Segments You might also use the feature to extend a network into areas where Ethernet cable installation would be impractical or expensive. In Figure 16, access point B is located in an area that does not have Ethernet cabling. Consequently, its LAN port is not connected to the wired network. However, its wireless clients are able to access the network because of the WDS bridge to access point A, whose LAN port is connected to the wired network. A B LAN Segment WDS Bridge Figure 16. WDS Bridge Used to Extend a Network Configurations of WDS Bridges A WDS bridge can have up to four access points. Figure 17 on page 72 illustrates the supported configurations. 71 Review Draft - May 9, 2014 Chapter 3: Manage Menu One configuration for a WDS bridge of two units. One configuration for a WDS bridge of three units. One configuration for a WDS bridge of four units. Figure 17. Valid Configurations of WDS Bridges Here are the configuration restrictions of WDS bridges:

The wireless connections of the access points in a WDS bridge must not form a loop. For instance, Figure 18 is an invalid loop configuration of three access points. Figure 18. Invalid Loop Configuration of Access Points 72 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Additionally, the access points may not form loops with wired devices. An example is shown in Figure 19. Figure 19. Invalid Loop Configuration of Access Points to a Wired Network Device Do not use the linear topology shown in Figure 20 to create a WDS bridge of four units because it might not be reliable. Instead, use the topology shown in Figure 17 on page 72. Figure 20. Invalid Configuration of Four Wireless Access Points Radio You may use either the 2.4 or 5 GHz radios in the units to create a WDS bridge. The access points must all use the same radio. Radio Mode The access points must use the same radio mode. You may use any available radio mode. The available modes depend on the country or area where the access point is installed. Radio Channel When access points are operating in close proximity to each other such that there is an overlap in coverage, the usual practice is to set the radios to different channels to minimize radio interference and improve performance. The radios in the access points of a WDS bridge, however, have to use the same channel. This means that you have to disable automatic channel selection, which is the default settings on the units, and manually select the channel. The common channel between the access points can be any available channel. VAP0 The access points of a WDS bridge use VAP0 as the wireless link. The VAP assignment cannot be changed. Wireless clients should not be allowed to use VAP0 when the devices are arranged in a WDS bridge because the bridge might experience a reduction in performance. Wireless clients should use other VAPs on the units to access the network. 73 Review Draft - May 9, 2014 Chapter 3: Manage Menu Encryption Here are the available encryption settings for a WDS bridge:

No encryption Static WEP WPA Personal The available encryption modes for a WDS bridge vary depending on the radio mode and VAP security. The possible settings are listed in Table 8 on page 74. For example, if you want to use WPA Personal on a WDS bridge, you have to set VAP0 to either WPA Personal or WPA Enterprise. Table 8. Available Encryption Settings on WDS Bridges Radio Mode VAP0 Security Level non-802.11n non-802.11n 802.11n mode 802.11n mode None, static WEP, or 802.1x WPA Personal or WPA Enterprise None WPA Personal or WPA Enterprise Available WDS Bridge Encryption None or Static WEP None, Static WEP, or WPA Personal None None or WPA Personal Dynamic Frequency Selection Dynamic frequency selection (DFS) is an industry standard that defines how wireless access points are to respond to the presence of radar signals on 5 GHz channels. The standard states that a wireless access point that detects radar signals on its current 5 GHz channel has to stop transmission and select another channel to avoid interfering with the signals. The AT-TQ Series wireless access points support DFS on 5 GHz channels that countries or regions have designated as DFS channels. If it detects radar signals on its current 5 GHz channel and if the channel is a designated DFS channel, it immediately marks the channel as unusable for a minimum of thirty minutes and randomly selects another channel with which to communicate with its clients. If the wireless access point is using a DFS 5 GHz channel for a WDS bridge and it detects radar signals, it randomly selects another channel so as not to interfere with the signals. This action, however, renders the bridge non-functional. You can prevent this from occurring by selecting a non-DFS 5 GHz channel as the communication link between the wireless access points of a WDS bridge. Here are three examples of non-DFS channels:

36 - 5180 MHz 74 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide 40 - 5200 MHz 44 - 5220 MHz Here are the guidelines to DFS on the AT-TQ Series wireless access points:

DFS channels vary by country or region. DFS cannot be disabled on the wireless access points. DFS does not apply to channels on the 2.4 GHz radio. Guidelines Here are the guidelines for WDS bridges:

A WDS bridge may have from two to four wireless access points. You may use either the 2.4 or 5 GHz radios in the access points to create a WDS bridge. You may use static WEP or WPA Personal encryption to guard the data in the wireless links between the access points. A WDS bridge can have either AT-TQ2450 or AT-TQ3600 Access Points. A WDS bridge cannot have both models. The WDS bridge feature on the AT-TQ2450 and AT-TQ3600 Access Points is not compatible with the same feature on other products from Allied Telesis or other companies. The radios of the access points of a WDS bridge have to be set to the same mode and channel. If you use the 5 GHz radio to create the bridge, Allied Telesis recommends selecting the common channel for the bridge from the W52 band (channels 5180, 5200, 5220, and 5240 MHz). This is to minimize the chance that the access point, which supports dynamic frequency selection, has to change channels and break the WDS bridge due to radar signals. You may not create a loop in a WDS bridge. The MAC address of an access point can be represented only once in the MAC address tables of other devices. There can be only one WDS bridge between two access points. The access points of a WDS bridge use VAP0 as the communications link. The VAP should not be used by wireless clients. You may not combine the WDS bridge and cluster features on the same access points. 75 Review Draft - May 9, 2014 Chapter 3: Manage Menu Preparing the Access Point for the WDS Bridge 76 This procedure explains how to prepare the access points for a WDS bridge. It assumes you have already decided on which radio to use in addition to the following common settings:

Radio mode Radio channel Security level for VAP0 The settings must be the same on all the access points of a WDS bridge. To prepare an access point for a WDS bridge, perform the following procedure:

1. Start a management session on one of the access points of the bridge. 2. Set the radio mode for the WDS bridge. You may use any available radio mode for the bridge, but the radios in the access points must use the same mode. For instructions on setting the radio mode, refer to Configuring Basic Radio Settings on page 43 or Configuring the Radio Settings on page 46. 3. Manually set the radio channel to the common channel for the WDS bridge. You may use any available channel for the bridge, but the devices must use the same channel. You may not use the Auto setting, which sets the channel setting automatically. For instructions, refer to Configuring Basic Radio Settings on page 43 or Configuring the Radio Settings on page 46. 4. Configure the encryption settings for VAP0 on the radio. The radio mode for VAP0 determines the available encryption settings for the WDS bridge. Refer to Table 8 on page 74 for the various combinations of encryption settings. For instructions on how to configure the encryption on VAPs, refer to Configuring Virtual Access Points on page 58. 5. Activate access point detection on the radio of the WDS bridge. When you configure the WDS bridge on the access point, you identify the remote unit by its MAC address. This is accomplished by activating access point detection. You do not have to activate it on both radios, but only on the one to be used for the bridge. For example, if you are planning to use the 2.4 GHz radio for the bridge, you should activate access point detection on that radio. For instructions, refer to Viewing Neighboring Access Points on page 126. Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide After performing steps 1 to 5, do one of the following:

If the radios in the other access points of the bridge are already enabled, continue with this procedure. If the radios in the other access points are disabled, the default setting, end your current management session, start a new session on another unit, and repeat this procedure. Configuring the WDS Bridge To configure the WDS bridge settings, perform the following procedure:

1. Select WDS from the Manage menu. The access point displays the Configure WDS bridges to other access points window, shown in Figure 21. Figure 21. Configure WDS Bridges to Other Access Points Window The window has four sections. You may use each section to create a WDS bridge to a different access point. 2. Use the Radio pull-down menu in one of the sections to select the radio for the WDS bridge between the access points. Radios 1 and 2 are the 2.4 and 5 GHZ radios, respectively, The default is radio 1. 77 Review Draft - May 9, 2014 Chapter 3: Manage Menu Note You cannot configure the fields of a WDS bridge if the corresponding radio is disabled. If the fields are deactivated, refer to Configuring Basic Radio Settings on page 43 or Configuring the Radio Settings on page 46 for instructions on how to enable the radio. The Local Address field displays the MAC address of the radio. You cannot change this field. 3. Click the dialog circle with the arrow to the right of the Remote Address field. The device displays the neighboring access points in a window. An example is shown in Figure 22. Figure 22. Remote Address List 4. Click the MAC address of the remote access point of the WDS bridge. You may select only one neighboring access point. 5. Click the Encryption pull-down menu and select the encryption method for the WDS bridge. The available selections depend on the radio mode and VAP0 security level. Refer to Table 8 on page 74 for the available security levels. If you do not want the bridge to use encryption, select None, the default setting. 6. Configure the settings of the encryption method. The encryption parameters are described in the following sections:

Static WEP on page 79 WPA Personal on page 80 78 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide 7. After configuring the encryption settings, click the Update button to activate and save your changes on the access point. 8. Log off to end your management session on the access point. 9. Start a management session on the other access point of the WDS bridge. 10. Repeat Preparing the Access Point for the WDS Bridge on page 76 and this procedure to configure the WDS bridge on the other access point. Be sure to assign the same values to the parameters. Static WEP The static WEP parameters are shown in Figure 23 and described in Table 9. Figure 23. Static WEP on WDS Bridges Table 9. Static WEP on WDS Links Field Description Key Length Key Type Select either 64 or 128 bits for the key length. The default is 128 bits. Select either ASCII or hexadecimal for the key type. The default is hexadecimal. 79 Review Draft - May 9, 2014 Chapter 3: Manage Menu Table 9. Static WEP on WDS Links (Continued) Field WEP Key Description Enter a WEP key in the field. You may enter only one key. The key length and type settings determine the length and format of the keys. Here are the guidelines for an ASCII key:

- An ASCII key may contain upper and lower characters and the numbers 0 to 9.

- An ASCII key is case-sensitive.

- The key length of 64 bits requires five ASCII characters.

- The key length of 128 bits requires 13 ASCII characters. Here are the guidelines for a hexadecimal key:

- A hexadecimal key may contain the letters A to F and numbers 0 to 9.

- The key length of 64 bits requires 10 hexadecimal characters.

- The key length of 128 bits requires 26 hexadecimal characters. WPA Personal The WPA Personal parameters are shown in Figure 24 and described in Table 10 on page 81. Figure 24. WPA Personal on WDS Bridges 80 Review Draft - May 9, 2014 SSID Key AT-TQ Wireless Access Point Series Users Guide Table 10. WPA Personal on WDS Links Field Description Enter a name for the new WDS link. The SSID should be different from all the other SSIDs in the network. You must enter the same SSID on both access points of the bridge. The SSID can be up to 32 alphanumeric characters. Enter a shared key for the WDS bridge. You must enter the same key on both access points of the bridge. The key can be from 8 to 63 alphanumeric characters. The key can include special characters. 81 Review Draft - May 9, 2014 Chapter 3: Manage Menu Configuring the MAC Address Filter The MAC address filter is used to control which wireless clients can access your network through the access point. You configure the filter by entering the MAC addresses of the wireless clients whose association requests are to be accepted or rejected by the access point. If you specify the MAC addresses of the permitted nodes, the access point accepts the association requests from the specified clients and rejects requests from all other clients. If you specify the MAC addresses of the denied clients, the device rejects association requests from the specified clients and accepts requests from all other clients. Here are the guidelines to the MAC address filter:

The access point has only one MAC address filter. You may activate or deactivate the filter on the individual VAPs, such that you have filtering on some VAPs and no filtering on others. You need to know the MAC addresses of the wireless clients whose association requests the access point is to accept or reject. You need to know the VAPs where you want to activate the filtering. Activating filtering on the VAPs is performed from the Modify Virtual Access Point Settings window, described in Configuring Virtual Access Points on page 58. To configure the MAC address filter, perform the following procedure:

1. Select MAC Filtering Settings from the Manage menu. The access point displays the Configure MAC Filtering of Client Stations window, shown in Figure 25 on page 83. 82 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Figure 25. Configure MAC Filtering of Client Stations Window 2. For the Filter parameter, select one of the following:

Allow only stations in list: Select this option if you want the access point to accept association requests from the wireless clients whose MAC addresses you enter in the filter, and to reject association requests from all other clients. Block all stations in list: Select this option if you want the access point to reject association requests from the wireless clients whose MAC addresses you enter in the filter, and to accept association requests from all other clients. 3. To enter the MAC addresses of the clients, use the fields next to the Add button. After entering an address, click the Add button. You may enter only one address at a time. You may not enter broadcast or multicast addresses. 4. If you want to remove an address, click the address in the list and then the Remove button. You may remove only one address at a time. 5. After adding the MAC addresses, click the Update button to activate and save your changes on the access point. 6. From the Manage menu, select VAP. 7. In the Modify virtual access point settings window, use the MAC Filtering column to activate filtering on the individual VAPs. For further information on the window, refer to Configuring Virtual Access Points on page 58. 83 Review Draft - May 9, 2014 Chapter 3: Manage Menu 8. Click the Update button in the window to activate and save your changes. At this point, the access point begins to accept or reject association requests from the wireless clients, as defined by the filter. 84 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Generating Event Messages for Unknown Access Points The access point can alert you with event messages if it detects unknown access points. It stores the messages in the event log and can also send them to a syslog server on your network. Figure 26 is an example of the message. Apr 22 09:10:45 syslog: Rogue AP found: The MAC address of the Rogue AP is c0:8a:de:68:32 Figure 26. Event Message for Unknown Access Points At pre-defined time intervals, the access point compares the MAC addresses of neighboring access points against a list of approved addresses that you create, and generates event messages for access points whose MAC addresses are not in the approved list. Here are the feature guidelines:

If you want the event messages sent to a syslog server, you must have a syslog server on your network and you need to configure the syslog client on the access point, as explained in Configuring the Syslog Client on page 124. You need to know the MAC addresses of known neighboring access points. You use the addresses to create a list of approved devices when you configure the feature. The access point does not send event messages for devices in the list. To view the MAC addresses of neighboring access points, refer to Viewing Neighboring Access Points on page 126. Enabling Event Messages for Unknown Access Points To configure the access point to generate event messages when it detects unknown access points, perform the following procedure:

1. Select Pre-Configured Rogue AP from the Manage menu. The access point displays the Configure Pre-Configured Rogue AP window shown in Figure 27 on page 86. 85 Review Draft - May 9, 2014 Chapter 3: Manage Menu 86 Figure 27. Configure Pre-Configured Rogue AP Window 2. Click the Enabled dialog circles for the AP Detection for Radio options. Radios 1 and 2 are the 2.4 and 5 GHz radios, respectively. You may activate one or both radio detections. If you are only interested in receiving event messages of unknown access points on one radio, activate that radio detection. If you are interested in receiving event messages for both radios, enable both options. Note You cannot configure the feature parameters until you enable at least one of the access point detections. 3. Use the Rogue AP Interval pull-down menu to select the intervals at which the device tests for unknown access points. The range is 15 minutes to four weeks. The default is 15 minutes. 4. If there are neighboring access points you want to add to the approved list so that the access points does not generate event messages when it detects them, enter the address of one of them in the fields below the list and click the Add button. You may add only one MAC address at a time. 5. Repeat step 4 to add more access points to the approved list. You may add up to 200 addresses. 6. To remove a MAC address from the list, click the address and then click the Remove button. You may delete only one address at a time from the list. Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide 7. Click the Update button to activate and save your changes on the access point. The access point tests for unknown access points when you click the Update button and, if it finds an unknown device, enters an event message in the event log and sends the message to the syslog server. The access point repeats the test at the next time interval. To stop the access point from generating event messages when it detects unknown access points, perform the following procedure:

1. Select Pre-Configured Rogue AP from the Manage menu. The access point displays the Configure Pre-Configured Rogue AP window shown in Figure 27 on page 86. 2. Click the DIsabled dialog circles for the AP Detection for Radio options. Radios 1 and 2 are for the 2.4 and 5 GHz radios, respectively. The access point stops generating event messages for unknown access points. Disabling Event Messages for Unknown Access Points 87 Review Draft - May 9, 2014 Chapter 3: Manage Menu Configuring the Access Point for the Optional AT-UWC Program The AT-UWC Unified Wireless Controller is an optional management program for the AT-TQ Access Points. You may use the program to centralize the task of managing the access points in your network. To use the program, you install it on a network server and then configure the controller client on the access point by entering the IP address of the server. You cannot manage an access point with the program until you have entered the IP address of the network server in the controller client. There are two ways to configure the controller agent:

You can use the Configure Managed Access Port Parameters window to enter the IP address of the management workstation with the AT-UWC programs, as explained in this section. You can use a DHCP server that supports option 43 to supply the IP address of the management workstation with the program to the access point. This manual does not explain how to configure DHCP option 43. Enabling the Controller Client To configure the controller client, perform the following procedure:

1. From the Manage menu, select Managed Access Point Settings. The access point displays the Configure Managed Access Point Parameters window in Figure 28. Figure 28. Configure Managed Access Point Parameters Window 88 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide 2. Click the Enabled dialog circle for the Managed AP Administrative Mode parameter. This is the default setting. 3. Enter the IP addresses or domain names of up to four controllers in the Controller IP Address fields. The controllers are management workstations that have the AT-UWC program. The access point queries the controllers in the order in which they are listed, starting with IP address 1. Please observe the following guidelines if you specify the controllers by their domain names:

The first character must be alphanumeric. It cannot be a special character. The last character cannot be a hyphen or period. 4. Click the Base IP Port field and enter the starting TCP/UDP port number of the range of 10 port numbers that the access point uses to communicate with the controller. Here are the guidelines to setting the base IP port:

The range is 1 to 65000. The default is 57775 for the range 57775 to 57784. You must assign the same value to the root and satellite access points. You must also enter the same value on the controller. 5. Click the Edit dialog box for the Pass Phrase field to remove the check mark. 6. Click the Pass Phrase field and enter the passphrase for the access point. Here are the guidelines for the passphrase:

You must assign the same passphrase to the root and satellite access points of a group. The passphrase can be from 8 to 63 characters. It can consist of letters and numbers, but no spaces. It is case sensitive. You must enter the same passphrase on the controller. You may leave the passphrase blank. 7. Click the Edit dialog box again for the Pass Phrase field. 8. For the WDS Managed Mode parameter, click the Root AP dialog circle if the unit is to be the root access point and communicate with the controller through its LAN port, or the Satellite AP dialog circle if the device is to communicate with the controller through a root access point. 89 Review Draft - May 9, 2014 Chapter 3: Manage Menu 90 9. For the WDS Managed Ethernet Port parameter, do one of the following:

If you are configuring the root access point, click the Enabled dialog circle to enable the LAN port on the device. The LAN port must be enabled on the root device. If you are configuring a satellite unit and the LAN port is connected to a network device, click the Enabled dialog circle. If you are configuring a satellite unit and the LAN port is not connected to a network device or the port is connected to a device but is not to communicate with it, click the Disabled dialog circle. This is the default setting. 10. If you are configuring a satellite unit, click the WDS Group Password field and enter a password for WPA2 Personal authentication. Here are the guidelines for the password:

You must assign the same password to all satellite access points of a group. The password can be from 8 to 63 characters. It can consist of letters and numbers. It is case sensitive. The password may contain special characters, such as @ and #, and spaces. You must enter the same password on the controller. Leave this field blank if you are configuring the root access point: The root device gets the password from the controller. 11. Click the Update button to activate your changes and save them in the configuration file. When you click the Update button, the access point attempts to contact the controller if you enabled the controller agent. The mode of communication depends on whether the access point is functioning as the root device or a satellite node. A root access point communicates with the controller through its LAN port, while a satellite unit communicates with it over a wireless connection to the root access point. At this point, the access point queries your network for the controller specified in the Controller IP Address 1 field of the window. If it receives a response, it disables web browser and SNMP management so that it can only be managed from the controller. If the access point does not receive a response in five seconds, it queries the controller in the next address field, and so forth. If it does not receive a response from any of the controllers, it continues to operate as a stand-alone unit. Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Note If the access point is successful in contacting a controller, your web browser management session is interrupted. 12. To continue managing the device, you must use the controller. Disabling the Controller Client This procedure explains how to disable the controller client and return the device to the stand-alone mode. Note Disabling the controller client may disrupt the operations of your network because it requires interrupting the communications link between the access point and controller. To minimize the disruption to your network users, you should only perform this procedure during periods of low network activity, such as during non-business hours. Before you can disable the controller client, the communications link between the access point and the controller has to be interrupted. This is because the access point does not allow you to manage it with a web browser or SNMP while it has a link to the controller. Here are two ways to interrupt the link between the device and controller:

