SonicPoint : SonicPoint > SonicPoints

SonicPoint Provisioning Profiles
For a SonicPoint overview, see SonicPoint > SonicPoints .
Topics:
Provisioning Overview
When a SonicPoint unit is first connected and powered up, it has a factory default configuration (IP address 192.168.1.20, username: admin, password: password). Upon initializing, it attempts to find a SonicOS device with which to peer.
If the SonicPoint does locate, or is located by a peer SonicOS device, through the Dell SonicWALL Discovery Protocol, an encrypted exchange between the two units ensues wherein the profile assigned to the relevant Wireless zone is used to automatically configure (provision) the newly added SonicPoint unit.
As part of the provisioning process, SonicOS assigns the discovered SonicPoint device a unique name, and records its MAC address and the interface and zone on which it was discovered. It can also automatically assign the SonicPoint an IP address, if so configured, so that the SonicPoint can communicate with an authentication server for WPA-EAP support. SonicOS then uses the profile associated with the relevant zone to configure the 2.4GHz and 5GHz radio settings.
SonicPoint Provisioning Profiles provide a scalable and highly automated method of configuring and provisioning multiple SonicPoints across a Distributed Wireless Architecture. SonicPoint Profile definitions include all of the settings that can be configured on a SonicPoint, such as radio settings for the 2.4GHz and 5GHz radios, SSID’s, and channels of operation.
After you have defined a SonicPoint profile, you can apply it to a Wireless zone. Each Wireless zone can be configured with one SonicPoint profile. Any profile can apply to any number of zones. Then, when a SonicPoint is connected to a zone, it is automatically provisioned with the profile assigned to that zone.
SonicOS includes default profiles for three generations of SonicPoints: SonicPoint ACe/ACi/N2, SonicPoint NDR/Ne/Ni and SonicPoint N. You can modify these profiles or create new ones.
Modifications to profiles do not affect units that have already been provisioned and are in an operational state. Configuration changes to operational SonicPoint devices can occur in two ways:
Via manual configuration changes—Appropriate when a single, or a small set of changes are to be affected, particularly when that individual SonicPoint requires settings that are different from the profile assigned to its zone.
Via un-provisioning—Deleting a SonicPoint unit effectively un-provisions the unit, or clears its configuration and places it into a state where it automatically engages the provisioning process anew with its peer SonicOS device. This technique is useful when the profile for a zone is updated or changed, and the change is set for propagation. It can be used to update firmware on SonicPoints, or to simply and automatically update multiple SonicPoint units in a controlled fashion, rather than changing all peered SonicPoints at the same time that can cause service disruptions.
To configure SonicPoint profiles, see Configuring a SonicPoint Profile .
Wi-Fi Certification
The Wi-Fi CERTIFIED Logo is a certification mark of the Wi-Fi Alliance, and indicates that the product has undergone rigorous testing by the Wi-Fi Alliance and has demonstrated interoperability with other products, including those from other companies that bear the Wi-Fi CERTIFIED Logo.
Configuring a SonicPoint Profile
You can add any number of SonicPoint profiles. The SonicPoint profile configuration process varies slightly, depending on whether you are configuring a single-radio SonicPoint or a Dual Radio (SonicPoint NDR and SonicPoint AC).
The following sections describe how to configure the types of SonicPoint profiles:
Configuring a SonicPoint ACe, ACi, or N2 Profile
For a SonicPoint overview, see SonicPoint > SonicPoints .
You can add any number of SonicPoint AC profiles. The specifics of the configuration vary slightly depending on which protocols you select.
To configure a SonicPoint AC provisioning profile, complete the following tasks:
1
Navigate to SonicPoint > SonicPoints page.
2
To edit an existing AC profile, click the Configure icon on the same row as the profile you want to edit.
The Add/Edit SonicPoint N AC Profile dialog appears.
