# AWC Plug-in User Guide 3.1.0

# Create CB Profiles

CB Profile for 1F
CB Profile for 2F

Next let's create CB Profiles for blanket wireless networks.

- You can set up to two CB VAPs each for the two bands, Radio 1 and Radio 2.
- You can apply only a single CB Profile to an AP.

Therefore, we have to use two separate CB Profiles, one for 1F APs and the other for 2F APs.
We are going to create two CB Profiles as you see in the following table (the purple cells).

Table 1: Planned Wireless Networks
| Radio | TQ5403-xF-1 | TQ5403-xF-2 | TQ5403-xF-3 | Overview
--- | --- | --- | --- | --- | ---
2F | Radio 2 | ForStaff-PC | ForStaff-PC | ForStaff-PC | Multi-channel VAP for employees' PCs
Radio 1 | ForStaff-Mobile | AWC-CB VAP for employees' mobile devices
1F | Radio 2 | ForStaff-PC | ForStaff-PC | ForStaff-PC | Multi-channel VAP for employees' PCs
Radio 1 | ForStaff-Mobile | AWC-CB VAP for employees' mobile devices
ForGuest | AWC-CB VAP for guests

## CB Profile for 1F

1. Select "Wireless Configuration" > "CB Profile" from the AWC Plug-in menu.
   The CB Profile list will appear.

2. Click "Create" at the top right of the Content section.
   The "Create CB Profile" screen will appear.

3. Configure general parameters in the "Profile Configuration" section.
   - Enter "TQ5403-CB-1F" in "CB Profile Name".
   - Select the Management Group that you want apply this CB Profile to.
     A CB Profile can be used in multiple Management Groups by selecting those groups on this screen.
     Here we check the "1-2F Group" that we created earlier.
     Note that you cannot uncheck the "Default Wireless Group".

4. Configure VAPs in the "VAP (Multiple SSID) Configuration" section.
   First, Create a CB VAP "ForStaff-Mobile" for employees' mobile devices, as CB VAP 1.
   As mentioned when creating the AP Profile, here we enable "Wireless Client Isolation" so that guest computers cannot see each other. Please note that this setting (Wireless Client Isolation) affects all VAPs (multi-channel and CB) on the same radio. As we should enable this on Radio 1 to block traffic between guests on CB VAP "ForGuest", it is also enabled on the CB VAP "ForStaff-Mobile", therefore employees' devices cannot communicate with each other. In this configuration, both employees have to connect to the multi-channel VAP if they want to discover each other's devices.

   Table 2: CB VAP "ForStaff-Mobile" Configuration
   Item Name | Value | Description
   --- | --- | ---
   Radio | Radio 1 | Select a radio band to use for this CB VAP, from Radio 1 (2.4GHz) and Radio 2 (5GHz W52).
   VAP | 1 | Specify a VAP number for this CB VAP configuration.
   Channel | 1 | Select a channel to use for this CB VAP This setting is applied to all VAPs (multi-channel and CB) on the same radio.
   VAP Status | Enable | Specify "Enable" or "Disable".
   VLAN ID | 100 | Specify a VLAN ID used for communication between the CB VAP and associated clients (mandatory). Note Specify a VLAN ID that is different from the AP's management VLAN. When the AP is detected as a guest node, a parent AMF node is configured to collect the guest node information automatically ("dynamic discovery"), and wireless clients get their IP addresses via DHCP.
   SSID | ForStaff-Mobile | Specify an SSID (network name) to use on the CB VAP.
   Broadcast SSID | Enable | Specify whether to broadcast the SSID on the CB VAP.
   Security | WPA Personal | Specify a security method for the VAP.
   Security Key (WPA-PSK) | 5+@f/=0N1y | Specify an encryption key for the VAP.
   WPA Versions | WPA2 | Specify a WPA version to use on the VAP.
   Encryption Protocol | CCMP | Specify an encryption protocol to use on the VAP.
   Management Frame Protection | Enable | Specify whether to protect Management Frames.
   Broadcast Key Refresh Rate | 0 | Specify an interval at which to refresh the broadcast key that is sent to clients on the VAP. Specifying "0" stops the key from refreshing.
   MAC Address Authentication | Disable | Specify whether to use MAC Address Authentication on the VAP.
   Fast Roaming | Disable | Specify whether to use Fast Roaming of wireless clients.
   Wireless Client Isolation | Enable | Specify whether to block communication between wireless clients connected to the same VAP. This setting is applied to all VAPs (multi-channel and CB) on the same radio.
   Inactivity Timer | 300 | Specify the delay before disconnecting a client that disappears without notifying the APs.
   Duplicate AUTH received | Disconnect | Select how to process connection requests from clients that have maintained a connection.
   DTIM Period | 1 | Specify how frequently to insert a DTIM (Delivery Traffic Indication Map) in the AP's beacons (every 1 to 255 beacons).
   RSSI Threshold | 0 | Specify the threshold that prompts handover to another AP when Received Signal Strength (RSSI) received from the client decreases. If you select "0", the connection will not disconnect to facilitate handover.
   Tx Power | Max | Select the AP's transmission power.