If the access point is the root device, disconnect the Ethernet cable from the LAN port. If the access point is a satellite unit, move it onto a network that does not have a root device. After you have interrupted the link between the access point and controller, you should be able to establish a web browser management session with the device and disable the client. To disable management of the access point with the AT-UWC product, perform the following procedure:

1. From the Manage pull-down menu, select Managed Access Point Settings. This displays the window in Figure 28 on page 88. 2. Click the Disabled dialog circle for the Managed AP Administrative Mode option. 3. Click the Update button to activate and save your changes on the access point. The access unit now operates as a stand-alone unit. 91 Review Draft - May 9, 2014 Chapter 3: Manage Menu 92 Review Draft - May 9, 2014 Chapter 4 Cluster Menu This chapter describes the management functions of the Cluster menu. The chapter contains the following sections:

Overview on page 94 Planning a Cluster on page 101 Creating or Adding Access Points to a Cluster on page 102 Managing the Access Points of a Cluster on page 105 Removing an Access Point from a Cluster on page 106 Viewing the Wireless Clients of a Cluster on page 107 Using Automatic Channel Assignments on page 109 Viewing the Neighboring Access Points of the Cluster on page 113 93 Review Draft - May 9, 2014 Chapter 4: Cluster Menu Overview A cluster is a group of two or more access points that have similar configurations and are managed as a single unit. When you change a parameter on one unit of a cluster, your change is automatically communicated to the other units, which change the same parameter. This can simplify the task of managing units that have nearly identical configurations. The parameters of the access points of a cluster are divided into shared and non-shared parameters. Shared parameters have the same settings on all the access points of the cluster. Changing the setting of a shared parameter on one unit automatically changes the same parameter on the other units. For instance, the MAC filter, which is used to control access by wireless clients to the access point, is a shared parameter because your changes to the feature on one access point are automatically sent to the other access points in the same cluster. In contrast, changes to non-shared parameters are not communicated to the other members of the cluster. Consequently, the access points of the cluster can have different settings for their non-shared parameters. To configure these parameters, you have to establish individual management sessions on the units. The IP address of an access point is an example of an non-shared parameter because each unit must have a unique IP address. There are also non-shared functions, such as viewing event messages and statistics, because each unit is responsible for maintaining its own event messages log and statistics table. Table 11 lists the shared and non-shared features and functions of the access points in a cluster. Table 11. Shared and Non-shared Parameters on the Access Points in a Cluster Menu Menu Selection Shared Parameters Basic Settings Basic Settings

- Administrator Name

- Password Non-shared Parameters

- IP Address

- MAC Address

- Firmware Version

- Build Number

- Time since system-up

- System Name

- System Contact

- System Location 94 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 11. Shared and Non-shared Parameters on the Access Points in a Cluster (Continued) Menu Menu Selection Shared Parameters Non-shared Parameters Manage Ethernet Settings None

- MAC Address

- Management VLAN ID

- Untagged VLAN

- Untagged VLAN ID

- Connection Type

- Static IP Address

- Subnet Mask

- Default Gateway

- DNS Nameservers

- Directed Broadcast ICMP Reply

- MAC Address

- Channel Wireless Settings Radio VAP MAC Filtering

- Channel

- Eligible Channels

- Periodical Channel Refresh

- Beacon Interval

- DTIM Period

- Maximum Stations

- Transmit Power

- Radio (On or Off)

- Mode

- Station Isolation

- Status (On or Off)

- Mode

- Channel Bandwidth

- Primary Channel

- Short Guard Interval Supported

- Multidomain Regulatory Mode

- Protection

- Fragmentation Threshold

- RTS Threshold

- Fixed Multicast Rate

- Rate Sets

- MCS (Data Rate) Settings

- Broadcast/Multicast Rate Limiting

- Rate Limit Rate Limit Burst

- New and modified VAPS New VAPs are distributed as disabled on the access points of the cluster and can be manually enabled on the individual units.

- Filter None

- Stations List

- VAP status 95 Review Draft - May 9, 2014 Chapter 4: Cluster Menu Table 11. Shared and Non-shared Parameters on the Access Points in a Cluster (Continued) Menu Menu Selection Shared Parameters Pre-configured Rogue AP Managed Access Point

- AP Detection for Radio

- Rogue AP Interval None Cluster Access Points None Channel Management Status Events

- Stop or start channel management

- Lock channels

- Advanced parameters

- TQ2403 Compatible

- Relay Log

- Relay Host

- Relay Port Transmit/Receive None Client Associations Non-shared Parameters

- Access Points List

- Managed AP Administrative Mode

- Controller IP Address

- Base IP Port

- Pass Phrase

- WDS Managed Mode

- WDS Managed Ethernet Port

- WDS Group Password

- Location

- Cluster Name

- Persistence

- Severity

- Depth

- Event Messages are not shared among the units of the cluster and have to be viewed from individual management sessions of the units. Statistics are not shared among the units of the cluster and have to be viewed from individual management sessions of the units. This menu selection only displays the clients of the current access point. To view the clients of a cluster, refer to Viewing the Wireless Clients of a Cluster on page 107 96 Review Draft - May 9, 2014 Table 11. Shared and Non-shared Parameters on the Access Points in a Cluster (Continued) AT-TQ Wireless Access Point Series Users Guide Menu Menu Selection Shared Parameters Neighboring Access Points

- AP Detection for Radio 1

- AP Detection for Radio 2 Managed AP DHCP None Services QoS

- AP EDCA Parameters

-Wi-Fi Multimedia

(WMM)

- Station EDCA Parameters

- No Acknowledgement

- APSD Non-shared Parameters This menu selection only displays the neighboring access points of the current access point. To view the neighboring access points of the cluster, refer to Viewing the Neighboring Access Points of the Cluster on page 113 The IP addresses of devices with the AT-

UWC Unified Wireless Controller program are not shared by the access points. You have to configure this on the DHCP server with Option 43 for each access point. None 97 Review Draft - May 9, 2014 Chapter 4: Cluster Menu Table 11. Shared and Non-shared Parameters on the Access Points in a Cluster (Continued) Menu Menu Selection Shared Parameters SNMP LED HTTP/HTTPS NTP

-SNMP (Enabled or Disabled)

-Read-only community name

- Port Number the SNMP agent will listen to

- Allow SNMP set requests

- Read-write community name

- Restrict the source of SNMP requests to only the designated hosts or subnets

- Hostname, address, or subnet of Network Management System

- Community name for traps

- Trap type to send

- Hostname or IP address None None

- Set System Time

- NTP Server

- Interval to Synchronize

- Time Zone

- Adjust for Daylight Savings Time Non-shared Parameters None

- LED (On or Off)

- HTTPS Server Status

- HTTP Server Status

- HTTP Port

- Generate SSL Certificate

- Maximum Sessions

- Session Timeout

(minutes)

- System Date

- System Time 98 Review Draft - May 9, 2014 Table 11. Shared and Non-shared Parameters on the Access Points in a Cluster (Continued) AT-TQ Wireless Access Point Series Users Guide Menu Menu Selection Shared Parameters Maintenance Configuration

- Disable Reset Button Non-shared Parameters

- To Restore the Factory Default Configuration

- To Save the Current Configuration to a Backup File

- To Restore the Configuration from a Previously Save File

- To Reboot the Access Point The above functions have to be performed on the individual access points of the cluster. Here are the guidelines to creating a cluster of access points:

You should only use this feature on access points that are to have identical shared parameters. A cluster can have up to sixteen access points. The access points of a cluster share many parameter settings, but operate as individual units. The manager login name and password are shared parameters. Consequently, all the access points of a cluster always have the same login name and password. Changing the values on one unit changes it on all of them. When you are creating a new cluster, the units use the login name and password on the first unit where you enable the cluster feature. The access points of the cluster must have different IP addresses. Clustering is not supported across broadcast boundaries or routers. The access points of a cluster must reside in the same subnet or network and the network portions of their IP addresses have to be the same. The access point searches for other access points of the cluster using the LAN port, but not the radios. Consequently, the access points of a cluster need to be able to communicate with each other through their LAN ports. When you activate clustering on an access point, the unit queries the network on its LAN port for an existing cluster with the same cluster name as its own. If there is no existing cluster, the access point becomes a cluster of one unit. If there is a cluster with the same name, the new access point changes its parameters to 99 Review Draft - May 9, 2014 Chapter 4: Cluster Menu match the settings of the units in the existing cluster and then joins the cluster. The access points of a cluster must be assigned a name. The name must be the same on all the units. You may create more than one cluster in a subnet by giving the clusters different names. You may manage the access points by starting a management session on any unit in the cluster. You may not combine the cluster and WDS bridge features on the access points. The cluster feature on the AT-TQ Access Point Series is not compatible with similar features on products from Allied Telesis or other companies. The Country setting must be the same on the access points in a cluster and must be set before the devices are added to a cluster. For instructions, refer to Setting the Country Setting on page 41. The access points use encryption to protect the parameter settings when they transmit them to each other. 100 Review Draft - May 9, 2014 Planning a Cluster AT-TQ Wireless Access Point Series Users Guide When you create a new cluster, it is important to consider the order in which you enable the feature on the access points. This is particularly true if you have already configured the settings of one of the units. If you want the other units to adopt the configuration of the pre-configured unit when they initially form the cluster, you have to activate the cluster feature on the pre-configured unit first because the initial configuration of a new cluster is always set by the access point on which the feature is activated first. When the other units join the cluster, they adopt the configuration of the units on which the feature is already enabled. Here is an example. Assume that you intend to create a cluster of three access points and you have not configured any of the units. In this case, you can activate clustering on the units in any order. The access points adopt the settings of the first unit on which you activate the cluster feature. Now assume that you already configured the parameters of one of the units (A) and you want the other two units (B and C) to have the same configuration as unit A when they join the cluster. In this situation, it is important that you start the cluster feature on unit A first, before units B and C. That way, when units B and C join the cluster, they adopt the settings of unit A. If, instead, you activate clustering on unit B or C first, unit A would lose its configuration settings when it joins the cluster and adopts the settings of unit B or C. After the access points join the cluster, all their shared parameter settings are the same. So if you need to power off or reboot the units, the order in which you do it is not important because they all have the same settings. Another important rule to remember is that you should never add a new access point to an existing cluster when the other units are turned off. Otherwise, when you power them on, they discard their current settings and adopt the settings from the new unit, which may not have the correct configuration for the units of the cluster. 101 Review Draft - May 9, 2014 Chapter 4: Cluster Menu Creating or Adding Access Points to a Cluster To create a cluster or add access points to an existing cluster, perform the following procedure:

1. Select Access Points from the Cluster menu. The access point displays the Manage access points in the cluster window, shown in Figure 29. Figure 29. Manage Access Points in the Cluster Window Note When an access point is added to an existing cluster, it automatically changes its shared parameter settings to match the settings of the other units in the cluster. If it does not find any access points in its cluster, it retains its current settings. Note You cannot configure the Location and Cluster Name fields in the window while clustering is active on the access point. If the fields are deactivated, click the Stop Clustering button to stop the feature until you have configured the fields. 2. Select the Location field and enter a description for the access point, such as its location, a name, or its IP address. The more unique the name, the easier it is to identify this unit from the other units in the cluster. The description can be from 1 to 128 characters. Spaces and special characters are allowed. This location is different from the 102 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide System Location field in the Provide basic settings window, shown in Figure 6 on page 30. 3. Select the Cluster Name field and enter the name of the cluster. If the access point is the first member of a new cluster, enter a new name. If the access point is to be a member of an existing cluster, enter the name of the existing cluster. The name has to be the same on all the access points in the cluster and can be from 1 to 128 characters. Spaces and special characters are allowed. The cluster name is case sensitive. 4. Click the Update button to activate and save your changes on the access point. 5. Click the Start Clustering button to start the clustering feature on the access point. At this point, the access point queries the network on the LAN port for a cluster of the same name as its own, and does one of the following:

If it does not find any units with the same cluster name, it operates as a cluster of one access point and retains its current parameter settings. If it finds one or more units with the same cluster name, it changes its shared parameters to match the settings on the other units in the cluster. 6. Refresh the web browser window or go to another management window and then return to the Manage access points in the cluster window to update the window. If the access point found other units with the same cluster name, it displays them in the window. Figure 30 on page 104 shows a cluster of two units. 103 Review Draft - May 9, 2014 Figure 30. Active Cluster in the Manage Access Points in the Cluster Window 7. Any changes you now make to the shared parameter settings of the access point are transferred to the other units in the cluster. 8. To end your management session of the cluster, click Log Off in the upper right corner of the window. 9. To add another access point to the cluster, start a management session on the unit and repeat this procedure. Chapter 4: Cluster Menu 104 Review Draft - May 9, 2014 Managing the Access Points of a Cluster AT-TQ Wireless Access Point Series Users Guide To manage the access points of the cluster, perform the following procedure:

1. Start a management session on any unit in the cluster. 2. Adjust the parameters on the unit. Your changes to the shared parameters on the access point are automatically transferred to the other units in the cluster. The shared parameters are listed in Table 11 on page 94. 3. To start a management session on a different unit in the cluster, select Access Points from the Cluster menu. The access point displays the Manage access points in the cluster window, shown in Figure 29 on page 102. 4. From the list of access points in the window, click the IP address of the unit you want to manage. You may select only one access point. Note If you are unsure as to which access point you are currently managing, you can identify it by examining the Location field in the window or the IP address in the URL field of the web browser. 5. Log on using the common user name and password of the cluster. If you move back and forth between the same access points, you may not have to log on each time. 6. Configure the unit, as needed. 7. To end your management session of the cluster, click Log Off in the upper right corner of the window. 105 Review Draft - May 9, 2014 Chapter 4: Cluster Menu Removing an Access Point from a Cluster To remove an access point from a cluster, perform this procedure:

1. Start a management session on the unit. 2. Select Access Points from the Cluster menu. The access point displays the Manage access points in the cluster window, shown in Figure 29 on page 102. 3. Click the Stop Clustering button. The access point is no longer a member of the cluster and has to be managed as an individual unit. The device retains the cluster settings, but any new changes are not transferred to other access points. 106 Review Draft - May 9, 2014 Viewing the Wireless Clients of a Cluster AT-TQ Wireless Access Point Series Users Guide You may view information about the wireless clients of the access points of the cluster by selecting Sessions from the Cluster menu. This displays the Manage sessions associated with the cluster window. An example of the window is shown in Figure 31. The table lists the access points of the cluster and their wireless clients. Access points that do not have any wireless clients are not included in the table. Figure 31. Manage Sessions Associated with the Cluster Window The columns in the table are defined in Table 12. Table 12. Manage Sessions Associated with the Cluster Window Column AP Location User MAC Idle Rate Description Identifies the access point by its cluster location. The location is defined in the Manage access points in the cluster window, explained in Creating or Adding Access Points to a Cluster on page 102. Displays the MAC addresses of the wireless clients of the access point. Displays the amount of time

(milliseconds) a wireless client has not sent or receive packets. Displays the speed (Mbps) at which the access point is transmitting packets to a client. 107 Review Draft - May 9, 2014 Chapter 4: Cluster Menu Table 12. Manage Sessions Associated with the Cluster Window Column Description Signal Rx Total Tx Total Error Rate Displays the strength of the signal received by the wireless client from the access point. The signal is a value from 0 to 100 and is based on Received Signal Strength Indicator (RSSI). Displays the total number of packets received by the wireless client from the access point. Displays the total number of packets sent by the access point to the client. Displays the number of dropped packets as a percentage of all packets. You may sort the information by column. For instance, clicking the Signal label sorts the entries by signal strength. To display only one statistic at a time in the table, use the Display pull-

down menu and selected the desired statistic. Then click Go. 108 Review Draft - May 9, 2014 Using Automatic Channel Assignments AT-TQ Wireless Access Point Series Users Guide The automatic channel assignment feature can improve the performance of your wireless network because it tests for interference on the radios of the access points in the cluster and automatically changes the channel assignments of the radios to reduce or eliminate the interference. The feature can test for interference between members of a cluster as well as between cluster and non-cluster members. You may specify the potential interference reductions that initiate a channel reassignment as well the timing of the tests. Note Enabling and configuring automatic channel assignments are shared procedures for the access points of a cluster. Configuring the feature on one unit configures it on all units. Enabling Automatic Channel Assignments To configure automatic channel assignments for the access points of the cluster, perform the following procedure:

1. Select Channel Management from the Cluster menu. The access point displays the Automatically manage channel assignments window. The example of the window in Figure 32 is of a cluster of two access points. Figure 32. Automatically Manage Channel Assignments Window This is how the window is displayed when automatic channel assignment is disabled. The Current Channel Assignments table lists the radios of the cluster and their channel assignments. The columns in the table are described in Table 13 on page 110. 109 Review Draft - May 9, 2014 Chapter 4: Cluster Menu Table 13. Current Channel Assignments Column IP Address Radio Band Channel Status Description Displays the IP address of the access point. Displays the MAC address of the radio. Displays the radio band that the access point is broadcasting on. Displays the current channel of the radio. Displays the status of the radio. The radio has the status Up when it is enabled and Down when it is disabled. To change the status of the radio, refer to Configuring the Radio Settings on page 46 or Configuring Basic Radio Settings on page 43. 2. To start the automatic channel assignments feature, click the Start button. The window displays new options, shown in Figure 33. Figure 33. Automatically Manage Channel Assignments Window -

Automatic Channel Assignment Enabled 3. Configure the two parameters in the Advanced section of the window. The parameters are defined in Table 14 on page 111. 110 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 14. Channel Reassignment Parameters Parameter Description Change channels if interference is reduced by at least Determine if there is a better set of channel settings every Specifies the potential interference reduction that initiates a channel reassignment. The value is a percentage of potential reduction. At the default of 75%, a channel reassignment would need a potential interference reduction of at least 75% before an access point would perform it. The higher the value, the less frequently the access point is likely to perform channel reassignments. Specifies the time interval at which the access point tests for interference and, if necessary, performs channel reassignments. The default is once every hour. 4. After adjusting the parameters, click the Update button to activate and save your changes on the access point. 5. If you do not want an access point in the cluster to change its radio channels as part of the automatic channel assignments feature, click the corresponding Locked dialog box in the Current Channel Assignments section of the window and click the Apply button. Each access point has only one dialog box, located on the line for the 2.4 GHz radio. However, the dialog box controls both radios. When the dialog box has a check mark, the channels for both the 2.4 and 5 GHz radios in the access point are locked and cannot be changed. To unlock the channels of the radios, click the dialog box to remove the check mark. (The dialog boxes are displayed in the Current Channel Assignments table only when automatic channel assignment is enabled on the access points of the cluster.) The access points of the cluster are now running the automatic channel assignments feature. 111 Review Draft - May 9, 2014 Chapter 4: Cluster Menu Disabling Automatic Channel Assignments To disable automatic channel assignments on the access points of a cluster, perform the following procedure:

Note Disabling automatic channel assignments is shared among the access points of the cluster. Disabling it on one unit disables it on all units. 1. Select Channel Management settings from the Cluster menu. The access point displays the Automatically manage channel assignments window. An example of the window is shown in Figure 33 on page 110. 2. Click the Stop button. The access points of the cluster stop performing automatic channel assignments, but the radios retain their current channel assignments. 112 Review Draft - May 9, 2014 Viewing the Neighboring Access Points of the Cluster AT-TQ Wireless Access Point Series Users Guide To view the neighboring access points of the cluster, select Wireless Neighborhood from the Cluster menu to display the View neighboring access points window. An example of the window is shown in Figure 34. Figure 34. View Neighboring Access Points Window The table rows are divided into three sections:

The top row contains the IP addresses, MAC addresses, and cluster locations of the radios in the access points of the cluster. A radio has to be both enabled and active to be included in the row. Radios that are disabled or enabled but not active are not included in the window. To learn the MAC addresses of the radios of an access point, refer to Configuring Basic Radio Settings on page 43. The second set of rows contains the SSIDs of the VAPs on the access points that are members of the cluster. The third set of rows displays the SSIDs of access points or VAPs that are not members of the cluster, but that have been detected by cluster members. The second and third sets of rows are divided by a heavy line. 113 Review Draft - May 9, 2014 Colors represent the signal strengths between the access points and are defined in Table 15. Table 15. View Neighboring Access Points Window Color Dark blue bar Light blue bar White bar Light gray bar Dark gray bar Description A dark blue bar with a high number (for example, 50) indicates a good signal strength between two access points. A light blue bar with a low number (for example, 20) indicates a weak or medium signal strength between two access points. A white bar and the number 0 means that an access point does not detect a neighboring access point that is detected by another member of the cluster. A light gray bar and no signal strength means that an access point does not detect a neighboring access point that is detected by another member of the cluster. A dark gray bar and no signal strength represents the access point itself. You may limit the table to cluster members or non-cluster members by clicking one of the Display Neighboring APs dialog circles above the table. Click In cluster to restrict the table to only the VAPs of the cluster members or Not in cluster to view only the connections to non-cluster members. The default displays both cluster and non-cluster members. You may display additional information about the connections by clicking the IP addresses of the access points in the top row of the table. An example is shown in Figure 35. The columns are described in Table 16 on page 115. Figure 35. Neighbor Details Chapter 4: Cluster Menu 114 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 16. Neighbor Details Window Column Description SSID MAC Address Channel Rate Signal Beacon Interval Beacon Age Displays the SSID of a remote access point or VAP. Displays the MAC address of a remote radio. Displays the radio channel. Displays the rate of transmission (Mbps). Displays the signal strength (dB). Displays the beacon transmission interval

(milliseconds). Displays the date and time when the last beacon was received. 115 Review Draft - May 9, 2014 Chapter 4: Cluster Menu 116 Review Draft - May 9, 2014 Chapter 5 Status Menu This chapter describes the management functions of the Status menu. The chapter contains the following sections:

Viewing the Associated Clients of an Access Point on page 118 Viewing Event Messages on page 120 Viewing Neighboring Access Points on page 126 Displaying the IP Addresses of AT-UWC Programs on page 129 Displaying Statistics on page 130 Viewing Basic IP and Radio Information on page 134 117 Review Draft - May 9, 2014 Chapter 5: Status Menu Viewing the Associated Clients of an Access Point To view a list of the associated clients on the access point and the amount of traffic, select Client Associations Settings from the Status menu. The menu option displays the View list of currently associate client stations window. An example of the window is shown in Figure 36. Figure 36. View List of Currently Associated Client Stations The columns in the window are described in Table 17. Table 17. View List of Currently Associated Client Stations Window Column Description Network Station Displays the radio and VAP where a client is associated. Here is an example of an entry:

wlan0vap2 The wlan is the radio where the client is associated. The entry wlan0 is radio 1 and wlan1 is radio 2. The vap is the VAP where the client is associated. The number is the VAP number. Displays the MAC address of the wireless client. 118 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 17. View List of Currently Associated Client Stations Window Column Description Status Authenticated Associated From Station Packets Bytes Drop Packets Drop Bytes To Station Packets Bytes Drop Packets Drop Bytes Displays whether a client has been authenticated. (This column does not display IEEE802.1x authentication status, but the underlying status, which is independent of the security level.) Displays whether a client is associated with the access point. Displays the number of packets the access point has received from a client. Displays the number of packets bytes the access point has received from a client. Displays the number of packets the access point has dropped after receiving them from a client. Displays the number of packet bytes the access point has received and dropped. Displays the number of packets the access point has transmitted to a client. Displays the number of packet bytes the access point has transmitted to a client. Displays the number of packets the access point has dropped before transmitting them to a wireless client. Displays the number of packet bytes the access point has dropped before transmitting them to a wireless client. 119 Review Draft - May 9, 2014 Chapter 5: Status Menu Viewing Event Messages A wireless access point is a complex piece of network equipment that includes both hardware and software components. Multiple software features operate simultaneously, interoperating with each other and processing large amounts of network traffic. It is often difficult to determine exactly what is happening when an access point appears not to be operating normally, or what happened when a problem occurred. You may monitor the operations of the access point by viewing the messages in its event log. The events and the vital information about system activity that they provide can help you identify and solve system problems. The access point has two types of event messages:

System messages Kernel messages System messages, which cover a variety of events, such as authentications of 802.1x wireless users and hardware or software problems, are divided by severity into the following categories:

0 - Emergency 1 - Alert 2 - Critical 3 - Error 4 - Warning 5 - Notice 6 - Informational 7 - Debug System event messages are stored in the event log on the access point and can be viewed from web browser management sessions of the device, as explained in Viewing System Event Messages on page 121. They can also be sent to a syslog server on your network for more permanent storage, as described in Configuring the Syslog Client on page 124. System event messages can be stored in either volatile or non-volatile memory. Messages stored in volatile memory, the default setting, are discarded whenever the unit is reset or powered off. When system event messages are stored in non-volatile memory, they are retained even when the unit is powered off or reset. This can be useful if you are troubleshooting a problem with the unit or network. However, 120 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide using non-volatile memory for this purpose can prematurely wear out the memory, which can lead to performance degradation of the unit. For this reason, event messages should only be stored in non-volatile memory when you are troubleshooting a network problem, and only for short periods of time. A better option for permanently storing messages is to use the syslog client on the access point to send the messages to a syslog server on your network. A syslog log server can be located on the wireless or wired part of your network because the access point transmits the messages from its radios and LAN port. Kernel event messages are generated by the main component of the management software and generally reflect error conditions, such as dropped frames. Unlike system messages, kernel messages cannot be viewed from web browser management sessions and can only be viewed on a syslog server. If you want to view these messages, you have to have a syslog server on your network to store the messages. System and kernel messages include the following information:

The time and date of the event The severity of the event The feature or management module that generated the event An event description Viewing System Event Messages To view the system event messages in the event log, select Events from the Status pull-down menu. The access point displays the View events generated by this access point window. Refer to Figure 37 on page 122. 121 Review Draft - May 9, 2014 Chapter 5: Status Menu 122 Figure 37. View Events Generated by this Access Point Window The system messages are displayed in a table in the Events section of the window, from newest to oldest. The columns in the table are described in Table 18. Table 18. Event Messages Table Field Description Time Type Service Description Date and time when a message was generated. The severity level of a message. The module in the management software that generated the message. Description of the message. The table has two buttons:

Refresh - You may use this button to update the table with the latest messages. Clear All - You may use this button to delete all the messages in the log. Review Draft - May 9, 2014 Configuring the Event Log AT-TQ Wireless Access Point Series Users Guide You can configure the following parameters of the event log:

Whether the event messages are stored in volatile or non-volatile memory. The severity of the displayed messages. The number of displayed messages. Whether all the messages are assigned the facility level 0, kernel messages, to make them compatible with the AT-TQ2403 Access Point. To configure the event log, perform the following procedure:

1. Select Events from the Status pull-down menu. The access point displays the View events generated by this access point window. Refer to Figure 37 on page 122. 2. If you want the access point to store the messages in non-volatile memory, click the Enabled dialog circle for the Persistence parameter. To stop the access point from storing messages in non-volatile memory, click the Disabled dialog circle. Note Event messages should only be stored in non-volatile memory for short periods of time, such as when troubleshooting network problems. Storing messages in non-volatile memory for extended periods of time can wear out the memory, which can lead to performance degradation of the access point. 3. If you want to limit the messages by severity level, select the Severity pull-down menu and select a new value. The range is 0 to 7. The default is 7. The access point displays messages of the selected value and all numerically lower (higher severity) levels. For example, selecting severity level 3 displays the messages for levels 0 to 3. The default level 7 displays all messages. The Severity parameter applies to messages in volatile and non-

volatile memories. 4. If you want to increase or decrease the number of displayed event messages, select the Depth field and enter a new value. The range is 1 to 128 messages. The default is 128 messages. The Depth parameter applies to messages in volatile and non-volatile memories. 123 Review Draft - May 9, 2014 Chapter 5: Status Menu Configuring the Syslog Client 124 5. If you want the access point to assign the facility 0, kernel message, to all messages to make them compatible with the AT-TQ2403 Access Point, click the Enabled dialog circle for the TQ2403 Compatible parameter. If you want the access point to base the facility codes of the messages on the services of the management software, click the Disabled dialog circle. This is the default setting. You cannot view the facility codes of the event messages from the event log. They can only be viewed on a syslog server. 6. Click the Update button to activate and save your changes on the access point. This procedure explains how to configure the syslog client. The access point uses the client to send the system and kernel event messages to a syslog server on your network. The messages are sent from the LAN port and radios. To configure the syslog client, perform the following procedure:

1. From the Status menu, select Events. The access point displays the View events generated by this access point window. Refer to Figure 37 on page 122. 2. In the Options section of the window, use the Severity pull-down menu to select the severity of system messages the access point is to transmit to the syslog server. The access point transmits the system messages of the selected level and all numerically lower (higher severity) messages. For example, if you select level 3, error, the device transmits system messages from levels 0 to 3. The default is level 7, debug. This is the highest value, so all messages are sent. The severity level setting does not apply to kernel messages. 3. Use the TQ2403 Compatible parameter to control the facility levels the access point assigns to the event messages. If you select Disabled, the device assigns facility levels that are based on the services that generated the messages in the management software. This is the default setting. If you select Enabled, all messages are assigned the facility level 0, kernel message, to make them compatible with the AT-

TQ2403 Access Point, which does not assign facility levels to its messages. The Facility levels of the messages can only be viewed on a syslog server. They are not displayed in the event log of the access point. Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide 4. 5. In the Relay Options section of the window, click the Enabled dialog circle for the Relay Log option. You have to enable the feature before you can configure its parameters. In the Relay Options section of the window, select the Relay Host field and enter the IP address or DNS name of the syslog server on your network. You can specify only one server. 6. To change the syslog port number, select the Relay Port field and enter the new value. The default is port 514. 7. Click the Update button to activate and save your changes on the access point. At this point the access point begins to transmit system and kernel messages to the designated syslog server. Only new messages are sent. The device does not transmit any system messages that are already stored in the event log. Disabling the Syslog Client To disable the syslog client to stop the access point from sending the system and kernel messages to a syslog server, perform the following procedure:

1. From the Status pull-down menu, select Events. The access point displays the View events generated by this access point window. Refer to Figure 37 on page 122. 2. In the Relay Options section of the window, click the Disabled dialog circle for the Relay Log option. 3. Click the Update button to activate and save your changes on the access point. 125 Review Draft - May 9, 2014 Chapter 5: Status Menu Viewing Neighboring Access Points You can view basic information and statistics about other access points within range of the access point you are managing by selecting the Neighboring Access Points option from the Status menu. The window is shown in Figure 38. Figure 38. View Neighboring Access Points Window You may use the AP Detection for Radio options in the window to configure the table to display the neighboring access points discovered on one or both radios. Use the Update button to save your change. The information in the table is not retain when the access point is reset or powered off. The columns in the table are described in Table 19. Table 19. Neighboring Access Point Settings Window Column Beacon Int. Description Displays the beacon interval of the neighboring access point. 126 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 19. Neighboring Access Point Settings Window (Continued) Column Description Type Indicates the type of device:

AP: Indicates that the neighboring device is an access point that supports the IEEE 802.11 Wireless Networking Framework in Infrastructure Mode. Ad hoc: Indicates that the neighboring device is operating in Ad hoc mode to directly communicate with other Ad hoc devices, without the use of traditional access points. Ad hoc mode is part of the IEEE 802.11 Wireless Networking Framework and is also referred to as peer-to-peer mode and Independent Basic Service Set (IBSS). Displays the Service Set Identifier (SSID) of the neighboring access point. Displays whether the neighboring access point has security:

On: The neighboring access point has security. Off: The access point does not have security. Displays the status of WPA on the neighboring access point. Displays the IEEE 802.11 mode of the access point:

2.4: Indicates IEEE 802.11b, 802.11g, 802.11n, or a combination of the modes. 5: Indicates IEEE802.11a, 802.11n, or both modes. Displays the channel on which the access point is broadcasting. Displays the transmission rate in megabits per second of the access point. 127 SSID Privacy WPA Band Channel Rate Review Draft - May 9, 2014 Chapter 5: Status Menu Table 19. Neighboring Access Point Settings Window (Continued) Column Description Signal Beacons Last Beacon Rates Displays signal strength. You may view the strength in decibels (dBm) by placing the mouse pointer over the bars. Displays the total number of beacons received from the neighboring access point since it was discovered. Displays the date and time of the most recent beacon from the neighboring access point. Displays the supported and basic

(advertised) rate sets in megabits per second (Mbps) for the neighboring access point. All supported rates are listed, with basic rates shown in bold. 128 Review Draft - May 9, 2014 Displaying the IP Addresses of AT-UWC Programs AT-TQ Wireless Access Point Series Users Guide If you want to use the optional AT-UWC Unified Wireless Controller program to manage the access point, you have to configure the device with the IP addresses or domain names of the network servers that have the program. There are two ways to accomplish this. One way is to manually enter the IP addresses or domain names in the Configure Managed Access Point Parameters window, as explained in Configuring the Access Point for the Optional AT-UWC Program on page 88. The other way is to use a DHCP server that supports option 43, which allows you to enter vendor specific information that the server supplies to a network device. If you specify the IP addresses or domain names of the management program in option 43, the DHCP server supplies the information to the access point when the unit initially queries the server for its IP address when it is powered on or reset. If you choose to use DHCP option 43, the access point displays the IP addresses of the programs from the server in the View list of managing switch IP addresses and base IP port obtained via DHCP window. Figure 39 is an example of the window. You display the window by selecting Managed AP DHCP from the Status menu. The window lists the IP addresses or domain names that it received from the DHCP server of the network devices that have the management program The window also displays the base TCP/IP port of the ten consecutive ports that the access point and AT-UWC programs use to communicate with each other. Figure 39. Displaying View List of Managing Switch IP Addresses and Base IP Port Obtained via DHCP 129 Review Draft - May 9, 2014 Chapter 5: Status Menu Displaying Statistics You can display status information and statistics about the LAN port and radios by selecting Transmit Receive Settings from the Status menu. The selection displays the View transmit and receive statistics for this access point window. The window has three tables. The first table displays basic status information about the LAN port and radios. The radio information is divided by virtual access points (VAPs). The second table, labeled Transmit, displays the number of packets and bytes transmitted by the LAN port and radios. The third table, labelled Receive, displays the number of packets and bytes received by the LAN port and radios. Here are common characteristics about the tables:

The first entry, LAN, in the tables is the LAN port on the rear panel of the access port. The VAPs with wlan0 are located on radio 1. The VAPs with wlan1 are located on radio 2. The status table in the View transmit and receive statistics for this access window is shown in Figure 40. Figure 40. Status Table in the View Transmit and Receive Statistics for this Access Point Window 130 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide The columns are described in Table 20. Table 20. Status Table Information Column Description Interface Status MAC Address VLAN ID Name (SSID) Displays the access point interfaces. Displays the status of the interfaces. The possible states are listed here:

LAN: Up: The LAN port has a valid connection to a port on a network device. LAN: Down: The LAN port does not have a valid connection to a port on a network device. wlan#:vap#: Up wlan#:vap#: Down Displays the MAC addresses of the interfaces. The LAN port and radio 1

(wlan0) share the same MAC address. Displays the interface VIDs. Displays the network names of the interfaces. The Transmit statistics table is shown in Figure 41. Figure 41. Transmit Statistics Table of the View Transmit and Receive Statistics for this Access Point Window 131 Review Draft - May 9, 2014 Chapter 5: Status Menu The columns are described in Table 21. Table 21. Transmit Statistics Table Column Description Interface Total packets Total bytes Total drop packets Total drop bytes Errors Displays the access point interfaces. Displays the total number of packets the interfaces have transmitted. Displays the total number of bytes the interfaces have transmitted. The values do not include the amount of padding for packets below the minimum size, and for FCS. Displays the total number of packets the access point dropped before transmission. Displays the total number of bytes the access point dropped before transmission. Displays the total number of packets with errors, such as CRC errors. The Receive statistics table is shown in Figure 42. Figure 42. Receive Statistics Table of the View Transmit and Receive Statistics for this Access Point Window 132 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide The columns are described in Table 22. Table 22. Receive Statistics Table Column Description Interface Total packets Total bytes Total drop packets Total drop bytes Errors Displays the access point interfaces. Displays the total number of packets the interfaces have received. Displays the total number of bytes the interfaces have received. Displays the total number of packets the access point dropped after receiving them on the interfaces. Displays the total number of bytes the access point dropped after receiving them on the interfaces. Displays the total number of packets with errors, such as CRC errors. 133 Review Draft - May 9, 2014 Chapter 5: Status Menu Viewing Basic IP and Radio Information To view basic configuration settings about the LAN port and radios, select the Interfaces selection from the Status menu. The selection displays the View settings for network interfaces window, shown in Figure 43. Figure 43. View Settings for Network Interfaces Window The top section of the window displays the MAC and IP addresses of the access point, along with the subnet mask, default gateway, and domain name servers. To configure the settings, click Edit to display the Modify Ethernet (Wired) settings window, shown in Figure 7 on page 36, and explained in Assigning a Static IP Address to the Access Point on page 36 and Assigning a Dynamic IP Address from a DHCP Server to the Access Point on page 38. The bottom section of the window displays the basic settings of the radios and includes their MAC addresses, operational modes, and channels. To configure the settings, click Edit to display the Modify wireless settings window, shown in Figure 8 on page 41 and explained in Configuring Basic Radio Settings on page 43. To configure additional radio settings, refer to Configuring the Radio Settings on page 46. 134 Review Draft - May 9, 2014 Chapter 6 Services Menu This chapter describes the management functions of the Services menu. The chapter contains the following sections:

Configuring Quality of Service on page 136 Configuring SNMPv1 and v2c on page 143 Enabling or Disabling the LEDs on page 150 Configuring the HTTP Server on page 151 Configuring the HTTPS Server on page 153 Configuring the Maximum Number of Active Management Sessions on page 155 Configuring the Management Session Timer on page 156 Manually Setting the Date and Time on page 157 Setting the Date and Time with the Network Time Protocol Client on page 159 135 Review Draft - May 9, 2014 Chapter 6: Services Menu Configuring Quality of Service The access point has four QoS egress queues and four ingress queues for each radio. You may adjust parameters that control the manner in which the device stores and handles packets in the queues. You should not change the values from their default values unless you are familiar with QoS. The parameters are divided into the following two groups:

Access Point (AP) Enhanced Distributed Channel Access (EDCA) Parameters table contains parameters that control the four queues that store egress traffic the access point transmits to the wireless clients. The Station Enhanced Distributed Channel Access (EDCA) Parameters table controls the four queues that store ingress traffic the access point receives from the clients. To configure the QoS settings for the radios, perform the following procedure. 1. Select QoS for the Services menu. The management software displays the Modify QoS Queue Parameters window, shown in Figure 44 on page 137. 2. Use the Radio pull-down menu at the top of the window to select the radio whose queues you want to configure. Radios 1 and 2 are the 2.4 and 5 GHz radios, respectively. You can configure the queues of only one radio at a time. The default is radio 1. 3. Configure the queue parameters as needed. The parameters are defined in Table 23 on page 137. 4. After configuring the parameters, click the Update button to activate and save your changes on the access point. 136 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Figure 44. Modify QoS Queue Parameters Table 23. Modify QoS Queue Parameters Window Column AP EDCA Parameters Queue Description Specifies the four egress queues:

Data 0 (Voice): High priority queue, with minimum delay. The queue is used to store time-sensitive data, such as VOIP and streaming media. Data 1 (Video): High priority queue, with minimum delay. The queue is used to store time-sensitive data, such as video traffic. 137 Review Draft - May 9, 2014 Chapter 6: Services Menu Table 23. Modify QoS Queue Parameters Window (Continued) Column Description AIFS (InterFrame Space) cwMin (Minimum Contention Window) Data 2 (best effort): Medium priority queue, with minimum throughput and delay. The queue is used to store most traditional IP data. Data 3 (Background): Lowest priority queue, with high throughput. This queue is used for bulk data that requires maximum throughput and is not time-

sensitive, such as FTP packets. Specifies the Arbitration Inter-Frame Spacing (AIFS) value, which controls the wait time for data frames. The wait time is measured in slots. The range is 1 to 15 slots. Specifies a value that an algorithm uses to determine the initial random backoff wait time (window) for resending packets. This value is the upper limit (in milliseconds) of a range from which the access point determines the initial random backoff wait time. The first random number the access point generates will be between 0 and this number. If the first random backoff wait time expires before the data frame is sent, a retry counter is increased and the random backoff value (window) is doubled. Doubling continues until the size of the random backoff value reaches the number defined in the maximum contention window. Valid values for this parameter are: 1, 3, 7, 15, 31, 63, 127, 255, 511, and 1023. This parameter must be lower than the cwMax value. 138 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 23. Modify QoS Queue Parameters Window (Continued) Column cwMax (Maximum Contention Window) Max. Burst Length Wi-Fi Multimedia Description Specifies the maximum contention window, which is the upper limit (in milliseconds) for doubling the random backoff value. The doubling continues until either the data frame is sent or the maximum contention size is reached. Once the maximum contention window is reached, retries continue until a maximum number of retries is reached. Valid values for this parameter are: 1, 3, 7, 15, 31, 63, 127, 255, 511, and 1023. This parameter must be higher than the cwMin value. Specifies the maximum burst length (in milliseconds) for packet bursts on the wireless network. A packet burst is a collection of multiple frames transmitted without header information. The decreased overhead results in higher throughput and better performance. This is an AP EDCA parameter only and as such applies only to egress traffic from the access point to the clients. The range is 0.0 to 999 milliseconds. Enables or disables QoS prioritization and coordination. When WMM is enabled, the access point uses the AP EDCA settings to control the flow of downstream traffic to the wireless clients and the station EDCA parameters to control the flow of upstream traffic from the clients. When WMM is disabled, QoS control of the upstream traffic from the clients is disabled. You can still continue to configure some of the parameters that control the downstream traffic from the access point to the clients 139 Review Draft - May 9, 2014 Chapter 6: Services Menu Table 23. Modify QoS Queue Parameters Window (Continued) Column Description Station EDCA Parameters Queue AIFS (InterFrame Space) cwMin (Minimum Contention Window) WMM is enabled when the dialog box has a check mark and disabled when the dialog box is empty. The default setting is enabled. Specifies the four ingress queues:

Data 0 (Voice) - High priority queue, with minimum delay. The queue is used to store time-sensitive data, such as VOIP and streaming media. Data 1 (Video): High priority queue, with minimum delay. The queue is used to store time-sensitive data, such as video traffic. Data 2 (best effort): Medium priority queue, with minimum throughput and delay. The queue is used to store most traditional IP data. Data 3 (Background): Lowest priority queue, with high throughput. This queue is used for bulk data that requires maximum throughput and is not time-

sensitive, such as FTP packets. Specifies the Arbitration Inter-Frame Spacing (AIFS) value, which controls the wait time for data frames. The wait time is measured in slots and has a range of 1 to 15 slots. Specifies a value that an algorithm uses to determine the initial random backoff wait time (window) for resending packets during a period of contention for Unified Access Point resources. This value is the upper limit (in milliseconds) of a range from which the access point determines the initial random backoff wait time. 140 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 23. Modify QoS Queue Parameters Window (Continued) Column Description cwMax (Maximum Contention Window) TXOP Limit The first random number the access point generates will be between 0 and this number. If the first random backoff wait time expires before the data frame is sent, a retry counter is increased and the random backoff value (window) is doubled. Doubling continues until the size of the random backoff value reaches the number defined in the maximum contention window. Valid values for this parameter are: 1, 3, 7, 15, 31, 63, 127, 255, 511, and 1023. This parameter must be lower than the cwMax value. Specifies the maximum contention window, which is the upper limit (in milliseconds) for doubling the random backoff value. The doubling continues until either the data frame is sent or the maximum contention size is reached. Once the maximum contention window is reached, retries continue until a maximum number of retries is reached. Valid values for this parameter are: 1, 3, 7, 15, 31, 63, 127, 255, 511, and 1023. This parameter must be higher than the cwMin value. Specifies the Transmission Opportunity

(TXOP) limit. The limit defines the time interval, in 32 milliseconds periods, that a WME client has the right to initiate transmission to the access point. The TXOP Limit maximum value is 2047. 141 Review Draft - May 9, 2014 Chapter 6: Services Menu Table 23. Modify QoS Queue Parameters Window (Continued) Column Other QoS Settings No Acknowledgement APSD Description Controls whether the access point acknowledges frames that have QosNoAck for their service class values. The possible settings are described here:

On: The access point does not acknowledge frames that have QosNoAck for their service class values. Off: The access point acknowledges frames that have QosNoAck for their service class values. Enables or disables Automatic Power Save Delivery (APSD) for VoIP phones that access the network through the access point. The possible settings are listed here:

On: APSD is enabled on the access point. Off: APSD is disabled. 142 Review Draft - May 9, 2014 Configuring SNMPv1 and v2c AT-TQ Wireless Access Point Series Users Guide You may use SNMPv1 and v2c to manage the access point and receive traps from the unit. Here are the guidelines to managing the device with SNMP:

You can use SNMP to manage only a subset of the features of the device. You have to use the web browser interface to manage all the features. The access point does not support SNMPv3. The access point can have only one read-only community string and one read-write string. The MIB for the product is available from the Allied Telesis web site. The unit must have an IP address for SNMP management. For instructions, refer to Assigning a Static IP Address to the Access Point on page 36 or Assigning a Dynamic IP Address from a DHCP Server to the Access Point on page 38. To enable or disable SNMP, perform the following procedure:

1. Select SNMP Settings from the Services menu. The access point displays the SNMP Configuration window, shown in Figure 45 on page 144. 143 Review Draft - May 9, 2014 Chapter 6: Services Menu 144 Figure 45. SNMP Configuration Window 2. Click the Enabled dialog circle to enable SNMP or the Disabled dialog circle to disable it. You must enable SNMP before you can configure the parameter settings. 3. If you enabled SNMP, configure the parameters, as needed. The fields in the window are described in Table 24 on page 145. 4. Click the Update button to activate and save your changes on the access point. Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 24. SNMP Field Description SNMP Enabled/Disabled Read-only community name Use this option to activate or deactivate SNMP on the access point. The options are explained here:

Enabled: Check this option to activate SNMP and allow managers to use it to view and configure the parameter settings on the access point. When you click the option, the options in the window are activated. Disabled: Check this option to disable SNMP to prevent managers from using it to view and configure the parameter settings on the access point. When you click the option, the options in the window are deactivated and cannot be configured. This is the default setting. Use this parameter to specify the read-

only community string on the access point. This community string may only be used to view the MIB settings of the device. Here are the guidelines to creating the community string:

The community string may be from 1 to 256 characters. The community string may contain both letters and numbers, The community string may not contain any spaces. The community string is case sensitive. You may specify only one read-only community string. You may not leave the field empty. The default read-only community string is public. 145 Review Draft - May 9, 2014 Chapter 6: Services Menu Table 24. SNMP (Continued) Field Description Port number the SNMP agent will listen to Allow SNMP set requests Read-write community name (for permitted SNMP set operations) Use this parameter to specify the port number for SNMP. The range is 1 to 65535. The default is 161. Use this parameter to either permit or deny managers to use the read-write community string to change the parameter settings of the access point. The choices are described here:

Enabled; Check this option to permit managers to use the read-write community string to change the parameter settings of the access point. Disabled: Check this option to prevent managers from using the read-write community string to change the parameter settings. If you click this option, the read-write community string acts as a read-only community string, giving you two read-only strings on the access point. Use this parameter to specify the read-

write community string. Here are the guidelines:

Managers may use this community string to both view and change the parameter settings on the access point, unless the previous option Allow SNMP set requests is disabled. The community string may be from 1 to 256 characters. You may specify only one read-write community string. The community string may contain both letters and numbers, The community string may not contain spaces. 146 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 24. SNMP (Continued) Field Description Restrict the source of SNMP requests to only the designated hosts or subnets Hostname, address, or subnet of Network Management System The community string is case sensitive. You may not leave the field empty. The default community string is private. Use this option to increase the security of the access point by restricting the use of SNMP management to specific subnets or individual workstations. The options are described here:

Enabled: Check this option if you want to restrict the use of SNMP on the access point to only those management stations specified in the next field in the window. Restricting SNMP applies to both read-

only and read-write community strings. Disabled: Check this option to disable this feature and permit any workstation to manage the unit with SNMP. This is the default setting. Use this field to specify the management workstations that are allowed to use SNMP to manage the device. This field only applies if you selected the Enabled option in the previous field. You may specify the management workstation by hostname, IP address, or subnet address:

Here are the guidelines:

You may specify only one value in the field. You may specify an authorized SNMP workstation by its DNS hostname (e.g. smith.abc.com). You may specify an authorized SNMP workstation by its IP address (e.g. 149.23.45.102.) 147 Review Draft - May 9, 2014 Chapter 6: Services Menu Table 24. SNMP (Continued) Field Description You may specify a subnet to allow all management workstations in the subnet to use SNMP to access the device. The subnet is specified in this format:

address/mask You may specify the actual mask or the mask length. Here is an example of a subnet specified by the actual mask:

149.24.42.0/255.255.255.0 Here is the same subnet, specified by mask length:

149.24.42.0/24 Community name for traps Use this field to specify the community name the access point should use to transmit traps. Use these options to specify which traps the access point should transmit. The options are described here:

Coldstart: This trap is sent when the SNMP agent is started. Link: This trap is sent when a radio is enabled or disabled. Authentication: This trap is sent when an SNMP authentication fails. Association: This trap is sent when wireless clients connect to or disconnect from the access point. Unknown AP: This trap is sent when the access point detects a rogue access point. Trap type to send 148 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Table 24. SNMP (Continued) Description Field Trap type to send

(continued) Hostname or IP address

- Filtered STA: This trap is sent when the access point blocks an unauthorized wireless client from accessing the network because the client is not authorized by the MAC address filter.

- RADIUS Authentication (Success): This trap is sent when a wireless client successfully logs on the network using RADIUS.

- RADIUS Authentication (Fail): This trap is sent when a wireless client fails to log on successfully using RADIUS. Specify the SNMP trap receivers to receive traps from the access point. Here are the guidelines:

You may specify up to three trap receivers. You may specify only one trap receiver per field. You have to click the Enabled dialog box before you can enter or modify a trap receiver. You may specify a trap receiver by its IP address or DNS hostname. You may not specify an IP address range. 149 Review Draft - May 9, 2014 Chapter 6: Services Menu Enabling or Disabling the LEDs You may turn off the LEDs on the front panel of the access point when you are not using them to monitor or troubleshoot the device. The default setting for the LEDs is on. To turn the LEDs on or off, perform the following procedure:

1. From the Services menu, select LED. The unit displays the Control LEDs window, shown in Figure 46. Figure 46. Control LEDs Window 2. Click the On dialog circle to turn on the LEDs and Off to turn them off. 3. Click the Update button to activate and save your changes on the access point. 150 Review Draft - May 9, 2014 Configuring the HTTP Server AT-TQ Wireless Access Point Series Users Guide The following procedures explain how to enable and disable the HTTP server. You may use the server to manage the access point with your web browser on your computer. The HTTP server is a non-secure management method. The packets exchanged between your web browser and the access point are sent in clear text, leaving them vulnerable to snooping. For secure remote management, use HTTPS instead, as explained in Configuring the HTTPS Server on page 153. The default setting for the HTTP server is enabled. Enabling the HTTP Server To activate the HTTP server, perform the following procedure:

1. From the Services menu, select HTTP/HTTPS. The access point displays the Configure Web Server Settings window. Refer to Figure 47. Figure 47. Configure Web Server Settings Window 2. Click the Enabled dialog circle for the HTTP Server Status field. 3. To change the HTTP port number, select the HTTP Port field and enter the new value. The default is port 80. 4. Click the Update button to activate and save your changes on the access point. The HTTP server is now active on the access point. You may now manage the access point using your web browser and HTTP. 151 Review Draft - May 9, 2014 Chapter 6: Services Menu Disabling the HTTP Server The following procedure explains how to disable the HTTP server on the access point. Please review the following guidelines before performing the procedure:

If you disable the HTTP server while managing the access point with HTTP, your management session is interrupted. To continue managing the unit, you may use either HTTPS or SNMP. If the maximum number of active sessions is set to 1, the default value. you may have to wait until the inactive session timer times out before starting an HTTPS session. The default is five minutes. The maximum number of active sessions does not apply to SNMP. If you disable HTTP without configuring HTTPS or SNMP, you cannot manage the access point. Your only alternative is to return the device to its default settings with the Reset button on the back panel. To disable the HTTP server, perform this procedure:

1. From the Services menu, select HTTP/HTTPS. The access point displays the Configure Web Server Settings window. Refer to Figure 47 on page 151. 2. Click the Disabled dialog circle for the HTTP Server Status field. The following prompt is displayed. Figure 48. Disable HTTP Server Prompt 3. Click OK. 4. Click the Update button to activate and save your changes on the access point. The HTTP server is now disabled. 152 Review Draft - May 9, 2014 Configuring the HTTPS Server AT-TQ Wireless Access Point Series Users Guide The following procedures explain how to enable and disable the HTTPS server. You may use the server to manage the access point with your web browser on your computer. Managing the device with HTTPS is more secure that HTTP because your web browser and the access point use encryption to protect the management packets. The default setting for the server is disabled. The server uses port 443. You may not change that value. Enabling the HTTPS Server To activate the HTTPS server, perform the following procedure:

1. From the Services menu, select HTTP/HTTPS. The access point displays the Configure Web Server Settings window. Refer to Figure 47 on page 151. 2. Click the dialog box for the Generate SSL Certificate field. The prompt in Figure 49 on page 153 is displayed. Figure 49. Generate SSL Certificate Prompt 3. Click the OK button. 4. Click the Update button. 5. Click the Enabled dialog circle for the HTTPS Server Status field. 6. Click the Update button again. You may now manage the access point using HTTPS and encryption from the web browser on your computer. To test the HTTPS server, continue with these steps. 7. Click the Log Out button to end your HTTP management session. 8. In the URL field of your web browser, enter the prefix HTTPS//:

followed by the IP address of the access point. (You must always include the prefix HTTPS:// in the URL field to start secure web browser management sessions on the access point.) 153 Review Draft - May 9, 2014 Chapter 6: Services Menu At this point, your web browser may display a security warning message to indicate that it does not consider the access point, which created its own HTTPS certificate, as a trusted certificate authority. If you see a warning message, you should be able to close it and manage the device. To eliminate the message, add the access point as a trusted certificate authority to the web browser. Refer to the web browser documentation for instructions. 9. You should now be able to log on to the access point. Disabling the HTTPS Server The following procedure explains how to disable the HTTPS server on the access point. Please review the following guidelines before performing the procedure:

Disabling the HTTPS server while managing the access point with HTTPS interrupts your management session. You may use HTTP or SNMP to continue managing the device. If the maximum number of active sessions is set to 1, the default value, you may have to wait until the inactive session timer times out before starting a new session. The default is five minutes. The maximum number of active sessions does not apply to SNMP. If you disable HTTPS without configuring HTTP or SNMP, you cannot manage the access point. Your only alternative is to return the device to its default settings with the Reset button on the back panel. To disable the HTTPS server, perform this procedure:

1. From the Services menu, select HTTP/HTTPS. The access point displays the Configure Web Server Settings window. Refer to Figure 47 on page 151. 2. Click the Disabled dialog circle for the HTTPS Server Status field. The following prompt is displayed. Figure 50. Disable HTTPS Server Prompt 3. Click OK. 4. Click the Update button. The HTTPS server is now disabled on the access point. 154 Review Draft - May 9, 2014 Configuring the Maximum Number of Active Management Sessions AT-TQ Wireless Access Point Series Users Guide This procedure explains how to configure the maximum number of active management sessions the access point supports at one time. The range is one to ten sessions. The default is one session. You might want to consider increasing the parameter if the access point will be managed by more than one person. The maximum number of active management sessions applies to HTTP and HTTPS sessions. It does not apply to SNMP. To configure the maximum number of active management sessions, perform the following procedure:

1. From the Services menu, select HTTP/HTTPS. The access point displays the Configure Web Server Settings window. Refer to Figure 47 on page 151. 2. Select the dialog box for Maximum sessions and enter the new value. The range is 1 to 10 management sessions. 3. Click the Update button to activate and save your change on the access point. 155 Review Draft - May 9, 2014 Chapter 6: Services Menu Configuring the Management Session Timer You should always conclude your management sessions of the access point by logging off so that if you leave your computer unattended, someone cannot use it to make unauthorized changes to the parameter settings of the device. If you forget to log off, the access point has a timer to detect and log off inactive management sessions for you, automatically. A session is considered inactive if there is no management activity for the duration of the timer. The default setting for the timer is five minutes. To configure the management session timer, perform the following procedure:

1. From the Services menu, select HTTP/HTTPS. The access point displays the Configure Web Server Settings window. Refer to Figure 47 on page 151. 2. Select the dialog box for Session Timeout (minutes) and enter the new value. The range is 1 to 1440 minutes. (1440 minutes is one day.) The default is 5 minutes. 3. Click the Update button to activate and save your change on the access point. 156 Review Draft - May 9, 2014 Manually Setting the Date and Time AT-TQ Wireless Access Point Series Users Guide If the access point does not have access to an SNTP server, you may set the date and time manually. The unit adds the date and time to log messages and SNMP traps. Note If you configure the date and time manually, you have to reconfigure them whenever the access point is reset or powered off. To manually set the date and time, perform the following procedure:

1. From the Services menu, select NTP. The access point displays the Modify How the Access Point Discovers the Time window. 2. Click the Manually dialog circle for the Set System Time parameter. Refer to Figure 51. This is the default setting. Figure 51. Modify How the Access Point Discovers the Time Window -

Manually Setting the Date and Time 3. Use the pull-down menus in System Date to set the current month, day, and year. 4. Use the pull-down menus in System Time to set the current hours and minutes. The hours are in 24 hours. For example, 14 represent 2:00 p.m. 5. Use the pull-down menu in Time Zone to set the time zone of the location of the access point. 157 Review Draft - May 9, 2014 Chapter 6: Services Menu 6. If the location of the access point observes daylight savings time, click the dialog box for the Adjust Time for Daylight Savings parameter. The window displays the fields in Figure 52. Figure 52. Daylight Savings Time Fields If the area does not observe Daylight Savings time, leave the dialog box empty and go to step 10. 7. Use the pull down menus in DST Start to set the date and time for the start of Daylight Savings time. 8. Use the pull down menus in DST End to set the date and time for the end of Daylight Savings time. 9. Select the DST Offset field and enter the number of minutes to adjust the time at the start and end of Daylight Savings time. The default is 60 minutes. 10. Click the Update button to activate and save your changes on the access point. 158 Review Draft - May 9, 2014 Setting the Date and Time with the Network Time Protocol Client AT-TQ Wireless Access Point Series Users Guide The access point has a Network Time Protocol (NTP) client. The unit uses the client to obtain the date and time from an SNTP server on your network or the Internet. The access point adds the date and time to log messages and SNMP traps. Here are the guidelines to using the client:

You need to know the hostname or IP address of an SNTP server on your network or the Internet. You may specify only one server. The access point must have an IP address. The access point must also have a default gateway address if the SNTP server is on a different subnet or network. The default gateway must specify the first router hop to the subnet or network of the SNTP server. The client is compatible with SNTP servers. It is not compatible with NTP servers. To configure the NTP client, perform the following procedure:

1. From the Services menu, select NTP Settings. The access point displays the Modify how the access point discovers the time window, shown in Figure 51 on page 157. 2. Click the Using Network Time Protocol dialog circle for the Set System Time parameter. Refer to Figure 53. Figure 53. Modify How the Access Point Discovers the Time Window -

