3G9W - HSPA 7.2Mbps Wi-Fi Router USER GUIDE

YML902 – 81

--rekey <interval>

Description: Set the Group Rekey Interval

Default value: 0

--pskey <”pskeyStr”>

Description: Set the WPA Pre-Shared Key

Valid value: string of 8 ~ 63 characters.

Note:

1. wlPreauth can only be used with WPA2.

2. When using WPA-PSK or WPA2-PSK, WPA Pre-Shared Key (pskey) must be set first.

3. WEP MUST be enable when security is set to shared / 802.1X radius security mode.

4. WEP MUST be disable when security is set to WPA/WPA-PSK security mode

5. When setting keyidx to N for WEP key, ensure that the nkeyN field has a string value.

6. Always issue a complete security command. For example, once WEP is enabled, it will still be enabled even after changing the

security mode, until the command “--wep disabled” is received by the router.

Example 2:

After setting up the wireless configuration in example 1, the user wants to configure the wireless LAN security.

Scenario 1:

WPA2 with Radius server IP address of 172.16.2.199

wlan security wpa2 --rasip 172.16.2.199 --wlPreauth 1

Scenario 2:

WPA-PSK with “123456789” as the passkey.

wlan security psk --pskey “123456789” --wpaenc aes --wep disabled

Scenario 3:

802.1X with Radius server IP of 172.16.2.199 and RADIUS key as “whatever”

wlan security radius --rasip 172.16.2.199 --raskey “whatever” --wep enabled

Downloaded from

www.Manualslib.com

manuals search engine

82 – YML902

Configure wireless LAN MAC filter

Description: Enable, disable and configure the wireless LAN MAC filter feature. This feature enables

the router to allow or deny connection from wireless client based on the MAC address.

Synopsis:

wlan macfilter

[--mode <disabled|allow|deny>]

[--add <MACaddress>]

[--remove <MACaddress>]

Options:

--mode <disabled|allow|deny>

Description: Disable and set the wireless LAN MAC filter mode.

Valid Value:

Disabled: disable wireless LAN MAC filter

Allow: only allow access to wireless client with the MAC address listed in the router

Deny: allow all wireless client to connect unless the MAC address is listed in the router

Default Value: disabled

--add <MACaddress>

Description: add one MAC Address entry

--remove <MACaddress>

Description: remove one MAC Address entry

Note:

The setting of the MAC filter takes effect immediately. When setting up this feature through the wireless interface, be careful of

blocking the computer.

Changing the mode will make the MAC address list be reserved.

To see the list of MAC addresses, use the command “wlan info –macfilter”.

Example 3:

After Example 2, the user want to allow only wireless client with MAC address of 00:11:22:33:44:55 to be

able to connect to the router

wlan macfilter --mode allow --add 00:11:22:33:44:55

Following the command above, if the user wants to deny wireless client with MAC address of

00:11:22:33:44:55 to be able to connect to the AP.

wlan macfilter --mode deny

Downloaded from

www.Manualslib.com

manuals search engine

3G9W - HSPA 7.2Mbps Wi-Fi Router USER GUIDE

YML902 – 83

Configure Wireless Bridge (Wireless Distribution System/WDS)

Description: configure the wireless bridge

Synopsis:

wlan wds [--mode <ap|wds>] [--restrict <enabled|disabled>]

[--rmac1 <MACaddress>] [--rmac2 <MACaddress>]

[--rmac3 <MACaddress>] [--rmac4 <MACaddress>]

Options:

--mode <ap|wds>

Description: configure wireless AP mode.

Default value: ap

--restrict <enabled|disabled>

Description: enable or disable bridge restrict mode.

Default value: disabled

--rmac1 <MACaddress>

--rmac2 <MACaddress>

--rmac3 <MACaddress>

--rmac4 <MACaddress>

Description: set remote bridge MAC address

Note:

The “--restrict” option have to be enable before setting any restrict MAC address (--rmac1~4) or the restrict MAC address setting

will be ignored.

The behavior of WDS is similar to connecting two or more AP using a hub. However, please be aware of the IP assignment to

prevent assigning two or more hosts / STAs to the same IP address. To avoid IP address conflict, only enable DHCP server in one

router and disable the other router DHCP server.

WDS CLI (command line interface) does NOT support Enable(Scan) mode in Bridge Restrict while using WUI (Web UI) does. When

Bridge Restrict set to Enable(Scan) mode in WUI, the CLI will show Bridge Restrict disabled.

Example 4:

After example 3, the user want to connect another AP which has DHCP disabled and the MAC address is

00:12:34:56:78:9a

wlan wds --mode wds --restrict enabled --rmac1 00:12:34:56:78:9a

Downloaded from

www.Manualslib.com

manuals search engine

84 – YML902

Show wireless LAN interface configurations

Description: show the current configuration of the wireless LAN interface

Synopsis:

wlan info [--config] [--security]

[--macfilter] [--wds] [--station]

Options:

--config

Description: display the list of parameters from config option

Example:

> wlan info --config

Wlan Config Info :

Basic :

wlan config enable = 1

wlan config hide = 0

wlan config ssid = Series7Wireless7890

wlan config bssid = 00:11:22:33:44:56

wlan config country = AU

Advance :

wlan config isolate = 0

wlan config band = b

wlan config channel = 0

wlan config rate = 0

wlan config mrate = 0

wlan config brate = default

wlan config rts = 2347

wlan config frag = 2346

wlan config dtim = 1

wlan config beacon = 100

wlan config xpress = off

wlan config gmode = auto

wlan config gprotect = auto

wlan config preamble = long

Downloaded from

www.Manualslib.com

manuals search engine

3G9W - HSPA 7.2Mbps Wi-Fi Router USER GUIDE

YML902 – 85

--security

Description: display the list of parameters from security option

Example:

> wlan info --security

Wlan Security Info :

wlan security auth mode = psk

wlan security wpa = aes

wlan security wpaGTKRekey = 0

wlan security wpaPresharedKey = 1234567890

wlan security Wepstate = disabled

wlan security WepKeyBit = 128

wlan security WepKey2 =

wlan security WepKey3 =

wlan security WepCurrentKeyindex = 1

--macfilter

Description: display the list of parameters from macfilter option

Example:

> wlan info --macfilter

Wlan macfilter Info :

wlan macfilter mode = disabled

wlan macfilter entry :

--wds

Description: display the list of parameters from wds opiton

Example:

> wlan info --wds

Wlan wds Info :

wlan wds mode = ap

wlan wds restrict mode = disabled

--station

Description: display the list of authenticated wireless stations and their status

Example:

> --wlan info --station

--wlan info --station: not found

Downloaded from

www.Manualslib.com

manuals search engine