Page 76 / 270 Scroll up to view Page 71 - 75
Unified Services Router
User Manual
74
wireless client connections to an AP enabled with a profile that uses RADIUS
authentication.
The Authentication IP Address is required to identify the server. A
secondary RADIUS server provides redundancy in the event that the primary
server cannot be reached by the router when needed.
Authentication Port: the port for the RADIUS server connection
Secret: enter the shared secret that allows this router to log into the
specified RADIUS server(s). This key must match the shared secret on the
RADIUS Server.
The Timeout and Retries fields are used to either move to a secondary server
if the primary cannot be reached, or to give up the RADIUS authentication
attempt if communication with the server is not possible.
Page 77 / 270
Unified Services Router
User Manual
75
Figure 44: RADIUS se rve r (Exte rnal Authe nticatio n) configuratio n
4.3
Creating and Using Access Points
Setup > Wireless Settings > Access Points
Once a profile (a group of security settings) is created, it can be assigned to an AP on
the router. The AP SSID can be configured to broadcast its availability to the 802.11
environment can be used to establish a WLAN network.
The AP configuration page allows you to create a new AP and link to it one of the
available profiles. This router supports multiple
AP’s referred to as virtual access
points (VAPs). Each virtual AP that has a unique SSIDs appears as an independent
access point to clients.
This valuable feature allows the router’s radio to be
configured in a way to optimize security and throughput for a group of clients as
required by the user. To create a VAP, click the “add” button on the
Setup >
Wireless Settings > Access Points
page. After setting the AP name, the profile
dropdown menu is used to select one of the configured profiles.
Page 78 / 270
Unified Services Router
User Manual
76
The AP Name is a unique identifier used to manage the AP from the GUI, and is
not the SSID that is detected by clients when the AP has broadcast enabled.
Figure 45: Virtual AP configuratio n
A valuable power saving feature is the start and st op time control for this AP. You
can conserve on the radio power by disabling the AP when it is not in use. For
example on evenings and weekends if you know there are no wireless clients, the start
and stop time will enable/disable the access point automat ically.
Once the AP settings are config ured, you must enable the AP on the radio on the
Setup > Wireless Settings > Access Points
page. The status field changes to
“Enabled” if the AP is available to accept wireless clients.
If the AP is configured to
broadcast its SSID (a profile parameter), a green check mark indicating it is
broadcasting will be shown in the List of Available Access points .
Page 79 / 270
Unified Services Router
User Manual
77
Figure 46: List of configure d acce ss points (Virtual APs) shows one
e nable d acce ss point on the radio, broadcasting its SSID
The clients connected to a particular AP can be viewed by using the Status Button on
the List of Available Access Points. Traffic statistics are shown for that individual
AP, as compared to the summary stats for each AP on the Statistics table. Connected
clients are sorted by the MAC address and indicate the security parameters used by
the wireless link, as well as the time connected to this particular AP. Clicking the
Details button next to the connected client will g ive the detailed send and receive
traffic statistics for the wireless link between this AP and the client.
4.3.1
Primary benefits of Virtual APs:
Optimize throughput: if 802.11b, 802.11 g, and 802.11n clients are expected
to access the LAN via this router, creating 3 VAPs will allow you to manage
or shape traffic for each group of clients. A unique SSID can be created for
the network of 802.11b clients and another SSID can be assigned for the
802.11n clients. Each can have different security parameters
remember,
the SSID and security of the link is determined by the profile. In this way
legacy clients can access the network without bringing down the overall
throughput of more capable 802.11n clients.
Optimize security: you may wish to support select lega cy clients that only
offer WEP security while using WPA2 security for the majority of clients
for the radio. By creating two VAPs configured with different SSIDs and
different security parameters, both types of clients can connect to the LAN.
Since WPA2 is more secure, you may want to broadcast this SSID and not
Page 80 / 270
Unified Services Router
User Manual
78
broadcast the SSID for the VAP with WEP since it is meant to be used for a
few legacy devices in this scenario.
4.4
Tuning Radio Specific Settings
Setup > Wireless Settings > Radio Settings
The Radio Settings page lets you configure t he channels and power levels available
for the AP’s enabled on
the DSR. The router has a dual band 802.11n radio, meaning
either 2.4 GHz or 5 GHz frequency of operation can be selected (not concurrently
though). Based on the selected operating frequency, the mode selection will let you
define whether legacy connections or only 802.11n connections (or both) are accepted
on configured APs.
Figure 47: Radio card configuratio n options
The ratified 802.11n support on this radio requires selecting the appropriate broadcast
(NA or NG etc.) mode, and then defining the channel spacing and control side band
for 802.11n traffic. The default settings are appropriate for most networks. For
example, changing the channel spacing to 40 MHz can improve bandwidth at the
expense of supporting earlier 802.11n clients.
The available transmission channels are governed by regulatory constraints based on
the region setting of the router. The maximum transmission power is similarly
governed by regulatory limits; you have the option to decrease from the default
maximum to reduce the signal strength of traffic out of the radio.

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top