# AWC Plug-in User Guide 3.1.0

# Create AP Profile

AP Profile for TQ5403

Let's create an AP Profile for the cellular wireless network.
When you configure a channel blanket, the AP profile defines the overall configuration of the APs while the CB profile configures a specific channel blanket. To manage APs for channel blanket, you always have to apply an AP profile to the APs.
When both an AP profile and a CB profile are applied to an AP, the CB profile has precedence over the AP profile and overwrites the AP configuration with its content.
We are going to use a single AP Profile for all APs because a multi-channel network will cover both 1F and 2F as you can see in the following table (see cells filled with red).

Table 1: Planned Wireless Networks
| Radio | TQ5403-xF-1 | TQ5403-xF-2 | TQ5403-xF-3 | Overview
--- | --- | --- | --- | --- | ---
2F | Radio 2 | ForStaff-PC | ForStaff-PC | ForStaff-PC | Multi-channel VAP for employees' PCs
Radio 1 | ForStaff-Mobile | AWC-CB VAP for employees' mobile devices
1F | Radio 2 | ForStaff-PC | ForStaff-PC | ForStaff-PC | Multi-channel VAP for employees' PCs
Radio 1 | ForStaff-Mobile | AWC-CB VAP for employees' mobile devices
ForGuest | AWC-CB VAP for guests

## AP Profile for TQ5403

Let's create an AP Profile for all TQ5403 APs.

1. Select "Wireless Configuration" > "AP Profile" from the AWC Plug-in menu.
   The AP Profile list screen will appear.

2. Click "Create" at the top right of the screen.
   The "Select Country, AP Series and Profile Type" dialog box will appear.

3. Select a Country.
   If the default country code for the currently logged in user is configured, it is selected by default.
4. Select "TQ Series" from "Series".
5. Select "Profile Type".
   There are several options for this item, depending on the supported feature set of the AP model.
   Select "Tri[11ac Wave2]" suitable for TQ5403.

6. Click "OK".
   The AP Profile configuration screen will appear.

7. Configure general parameters in the "Profile Configuration" section.
   - Enter "TQ5403" in "AP Profile Name".
   - The "Profile Type", "Country" and "Series" fields show the options selected in the earlier "Select Country, AP Series and Profile Type" dialog box.
   - Select the Management Groups that you want this AP Profile to belong to.
     An AP Profile can be used in multiple Management Groups by selecting those groups in this dialog box.
     Here we check the "1-2F Group" which we created earlier.
     Note that you cannot uncheck the "Default Wireless Group".

8. You can specify the AP's system settings in the "Basic Configuration" section.
   The "NTP Client" field is used to enable/disable the NTP client on the APs.
   To use the AWC (Autonomous Wave Control) feature, which we will describe later, you have to enable the NTP client.
   Here we enable the NTP client.
   When you enable the NTP client, an additional "NTP Server IP Address/Hostname" field will appear. Enter the IP address of the switch (192.168.1.1) that is configured as an NTP server.
9. The "Syslog Client" field lets you enable or disable the syslog client feature on the APs.
   If you want the APs to send log messages to the syslog server, enable this item.
   Here we set the syslog client to disabled.
10. You can enable or disable the SNMP agent on the APs in the "SNMP Agent" section.
    If you want to monitor and configure the APs with SNMP manager, enable this item.
    Here we enable the SNMP Agent because we are going to monitor the APs with the SNMP Plug-in.
    When you enable the SNMP Agent, the following fields will appear. Here we enter the following data:

    Table 2: TQ5403 SNMP Agent Configuration
    Item Name | Value | Description
    --- | --- | ---
    Read Only Community Name | public | Enter the read-only SNMP community name, using 1 to 256 ASCII characters including letters, digits, and symbols (except " ' \ & < >).
    Port Number | 161 | Enter the UDP port that the SNMP agent listens on.
    Restrict the source of SNMP requests | Disable | Enable this to accept SNMP requests only from specific source addresses.
    Only allow from the designated hosts or subnets | - | Enter the IP address or hostname (FQDN) of the SNMP manager. This is only displayed when "Restrict the source of SNMP requests" is enabled.
    Community name for traps | public | Specify the trap SNMP community name, using 1 to 256 ASCII characters including letters, digits and symbols (except " ' \ & < >).
    Trap types | Cold Start Link Up/Down Authentication | Select the SNMP Trap types to generate.
    Trap Host IP Address/Hostname | 192.168.1.249 | Specify IP addresses or hostnames (FQDNs) to which SNMP traps will be sent. A maximum of 3 trap hosts can be configured.