5. Next, click "+ Add VAP" on "VAP (Multiple SSID) Configuration" to create another CB VAP for guests.
6. Now we are going to create a CB VAP "ForGuest" for guests' computers (CB VAP 2).
   We don't use any security on the CB VAP for guests.

   Table 3: CB VAP "ForGuest" Configuration
   Item Name | Value | Description
   --- | --- | ---
   Radio | Radio 1 | Select a radio band to use for this CB VAP, from Radio 1 (2.4GHz) and Radio 2 (5GHz W52).
   VAP | 2 | Specify a VAP number for this CB VAP configuration.
   Channel | 1 | Select a channel to use for this CB VAP This setting is applied to all VAPs (multi-channel and CB) on the same radio.
   VAP Status | Enable | Specify "Enable" or "Disable".
   VLAN ID | 200 | Specify a VLAN ID used for communication between the CB VAP and associated clients (mandatory). Note Specify a VLAN ID that is different from the AP's management VLAN. When the AP is detected as a guest node, a parent AMF node is configured to collect the guest node information automatically ("dynamic discovery"), and wireless clients get their IP addresses via DHCP.
   SSID | ForGuest | Specify an SSID (network name) to use on the CB VAP.
   Broadcast SSID | Enable | Specify whether to broadcast the SSID on the CB VAP.
   Security | None | Specify a security method for the VAP.
   MAC Address Authentication | Disable | Specify whether to use MAC Address Authentication on the VAP.
   Wireless Client Isolation | Enable | Specify whether to block communication between wireless clients connected to the same VAP. This setting is applied to all VAPs (multi-channel and CB) on the same radio.
   Inactivity Timer | 300 | Specify the delay before disconnecting a client that disappears without notifying the APs.
   Duplicate AUTH received | Disconnect | Select how to process connection requests from clients that have maintained a connection.
   DTIM Period | 1 | Specify how frequently to insert a DTIM (Delivery Traffic Indication Map) in the AP's beacons (every 1 to 255 beacons).
   RSSI Threshold | 0 | Specify the threshold that prompts handover to another AP when Received Signal Strength (RSSI) received from the client decreases. If you select "0", the connection will not disconnect to facilitate handover.
   Tx Power | Max | Select the AP's transmission power.

7. Now we are going to create a channel blanket to apply the CB Profile to.
   Click the "Create CB" button in the "Channel Blanket List" section.

   The "Create Channel Blanket" dialog box will appear.

8. Enter "1F Blanket" in "Channel Blanket Name".
9. Configure the "Control VLAN".
   The Control VLAN for a channel blanket should be different from the management VLAN of the APs and VLANs for the VAPs to which the wireless clients will belong.
   Here we enter "101".
10. Select the Management Group whose APs you want to add to this channel blanket.
    Here we select "1-2F Group".
11. The "Designated AP" specifies an AP that represents the channel blanket. Its BSSID will be advertised as the BSSID of the channel blanket.
    However, because no AP belongs to the channel blanket yet, we cannot specify an AP and the item is grayed out.