3
SonicPoint ACe/ACi/N2 General Tab
In the General tab, configure the desired settings:
SonicPoint Settings
1
Check Enable SonicPoint to enable each SonicPoint AC automatically when it is provisioned with this profile. This option is selected by default.
2
Optionally, check Retain Settings to have the SonicPoint ACs provisioned by this profile retain portions of their customized settings after they are deleted and resynchronized . This option is not selected by default.
If you select this option, Edit becomes active and the Retain Settings window displays. To specify the settings to retain:
1
If you are editing an existing SonicPoint AC profile, click Edit. The Retain Settings window displays.
2
Click Retain All Settings; all the other options become dimmed.
3
3
Optionally, check Enable RF Monitoring to enable wireless RF Threat Real Time Monitoring and Management. This option is not selected by default.
4
Enter a prefix for the names of all SonicPoint ACs connected to this zone in the Name Prefix field. This prefix assists in identifying SonicPoint AC on a zone. When each SonicPoint AC is provisioned, it is given a name that consists of the name prefix and a unique number, for example: SonicPoint AC 126008.
5
Select the country where you are operating the SonicPoint ACs from the Country Code drop-down menu. The country code determines which regulatory domain the radio operation falls under.
6
From the EAPOL Version drop-down menu, select the version of EAPoL (Extensible Authentication Protocol over LAN) to use: v1 or v2. The default is v1, but v2 provides better security.
Virtual Access Point Settings
1
Optionally, select an 802.11n Virtual Access Point (VAP) group to assign these SonicPoint ACs to a VAP from the Radio 0 Basic Virtual AP Group and Radio 1 Basic Virtual AP Group drop-down menus. The drop-down menus allow you to create a new VAP group. For more information on VAPs, see SonicPoint > Virtual Access Point .
L3 SSL VPN Tunnel Settings
1
In the SSL VPN Server field, enter the IP address of the SSL VPN server.
2
In the User Name field, enter the User Name of the SSL VPN server.
3
In the Password field, enter the Password for the SSL VPN server.
4
In the Domain field, enter the domain that the SSL VPN server is located in.
5
Click Auto-Reconnect for the SonicPoint to auto-reconnect to the SSL VPN server.
SonicPoint Administrator Settings
1
In the Name field, enter the user name for the network administrator.
2
In the Password field, enter the password for the network administrator.
SonicPoint ACe/ACi/N2 Radio 0 Basic and Radio 1 Basic Tabs
The Radio 0 Basic and Radio 1 Basic tabs are similar and have only a few differences that are noted in the steps.
NOTE: The sections and options displayed on the Radio 0 Basic/1 tabs change depending on whether you selected a VAP group in the Radio 0 Basic/1 Virtual AP Group drop-down menus on the General tab and the mode you select in the Mode drop-down menu. These choices apply only to the radio for which they were selected.
1
Click the Radio 0 Basic or Radio 1 Basic tab.
2
Radio 0 Basic Settings and Radio 1 Basic Settings
1
Check Enable Radio to automatically enable the 802.11ac radio bands on all SonicPoint ACs provisioned with this profile. This option is selected by default.
From the Enable Radio drop-down menu, select a schedule for when the 802.11n radio is on or create a new schedule; default is Always on. You can create a new schedule by selecting Create new schedule.
2
Select your preferred radio mode from the Mode drop-down menu. The wireless security appliance supports the following modes:
TIP: For 802.11n clients only, for optimal throughput speed solely, Dell SonicWALL recommends the 802.11n Only radio mode. Use the 802.11n/b/g Mixed radio mode for multiple wireless client authentication compatibility.
NOTE: The available 802.11n Radio 0/1 Settings options change depending on the mode selected. If the wireless radio is configured for a mode that:
Supports 802.11n, the following options are displayed: Radio Band, Primary Channel, Secondary Channel, Enable Short Guard Interval, and Enable Aggregation.
Does not support 802.11n, only the Channel option is displayed.