11. Clicking "+ Detail" will show "MAC Address List" and "LED".
    - "MAC Address List" lets you specify MAC address lists (blacklist or whitelist) used by MAC Filtering features on the APs.
      An AP can use only a single MAC address list but the MAC Filtering feature can be enabled or disabled per VAP (SSID).
      Here we haven't created a MAC address list. Leave "MAC Address List" empty in order to accept all wireless clients that have a valid SSID and key.
    - The "LED" field lets you select the operational mode of the AP's LEDs.
      Here we choose "Turn On" for "LED".

12. "LAN Configuration" lets you configure ethernet links on the AP.
    The TQ5403 has two LAN ports and can use a wider uplink with link aggregation (LAG), provided that both ends of the LAG (a parent switch and the AP) are correctly configured.

    Table 3: TQ5403 Wired Network
    Item Name | Value | Description
    --- | --- | ---
    Link Aggregation | Disable | Enables/disables link aggregation of LAN1/PoE and LAN2 ports on TQ5403 and TQm5403. Static LAG: Enables link aggregation. A static LAG should also be configured on the switch ports to which the AP connects. Disable: Disables link aggregation. The LAN2 port is also disabled. The AP can only use the LAN1/PoE port.

    We don't use link aggregation in this example. Please make sure that Disable is selected.

13. You can specify configuration parameters for radio waves in the "Radio Configuration" section.
    Depending on the selected "Profile Type", configure "Radio 1 (2.4GHz)", "Radio 2 (5GHz W52/W53)" and "Radio 3 (5GHz W56)" appropriately. You can switch the radio by clicking the "Radio 1", "Radio 2" and "Radio 3" buttons at the top of the screen.
    This section is used for CB VAPs too.
    Here we configure it as follows because we are going to operate CB VAPs for guests and employees' mobile devices on Radio 1 and a multi-channel VAP for employees' PCs on Radio 2.
    - Disable "Radio Transmission" for Radio 3 because we are not going to use Radio 3.
    - Disable "Emergency Mode" on Radio 1 because it cannot be used with channel blanket.
      Radio 2 can use emergency mode because it is used for multi-channel VAP. You can create emergency VAP on Radio 2 if needed.
      Or you can also enable Radio 3 to operate emergency only network on the radio.
    - We are going to use Radio 1 for two blanket wireless networks, one for guests and the other for employees' mobile devices.
      Although we should block traffic between clients on the guest network, we will leave "Wireless Client Isolation" Disabled because it can be configured in the CB Profile
    - We are going to use Radio 1 for employees' mobile devices. Enable "Wi-Fi Multimedia (WMM)" and "APSD" to achieve stable communication on mobile IP phones and lower power consumptions.
    - Disable "Airtime Fairness" because it cannot be used with channel blanket.
    - Leave the "RTS Threshold" default value of 2347 because changing the value is not supported with channel blanket.
    - Disable "Band Steering" because it cannot be used with channel blanket.

    Table 4: Wireless Configuration
    Item Name | Value | Description
    --- | --- | ---
    Radio 1 | Radio 2 | Radio 3
    Radio Transmission | Enable | Enable | Disable | Specify whether to transmit and receive radio waves in the selected frequency band.
    Mode | b/g/n | a/n/ac |  | Specify the wireless modes (protocols) to use
    Channel Bandwidth | 20MHz | 20MHz |  | Specify the bandwidth to use. IEEE 802.11ac and IEEE 802.11n can aggregate two or four adjacent channels to make a large 40MHz or 80MHz channel.
    Use Conditions | Always | Always |  | Select "Always" to always use the wireless feature. Select "Only Emergency Mode" to use the radio band only in emergency mode. Refer to Enable Emergency Mode for more details.
    Wireless Client Isolation | Disable | Disable |  | Specify whether to block communication between wireless clients connected to the same VAP.
    Airtime Fairness | Disable | Disable |  | Specify whether or not to give each client an equal amount of airtime regardless of its speed.
    Auto Channel Selection | All | All |  | Specify the channels to use. All channels are selected by default.
    Maximum Wireless Clients | 200 | 200 |  | Specify the maximum number of clients that can connect to the APs.
    Fixed Tx Rate | 11 Mbps | 6 Mbps |  | Specify the fixed Transmission Rate for IEEE 802.3 Multicast/Broadcast.
    Legacy Rate Sets | All | All |  | Specify valid rates to use when IEEE 802.11b/g or IEEE 802.11a is being used.
    RTS Threshold | Disable | Disable |  | To transmit RTS packets in IEEE 802.11b/g/a mode, select Enable and specify the minimum size of Tx packets.
    Band Steering | Disable | Disable |  | Specify whether to use the Band Steering feature, which encourages clients supporting both 2.4GHz and 5GHz to prefer 5GHz in order to reduce congestion in 2.4GHz. Note Band Steering cannot be used with channel blanket.
    Wi-Fi Multimedia (WMM) | Enable | Enable |  | Specify whether to use Wi-Fi Multimedia (WMM). When enabled, WMM information is included in the AP beacon. This shortens the frame transmission interval for video/audio streaming and VoIP traffic and therefore keeps communication quality high.
    APSD | Enable | Enable |  | Specify whether to use APSD (Automatic Power Save Delivery). Enabling APSD can lower power consumption of mobile devices (VoIP) and therefore increase the battery life. The mobile device should also support APSD (U-APSD).
    Neighbor AP Detection | Enable | Enable |  | Specify whether or not to detect rogue APs in the radio band. When enabled, APs detect the radio waves of wireless APs managed/unmanaged by the AWC Plug-in that use the same wireless band nearby, and reflects them in Wireless IDS/IPS and AWC calculations. If you disable this, these functions may not work properly.