Configuring the NTP Client 159 Review Draft - May 9, 2014 3. Select the NTP Server field and enter the IP address or hostname of the SNTP server. You may specify only one server. If you are specifying the server by its hostname, please observe these guidelines:

The first character must be a letter or number. It cannot be a special character. The last character cannot be a hyphen or period. 4. Select the Interval to Synchronize field and specify in minutes how frequently the access point is to synchronize its time with the SNTP server. The range is 1 to 9999 minutes. The default is 10 minutes. 5. Use the pull-down menu in Time Zone to set the time zone of the location of the access point. If the SNTP server is providing Coordinated Universal Time (UTC), the access point uses the time zone parameter to determine its UTC offset, which is the number of hours its location is ahead or behind UTC. It adjusts the time accordingly. 6. If the location of the access point observes daylight savings time, click the dialog box for the Adjust Time for Daylight Savings parameter. The window displays the fields in Figure 52 on page 158. If the area does not observe Daylight Savings time, leave the dialog box empty and go to step 10. 7. Use the pull down menus in DST Start to set the date and time for the start of Daylight Savings time. 8. Use the pull down menus in DST End to set the date and time for the end of Daylight Savings time. 9. Select the DST Offset field and enter the number of minutes to adjust the time at the start and end of Daylight Savings time. The default is 60 minutes. 10. Click the Update button to activate and save your changes on the access point. Chapter 6: Services Menu 160 Review Draft - May 9, 2014 Chapter 7 Maintenance Menu This chapter describes the management functions of the menu selections in the Maintenance menu. The chapter contains the following sections:

Restoring the Default Settings to the Access Point on page 162 Downloading the Configuration from the Access Point to Your Computer on page 164 Restoring a Configuration to the Access Point on page 165 Rebooting the Access Point on page 166 Enabling or Disabling the Reset Button on page 167 Switching the Primary and Secondary Management Software Images on page 168 Uploading New Versions of the Management Software to the Access Point on page 170 161 Review Draft - May 9, 2014 Chapter 7: Maintenance Menu Restoring the Default Settings to the Access Point This procedure explains how to restore the default settings on the access point. Please review the following information before performing the procedure:

The manager name and password are reset to manager and friend, respectively. If the access point has a static IP address, the address is deleted and the DHCP client is activated. If the device does not receive a response from a DHCP server on the LAN port, it uses the default IP address 192.168.1.230. Note The access point stops forwarding network traffic when it is returned to its default settings because the default setting for the radios is off. To activate the default settings on the access point, perform the following procedure:

1. From the Maintenance menu, select Configuration. The access point displays the Manage this Access Points Configuration window shown in Figure 54 on page 163. 162 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide Figure 54. Manage this Access Points Configuration Window 2. Click the Reset button in the To Restore the Factory Default Configuration section of the window. The device displays a confirmation prompt. 3. Click OK to restore the default settings of Cancel to cancel the procedure. 4. If you click OK, wait one minute for the device to reset and then establish a new management session. For instructions, refer to Starting the Initial Management Session on the Access Point on page 23. 163 Review Draft - May 9, 2014 Chapter 7: Maintenance Menu Downloading the Configuration from the Access Point to Your Computer This procedure explains how to download the configuration of the access point as a file to your computer or a network server. You might perform this procedure to maintain a history of the configurations of the unit so that you can easily return it to an earlier configuration, if needed. This procedure is also useful if there are several access points that are to have the same or nearly the same settings. You can configure one unit and then transfer its configuration to the other units. Please review the following information before performing this procedure:

You may not edit a configuration file with a text editor. This procedure does not interrupt the operations of the access point. To download the configuration of the access point as a file to your management workstation or network server, perform the following procedure:

1. From the Maintenance menu, select Configuration. The access point displays the Manage this Access Points Configuration window in Figure 54 on page 163. 2. Click the Download button in the To Save the Current Configuration to a Backup File section of the window. 3. Click the Browse button and select the folder or directory in which to store the file on your management workstation or network server. 4. If desired, change the filename for the configuration file. The filename suffix must be XML. 5. Click Save. The access point downloads its configuration to your management workstation and stores it in the designated folder. 164 Review Draft - May 9, 2014 Restoring a Configuration to the Access Point AT-TQ Wireless Access Point Series Users Guide This procedure explains how to restore a configuration to the access point. You might perform this procedure to restore a previous configuration to the device or to configure multiple access points with the same configuration. Here are the guidelines:

You may only restore configuration files that are created with Downloading the Configuration from the Access Point to Your Computer on page 164. A configuration file must have the XML suffix. You may restore a configuration file to multiple access points to give them the same configuration. However, if a configuration file has a static IP address, you should change the IP address of a device immediately after you restore a configuration to prevent an IP address conflict from occurring among the devices. You may not edit a configuration file with a text editor. Note The access point resets when you restore a configuration. It does not forward network traffic for one minute while it initializes its management software. This procedure assumes that the configuration file is stored on your management workstation or a network server. To restore a configuration to the access point, perform the following procedure:

1. From the Maintenance menu, select Configuration. The access point displays the Manage this Access Points Configuration window in Figure 54 on page 163. 2. Click the Browse button in the To Restore the Configuration from a Previously Saved File section, and select the configuration file to restore to the access point from your management workstation or network server. 3. Click the Open button. 4. Click the Restore button. 5. Wait one minute for the access point to complete initializing its management software. 6. To resume managing the unit, establish a new management session. 165 Review Draft - May 9, 2014 Chapter 7: Maintenance Menu Rebooting the Access Point This section explains how to reboot the access point. You might reboot the device if it is experiencing a problem. Caution The access point does not forward network traffic while it reboots. Some network traffic may be lost. To reboot the access point, perform the following procedure:

1. From the Maintenance menu, select Configuration. The access point displays the Manage this Access Points Configuration window in Figure 54 on page 163. 2. Click the Reboot button in the To Reboot the Access Point section of the window. The access point displays a confirmation prompt. 3. Click OK. Your current management session is interrupted. 4. To resume managing the unit, wait for it to complete initializing its management software and then start a new management session. 166 Review Draft - May 9, 2014 Enabling or Disabling the Reset Button AT-TQ Wireless Access Point Series Users Guide This section explains how to enable or disable the Reset button on the rear panel of the access point. The Reset button is used to restore the default settings to the device. The default setting for the button is enabled. If the unit is installed in a non-secure area, you might disable the button to prevent unauthorized individuals from pressing it and disrupting the operations of your wireless network. Note If you disable the Reset button and forget the manager account password, you will not be able to manage the unit with the web browser interface. To enable or disable the Reset button, perform the following procedure:

1. From the Maintenance menu, select Configuration. The access point displays the Manage this Access Points Configuration window in Figure 54 on page 163. 2. In the To Disable RESET Button section of the window, click the Yes dialog circle to disable the button or the No dialog circle to enable it. 3. Click the Update button to activate and save your changes on the access point. 167 Review Draft - May 9, 2014 Chapter 7: Maintenance Menu Switching the Primary and Secondary Management Software Images The access point maintains primary and secondary images of the management software in flash memory. The primary image is used during normal operations. If the access point encounters a problem with the primary image when it is powered on or reset, it loads the secondary image instead and enters an event message in the log file to signal the problem with the primary image. If you reset or power cycle the access point, the device again tries to load the primary again, and switches to the secondary image again if it cannot load the primary image. If this problem keeps occurring, you can instruct the access point to switch the images, so that the secondary image becomes the primary image, and the primary image becomes the secondary image. Caution This procedure is disruptive to the wireless network because the access point does not forward traffic for approximately two minutes while it switches the images. To minimize the disruption to the wireless clients, you should perform this procedure during non-

business hours. To switch the primary and secondary images, perform the following procedure:

1. From the Maintenance menu, select Upgrade. The management software displays the Manage firmware window, shown in Figure 55. Figure 55. Manage Firmware Window 168 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide 2. Click the Switch button. The access point displays a confirmation prompt. 3. Click OK to continue with the procedure or Cancel to cancel it. If you click OK, the access point begins the process of switching the images. Caution The unit does not forward network traffic for about two minutes while it switches the primary and secondary images. Some network traffic may be lost. 169 Review Draft - May 9, 2014 Chapter 7: Maintenance Menu Uploading New Versions of the Management Software to the Access Point Allied Telesis may release new versions of the management software on the companys web site for customers who want to upgrade the firmware on their access points. This procedure explains how to upload new firmware to the access point. Please review the following information before performing the procedure:

The procedure assumes that you have already obtained the new image file from the Allied Telesis web site and stored it on your computer or network server. The configuration settings of the access point are retained when a new firmware image is uploaded to the device. During the upgrade process, the access point overwrites its secondary image with the current primary image before uploading the new image file and designating it as the new primary image file. For more information about primary and secondary images, refer to Switching the Primary and Secondary Management Software Images on page 168. When you update the firmware on the access point with a newer version, Allied Telesis recommends installing the firmware once, so that the primary and secondary images are different versions. That way, the access point can still use the older version if there is a problem with the new firmware. The access point does not compare the version numbers of the new and current firmware when it uploads the management software. You should compare the numbers yourself to avoid uploading an older version of the firmware to the access point. The upgrade process takes about 10 minutes. Caution The access point does not forward network traffic while it uploads the management software from your computer and writes the file to flash memory. To minimize the disruption of the upgrade procedure to network operations, you should perform it only during periods of low traffic activity, such as during non-business hours. To upload a new version of the management software to the access point, perform the following procedure:

1. From the Maintenance menu, select Upgrade. 170 Review Draft - May 9, 2014 AT-TQ Wireless Access Point Series Users Guide The access point displays the Manage Firmware window shown in Figure 55 on page 168. 2. Click the Browse button next to the New Firmware Image field and locate the new image file on your computer or network server. 3. Click the Upgrade button. The access point displays a confirmation prompt. 4. Click the OK button to upload the new firmware to the access point or Cancel to cancel the procedure. The access point performs the following tasks during the upgrade procedure:

Overwrites its secondary image with its current primary image. Uploads the new image from your computer or network server. Copies the file to flash memory as its new primary image. Resets to initialize the new firmware. Note The entire process may take up to 10 minutes. Do not close the web browser window or change to a different window until the entire procedure is finished. Interrupting the transfer may corrupt the file on the access point. 5. To resume managing the unit, start a new web browser management session. 171 Review Draft - May 9, 2014 Chapter 7: Maintenance Menu 172 Review Draft - May 9, 2014

 

 

AT-TQ3600 Enterprise-class Wireless Access Point with IEEE802.11a/b/g/n Dual Radio Installation Guide 613-001863 Rev. A Review Draft - January 24, 2014 Copyright 2014 Allied Telesis, Inc. All rights reserved. This product includes software licensed under the BSD License. As such, the following language applies for those portions of the software licensed under the BSD License:

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

* Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

* Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

* Neither the name of Allied Telesis, Inc. nor the names of the respective companies above may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Copyright (c) [dates as appropriate to package] by The Regents of the University of California - All rights reserved. Copyright (c) 2000-2003 by Intel Corporation - All rights reserved. Copyright (c) 1997-2003, 2004 by Thomas E. Dickey

<dickey@invisible-island.net> - All rights reserved. Copyright (c) 2001-2009 by Brandon Long (ClearSilver is now licensed under the New BSD License.) Copyright (c) 1984-2000 by Carnegie Mellon University - All rights reserved. Copyright (c) 2002,2003 by Matt Johnston - All rights reserved. Copyright (c) 1995 by Tatu Ylonen <ylo@cs.hut.fi> - All rights reserved. Copyright 1997-2003 by Simon Tatham. Portions copyright by Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas Barry, Justin Bradford, and CORE SDI S.A. Copyright (c) 1989, 1991 by Free Software Foundation, Inc. (GNU General Public License, Version 2, June 1991). Copyright (c) 2002-2005 by Jouni Malinen <jkmaline@cc.hut.fi> and contributors. Copyright (c) 1991, 1999 by Free Software Foundation, Inc. (GNU Lesser General Public License, Version 2.1, February 1999). Copyright (c) 1998-2002 by Daniel Veillard - All rights reserved. Copyright (c) 1998-2004 by The OpenSSL Project - All rights reserved. Copyright (c) 1995-1998 by Eric Young (eay@cryptsoft.com) - All rights reserved. This product also includes software licensed under the GNU General Public License available from:

http://www.gnu.org/licenses/gpl2.html Allied Telesis is committed to meeting the requirements of the open source licenses including the GNU General Public License (GPL) and will make all required source code available. If you would like a copy of the GPL source code contained in this product, please send us a request by registered mail including a check for US$15 to cover production and shipping costs, and a CD with the GPL code will be mailed to you. GPL Code Request Allied Telesis Labs (Ltd) PO Box 8011 Christchurch, New Zealand No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc. Allied Telesis and the Allied Telesis logo are trademarks of Allied Telesis, Incorporated. All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners. Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesis, Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesis, Inc. has been advised of, known, or should have known, the possibility of such damages. Review Draft - January 24, 2014 Electrical Safety and Emissions Standards This product meets the following standards. Federal Communications Commission Interference Statement Declaration of Conformity Manufacturer Name: Allied Telesis, Inc. Declares that the product: Wireless access point with PoE powered device function Model Numbers: AT-TQ3600; AT-TQ3600-01 This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. For operation within 5.15 ~ 5.25GHz / 5.47 ~5.725GHz frequency range, it is restricted to indoor environment. The band from 5600-5650MHz will be disabled by the software during the manufacturing and cannot be changed by the end user. This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules. Radiation Exposure Statement:

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 21cm between the radiator & your body. 3 Review Draft - January 24, 2014 European Union Restriction of the Use of Certain Hazardous Substances

(RoHS) in Electrical and Electronic Equipment This Allied Telesis RoHS-compliant product conforms to the European Union Restriction of the Use of Certain Hazardous Substances (RoHS) in Electrical and Electronic Equipment. Allied Telesis ensures RoHS conformance by requiring supplier Declarations of Conformity, monitoring incoming materials, and maintaining manufacturing process controls. Note For additional regulatory statements, refer to Appendix B, Regulatory Statements on page 63. Safety and Electromagnetic Emissions Certificates Standard Compliance Certificates Electromagnetic Compatibility (EMC) RoHs compliant European Union RoHS (Directive 2011/65/EU of the European Parliament and of the Council of 8 June 2011 on the restriction of the use of certain hazardous substances in electrical and electronic equipment.) CE EAC FCC/IC KC RCM SRMC Wi-Fi CERTIFIED EN 301 489-1 EN 301 489-17 EN 55022 EN 55024 EN 61000-3-2 EN 61000-3-3 EN 61000-4-2 EN 61000-4-3 EN 61000-4-4 EN 61000-4-5 EN 61000-4-6 EN 61000-4-11 AS/NZS CISPR 22 FCC 47 CFR Part 15, Subpart B ICES-003 Medical (EMC) EN 60601-1-2 4 Review Draft - January 24, 2014 Radio Equipment Safety EN 300 328 EN 301 893 AS/NZS 4268 FCC 47 CFR Part 15, Subpart C FCC 47 CFR Part 15, Subpart E FCC part 2 RSS210 RSS-Gen RSS-102 EN 60950-1 IEC 60950-1 TUV-T UL 60950-1 UL 2043 (For AT-TQ3600-01 only) Suitable for use in environmental air space in accordance with Section 300-22(C) of the National Electrical Code, and Sections 2-128, 12-

010(3), and 12-100 of the Canadian Electrical Code Part 1, CSA C22.1. 5 Review Draft - January 24, 2014 Translated Safety Statements Important: The indicates that a translation of the safety statement is available in a PDF document titled Translated Safety Statements on the Allied Telesis website at www.alliedtelesis.com/support/documentation. To view all the current documentation for the product, select the model number from the Product pull-down menu or enter the model name in the Search field. 6 Review Draft - January 24, 2014 Contents Preface ............................................................................................................................................................13 Safety Symbols Used in this Document ...........................................................................................................14 Contacting Allied Telesis ..................................................................................................................................15 Chapter 1: Overview ......................................................................................................................................17 Features ...........................................................................................................................................................18 Front and Rear Panels .....................................................................................................................................19 LAN Port ...........................................................................................................................................................21 Power over Ethernet ..................................................................................................................................21 Connector Type..........................................................................................................................................21 Speed.........................................................................................................................................................21 Duplex Mode..............................................................................................................................................21 Maximum Distance.....................................................................................................................................21 Cable Requirements ..................................................................................................................................21 Automatic MDIX Detection.........................................................................................................................22 Port Pinouts................................................................................................................................................22 LEDs.................................................................................................................................................................23 Reset Button.....................................................................................................................................................24 Chapter 2: Installing the Access Point ........................................................................................................25 Reviewing Safety Precautions..........................................................................................................................26 Unpacking the AT-TQ3600 Access Point .........................................................................................................28 Installing the Access Point on a Table..............................................................................................................29 Installing the Access Point on a Wall or Ceiling ...............................................................................................33 Guidelines ..................................................................................................................................................33 Removing the Bottom Panel from the Access Point ..................................................................................37 Installing the Bottom Panel on a Wall or Ceiling ........................................................................................40 Installing the Access Point on the Bottom Panel........................................................................................42 Installing Anti-theft Devices ..............................................................................................................................50 Starting the Initial Management Session on the Access Point .........................................................................51 Starting the Initial Management Session with a Direct Connection............................................................52 Starting the Initial Management Session without a DHCP Server .............................................................53 Starting the Initial Management Session with a DHCP Server ..................................................................53 Setting the Country Setting...............................................................................................................................55 Appendix A: Technical Specifications ........................................................................................................57 Physical Specifications .....................................................................................................................................57 Environmental Specifications ...........................................................................................................................57 Power Specifications ........................................................................................................................................58 LAN Port ...........................................................................................................................................................59 Safety and Electromagnetic Emissions Certifications ......................................................................................61 Appendix B: Regulatory Statements ...........................................................................................................63 Federal Communication Commission Interference Statement .........................................................................64 Industry Canada Statement..............................................................................................................................66 Europe - EU Declaration of Conformity ............................................................................................................68 7 Review Draft - January 24, 2014 Contents 8 Review Draft - January 24, 2014 Figures Figure 1: Components on the Front and Rear Panels..................................................................................... 19 Figure 2: AT-TQ0091 AC/DC Power Adapter.................................................................................................. 28 Figure 3: Installing the Rubber Feet ................................................................................................................ 29 Figure 4: Connecting the Network Cable for Table or Desktop Installation..................................................... 30 Figure 5: Connecting the Power Cable from the AT-TQ0091 AC/DC Adapter................................................ 31 Figure 6: Removing an AC Plug from the AT-TQ0091 AC/DC Power Adapter ............................................... 31 Figure 7: Installing an AC Plug on the AT-TQ0091 AC/DC Power Adapter .................................................... 32 Figure 8: Ventilation Slot ................................................................................................................................. 33 Figure 9: Wall Orientations .............................................................................................................................. 34 Figure 10: Heat Sinks ...................................................................................................................................... 35 Figure 11: Screw Holes on the Bottom Panel of the AT-TQ3600 Bracket....................................................... 36 Figure 12: Hole Dimensions ............................................................................................................................ 36 Figure 13: Opening Front Panel ...................................................................................................................... 37 Figure 14: Loosening the Captive Screw......................................................................................................... 38 Figure 15: Opening the Bottom Panel ............................................................................................................. 39 Figure 16: Removing the Bottom Panel from the Wireless Access Point........................................................ 40 Figure 17: Marking the Locations of the Bottom Panel Holes on the Wall or Ceiling ...................................... 41 Figure 18: Attaching the Bottom Panel to the Wall or Ceiling.......................................................................... 42 Figure 19: Installing the Access Point on the Bottom Panel............................................................................ 43 Figure 20: Connecting the Network Cable that is External to the Wall............................................................ 44 Figure 21: Attaching the Network Cable through the Wall Opening ................................................................ 45 Figure 22: Connecting the DC Cable from the AT-TQ0091 Power Adapter.................................................... 46 Figure 23: Closing the Access Point over the Bottom Panel ........................................................................... 47 Figure 24: Tightening the Captive Screw ........................................................................................................ 48 Figure 25: Holes for Anti-theft Devices............................................................................................................ 50 Figure 26: Logon Window................................................................................................................................ 52 Figure 27: Modify Wireless Settings Window .................................................................................................. 55 Figure 28: Pin Numbers for the RJ-45 Connector on the LAN Port................................................................. 59 9 Review Draft - January 24, 2014 List of Figures 10 Review Draft - January 24, 2014 Tables Table 1. Components on the Front and Rear Panels ..................................................................................... 20 Table 2. Twisted Pair Cable for the LAN Port ................................................................................................. 22 Table 3. LEDs on the AT-TQ3600 Access Point ............................................................................................ 23 Table 4. AT-TQ3600 Physical Specifications ................................................................................................. 57 Table 5. Environmental Specifications ........................................................................................................... 57 Table 6. AT-TQ3600 Maximum Power Consumption ..................................................................................... 58 Table 7. AT-TQ0091 Power Adapter .............................................................................................................. 58 Table 8. LAN Port Specifications .................................................................................................................... 59 Table 9. MDI Pin Signals (10Base-T or 100Base-TX) .................................................................................... 59 Table 10. MDI-X Pin Signals (10Base-T or 100Base-TX) .............................................................................. 59 Table 11. 1000Base-T Connector Pinouts ..................................................................................................... 60 11 Review Draft - January 24, 2014 List of Tables 12 Review Draft - January 24, 2014 Preface This guide contains the hardware installation instructions for the AT-