3
Optionally, select Enable DFS Channels to enable the use of Dynamic Frequency Selection (DFS) that allows wireless devices to share the same spectrum with existing radar systems within the 5GHz band. .
NOTE: If you select this option, choose either Standard - 20MHz Channel or Wide - 40MHz Channel as the Radio Band. The Primary Channel and Standard Channel drop-down menus then display a choice of available sensitive channels
NOTE: This option only appears on the Radio 0 Basic tab as the Radio 1 Basic does not have a wireless speed connection mode of at least 5GHz.
4
In the SSID field, enter a recognizable string for the SSID of each SonicPoint AC using this profile. This is the name that appears in clients’ lists of available wireless connections.
5
Does not support 802.11n, select a channel from the Channel drop-down menu.
Auto - Allows the appliance to automatically detect and set the optimal channel for wireless operation based on signal strength and integrity. This is the default setting. Use Auto unless you have a specific reason to use or avoid specific channels.
 
6
7
For 802.11n only: from the Radio Band drop-down menu, select the band for the 802.11n radio:
Auto - Allows the appliance to automatically detect and set the optimal channel for wireless operation based on signal strength and integrity. Both the Primary Channel and Secondary Channel are set to Auto also. This is the default setting.
Standard - 20MHz Channel—Specifies that the 802.11n radio uses only the standard 20MHz channel. When this option is selected, the Standard Channel drop-down menu is displayed instead of the Primary Channel and Secondary Channel options.
Standard Channel—This drop-down menu only displays when the 20MHz channel is selected. By default, this is set to Auto, which allows the appliance to set the optimal channel based on signal strength and integrity.
Optionally, you can select a single channel within the range of your regulatory domain. Selecting a specific a channel can also help with avoiding interference with other wireless networks in the area. The available channels depend on which Radio you are configuring:
Wide - 40MHz Channel—Specifies that the 802.11n radio uses only the wide 40MHz channel. When this option is selected, the Primary Channel and Secondary Channel drop-down menus are active:
Primary Channel—By default this is set to Auto. Optionally, you can specify a specific primary channel. The available channels are the same as for 802.11a in Step 5.
Secondary Channel—Is set to Auto regardless of the setting of Primary Channel.
8
Enable Short Guard Interval—Specifies the short guard interval of 400ns (as opposed to the standard guard interval of 800ns).
NOTE: This option is not available if 5GHz 802.11a Only or 2.4GHz 802.11g Only mode is selected.
A guard interval is a set amount of time between transmissions that is designed to ensure distinct transmissions do not interfere with one another. The guard interval introduces immunity to propagation delays, echoes, and reflections. An access point identifies any signal content received inside this interval as unwanted inter-symbol interference, and rejects that data. The guard interval is a pause in transmission intended to avoid data loss from interference or multipath delays.
The 802.11n standard specifies two guard intervals: 400ns (short) and 800ns (long).
Enabling a short guard interval can decrease network overhead by reducing unnecessary idle time on each access point. A short guard interval of 400 nanoseconds (ns) works in most office environments as distances between points of reflection, as well as between clients, are short. Most reflections are received quickly. The shorter the guard interval, the more efficiency there is in the channel usage, but a shorter guard interval also increases the risk of interference.
Some outdoor deployments might, however, require a longer guard interval. The need for a long guard interval of 800 ns becomes more important as areas become larger, such as in warehouses and in outdoor environments, as reflections and echoes become more likely to continue after the short guard interval would be over.
The guard interval is a pause in transmission intended to avoid data loss from interference or multipath delays and increase 802.11n data rate. Ensure the wireless client also can support a short guard interval to avoid compatibility issues.
9
Select Enable Aggregation to enable 802.11n frame aggregation that combines multiple data frames in a single transmission to reduce overhead and increase throughput.
NOTE: This option is not available if 5GHz 802.11a Only or 2.4GHz 802.11g Only mode is selected.