12. Click "Save" to add the channel blanket "1F Blanket".
    Now you can see "1F Blanket" in the channel blanket list.

13. Next let's add APs to the channel blanket "1F Blanket".
    Click the "AP List" button on the "1F Blanket" row in the channel blanket list.
    The "AP List" dialog box will appear.
    In the title, the channel blanket name follows "AP List", in brackets. In this case, the title is "AP List (Channel Blanket Name: 1F Blanket)".

14. Click "Edit AP List".
    The "Add/Remove APs" dialog box will appear.

    In this dialog box, you can select APs from a floor map or from a list of the APs in the management group.
    Floor map panels are shown by default.
15. Click "1F Map" panel.
    APs placed on the "1F Map" will be displayed as icons on the map.

16. Select APs to join the channel blanket by clicking their icons on the map.
    - When you hover over an AP, its IP address, MAC address and model name will pop up.
    - When you click an AP icon, a blue circle will appear around the AP and show that it is selected. You can select multiple APs.
    - Clicking an AP icon again deselects it.
    - An AP Icon in dark gray shows that the AP already belongs to another channel blanket.
      In this example, you cannot see AP icons in dark gray because no AP belongs to a channel blanket.
    Here we select all three APs.

17. Click "Save" in the "Add/Remove APs" dialog box to save the selection.
    Now you can see the selected APs on the "AP List" dialog box.

    Make sure that the correct APs are selected, then click "Close" to close the "AP List" dialog box.
    This returns you to the "Channel Blanket List" section of the "Create Channel Blanket" screen.
    In the "1F Blanket" line, you can see that "Assigned APs" is "3" and "Designated AP" shows an AP name that was automatically elected.

18. Click "Add" at the top right of the Content screen to save the configuration.

## CB Profile for 2F

Next let's create a CB Profile for the second floor.
We will create a CB VAP for employees' mobile devices like we did for the CB VAP for 1F.

1. Select "Wireless Configuration" > "CB Profile" from the AWC Plug-in menu to go back to the CB Profile list screen.

2. Click "Create" at the top right of the Content section.
   The "Create CB Profile" screen will appear.

3. Configure general parameters in the "Profile Configuration" section.
   - Enter "TQ5403-CB-2F" in "CB Profile Name".
   - Select the Management Group that you want apply this CB Profile to.
     A CB Profile can be used in multiple Management Groups by selecting those groups on this screen.
     Here we check the "1-2F Group" that we created earlier.
     Note that you cannot uncheck the "Default Wireless Group".

4. Configure VAPs in the "VAP (Multiple SSID) Configuration" section.
   Create a CB VAP "ForStaff-Mobile" for employees' mobile devices, CB VAP 1.
   Because this CB VAP has no direct relationship to the one created for 1F, in spite of having the same name, and we are not going to create a CB VAP for guests on the 2nd floor, we could disable "Wireless Client Isolation". But in this example, we will use the same settings as before.