TQ3600 Wireless Access Point. This preface contains the following sections:

Safety Symbols Used in this Document on page 14 Contacting Allied Telesis on page 15 13 Review Draft - January 24, 2014 Preface Safety Symbols Used in this Document This document uses the following conventions. Note Notes provide additional information. Caution Cautions inform you that performing or omitting a specific action may result in equipment damage or loss of data. Warning Warnings inform you that performing or omitting a specific action may result in bodily injury. 14 Review Draft - January 24, 2014 Contacting Allied Telesis AT-TQ3600 Wireless Access Point Installation Guide If you need assistance with this product, you may contact Allied Telesis technical support by going to the Support & Services section of the Allied Telesis web site at www.alliedtelesis.com/support. You can find links for the following services on this page:

24/7 Online Support Enter our interactive support center to search for answers to your product questions in our knowledge database, to check support tickets, to learn about RMAs, and to contact Allied Telesis technical experts. USA and EMEA phone support Select the phone number that best fits your location and customer type. Hardware warranty information Learn about Allied Telesis warranties and register your product online. Replacement Services Submit a Return Merchandise Authorization (RMA) request via our interactive support center. Documentation View the most recent installation and user guides, software release notes, white papers, and data sheets for your products. Software Downloads Download the latest software releases for your managed products. For sales or corporate information, go to www.alliedtelesis.com/

purchase. 15 Review Draft - January 24, 2014 Preface 16 Review Draft - January 24, 2014 Chapter 1 Overview This chapter describes the hardware components of the AT-TQ3600 Wireless Access Point. This chapter contains the following sections:

Features on page 18 Front and Rear Panels on page 19 LAN Port on page 21 LEDs on page 23 Reset Button on page 24 17 Review Draft - January 24, 2014 Chapter 1: Overview Features 18 The main features of the product are listed here:

Independent 2.4 and 5 GHz radios IEEE 802.11a/b/g IEEE 802.11n 3x3:3 MIMO with internal antennas Data rate of 450 Mbps for the 2.4 GHz radio Data rate of 450 Mbps for the 5 GHz radio Wireless Distribution System (WDS) bridges Access point clustering Rogue access point detection Multiple SSIDs One 10/100/1000Base-T Ethernet port with Auto-Negotiation, auto MDI/MDIX, and IEEE 802.3af Power over Ethernet (PoE) IEEE 802.3 (10Base-T), IEEE 802.3u (100Base-TX), and IEEE 802.3ab (1000Base-T) compliance on the Ethernet port MAC address filtering for wireless access security Broadcast and multicast rate limiting Virtual access points for multiple broadcast domains DHCP client RADIUS accounting with external RADIUS server Network Time Protocol (NTP) client Domain name server (DNS) client IEEE 802.1x authentication WPA-Personal and WPA-Enterprise with WPA, WPA2, TKIP, and CCMP (AES) authentication and encryption Static WEP encryption HTTP and HTTPS web browser management SNMPv1 and v2c management Quality of Service Event log Syslog client Table, wall, or ceiling installation Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Front and Rear Panels The components of the unit are illustrated in Figure 1. Holes for Anti-

theft Devices Console Port Reset Button LAN Connector DC Power Connector Figure 1. Components on the Front and Rear Panels 19 Review Draft - January 24, 2014 Chapter 1: Overview The components are listed in Table 1. Table 1. Components on the Front and Rear Panels Field Description LAN Port Reset Button Console Port Holes for anti-theft devices Holes for a padlock and Torx screw. For information, refer to Installing Anti-theft Devices on page 50 The Console Port is for manufacturing purposes only. The Reset button returns the parameter settings on the access point to their default settings. For information, refer to Reset Button on page 24. The LAN port connects the access point to your wired network. It supports PoE. If you connect the port to an Ethernet switch that supports PoE, you do not have to use the AC/DC adapter to power the device. For information, refer to LAN Port on page 21 This connector is for the AT-TQ0091 Power Adapter. The access point can be powered with PoE on the LAN port or the power adapter. The AT-TQ0091 Power Adapter does not come with the access point. It has to be ordered separately from Allied Telesis. DC Power Connector 20 Review Draft - January 24, 2014 LAN Port AT-TQ3600 Wireless Access Point Installation Guide Power over Ethernet The LAN port is used to connect the device to your Local Area Network

(LAN), typically through an Ethernet switch. The AT-TQ3600 Access Point supports Power over Ethernet on the LAN port. The unit is a PoE class 3 powered device with a maximum power consumption of 11.4 watts. When the port is connected to an PoE Ethernet switch, the unit receives its power over the network cable that carries the network traffic. If you use the PoE feature, you do not need to use the AC/

DC power adapter that comes with the access point. Connector Type The LAN port has an 8-pin RJ-45 connector. The port uses four pins at 10 or 100 Mbps and all eight pins at 1000 Mbps. The pin assignments are listed in LAN Port on page 59. Speed The port can operate at 10, 100, or 1000 Mbps. The speed is set automatically with Auto-Negotiation. You cannot disable Auto-Negotiation. Note The LAN port should be connected to a network device that also adjusts its speed with Auto-Negotiation. If the network device does not support Auto-Negotiation, the LAN port operates at 10 Mbps, which may reduce network performance. Duplex Mode The LAN port can operate in either half- or full-duplex mode at 10 or 100 Mbps, and full-duplex mode at 1000 Mbps. The port is IEEE 802.3u-

compliant and uses Auto-Negotiation to set the duplex mode. You cannot disable Auto-Negotiation on the port. Note The LAN port should be connected to a network device that also sets its duplex mode with Auto-Negotiation. If the network device does not support Auto-Negotiation, the LAN port operates at half-

duplex mode. This may result in a duplex mode mismatch if the network device is operating at full duplex. Maximum Distance Cable Requirements The port has a maximum operating distance of 100 meters (328 feet). The cable requirements for the LAN port are listed in Table 2 on page 22. 21 Review Draft - January 24, 2014 Chapter 1: Overview Table 2. Twisted Pair Cable for the LAN Port 10Mbps 100Mbps 1000Mbps Non-

PoE PoE Non-

PoE PoE Non-

PoE PoE Yes No No No No No Yes Yes Yes Yes No No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Cable Type Standard TIA/EIA 568-

B-compliant Category 3 shielded or unshielded cabling with 100 ohm impedance and a frequency of 16 MHz. Standard TIA/EIA 568-

A-compliant Category 5 shielded or unshielded cabling with 100 ohm impedance and a frequency of 100 MHz. Standard TIA/EIA 568-

B-compliant Enhanced Category 5 (Cat 5e) shielded or unshielded cabling with 100 ohm impedance and a frequency of 100 MHz. Standard TIA/EIA 568-

B-compliant Category 6 or 6a shielded cabling. Automatic MDIX Detection The 10/100/1000 Mbps twisted-pair port is IEEE 802.3ab compliant and features automatic MDIX detection when operating at 10 or 100 Mbps.

(Automatic MDIX detection does not apply to 1000 Mbps.) This feature automatically configures the port to MDI or MDI-X depending on the wiring configuration of the port on the Ethernet switch. You may not disable automatic MDIX detection. For automatic MDIX detection to work properly, it must also be present on the Ethernet switch. The LAN port defaults to MDIX if it is connected to a network device that does not support automatic MDIX detection. Port Pinouts Refer to Table 9 on page 59 for the port pinouts of the LAN port when it is operating at 10 or 100 Mbps in the MDI configuration and Table 10 on page 59 for the MDI-X configuration. Refer to Table 11 on page 60 for the port pinouts when the port is operating at 1000 Mbps. 22 Review Draft - January 24, 2014 LEDs AT-TQ3600 Wireless Access Point Installation Guide The LEDs on the AT-TQ3600 Access Point are described in Table 3. Table 3. LEDs on the AT-TQ3600 Access Point LED State Description PWR Solid Green The unit is receiving DC power that is within the normal operating range. SYS 10M and 100M Off Amber Off 10M: On 100M: Off 10M: Off 100M: On 10M: On 100M: On 2.4GHz Green 5GHz Green The power supply is not receiving power from either the AC/DC power adapter or a PoE Ethernet switch. The access point is loading its firmware. The unit is operating normally. The Ethernet port is operating at 10 Mbps. The Ethernet port is operating at 100 Mbps. The Ethernet port is operating at 1000 Mbps. The 2.4GHz radio is sending and receiving radio waves. The 5GHz radio is sending and receiving radio waves. Note You may turn off the LEDs with the management software. 23 Review Draft - January 24, 2014 The Reset button on the front panel is used to return the parameter settings of the unit to their default values. You might use the button if you want to discard the current configuration of the device or because you forgot the password to the manager account and cannot manage the unit. You may disable the button using the management software. If the unit is installed in a non-secure area, you might want to disable the button to prevent unauthorized individuals from pressing it and potentially disrupting the operations of your wireless network. The Reset button is recessed to prevent it from being accidentally pressed. To press the button, use a pointed object, such as the end of a straightened paperclip. Hold the button for five seconds and release. The access point resets and loads its default configuration in a process that takes one minute to complete. In its default configuration, the access point attempts to contact a DHCP server from its LAN port for its IP address configuration. If it receives a response, it configures its IP address according to the settings from the DHCP server. If it does not receive a response, it uses the default address 192.168.1.230 and subnet mask 255.255.255.0. For instructions on how to start a management session when the access point is at its default configuration, refer to Starting the Initial Management Session on the Access Point on page 51. Chapter 1: Overview Reset Button 24 Review Draft - January 24, 2014 Chapter 2 Installing the Access Point This chapter describes how to install the AT-TQ3600 Wireless Access Point. This chapter contains the following sections:

Reviewing Safety Precautions on page 26 Unpacking the AT-TQ3600 Access Point on page 28 Installing the Access Point on a Table on page 29 Installing the Access Point on a Wall or Ceiling on page 33 Installing Anti-theft Devices on page 50 Starting the Initial Management Session on the Access Point on page 51 Setting the Country Setting on page 55 Note The non-US model of this product has a country code setting that must be set during the initial management session of the unit. The setting ensures that the unit operates in compliance with the laws and regulations of your country or region. For the US model the country code is preset and cannot be changed. Per FCC regulations, the country code setting for all WiFi products marketed in the US must be fixed to US operational channels only. 25 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point Reviewing Safety Precautions Please review the following safety precautions before you begin to install the access point. Note The indicates that a translation of the safety statement is available for viewing in the Translated Safety Statements document on our web site at http://www.alliedtelesis.com/support. Warning To prevent electric shock, do not remove the cover. No user-

serviceable parts inside. This unit contains hazardous voltages and should only be opened by a trained and qualified technician. To avoid the possibility of electric shock, disconnect electric power to the product before connecting or disconnecting the LAN cables. E1 Warning Do not work on equipment or cables during periods of lightning activity. E2 Warning Power cord is used as a disconnection device. To de-energize equipment, disconnect the power cord. E3 Note Pluggable Equipment. The socket outlet shall be installed near the equipment and shall be easily accessible. E5 Caution Air vents must not be blocked and must have free access to the room ambient air for cooling. E6 26 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Warning Operating Temperature. This product is designed for a maximum ambient temperature of 40 degrees C with the AC/DC adapter and 45 degrees C with Power over Ethernet. Warning Do not touch the heat sinks inside the access point. Refer to Figure 10 on page 35. Warning To reduce the risk of electric shock, the PoE ports on this product must not connect to cabling that is routed outside the building where this device is located. E40 Warning This equipment is intended for indoor use only. Warning Do not touch the captive screw on the front panel when the wireless access point is operating because it can reach a high temperature. Note All Countries: Install product in accordance with local and National Electrical Codes. E8 Note This product is not approved for use in a computer room as defined in the Standard for Protection of Electronic Computer/Data Processing Equipment, ANSI/NFPA 75. Note If you are not using PoE to power to the unit, use only an approved AC/DC adapter. Note You should verify that your PoE network adheres to the standards of a SELV (separated extra-low voltage) circuit before using the PoE feature on the wireless access point. 27 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point Unpacking the AT-TQ3600 Access Point As you unpack the access point, check the shipping container for the components the following items:

One AT-TQ3600 Wireless Access Point One AT-TQ3600 Wireless Access Point Quick Install Guide Four rubber feet If any item is missing or damaged, contact your Allied Telesis sales representative for assistance. If you are not using the PoE feature on the LAN port of the access point to power the device, you need to separately order the AT-TQ0091 AC/DC Power Adapter. The adapter comes with four regional AC plugs. (One of the AC plugs comes pre-installed on the adapter.) Refer to Figure 2. Figure 2. AT-TQ0091 AC/DC Power Adapter Do one of the following:

To install the unit on a table, go to Installing the Access Point on a Table on page 29. To install the unit in a wall or ceiling, go to Installing the Access Point on a Wall or Ceiling on page 33 28 Review Draft - January 24, 2014 Installing the Access Point on a Table AT-TQ3600 Wireless Access Point Installation Guide To install the access point on a table, perform the following procedure:

1. Place the access point upside down on the table or desk selected for the device. 2. Install the rubber feet that come with the wireless access point to the bottom panel. Refer to Figure 3. Figure 3. Installing the Rubber Feet 3. Route a network cable through the notch in the cover and under the bottom panel, and connect it to the LAN port on the access point. Refer to Figure 4. The specifications of the cable are listed in Table 2 on page 22. 29 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point 30 Figure 4. Connecting the Network Cable for Table or Desktop Installation 4. If you have not already done so, connect the other end of the network cable to a port on an Ethernet switch. 5. Do one of the following:

If the access point is to be powered with the AT-TQ0091 AC/DC Power Adapter, continue with this procedure to attach the power adapter. If the access point is to be powered with the PoE feature on the LAN Port, turn the access point right side up. The installation procedure is complete. Go to Installing Anti-theft Devices on page 50 or Starting the Initial Management Session on the Access Point on page 51. 6. Route the DC power cable from the AT-TQ0091 AC/DC Power Adapter through the notch in the cover and under the bottom panel, and connect it to the DC-IN connector on the access point. Refer to Figure 5 on page 31. Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Figure 5. Connecting the Power Cable from the AT-TQ0091 AC/DC Adapter 7. Turn the access point right side up on the table. 8. Check the AC plug on the AC/DC Power Adapter to see if it is the correct plug for your region. If it is not the correct plug, remove it by pushing down on the release tab and sliding it from the slot on the adapter. Refer to Figure 6. Release Tab Figure 6. Removing an AC Plug from the AT-TQ0091 AC/DC Power Adapter 9. Slide the correct AC plug for your region into the slot on the adapter until it clicks into place. Refer to Figure 7 on page 32. 31 Review Draft - January 24, 2014 Figure 7. Installing an AC Plug on the AT-TQ0091 AC/DC Power Adapter 10. Connect the AC plug on the power cord to an appropriate AC power source. Refer to Table 7 on page 58 for the power specifications of the power adapter. After installing the access point on the table, go to Installing Anti-theft Devices on page 50 or Starting the Initial Management Session on the Access Point on page 51. Chapter 2: Installing the Access Point 32 Review Draft - January 24, 2014 Installing the Access Point on a Wall or Ceiling AT-TQ3600 Wireless Access Point Installation Guide This procedure contains the following sections. Guidelines on page 33 Removing the Bottom Panel from the Access Point on page 37 Installing the Bottom Panel on a Wall or Ceiling on page 40 Installing the Access Point on the Bottom Panel on page 42 Guidelines Please review the following guidelines before installing the access point on a wall or ceiling:

The selected location must not block the ventilation slot around the base of the unit. Refer to Figure 8. Ventilation Slot Figure 8. Ventilation Slot You should verify that the wall or ceiling material is strong enough to support the weight of the access point. You have to provide the four screws and, if required for your installation, the wall anchors that are to be used to secure the bottom panel to the wall or ceiling. You may install the access point on a wall in the three orientations shown in Figure 9 on page 34. 33 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point 34 Figure 9. Wall Orientations You may not install the access point upside down on a wall. The location must have an AC power source if you are using the AT-

TQ0091 Power Adapter. If the LAN cable is external to the wall, you must route the cable through the notch in the rear panel of the cover. If the cable is internal to the wall, you may route it either through the notch in the cover or through the hole in the bottom panel. You must not route the LAN cable inside the access point such that it touches the heat sinks because that could damage the unit. Refer to Figure 10 on page 35. Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Heat Sinks Figure 10. Heat Sinks The bottom panel has eight screw holes. Refer to Figure 11 on page 36. The holes are grouped in pairs. The unit should be secured to the wall or ceiling with a minimum of four screws. You may use either screw hole in a pair when choosing the holes. 35 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point Screw Holes Screw Holes Figure 11. Screw Holes on the Bottom Panel of the AT-TQ3600 Bracket The holes have a diameter of 4.5 mm (0.2 in.). Refer to Figure 12. 4.5 mm 4.5 mm Figure 12. Hole Dimensions 36 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Removing the Bottom Panel from the Access Point To remove the bottom panel from the access point, preform the following procedure:

1. Place the access point on a table or desk. 2. Open the front panel. Refer to Figure 13. Figure 13. Opening Front Panel 3. Use a #2 Phillips-head screwdriver to loosen the captive screw that secures the bottom panel to the wireless access point. Refer to Figure 14 on page 38. 37 Review Draft - January 24, 2014 Figure 14. Loosening the Captive Screw 4. Carefully turn the access point upside down. 5. Open the bottom panel. Refer to Figure 15 on page 39. Chapter 2: Installing the Access Point 38 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Figure 15. Opening the Bottom Panel 6. Slide the bottom panel slightly to the left to free it from the pin hinges on the access point, and lift the panel off the access point. Refer to Figure 16 on page 40. 39 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point Pin Hinges Figure 16. Removing the Bottom Panel from the Wireless Access Point You may now perform Installing the Bottom Panel on a Wall or Ceiling on page 40. To install the bottom panel on a wall or ceiling, perform the following procedure:

Note If you are using wall anchors, start with step 1. If you are not using wall anchors, start with step 4. 1. To install wall anchors, hold the bottom panel at the selected wall or ceiling location and with a pencil or pen mark the locations of the four screw holes that are to be used to secure the panel. Refer to Figure 17 on page 41. Installing the Bottom Panel on a Wall or Ceiling 40 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Figure 17. Marking the Locations of the Bottom Panel Holes on the Wall or Ceiling 2. 3. If necessary, predrill the holes for the anchors. Install the wall anchors. 4. Have someone hold the bottom panel at the selected wall or ceiling location while you secure it to with four self-tapping screws (not provided with the access point). Refer to Figure 18 on page 42. 41 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point Figure 18. Attaching the Bottom Panel to the Wall or Ceiling You may now perform Installing the Access Point on the Bottom Panel on page 42. Installing the Access Point on the Bottom Panel To install the access point on the bottom panel on a wall or ceiling, perform the following procedure:

