Allied Telesis AT-TQ2403 Network Card User Manual


 
AT-TQ2403 Management Software User's Guide 227
use wlan
1vwn<x>. For information on the options for configuring security on an access point, see
Security
”.
When configuring Security on a VWN, use the same commands as setting Security on an access point,
remembering to make the following substitutes:
In the CLI commands, replace
wlan0
with
wlan0vwn<
x
>
In the CLI commands, replace
wlan1
with
wlan1vwn<
x
>
Example: Configuring VWNs
Note: Before configuring this feature, make sure you are familiar with the names of the
interfaces as de
scribed in “Understanding Interfaces as Presented in the CLI
”. The interface
name you reference in a command determines whether a setting applies to a wired or
wireless interface, the Internal or Guest network, or (on a dual-radio AP) to radio "one" or
radio "two".
Configuring VWN "One" on a Single Radio AP
1. Use the CLI to configure Security on the interface.
The following example shows commands for configuring WPA/WPA2 Enterprise (RADIUS)
security mode, allowing "Both" WPA and WPA2 clients to authenticate and using a TKIP cipher
suite:
AT-TQ2403# set bss wlan0bssvwn1 open-system-authentication on
AT-TQ2403# set bss wlan0bssvwn1 shared-key-authentication on
AT-TQ2403# set bss wlan0bssvwn1 wpa-allowed on
AT-TQ2403# set bss wlan0bssvwn1 wpa2-allowed on
AT-TQ2403# set bss wlan0bssvwn1 wpa-cipher-tkip on
AT-TQ2403# set bss wlan0bssvwn1 wpa-cipher-ccmp off
AT-TQ2403# set bss wlan0bssvwn1 radius-ip 127.0.0.1
AT-TQ2403# set bss wlan0bssvwn1 radius-key secret
AT-TQ2403# set bss wlan0bssvwn1 status up
AT-TQ2403# set interface wlan0vwn1 security wpa-enterprise
2. Use the CLI to set the Network Name (SSID) for the new Virtual Wireless Network:
AT-TQ2403# set interface wlan0vwn1 ssid my-vwn-one
3. Use the CLI to configure VWN 1.
AT-TQ2403# set vwn internal vlan-id 1234
AT-TQ2403# set access-point vwn-status up
AT-TQ2403# set vwn vwn1 vlan-id 3678
AT-TQ2403# set vwn vwn1 status up
Configuring VWN "Seven" on a Dual Radio AP
To configure the second Virtual Wireless Network, repeat the following steps:
1. Use the CLI to configure Security on the interface.
The following example shows commands for configuring WPA/WPA2 Enterprise (RADIUS)
security mode, allowing "Both" WPA and WPA2 clients to authenticate and using a TKIP cipher