Data over wireless networks are sent as a stream of packets known as data frames. Frame aggregation takes these packets and combines them into fewer, larger packets, thereby allowing an increase in overall performance. Frame aggregation was added to the 802.11n specification to allow for an additional increase in performance. Frame aggregation is a feature that only 802.11n clients can take advantage of, as legacy systems are not able to understand the new format of the larger packets.
Ensure the wireless client also can support aggregation to avoid compatibility issues.
TIP: The Enable Short Guard Interval and Enable Aggregation options can slightly improve throughput. They both function best in optimum network conditions where users have strong signals with little interference. In networks that experience less than optimum conditions (interference, weak signals, and so on), these options could introduce transmission errors that eliminate any efficiency gains in throughput.
10
The Enable MIMO option enables/disables MIMO (multiple-input multiple output). Enabling this option increases 802.11n throughput by using multiple-input/multiple-output antennas. This option is enabled by default for all 802.11n modes and is dimmed to ensure it is not disabled. The option is activated and selected by default if 5GHz 802.11a Only or 2.4GHz 802.11g Only mode is selected.
Wireless Security
NOTE: If a VAP was selected in the 802.11n Radio Virtual AP Group drop-down menu on the Settings tab, this section is not available. Instead, the Virtual Access Point Encryption Settings section is displayed. Go to Virtual Access Point Encryption Settings .
The options change depending on the authentication type you select.
The Wireless Security sections of both Radio 0 Basic and Radio 1 Basic tabs are the same as for the SonicPoint N 802.11n Radio tab. For how to configure the Wireless Security settings, see Wireless Security .
Virtual Access Point Encryption Settings
NOTE: This section displays only if a VAP was selected from the Radio 0 Basic/1 Virtual AP Group drop-down menus in the Virtual Access Point Settings section of the General tab.
The Virtual Access Point Encryption Settings section of both Radio 0 Basic and Radio 1 Basic tabs are the same as for the SonicPoint N 802.11n Radio tab. For how to configure the Virtual Access Point Encryption Settings settings, see Virtual Access Point Encryption Settings .
ACL Enforcement
The ACL Enforcement section of both Radio 0 Basic and Radio 1 Basic tabs are the same as for the SonicPoint N 802.11n Radio tab. For how to configure the ACL Enforcement settings, see ACL Enforcement .
SonicPoint ACe/ACi/N2 Radio 0 Advanced and Radio 1 Advanced Tabs
These settings affect the operation of the Radio 1 Basic radio bands. The SonicPoint has two separate radios built in. Therefore, it can send and receive on both bands at the same time.
The options on the Radio 0 Advanced and Radio 1 Advanced tabs are the same except that Radio 0 Advanced has the Fragmentation Threshold (bytes) field.
To configure the Radio 0 Advanced and Radio 1 Advanced setting:
1
Select Hide SSID in Beacon to have the SSID send null SSID beacons in place of advertising the wireless SSID name. Sending null SSID beacons forces wireless clients to know the SSID before connecting. By default, this option is unchecked.
2
From the Schedule IDS Scan drop-down menu, select a schedule for the IDS (Intrusion Detection Service) scan. Select a time when there are fewer demands on the wireless network to minimize the inconvenience of dropped wireless connections. You can create your own schedule by selecting Create new schedule or disable the feature by selecting Disabled, the default.
3
From the Data Rate drop-down menu, select the speed at which the data is transmitted and received. Best (default) automatically selects the best rate available in your area given interference and other factors. Or you can manually select a data rate, from a minimum of 1 Mbps to a maximum of 54 Mbps.
4
From the Transmit Power drop-down menu, select the transmission power. Transmission power effects the range of the SonicPoint.
Full Power (default)
5
From the Antenna Diversity drop-down menu, select the method that determines which antenna the SonicPoint uses to send and receive data.
Best: This is the default setting. When Best is selected, the SonicPoint automatically selects the antenna with the strongest, clearest signal. In most cases, Best is the optimal setting.