1. Carefully lift the access point and slide the pin hinges into the holes on the bottom panel. Refer to Figure 19 on page 43. 42 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Pin Hinges Holes Figure 19. Installing the Access Point on the Bottom Panel 2. If the LAN cable is external to the wall or ceiling, route it through the notch in the cover and connect it to the LAN port. Refer to Figure 20 on page 44. 43 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point Figure 20. Connecting the Network Cable that is External to the Wall 3. If the network cable comes through a wall opening, route the cable either through the notch in the cover, as shown in Figure 20 or through the hole in the bottom panel, as shown in Figure 21 on page 45, and connect it to the LAN port on the access point. 44 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Figure 21. Attaching the Network Cable through the Wall Opening 4. If the access point is to be powered with the AT-TQ0091 Power Adapter, route the DC cable from the adapter through the notch in the cover and connect it to the DC-IN port on the access point. Refer to Figure 22 on page 46. 45 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point 46 Figure 22. Connecting the DC Cable from the AT-TQ0091 Power Adapter 5. Carefully close the access point over the bottom panel. Refer to Figure 23 on page 47. Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Figure 23. Closing the Access Point over the Bottom Panel 6. Open the front panel and use a #2 Phillips-head screwdriver to tighten the captive screw to secure the access point to the bottom panel. Refer to Figure 24 on page 48. 47 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point Figure 24. Tightening the Captive Screw 7. Close the front panel. 8. If you have not already done so, connect the network cable from the wireless access point to a port on an Ethernet switch. 9. Do one of the following:

If the access point is using PoE, the installation is complete. Go to Installing Anti-theft Devices on page 50 or Starting the Initial Management Session on the Access Point on page 51. If the access point is using the AT-TQ0091 AC/DC Power Adapter, perform the rest of this procedure to check and, if necessary, change the AC plug on the adapter. 48 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide 10. Check the AC plug on the AT-TQ0091 AC/DC Power Adapter to see if it is the correct plug for your region. If it is not the correct plug, remove it by pushing down on the release tab and sliding it from the slot on the adapter. Refer to Figure 6 on page 31. 11. Slide the correct plug for your region into the slot on the adapter until it clicks into place. Refer to Figure 7 on page 32. 12. Connect the adapter to an appropriate AC power source. Refer to Table 7 on page 58 for the power specifications of the power adapter. After installing the access point on a wall or ceiling, go to Installing Anti-

theft Devices on page 50 or Starting the Initial Management Session on the Access Point on page 51. 49 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point Installing Anti-theft Devices The access point has holes for anti-theft devices. Refer to Figure 25. You may want to install one or more anti-theft devices if the access point is installed in a non-secure area. Note Anti-theft devices are not available from Allied Telesis. Padlock Torx or similar screw

(M3 x 4mm) Kensington Lock Figure 25. Holes for Anti-theft Devices A padlock or Torx screw can be used to secure the access point to the bottom panel when it is installed on a wall or ceiling. A Kensington lock can be used to secure the device when it is installed on a wall, ceiling, or table. 50 Review Draft - January 24, 2014 Starting the Initial Management Session on the Access Point AT-TQ3600 Wireless Access Point Installation Guide When you power on the access point for the first time, it queries the subnet on the LAN port for a DHCP server. If a DHCP server responds to its query, the unit uses the IP address the server assigns to it. If there is no DHCP server, the access point uses the default IP address 192.168.1.230. There are a several ways to start the initial management session on the access point. One way is to establish a direct connection between your computer and the unit by connecting an Ethernet cable to the Ethernet port on the computer and the LAN port on the access point. This procedure requires changing the IP address on your computer to make it a member of the same subnet as the default IP address on the access point. You might perform this procedure if your network does not have a DHCP server and you want to configure the access point before connecting it to your network. The initial management session may also be performed while the device is connected to your network. However, If your network does not have a DHCP server, you still have to change the IP address of your computer to match the subnet of the default address of the access point. Furthermore, if your network is divided into virtual LANs (VLANs), you have to be sure to connect the access point and your computer to ports on an Ethernet switch that are members of the same VLAN. If your network has a DHCP server, use the IP address the server assigns it to start the management session. The instructions for starting the initial management session are found in the following sections:

Starting the Initial Management Session with a Direct Connection on page 52 Starting the Initial Management Session without a DHCP Server on page 53 Starting the Initial Management Session with a DHCP Server on page 53 Note The initial management session of the access point has to be conducted through the LAN port because the default setting for the radios is off. 51 Review Draft - January 24, 2014 To start the management session with a direct Ethernet connection between your computer and the access point, perform the following procedure:

Note If the unit is using PoE for power and you did not order an AC/DC adapter with the unit, you cannot perform this procedure because it requires removing the network cable from the LAN port. Instead, perform one of the other procedures in this section to start the initial management session. 1. Connect one end of a network cable to the LAN port on the access point and the other end to the Ethernet network port on your computer.

(This requires removing the network cable that you connected to the LAN port earlier in these instructions.) 2. Change the IP address on your computer to 192.168.1.n, where n is a number from 1 to 254, but not 230. Refer to the documentation that accompanies your computer for instructions on how to set the IP address. 3. Set the subnet mask on your computer to 255.255.255.0. 4. Power on the access point. 5. Start the web browser on your computer. 6. Enter the IP address 192.168.1.230 in the URL field of the browser. You should now see the logon window, shown in Figure 26. Figure 26. Logon Window 7. Enter manager for the username and friend for the password. The username and password are case-sensitive. Chapter 2: Installing the Access Point Starting the Initial Management Session with a Direct Connection 52 Review Draft - January 24, 2014 Starting the Initial Management Session without a DHCP Server AT-TQ3600 Wireless Access Point Installation Guide This procedure explains how to start the initial management session on the access point when the LAN port is connected to an Ethernet switch on a network that does not have a DHCP server. To start the management session, perform the following procedure:

1. If your network has VLANs, check to be sure that your computer and the access point are connected to ports on the Ethernet switch that are members of the same VLAN. This might require accessing the management software on the switch and listing the VLANS and their port assignments. For example, if the access point is connected to a port that is a member of the Sales VLAN, your computer must be connected to a port that is also a member of that VLAN. If your network is small and does not have VLANs or routers, you may connect your computer to any port on the Ethernet switch. 2. Change the IP address on your computer to 192.168.1.n, where n is a number from 1 to 254, but not 230. Refer to the documentation that accompanies your computer for instructions on how to set the IP address. 3. Set the subnet mask on your computer to 255.255.255.0. 4. Power on the access point. 5. Start the web browser on your computer. 6. Enter the IP address 192.168.1.230 in the URL field of the browser. You should now see the logon window, shown in Figure 26 on page 52. 7. Enter manager for the username and friend for the password. The username and password are case-sensitive. Starting the Initial Management Session with a DHCP Server This procedure explains how to start the initial management session on the access point when the LAN port is connected to a network that has a DHCP server. This procedure assumes that you have already configured the DHCP server to assign the access point all the necessary configuration information (e.g., IP address and default gateway) for your network. To start the management session, perform the following procedure:

1. Power on the access point. 2. Start the web browser on your computer. 3. Enter the IP address of the access point in the URL field of the browser. This is the IP address assigned to the unit by the DHCP server. If you do not know the address, refer to the DHCP server. 4. You should now see the logon window in Figure 26 on page 52. 53 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point 5. Enter manager for the username and friend for the password. The username and password are case-sensitive. 54 Review Draft - January 24, 2014 Setting the Country Setting AT-TQ3600 Wireless Access Point Installation Guide You should set the country setting during the initial management session of the access point to ensure that the device operates in compliance with the codes and regulations of your region or country. Note The non-US model of this product has a country code setting that must be set during the initial management session of the unit. The setting ensures that the unit operates in compliance with the laws and regulations of your country or region. For the US model the country code is preset and cannot be changed. Per FCC regulations, the country code setting for all WiFi products marketed in the US must be fixed to US operational channels only. To set the country setting, perform the following procedure:

1. Select Wireless Settings from the Manage menu. The access point displays the Modify wireless settings window, shown in Figure 27. Figure 27. Modify Wireless Settings Window 2. Select the Country pull-down menu and select your country or region. 55 Review Draft - January 24, 2014 Chapter 2: Installing the Access Point Note If the Country pull-down menu is deactivated and cannot be changed, the country parameter was set when the unit was manufactured. If the setting is not correct for your country or region, contact your Allied Telesis sales representative for assistance. The access point displays a confirmation prompt. 3. Click OK to change the country setting or Cancel to cancel the procedure. If you click OK, the access point changes the country setting and disables both radios on the access point. This procedure does not require clicking the Update button. You must now reboot the access point. The new country setting is not active until the unit is rebooted. To reboot the unit, either power off and on the unit or continue with these steps:

4. From the Maintenance menu, select Configuration. 5. Click the Reboot button in the To Reboot the Access Point section of the Manage the Access Points Configuration window. 6. When the access point displays a confirmation prompt, click OK to reboot the unit or Cancel to cancel the procedure. 7. To resume managing the unit, wait for it to complete initializing its management software and then start a new management session. For more instructions on how to configure the features of the access point, refer to the AT-TQ3600 Wireless Access Point Users Guide. 56 Review Draft - January 24, 2014 Appendix A Technical Specifications Physical Specifications Table 4. AT-TQ3600 Physical Specifications Dimensions (W x D x H) 200.0 mm x 200.0 mm x 66.0 mm

(7.9 in. x 7.9 in. x 2.6 in.) Weight 1.2 kg (2.6 lb.) Environmental Specifications Table 5. Environmental Specifications Operating Temperature of the Access Point When Using PoE Operating Temperature of the Access Point When Using the AC/

DC Adapter 0 C to 45 C (32 F to 113 F) 0 C to 40 C (32 F to 104 F) Storage Temperature

-20 C to 70 C (-4 F to 158 F) Operating Humidity Storage Humidity 5% to 80% non-condensing 5% to 95% non-condensing 57 Review Draft - January 24, 2014 Appendix A: Technical Specifications Power Specifications Table 6. AT-TQ3600 Maximum Power Consumption AT-TQ3600 12 watts Table 7. AT-TQ0091 Power Adapter Input Range Input Frequency 100~240 Vac 47-63 Hz Input Power Consumption (no load) <0.3W max. Output Voltage Output Current

+12 VDC 2A max. 58 Review Draft - January 24, 2014 LAN Port AT-TQ3600 Wireless Access Point Installation Guide Table 8. LAN Port Specifications Connector Standards PoE standard RJ-45 IEEE 802.3 (10Base-T) IEEE 802.3u (100Base-TX) IEEE 802.3ab (1000Base-T) IEEE 802.3af (class 3) Figure 28 illustrates the pin layout of the LAN port. Figure 28. Pin Numbers for the RJ-45 Connector on the LAN Port Table 9 lists the pin signals when the port is operating in the MDI configuration at 10 or 100 Mbps. Table 9. MDI Pin Signals (10Base-T or 100Base-TX) Pin Signal 1 2 3 6 TX+

TX-

RX+

RX-

Table 10 lists the pin signals for the MDI-X configuration at 10 or 100 Mbps. Table 10. MDI-X Pin Signals (10Base-T or 100Base-TX) Pin Signal 1 2 3 RX+

RX-

TX+

59 Review Draft - January 24, 2014 Appendix A: Technical Specifications Table 10. MDI-X Pin Signals (10Base-T or 100Base-TX) (Continued) Pin Signal 6 TX-

Table 11 lists the pin signals when the LAN port is operating at 1000 Mbps. Table 11. 1000Base-T Connector Pinouts Pin Pair Signal 1 2 3 4 5 6 7 8 1 1 2 3 3 2 4 4 TX and RX+

TX and RX-

TX and RX+

TX and RX+

TX and RX-

TX and RX-

TX and RX+

TX and RX-

60 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Safety and Electromagnetic Emissions Certifications Safety and Electromagnetic Emissions Certificates:

Standard Compliance Certificates Electromagnetic Compatibility (EMC) RoHs compliant European Union RoHS (Directive 2011/65/EU of the European Parliament and of the Council of 8 June 2011 on the restriction of the use of certain hazardous substances in electrical and electronic equipment.) CE EAC FCC/IC KC RCM SRMC Wi-Fi CERTIFIED EN 301 489-1 EN 301 489-17 EN 55022 EN 55024 EN 61000-3-2 EN 61000-3-3 EN 61000-4-2 EN 61000-4-3 EN 61000-4-4 EN 61000-4-5 EN 61000-4-6 EN 61000-4-11 AS/NZS CISPR 22 FCC 47 CFR Part 15, Subpart B ICES-003 Medical (EMC) EN 60601-1-2 Radio Equipment EN 300 328 EN 301 893 AS/NZS 4268 FCC 47 CFR Part 15, Subpart C FCC 47 CFR Part 15, Subpart E FCC part 2 RSS210 RSS-Gen RSS-102 61 Review Draft - January 24, 2014 Appendix A: Technical Specifications Safety EN 60950-1 IEC 60950-1 TUV-T UL 60950-1 UL 2043 (For AT-TQ3600-01 only) Suitable for use in environmental air space in accordance with Section 300-22(C) of the National Electrical Code, and Sections 2-128, 12-010(3), and 12-100 of the Canadian Electrical Code Part 1, CSA C22.1. 62 Review Draft - January 24, 2014 Appendix B Regulatory Statements This appendix contains the following regulatory statements:

Federal Communication Commission Interference Statement on page 64 Industry Canada Statement on page 66 Europe - EU Declaration of Conformity on page 68 63 Review Draft - January 24, 2014 Appendix B: Regulatory Statements Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. For operation within 5.15 ~ 5.25GHz / 5.47 ~5.725GHz frequency range, it is restricted to indoor environment. The band from 5600-5650MHz will be disabled by the software during the manufacturing and cannot be changed by the end user. This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules. Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 21cm between the radiator & your body. 64 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide Country Code Selection (WiFi Devices) Note The non-US model of this product has a country code setting that must be set during the initial management session of the unit. The setting ensures that the unit operates in compliance with the laws and regulations of your country or region. For the US model the country code is preset and cannot be changed. Per FCC regulations, the country code setting for all WiFi products marketed in the US must be fixed to US operational channels only. 65 Review Draft - January 24, 2014 Appendix B: Regulatory Statements Industry Canada Statement This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Ce dispositif est conforme la norme CNR-210 d'Industrie Canada applicable aux appareils radio exempts de licence. Son fonctionnement est sujet aux deux conditions suivantes: (1) le dispositif ne doit pas produire de brouillage prjudiciable, et (2) ce dispositif doit accepter tout brouillage reu, y compris un brouillage susceptible de provoquer un fonctionnement indsirable. This Class A digital apparatus complies with Canadian ICES-003. Cet appareil numrique de la Classe A est conforme la norme NMB-003 du Canada. Caution:

(i) the device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;

(ii) the maximum antenna gain permitted for devices in the bands 5250-

5350 MHz and 5470-5725 MHz shall comply with the e.i.r.p. limit; and

(iii) the maximum antenna gain permitted for devices in the band 5725-

5825 MHz shall comply with the e.i.r.p. limits specified for point-to-point and non point-to-point operation as appropriate.

(iv) Users should also be advised that high-power radars are allocated as primary users (i.e. priority users) of the bands 5250-5350 MHz and 5650-

5850 MHz and that these radars could cause interference and/or damage to LE-LAN devices. Avertissement:

Le guide dutilisation des dispositifs pour rseaux locaux doit inclure des instructions prcises sur les restrictions susmentionnes, notamment:

(i) les dispositifs fonctionnant dans la bande 5 150-5 250 MHz sont rservs uniquement pour une utilisation lintrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux;

66 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide

(ii) le gain maximal dantenne permis pour les dispositifs utilisant les bandes 5 250-5 350 MHz et 5 470-5 725 MHz doit se conformer la limite de p.i.r.e.;

(iii) le gain maximal dantenne permis (pour les dispositifs utilisant la bande 5 725-5 825 MHz) doit se conformer la limite de p.i.r.e. spcifie pour lexploitation point point et non point point, selon le cas.

(iv) De plus, les utilisateurs devraient aussi tre aviss que les utilisateurs de radars de haute puissance sont dsigns utilisateurs principaux (c.--

d., quils ont la priorit) pour les bandes 5 250-5 350 MHz et 5 650-5 850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL. Radiation Exposure Statement:

This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 21cm between the radiator & your body. Dclaration d'exposition aux radiations:

Cet quipement est conforme aux limites d'exposition aux rayonnements IC tablies pour un environnement non contrl. Cet quipement doit tre install et utilis avec un minimum de 21 cm de distance entre la source de rayonnement et votre corps. 67 Review Draft - January 24, 2014 Appendix B: Regulatory Statements Europe - EU Declaration of Conformity This device complies with the essential requirements of the R&TTE Directive 1999/5/EC. The following test methods have been applied in order to prove presumption of conformity with the essential requirements of the R&TTE Directive 1999/5/EC:

EN60950-1 Safety of Information Technology Equipment EN 300 328 Electromagnetic compatibility and Radio spectrum Matters (ERM);

Wideband Transmission systems; Data transmission equipment operating in the 2,4 GHz ISM band and using spread spectrum modulation techniques; Harmonized EN covering essential requirements under article 3.2 of the R&TTE Directive, EN 301 893 Broadband Radio Access Networks (BRAN); 5 GHz high performance RLAN; Harmonized EN covering essential requirements of article 3.2 of the R&TTE Directive EN 301 489-1 Electromagnetic compatibility and Radio Spectrum Matters (ERM);

ElectroMagnetic Compatibility (EMC) standard for radio equipment and services; Part 1: Common technical requirements. EN 301 489-17 Electromagnetic compatibility and Radio spectrum Matters (ERM);

ElectroMagnetic Compatibility (EMC) standard for radio equipment and services; Part 17: Specific conditions for 2,4 GHz wideband transmission systems and 5 GHz high performance RLAN equipment This device is a 5GHz wideband transmission system (transceiver), intended for use in all EU member states and EFTA countries, except in France and Italy where restrictive use applies. In Italy the end-user should apply for a license at the national spectrum authorities in order to obtain authorization to use the device for setting up outdoor radio links and/or for supplying public access to telecommunications and/or network services. This device may not be used for setting up outdoor radio links in France and in some areas the RF output power may be limited to 10 mW EIRP in the frequency range of 2454 - 2483.5 MHz. For detailed information the end-user should contact the national spectrum authority in France. 68 Review Draft - January 24, 2014 AT-TQ3600 Wireless Access Point Installation Guide esky

[Czech]

Dansk

[Danish]

Deutsch

[German]

Eesti

[Estonian]

English Espaol

[Spanish]

[Greek]

Franais

[French]

Italiano

[Italian]

Latviski

[Latvian]

Allied Telesis tmto prohlauje, e tento wireless access point je ve shod se zkladnmi poadavky a dalmi pslunmi ustanovenmi smrnice 1999/5/ES. Undertegnede Allied Telesis erklrer herved, at flgende udstyr wireless access point overholder de vsentlige krav og vrige relevante krav i direktiv 1999/

5/EF. Hiermit erklrt Allied Telesis, dass sich das Gert wireless access point in bereinstimmung mit den grundlegenden Anforderungen und den brigen einschlgigen Bestimmungen der Richtlinie 1999/5/EG befindet. Kesolevaga kinnitab Allied Telesis seadme wireless access point vastavust direktiivi 1999/5/E phinuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele stetele. Hereby, Allied Telesis, declares that this wireless access point is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Por medio de la presente Allied Telesis declara que el wireless access point cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. Allied Telesis wireless access point 1999/5/. Par la prsente Allied Telesis dclare que l'appareil wireless access point est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/CE. Con la presente Allied Telesis dichiara che questo wireless access point conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE. Ar o Allied Telesis deklar, ka wireless access point atbilst Direktvas 1999/5/EK btiskajm prasbm un citiem ar to saisttajiem noteikumiem. 69 Review Draft - January 24, 2014 Lietuvi

[Lithuanian]

Nederlands

[Dutch]

Malti

[Maltese]

Magyar

[Hungarian]