    ◼ Radio 1

    ◼ Radio 2

    ◼ Radio 3

14. Configure VAPs in the "VAP (Multiple SSID) Configuration" section.
    In this example, we use multi-channel network on Radio 2 only. Therefore, we are not going to use regular VAPs on Radio 1 and 3.
    Although WPA Enterprise is not used in this example, please note that WPA pre-authentication and dynamic VLAN cannot be used with channel blanket.

    Table 5: TQ5403 VAP Configuration
    Item Name | Radio 2 VAP 1 | Description
    --- | --- | ---
    VAP Status | Enable | Specify one of "Enable", "Disable" and "Emergency". The VAP Status of VAP1 is always "Enable" when "Use Condition" in the "Radio Configuration" section is set to "Always".
    VLAN ID | 100 | Specify a VLAN ID used for communication between the VAP and associated clients. Note Specify a VLAN ID that is different from the AP's management VLAN. When the AP is detected as a guest node, a parent AMF node is configured to collect the guest node information automatically ("dynamic discovery"), and wireless clients get their IP addresses via DHCP.
    SSID | ForStaff-PC | Specify an SSID (network name) to use on the VAP.
    Broadcast SSID | Enable | Specify whether to broadcast the SSID on the VAP.
    Security | WPA Personal | Specify a security method for the VAP.
    Security Key (WPA-PSK) | 5+@f/=0N1y | Specify an encryption key for the VAP.
    WPA Versions | WPA2 | Specify a WPA version to use on the VAP.
    Encryption Protocol | CCMP | Specify an encryption protocol to use on the VAP.
    Management Frame Protection | Enable | Specify whether to protect Management Frames.
    Broadcast Key Refresh Rate | 0 | Specify an interval at which to refresh the broadcast key that is sent to clients on the VAP. Specifying "0" stops the key from refreshing.
    Captive Portal | Disable | Specify whether to use the Captive Portal feature on the VAP.
    MAC Address Authentication | Disable | Specify whether to use MAC Address Authentication on the VAP.
    Fast Roaming | Disable | Specify whether to use Fast Roaming of wireless clients.
    Inactivity Timer | 300 | Specify the delay before disconnecting a client that disappears without notifying the APs.
    Duplicate AUTH received | Disconnect | Select how to process connection requests from clients that have maintained a connection.
    Association Advertisement | Disable | Specify whether to use Association Advertisement.
    DTIM Period | 1 | Specify how frequently to insert a DTIM (Delivery Traffic Indication Map) in the AP's beacons (every 1 to 255 beacons).

    Because VAP1 cannot be disabled on an AP profile, if you apply this AP profile to APs as usual, the default SSID "Default-1" will be activated without any security.
    When both an AP profile and a CB profile are applied to an AP, the CB profile has precedence over the AP profile and overwrites the AP configuration with its content.
    Therefore, VAP1's configuration will be overriden by a CB Profile that we are going to create next.
    You don't have to change VAP1 settings for Radio 3 because Radio 3's "Radio Transmission" has been disabled.

    > Note

    > > In this quick tour, we will apply the AP Profile to APs after creating channel blankets. This is because applying the AP Profile before the CB Profile can enable multi-channel (conventional) VAPs on the AP Profile, which are not intended for use. If you want to applythe AP Profile before CB Profile, we recommend that you configure dummy VAPs for radios intended only for channel blanket networks.

15. Click "Add" at the top right of the screen.
    Now you can see the newly created AP Profile "TQ5403".

13 Mar 2020 16:32