1: Select 1 to restrict the SonicPoint to use antenna 1 only. Facing the rear of the SonicPoint, antenna 1 is on the left, closest to the power supply.
2: Select 2 to restrict the SonicPoint to use antenna 2 only. Facing the rear of the SonicPoint, antenna 2 is on the right, closest to the console port.
6
In the Beacon Interval (milliseconds) field, enter the number of milliseconds between sending wireless SSID beacons. The minimum interval is 100 milliseconds, the maximum is 1000 milliseconds, and the default is 100 milliseconds.
7
In the DTIM Interval field, enter the DTIM interval in milliseconds. The minimum number of frames is 1, the maximum is 255, and the default is 1.
For 802.11 power-save mode clients of incoming multicast packets, the Delivery Traffic Indication Message (DTIM) interval specifies the number of beacon frames to wait before sending a DTIM.
8
In the Fragmentation Threshold (bytes) field, enter the number of bytes of fragmented data you want the network to allow. Fragment wireless frames to increase reliability and throughput in areas with RF interference or poor wireless coverage. Lower threshold numbers produce more fragments. The minimum threshold is 256 bytes, the maximum is 2346 bytes, and the default is 2346 bytes.
9
In the RTS Threshold (bytes) field, enter the threshold for a packet size, in bytes, at which a request to send (RTS) is sent before packet transmission. Sending an RTS ensures that wireless collisions do not take place in situations where clients are in range of the same access point, but might not be in range of each other. The minimum threshold is 256 bytes, the maximum is 2346 bytes, and the default is 2346 byes.
10
In the Maximum Client Associations field, enter the maximum number of clients you want each SonicPoint using this profile to support on this radio at one time. The minimum number of clients is 1, the maximum number is 128, and the default number is 32.
11
In the Station Inactivity Timeout (seconds) field, enter the maximum length of wireless client inactivity before Access Points age out the wireless client, in seconds. The minimum period is 60 seconds, the maximum is 36000 seconds, and the default is 300 seconds.
12
From the WMM (Wi-Fi Multimedia) drop-down menu, select whether a WMM profile is to be associated with this profile:
Disabled (default)
Create new WMM profile. If you select Create new WMM profile, the Add Wlan WMM Profile window displays. For information about configuring a WMM profile, see Configuring Wi-Fi Multimedia Parameters .
13
Select Enable Short Slot Time to allow clients to disassociate and reassociate more quickly. Specifying this option increases throughput on the 802.11n/g wireless band by shortening the time an access point waits before relaying packets to the LAN. By default, this option is not selected.
14
Select Does not allow Only 802.11b Clients to Connect if you are using Turbo G mode and, therefore, are not allowing 802.11b clients to connect. Specifying this option limits wireless connections to 802.11g clients only. By default, this option is not selected.
15
Select Enable Green AP to allow the SonicPoint ACe/ACi/N2 radio to go into sleep mode. This saves power when no clients are actively connected to the SonicPoint. The SonicPoint immediately goes into full power mode when any client attempts to connect to it. Green AP can be set on each radio independently, Radio 0 (5GHz) and Radio 1 (2.4GHz).
16
In the Green AP Timeout(s) field, enter the timeout value in seconds that the access point waits while it has no active connections before it goes into sleep mode. The timeout values can range from 10 seconds to 600 seconds. The default value is 20 seconds.
SonicPoint ACe/ACi/N2 Sensor Tab
In the Sensor tab, enable or disable Wireless Intrusion Detection and Prevention (WIDP) mode.
 
1
Select Enable WIDF sensor to have the SonicPoint operate as a dedicated WIDP sensor.
2
From the drop-down menu, select the schedule for when the SonicPoint operates as a WIDP sensor or select Create new schedule… to specify a different time; default is Always on.
Configuring a SonicPoint NDR Profile
For a SonicPoint overview, see SonicPoint > SonicPoints .
You can add any number of SonicPoint profiles. The specifics of the configuration vary slightly depending on which 802.11 protocols you select.
