AT-TQ2403 Management Software User's Guide

227

 

 

use wlan1vwn<x>. For information on the options for configuring security on an access point, see “Security”.

When configuring Security on a VWN, use the same commands as setting Security on an access point, remembering to make the following substitutes:

∙In the CLI commands, replace wlan0with wlan0vwn<x>

∙In the CLI commands, replace wlan1with wlan1vwn<x>

Example: Configuring VWNs

Note: Before configuring this feature, make sure you are familiar with the names of the interfaces as described in “Understanding Interfaces as Presented in the CLI”. The interface name you reference in a command determines whether a setting applies to a wired or wireless interface, the Internal or Guest network, or (on a dual-radio AP) to radio "one" or radio "two".

Configuring VWN "One" on a Single Radio AP

1.Use the CLI to configure Security on the interface.

The following example shows commands for configuring WPA/WPA2 Enterprise (RADIUS) security mode, allowing "Both" WPA and WPA2 clients to authenticate and using a TKIP cipher suite:

AT-TQ2403# set bss wlan0bssvwn1 open-system-authentication on

AT-TQ2403# set bss wlan0bssvwn1 shared-key-authentication on

AT-TQ2403# set bss wlan0bssvwn1 wpa-allowed on

AT-TQ2403# set bss wlan0bssvwn1 wpa2-allowed on

AT-TQ2403# set bss wlan0bssvwn1 wpa-cipher-tkip on

AT-TQ2403# set bss wlan0bssvwn1 wpa-cipher-ccmp off

AT-TQ2403# set bss wlan0bssvwn1 radius-ip 127.0.0.1

AT-TQ2403# set bss wlan0bssvwn1 radius-key secret

AT-TQ2403# set bss wlan0bssvwn1 status up

AT-TQ2403# set interface wlan0vwn1 security wpa-enterprise

2.Use the CLI to set the Network Name (SSID) for the new Virtual Wireless Network: AT-TQ2403# set interface wlan0vwn1 ssid my-vwn-one

3.Use the CLI to configure VWN 1.

AT-TQ2403# set vwn internal vlan-id 1234

AT-TQ2403# set access-point vwn-status up

AT-TQ2403# set vwn vwn1 vlan-id 3678

AT-TQ2403# set vwn vwn1 status up

Configuring VWN "Seven" on a Dual Radio AP

To configure the second Virtual Wireless Network, repeat the following steps:

1.Use the CLI to configure Security on the interface.

The following example shows commands for configuring WPA/WPA2 Enterprise (RADIUS) security mode, allowing "Both" WPA and WPA2 clients to authenticate and using a TKIP cipher