Polski

[Polish]

iuo Allied Telesis deklaruoja, kad is wireless access point atitinka esminius reikalavimus ir kitas 1999/5/EB Direktyvos nuostatas. Hierbij verklaart Allied Telesis dat het toestel wireless access point in overeenstemming is met de essentile eisen en de andere relevante bepalingen van richtlijn 1999/5/EG. Hawnhekk, Allied Telesis, jiddikjara li dan wireless access point jikkonforma mal-tiijiet essenzjali u ma provvedimenti orajn relevanti li hemm fid-Dirrettiva 1999/5/EC. Alulrott, Allied Telesis nyilatkozom, hogy a wireless access point megfelel a vonatkoz alapvet kvetelmnyeknek s az 1999/5/EC irnyelv egyb elrsainak. Niniejszym Allied Telesis owiadcza, e wireless access point jest zgodny z zasadniczymi wymogami oraz pozostaymi stosownymi postanowieniami Dyrektywy 1999/5/EC. Portugus

[Portuguese

]

Allied Telesis declara que este wireless access point est conforme com os requisitos essenciais e outras disposies da Directiva 1999/5/CE. Slovensko

[Slovenian]

Slovensky

[Slovak]

Suomi

[Finnish]

Svenska

[Swedish]

Allied Telesis izjavlja, da je ta wireless access point v skladu z bistvenimi zahtevami in ostalimi relevantnimi doloili direktive 1999/5/ES. Allied Telesis tmto vyhlasuje, e wireless access point spa zkladn poiadavky a vetky prslun ustanovenia Smernice 1999/5/ES. Allied Telesis vakuuttaa tten ett wireless access point tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sit koskevien direktiivin muiden ehtojen mukainen. Hrmed intygar Allied Telesis att denna wireless access point str I verensstmmelse med de vsentliga egenskapskrav och vriga relevanta bestmmelser som framgr av direktiv 1999/5/EG. Appendix B: Regulatory Statements 70 Review Draft - January 24, 2014

 

 

Quick Installation Guide AT-TQ3600 Wireless Access Point Installation and Users Guides This document contains an abbreviated version of the installation instructions for the AT-TQ3600 Wireless Access Point. For complete installation and management instructions, refer to the AT-TQ3600 installation Guide and AT-TQ Wireless Access Point Series Users Guide on the Allied Telesis web site at www.alliedtelesis.com/support. Safety and Electromagnetic Emissions Certificates Standard Compliance Certificates Electromagnetic Compatibility (EMC) RoHs compliant European Union RoHS (Directive 2011/65/EU of the European Parliament and of the Council of 8 June 2011 on the restriction of the use of certain hazardous substances in electrical and electronic equipment.) CE FCC/IC RCM Wi-Fi CERTIFIED EAC KC SRMC EN 301 489-1 EN 55022 EN 61000-3-2 EN 61000-4-2 EN 61000-4-4 EN 61000-4-6 AS/NZS CISPR 22 FCC 47 CFR Part 15, Subpart B ICES-003 EN 301 489-17 EN 55024 EN 61000-3-3 EN 61000-4-3 EN 61000-4-5 EN 61000-4-11 Medical (EMC) EN 60601-1-2 Radio Equipment Safety EN 300 328 AS/NZS 4268 RSS-Gen FCC 47 CFR Part 15, Subpart C FCC part 2 EN 301 893 RSS210 RSS-102 FCC 47 CFR Part 15, Subpart E EN 60950-1 TUV-T UL 2043 (For AT-TQ3600-01 only) IEC 60950-1 UL 60950-1 Suitable for use in environmental air space in accordance with Section 300-22(C) of the National Electrical Code, and Sections 2-128, 12-010(3), and 12-100 of the Canadian Electrical Code Part 1, CSA C22.1.

*613-001862 Rev B* 613-001862 Rev. C Installation Options These two figures identify the components of the access point. Table or desktop Wall or ceiling This quick installation guide explains how to install the device on a table or desktop. For instructions on how to install the device on a wall of ceiling, refer to the AT-TQ3600 Wireless Access Point installation Guide. Note:

The non-US model of this product has a country code setting that must be set during the initial management session of the unit. The setting ensures that the unit operates in compliance with the laws and regulations of your country or region. The country code for the US model is preset and cannot be changed. Per FCC regulations, the country code setting for all WiFi products marketed in the US must be fixed to US operational channels only. Physical Description The AT-TQ3600 Wireless Access Point is shown in this figure. P W R SYS 10 M AT-T Q3600 100 M 2.4G Hz 5G Hz 3122 The LEDs on the top panel of the access point are described in this table. Table 1. LEDs LED State Description PWR Solid Green Off The unit is receiving DC power that is within the normal operating range. The power supply is not receiving power from either the AC/DC power adapter or a PoE Ethernet switch. SYS Amber The access point is loading its firmware. Off The unit is operating normally. 10M and 100M 10M: On 100M: Off 10M: Off 100M: On 10M: On 100M: On The Ethernet port is operating at 10 Mbps. The Ethernet port is operating at 100 Mbps. The Ethernet port is operating at 1000 Mbps. 2.4GHz 5GHz Green Green The 2.4GHz radio is sending and receiving radio waves. The 5GHz radio is sending and receiving radio waves. You may turn off the LEDs with the management software. CONSOLE RESET 1 2 3 3101 3121 4 5 The components on the access point are described in this table. Table 2. Access Point Components Component 1 Holes for anti-

theft devices Description Refer to Installing Anti-theft Devices. 2 Console Port The Console Port is for manufacturing purposes only. 3 Reset Button The Reset button returns the parameter settings on the access point to their default settings. 4 LAN Port The 10/100/1000Base-T LAN port connects the access point to your wired network. It supports PoE. If you connect the port to an Ethernet switch that supports PoE, you do not have to use the power adapter to power the device. 5 DC Power Connector This connector is for the AT-TQ0091 AC/DC Power Adapter. You may power the access point with PoE on the LAN port or the power adapter. The power adapter must be ordered separately. You should review the safety precautions in the AT-TQ3600 Wireless Access Point Installation Guide before installing the product. The cable specifications for the LAN port are detailed in the AT-TQ3600 Wireless Access Point Installation Guide. 1 2 3 Review Draft - January 24, 2014 Package Contents of the AT-TQ3600 Wireless Access Point The following items should be in the shipping container:

One AT-TQ3600 Wireless Access Point This AT-TQ3600 Quick Install Guide Package Contents of the AT-TQ0091 AC/DC Power Adapter If you are not planing to use the PoE feature of the access point to power the device, you must separately order the AT-TQ0091 AC/DC Power Adapter. The adapter comes with four regional power connectors. (The adapter comes with one connector already installed.) 3. Route a network cable through the notch in the cover and under the bottom panel, and connect it to the LAN port on the access point. 8. Check the plug on the AT-TQ0091 AC/DC Power Adapter to see if it is the correct plug for your region. If it is not the correct plug, remove it by pressing down on the release tab and sliding it from the slot on the adapter. Release Tab 3124 3116 9. Slide the correct plug for your region into the slot on the adapter until it clicks into place. 3126 If any item is missing or damaged, contact your Allied Telesis sales representative for assistance. You should retain the original shipping material in case you need to return the unit to Allied Telesis. Installing the Wireless Access Point on a Table or Desk For instructions on how to install the device on a wall or ceiling, refer to the AT-TQ3600 Wireless Access Point Installation Guide. To install the access point on a table or desktop, perform the following procedure:

1. Place the access point upside down on the table or desk selected for the device. 2. Install the four rubber feet included with the wireless access point to the bottom panel. 4. Connect the other end of the network cable to a port on an Ethernet switch. 5. Do one of the following:

If you are not using the PoE feature on the Ethernet LAN Port to power the unit, continue with this procedure to attach the AT-TQ0091 AC/DC Power Adapter. If you are using the PoE feature on the LAN Port to power the access point, turn the access point right side up. The installation procedure is complete. Go to Installing Anti-theft Devices or Starting the Initial Management Session. 6. Route the DC power cable from the AT-TQ0091 AC/DC Power Adapter through the notch in the cover and under the bottom panel, and connect it to the DC-IN 12VDC connector on the access point. 3125 10. Connect the adapter to an appropriate AC power source. Installing Anti-theft Devices The access point has holes for anti-theft devices. You may want to install one or more anti-theft devices if the access point is installed in a non-secure area. Anti-theft devices are not available from Allied Telesis. The holes for anti-theft devices are identified in this figure. A Kensington lock should be used when the device is installed on a table or desk. A padlock or Torx or similar screw works only when the device is installed on a wall or ceiling. 3117 P W R S Y S 1 0 M A T-T Q 3 6 0 0 1 0 0 M 2.4 G H z 5 G H z 3118 7. Turn the access point right side up. 3123 4 Padlock Torx or similar screw (M3 x 4mm) Kensington Lock 5 6 Review Draft - January 24, 2014 Starting the Initial Management Session This section contains an abbreviated version of the procedure for starting the initial management session. For complete instructions, refer to the AT-TQ3600 installation Guide or AT-TQ Wireless Access Point Series Users Guide. The wireless access point has a DHCP client. The default setting for the client is enabled. When you power on the access point for the first time, it queries the subnet on the LAN port for a DHCP server. If a DHCP server responds to its query, the unit uses the IP address the server assigns to it. If there is no DHCP server, the access point uses the default IP address 192.168.1.230. To start the initial management session, perform the following procedure:

1. Start the web browser on your management workstation. 2. Enter in the URL field of the web browser the IP address of the wireless access point. The address is one of the following:

If your network does not have a DHCP server, enter the default address 192.168.1.230. If your network has a DHCP server, enter the IP address the DHCP server assigned to the access point. The wireless access point displays the logon prompt. 3. Enter manager for the username and friend for the password. The username and password are case-sensitive. Setting the Country Setting Note:

The non-US model of this product has a country code setting that must be set during the initial management session of the unit. The setting ensures that the unit operates in compliance with the laws and regulations of your country or region. The country code for the US model is preset and cannot be changed. Per FCC regulations, the country code setting for all WiFi products marketed in the US must be fixed to US operational channels only. To set the country setting, perform the following procedure:

1. Select Wireless Settings from the Manage menu. The access point displays the Modify wireless settings window. 2. Select the Country pull-down menu and select your country or region. Note:

If the Country pull-down menu is deactivated and cannot be changed, the country parameter was set when the unit was manufactured and cannot be changed. If the setting is not correct for your country or region, contact your Allied Telesis sales representative for assistance. The access point displays a confirmation prompt. 3. Click OK to change the country setting or Cancel to cancel the procedure. If you click OK, the access point changes the country setting and disables both radios on the access point. (The default setting for the radios is disabled.) This procedure does not require clicking the Update button. You must now reboot the access point. The new country setting is not active until the unit is rebooted. To reboot the unit, either power off and on the unit or continue with these steps:

4. From the Maintenance menu, select Configuration. 5. Click the Reboot button in the To Reboot the Access Point section of the Manage the Access Points Configuration window. 6. When the access point displays a confirmation prompt, click OK to reboot the unit or Cancel to cancel the procedure. 7. To resume managing the unit, wait for it to complete initializing its management software and then start a new management session. For more instructions on how to configure the features of the access point, refer to the AT-TQ Wireless Access Point Series Users Guide. Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. For operation within 5.15 ~ 5.25GHz / 5.47 ~5.725GHz frequency range, it is restricted to indoor environment. The band from 5600-5650MHz will be disabled by the software during the manufacturing and cannot be changed by the end user. This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules. Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 21cm between the radiator & your body. Industry Canada Statement This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Ce dispositif est conforme la norme CNR-210 d'Industrie Canada applicable aux appareils radio exempts de licence. Son fonctionnement est sujet aux deux conditions suivantes: (1) le dispositif ne doit pas produire de brouillage prjudiciable, et (2) ce dispositif doit accepter tout brouillage reu, y compris un brouillage susceptible de provoquer un fonctionnement indsirable. Caution:

(i) the device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;

(ii) the maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall comply with the e.i.r.p. limit; and

(iii) the maximum antenna gain permitted for devices in the band 5725-5825 MHz shall comply with the e.i.r.p. limits specified for point-to-point and non point-to-point operation as appropriate.

(iv) Users should also be advised that high-power radars are allocated as primary users

(i.e. priority users) of the bands 5250-5350 MHz and 5650-5850 MHz and that these radars could cause interference and/or damage to LE-LAN devices. Avertissement:

Le guide dutilisation des dispositifs pour rseaux locaux doit inclure des instructions prcises sur les restrictions susmentionnes, notamment:

(i) les dispositifs fonctionnant dans la bande 5 150-5 250 MHz sont rservs uniquement pour une utilisation lintrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux;

(ii) le gain maximal dantenne permis pour les dispositifs utilisant les bandes 5 250-5 350 MHz et 5 470-5 725 MHz doit se conformer la limite de p.i.r.e.;

(iii) le gain maximal dantenne permis (pour les dispositifs utilisant la bande 5 725-5 825 MHz) doit se conformer la limite de p.i.r.e. spcifie pour lexploitation point point et non point point, selon le cas.

(iv) De plus, les utilisateurs devraient aussi tre aviss que les utilisateurs de radars de haute puissance sont dsigns utilisateurs principaux (c.--d., quils ont la priorit) pour les bandes 5 250-5 350 MHz et 5 650-5 850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL. Radiation Exposure Statement:

This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 21cm between the radiator & your body. Dclaration d'exposition aux radiations:

Cet quipement est conforme aux limites d'exposition aux rayonnements IC tablies pour un environnement non contrl. Cet quipement doit tre install et utilis avec un minimum de 21 cm de distance entre la source de rayonnement et votre corps. 7 8 9 Review Draft - January 24, 2014 European Union Restriction of the Use of Certain Hazardous Substances

(RoHS) in Electrical and Electronic Equipment This Allied Telesis RoHS-compliant product conforms to the European Union Restriction of the Use of Certain Hazardous Substances (RoHS) in Electrical and Electronic Equipment. Allied Telesis ensures RoHS conformance by requiring supplier Declarations of Conformity, monitoring incoming materials, and maintaining manufacturing process controls. Europe - EU Declaration of Conformity This device complies with the essential requirements of the R&TTE Directive 1999/5/EC. The following test methods have been applied in order to prove presumption of conformity with the essential requirements of the R&TTE Directive 1999/5/EC:

EN60950-1 Safety of Information Technology Equipment EN 300 328 Electromagnetic compatibility and Radio spectrum Matters (ERM); Wideband Transmission systems; Data transmission equipment operating in the 2,4 GHz ISM band and using spread spectrum modulation techniques; Harmonized EN covering essential requirements under article 3.2 of the R&TTE Directive, EN 301 893 Broadband Radio Access Networks (BRAN); 5 GHz high performance RLAN;

Harmonized EN covering essential requirements of article 3.2 of the R&TTE Directive EN 301 489-1 Electromagnetic compatibility and Radio Spectrum Matters (ERM); ElectroMagnetic Compatibility (EMC) standard for radio equipment and services; Part 1: Common technical requirements. EN 301 489-17 Electromagnetic compatibility and Radio spectrum Matters (ERM); ElectroMagnetic Compatibility (EMC) standard for radio equipment and services; Part 17: Specific conditions for 2,4 GHz wideband transmission systems and 5 GHz high performance RLAN equipment This device is a 5GHz wideband transmission system (transceiver), intended for use in all EU member states and EFTA countries, except in France and Italy where restrictive use applies. In Italy the end-user should apply for a license at the national spectrum authorities in order to obtain authorization to use the device for setting up outdoor radio links and/or for supplying public access to telecommunications and/or network services. This device may not be used for setting up outdoor radio links in France and in some areas the RF output power may be limited to 10 mW EIRP in the frequency range of 2454 -

2483.5 MHz. For detailed information the end-user should contact the national spectrum authority in France. 0700 esky [Czech]

Dansk [Danish]

Allied Telesis tmto prohlauje, e tento wireless access point je ve shod se zkladnmi poadavky a dalmi pslunmi ustanovenmi smrnice 1999/5/ES. Undertegnede Allied Telesis erklrer herved, at flgende udstyr wireless access point overholder de vsentlige krav og vrige relevante krav i direktiv 1999/5/EF. Deutsch

[German]

Hiermit erklrt Allied Telesis, dass sich das Gert wireless access point in bereinstimmung mit den grundlegenden Anforderungen und den brigen einschlgigen Bestimmungen der Richtlinie 1999/5/EG befindet. Eesti [Estonian]

Kesolevaga kinnitab Allied Telesis seadme wireless access point vastavust direktiivi 1999/5/E phinuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele stetele. Product Specifications Hereby, Allied Telesis, declares that this wireless access point is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Physical Specifications Dimensions (W x D x H) 200.0 mm x 200.0 mm x 66.0 mm

(7.9 in. x 7.9 in. x 2.6 in.) Por medio de la presente Allied Telesis declara que el wireless access point cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. Weight 1.2 kg (2.6 lb.) Environmental Specifications English Espaol

[Spanish]

[Greek]

Franais

[French]

Allied Telesis wireless access point 1999/5/. Par la prsente Allied Telesis dclare que l'appareil wireless access point est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/CE. Italiano [Italian]

Con la presente Allied Telesis dichiara che questo wireless access point conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE. Latviski [Latvian]

Ar o Allied Telesis deklar, ka wireless access point atbilst Direktvas 1999/5/EK btiskajm prasbm un citiem ar to saisttajiem noteikumiem. Lietuvi

[Lithuanian]

Nederlands

[Dutch]

Malti [Maltese]

Magyar

[Hungarian]

Polski [Polish]

iuo Allied Telesis deklaruoja, kad is wireless access point atitinka esminius reikalavimus ir kitas 1999/5/EB Direktyvos nuostatas. Hierbij verklaart Allied Telesis dat het toestel wireless access point in overeenstemming is met de essentile eisen en de andere relevante bepalingen van richtlijn 1999/5/EG. Hawnhekk, Allied Telesis, jiddikjara li dan wireless access point jikkonforma mal-tiijiet essenzjali u ma provvedimenti orajn relevanti li hemm fid-Dirrettiva 1999/5/EC. Alulrott, Allied Telesis nyilatkozom, hogy a wireless access point megfelel a vonatkoz alapvet kvetelmnyeknek s az 1999/5/EC irnyelv egyb elrsainak. Niniejszym Allied Telesis owiadcza, e wireless access point jest zgodny z zasadniczymi wymogami oraz pozostaymi stosownymi postanowieniami Dyrektywy 1999/5/EC. Portugus

[Portuguese]

Allied Telesis declara que este wireless access point est conforme com os requisitos essenciais e outras disposies da Directiva 1999/5/CE. Slovensko

[Slovenian]

Slovensky

[Slovak]

Suomi [Finnish]

Allied Telesis izjavlja, da je ta wireless access point v skladu z bistvenimi zahtevami in ostalimi relevantnimi doloili direktive 1999/5/ES. Allied Telesis tmto vyhlasuje, e wireless access point spa zkladn poiadavky a vetky prslun ustanovenia Smernice 1999/5/ES. Allied Telesis vakuuttaa tten ett wireless access point tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sit koskevien direktiivin muiden ehtojen mukainen. Svenska

[Swedish]

Hrmed intygar Allied Telesis att denna wireless access point str I verensstmmelse med de vsentliga egenskapskrav och vriga relevanta bestmmelser som framgr av direktiv 1999/5/EG. Operating Temperature of the Access Point When Using PoE Operating Temperature of the Access Point When Using the AC/DC Adapter Storage Temperature 0 C to 45 C (32 F to 113 F) 0 C to 40 C (32 F to 104 F)

-20 C to 70 C (-4 F to 158 F) Operating Humidity 5% to 80% non-condensing Storage Humidity 5% to 95% non-condensing Maximum Power Consumption AT-TQ3600 Access Point 12 watts AT-TQ0091 AC/DC Power Adapter Input Range 100~240 Vac Input Frequency 47-63 Hz Input Power Consumption (no load) Output Voltage Output Current

<0.3W max.

+12 VDC 2A max. Copyright 2014 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc. Allied Telesis and the Allied Telesis logo are trademarks of Allied Telesis, Incorporated. All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners. Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesis, Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesis, Inc. has been advised of, known, or should have known, the possibility of such damages. 10 11 12 Review Draft - January 24, 2014