   Table 4: CB VAP "ForStaff-Mobile" Configuration
   Item Name | Value | Description
   --- | --- | ---
   Radio | Radio 1 | Select a radio band to use for this CB VAP, from Radio 1 (2.4GHz) and Radio 2 (5GHz W52).
   VAP | 1 | Specify a VAP number for this CB VAP configuration.
   Channel | 1 | Select a channel to use for this CB VAP This setting is applied to all VAPs (multi-channel and CB) on the same radio.
   VAP Status | Enable | Specify "Enable" or "Disable".
   VLAN ID | 100 | Specify a VLAN ID used for communication between the CB VAP and associated clients (mandatory). Note Specify a VLAN ID that is different from the AP's management VLAN. When the AP is detected as a guest node, a parent AMF node is configured to collect the guest node information automatically ("dynamic discovery"), and wireless clients get their IP addresses via DHCP.
   SSID | ForStaff-Mobile | Specify an SSID (network name) to use on the CB VAP.
   Broadcast SSID | Enable | Specify whether to broadcast the SSID on the CB VAP.
   Security | WPA Personal | Specify a security method for the VAP.
   Security Key (WPA-PSK) | 5+@f/=0N1y | Specify an encryption key for the VAP.
   WPA Versions | WPA2 | Specify a WPA version to use on the VAP.
   Encryption Protocol | CCMP | Specify an encryption protocol to use on the VAP.
   Management Frame Protection | Enable | Specify whether to protect Management Frames.
   Broadcast Key Refresh Rate | 0 | Specify an interval at which to refresh the broadcast key that is sent to clients on the VAP. Specifying "0" stops the key from refreshing.
   MAC Address Authentication | Disable | Specify whether to use MAC Address Authentication on the VAP.
   Fast Roaming | Disable | Specify whether to use Fast Roaming of wireless clients.
   Wireless Client Isolation | Enable | Specify whether to block communication between wireless clients connected to the same VAP. This setting is applied to all VAPs (multi-channel and CB) on the same radio.
   Inactivity Timer | 300 | Specify the delay before disconnecting a client that disappears without notifying the APs.
   Duplicate AUTH received | Disconnect | Select how to process connection requests from clients that have maintained a connection.
   DTIM Period | 1 | Specify how frequently to insert a DTIM (Delivery Traffic Indication Map) in the AP's beacons (every 1 to 255 beacons).
   RSSI Threshold | 0 | Specify the threshold that prompts handover to another AP when Received Signal Strength (RSSI) received from the client decreases. If you select "0", the connection will not disconnect to facilitate handover.
   Tx Power | Max | Select the AP's transmission power.

5. Now we are going to create a channel blanket to apply the CB Profile to.
   Click the "Create CB" button in the "Channel Blanket List" section.

   The "Create Channel Blanket" dialog box will appear.

6. Enter "2F Blanket" in "Channel Blanket Name".
7. Configure the "Control VLAN".
   The Control VLAN for a channel blanket should be different from the management VLAN of the APs and VLANs for the VAPs to which the wireless clients will belong.
   Here we enter "201".
8. Select the Management Group whose APs you want to add to this channel blanket.
   Here we select "1-2F Group".
9. The "Designated AP" specifies an AP that represents the channel blanket. Its BSSID will be advertised as the BSSID of the channel blanket.
   However, because no AP belongs to the channel blanket yet, we cannot specify an AP and the item is grayed out.

10. Click "Save" to add the channel blanket "2F Blanket".
    Now you can see "2F Blanket" in the channel blanket list.

11. Next let's add APs to the channel blanket "2F Blanket".
    Click the "AP List" button on the "2F Blanket" row in the channel blanket list.
    The "AP List" dialog box will appear.
    Its title includes "Channel Blanket Name: 2F Blanket".

12. Click "Edit AP List".
    The "Add/Remove APs" dialog box will appear.

    In this dialog box, you can select APs from a floor map or from a list of the APs in the management group.
    Floor map panels are shown by default.
13. Click "2F Map" on Floor Map Panels.
    APs placed on the "2F Map" will be displayed as icons on the map.

14. Select APs to join the channel blanket by clicking their icons on the map.
    Here we select all three APs.

15. Click "Save" in the "Add/Remove APs" dialog box to save the selection.
    Now you can see the selected APs on the "AP List" dialog box.

    Make sure that the correct APs are selected, then click "Close" to close the "AP List" dialog box.
    This returns you to the "Channel Blanket List" section of the "Create Channel Blanket" screen.
    In the "2F Blanket" line, you can see that "Assigned APs" is "3" and "Designated AP" shows the name of the AP that was automatically elected.

16. Click "Add" at the top right of the Content screen to save the configuration.

13 Mar 2020 16:32