To configure a dual radio SonicPointNDR provisioning profile, complete the following tasks:
1
Navigate to SonicPoint > SonicPoints page.
2
To add a new SonicPointNDR profile, click the Add SonicPoint NDR Profile button under the SonicPointN Provisioning Profiles table.
To edit an existing profile, select the profile and click the Edit icon in the Configure column of same line as the profile you are editing.
The Add/Edit SonicPointN DR Profile window displays.
3
SonicPoint NDR General Tab
In the General tab, configure the desired settings:
SonicPoint Settings
1
Check Enable SonicPoint to enable each SonicPoint automatically when it is provisioned with this profile. This option is selected by default.
2
Optionally, check Retain Settings to have the SonicPoint NDRs provisioned by this profile retain customized settings until system restart or reboot. This option is not selected by default.
If you select this option, Edit becomes active and the Retain Settings window displays. To specify the settings to retain:
1
If you are editing an existing SonicPoint NDR profile, click Edit. The Retain Settings window displays.
2
Click Retain All Settings; all the other options become dimmed.
3
3
Optionally, check Enable RF Monitoring to enable wireless RF Threat Real Time Monitoring and Management. This option is not selected by default.
Enter a prefix for the names of all SonicPoint NDRs connected to this zone in the Name Prefix field. This prefix assists in identifying a SonicPoint NDR on a zone. When each SonicPoint NDR is provisioned, it is given a name that consists of the name prefix and a unique number, for example: SonicPoint NDR 126008.
Select the country where you are operating the SonicPoint NDRs from the Country Code drop-down menu. The country code determines which regulatory domain the radio operation falls under.
4
From the EAPOL Version drop-down menu, select the EAPoL (Extensible Authentication Protocol over LAN) version:
v1: default
v2: select for better security
Virtual Access Point Settings
1
Optionally, select a Virtual Access Point (VAP) group to assign these SonicPoint NDRs to a VAP from the 802.11g Radio 0 Virtual AP Group and 802.11a Radio 1 Virtual AP Group drop-down menus. The drop-down menus allow you to create a new VAP group for each radio VAP. For more information on VAPs, see SonicPoint > Virtual Access Point .
L3 SSL VPN Tunnel Settings
1
In the SSL VPN Server field, enter the IP address of the SSL VPN server.
2
In the User Name field, enter the User Name of the SSL VPN server.
3
In the Password field, enter the Password for the SSL VPN server.
4
In the Domain field, enter the domain that the SSL VPN server is located in.
SonicPoint Administrator Settings
1
In the Name field, enter the user name for the network administrator.
2
In the Password field, enter the password for the network administrator.
3
Click Auto-Reconnect for the SonicPoint to auto-reconnect to the SSL VPN server.
SonicPoint NDR Radio 0 and Radio 1 Tabs
The 802.11n Radio 0 and 802.11n Radio 1 tabs are similar and have only a few differences that are noted in the steps.
NOTE: The sections and options displayed on the 802.11n Radio 0/1 tabs change depending on whether you selected a VAP group in the 802.11n Radio 0/1 Virtual AP Group drop-down menus on the General tab and the mode you select in the Mode drop-down menu. These choices apply only to the radio for which they were selected.
1
Click on the 802.11n Radio 0 tab.
2
Radio 0 Settings and Radio 1 Settings
1
Check Enable Radio to automatically enable the 802.11n radio 0 bands on all SonicPointNs provisioned with this profile. This option is selected by default.
From the Enable Radio drop-down menu, select the schedule for when the802.11n radio is on. You can create your own schedule. The default schedule is Always On. You can create a new schedule by selecting Create new schedule.
2
Select your preferred radio mode from the Mode drop-down menu. The wireless security appliance supports the following modes:
TIP: For 802.11n clients only, for optimal throughput speed solely, Dell SonicWALL recommends the 802.11n Only radio mode. Use the 802.11n/b/g Mixed radio mode for multiple wireless client authentication compatibility.
NOTE: The available 802.11n Radio 0/1 Settings options change depending on the mode selected. If the wireless radio is configured for a mode that:
Supports 802.11n, the following options are displayed: Radio Band, Primary Channel, Secondary Channel, Enable Short Guard Interval, and Enable Aggregation.
Does not support 802.11n, only the Channel option is displayed.
3
Optionally, select Enable DFS Channels to enable the use of Dynamic Frequency Selection (DFS) that allows wireless devices to share the same spectrum with existing radar systems within the 5GHz band.
NOTE: If you select this option, choose either Standard - 2MHz Channel or Wide - 40MHz Channel as the Radio Band. The Primary Channel and Standard Channel drop-down menus then display a choice of available sensitive channels.
NOTE: This option only appears on the 802.11n Radio 0 tab as the 802.11n Radio 1 does not have a wireless speed connection mode of at least 5GHz.
4
In the SSID field, enter a recognizable string for the SSID of each SonicPoint using this profile. This is the name that will appear in clients’ lists of available wireless connections.
5
Does not support 802.11n, select a channel from the Channel drop-down menu.
Auto - Allows the appliance to automatically detect and set the optimal channel for wireless operation based on signal strength and integrity. This is the default setting. Use Auto unless you have a specific reason to use or avoid specific channels.
 
6
7
For 802.11a only: from the Radio Band drop-down menu, select the band for the 802.11n radio:
Auto - Allows the appliance to automatically detect and set the optimal channel for wireless operation based on signal strength and integrity. Both the Primary Channel and Secondary Channel are set to Auto also. This is the default setting. Use Auto unless you have a specific reason to use or avoid specific channels.
Standard - 20MHz Channel—Specifies that the 802.11n radio uses only the standard 20MHz channel. When this option is selected, the Standard Channel drop-down menu is displayed instead of the Primary Channel and Secondary Channel options.
Standard Channel—This drop-down menu only displays when the 20MHz channel is selected. By default, this is set to Auto, which allows the appliance to set the optimal channel based on signal strength and integrity.
Wide - 40 MHz Channel - Specifies that the 802.11n radio will use only the wide 40 MHz channel. When this option is selected, the Primary Channel and Secondary Channel drop-down menus are displayed:
Primary Channel - By default, this is set to Auto. Optionally, you can specify a specific primary channel. The available channels are the same as for 802.11a in Step 5.
Secondary Channel - Always set to Auto regardless of the Primary Channel setting.
8
Select Enable Short Guard Interval to specify a short guard interval of 400ns as opposed to the standard guard interval of 800ns.
A guard interval is a set amount of time between transmissions that is designed to ensure distinct transmissions do not interfere with one another. The guard interval introduces immunity to propagation delays, echoes, and reflections. An AP identifies any signal content received inside this interval as unwanted inter-symbol interference, and rejects that data. The guard interval is a pause in transmission intended to avoid data loss from interference or multipath delays.
The 802.11n standard specifies two guard intervals: 400ns (short) and 800ns (long).
Enabling a short guard interval can decrease network overhead by reducing unnecessary idle time on each AP. A short guard interval of 400 nanoseconds (ns) will work in most office environments as distances between points of reflection, as well as between clients, are short. Most reflections will be received quickly. The shorter the guard interval, the more efficiency there is in the channel usage, but a shorter guard interval also increases the risk of interference
Some outdoor deployments, may, however, require a longer guard interval. The need for a long guard interval of 800 ns becomes more important as areas become larger, such as in warehouses and in outdoor environments, as reflections and echoes become more likely to continue after the short guard interval would be over.
The guard interval is a pause in transmission intended to avoid data loss from interference or multipath delays and increase 802.11n data rate. Ensure the wireless client also can support a short guard interval to avoid compatibility issues.
9
Select Enable Aggregation to enable 802.11n frame aggregation, which combines multiple frames to reduce overhead and increase throughput.
NOTE: This option is not available if 5GHz 802.11a Only or 2.4GHz 802.11g Only mode is selected.
Data over wireless networks are sent as a stream of packets known as data frames. Frame aggregation takes these packets and combines them into fewer, larger packets, thereby allowing an increase in overall performance. Frame aggregation was added to the 802.11n specification to allow for an additional increase in performance. Frame aggregation is a feature that only 802.11n clients can take advantage of as legacy systems will not be able to understand the new format of the larger packets.
Ensure the wireless client can also support aggregation to avoid compatibility issues.
TIP: The Enable Short Guard Interval and Enable aggregation options can slightly improve throughput. They both function best in optimum network conditions where users have strong signals with little interference. In networks that experience less than optimum conditions (interference, weak signals, and so on), these options may introduce transmission errors that eliminate any efficiency gains in throughput.
10
The Enable MIMO option enables/disables MIMO (multiple-input multiple output). Enabling this option increases 802.11n throughput by using multiple-input/multiple-output antennas. This option is enabled by default for all 802.11n modes and is dimmed to ensure it is not disabled. The option is activated and selected by default if 5GHz 802.11a Only or 2.4GHz 802.11g Only mode is selected.
Wireless Security
NOTE: If a VAP was selected in the 802.11n Radio Virtual AP Group drop-down menu on the Settings tab, this section is not available. Instead, the Virtual Access Point Encryption Settings section is displayed. Go to Virtual Access Point Encryption Settings .
The options change depending on the authentication type you select.
The Wireless Security sections of both 802.11n Radio 0 and 802.11n Radio 1 tabs are the same as for the SonicPoint N 802.11n Radio tab. For how to configure the Wireless Security settings, see Wireless Security .
Virtual Access Point Encryption Settings
For information about selecting this option, see Advanced Tab and/or Virtual Access Point Profile Settings , respectively.
NOTE: This section displays only if a VAP was selected from the Radio 0 Basic/1 Virtual AP Group drop-down menus in the Virtual Access Point Settings section of the General tab.
The Virtual Access Point Encryption Settings section of both Radio 0 Basic and Radio 1 Basic tabs are the same as for the SonicPoint N 802.11n Radio tab. For how to configure the Virtual Access Point Encryption Settings settings, see Virtual Access Point Encryption Settings .
ACL Enforcement
The ACL Enforcement section of both Radio 0 Basic and Radio 1 Basic tabs are the same as for the SonicPoint N 802.11n Radio tab. For how to configure the ACL Enforcement settings, see ACL Enforcement .
Remote MAC Address Access Control Settings
NOTE: If a VAP was selected in the 802.11n Radio Virtual AP Group drop-down menu on the Settings tab, this section is not available. Go to SonicPoint NDR Radio 0 Advanced and Radio 1 Advanced Tabs .
The Remote MAC Address Access Control Settings section of both 802.11n Radio 0 and 802.11n Radio 1 tabs are the same as for the SonicPoint N 802.11n Radio tab; see Remote MAC Address Access Control Settings .
IMPORTANT: You cannot enable the Remote MAC address access control option at the same time that the IEEE 802.11i EAP is enabled. If you try to do so, you could receive the following error message:
SonicPoint NDR Radio 0 Advanced and Radio 1 Advanced Tabs
These settings affect the operation of the Radio 0 and Radio 1 Basic radio bands. The SonicPoint has two separate radios built in. Therefore, it can send and receive on both bands at the same time.
NOTE: The Radio 0 Advanced and Radio 1 Advanced tabs are quite similar; the difference is that the Radio 1 Advanced tab has one more option.
1
Click the Radio 0/1 Advanced tab
2
In the Radio 0/1 Advanced tab, configure the performance settings for the 802.11n radio. For most 802.11n advanced options, the default settings give optimum performance.
Hide SSID in Beacon: Check this option to have the SSID send null SSID beacons in place of advertising the wireless SSID name. Sending null SSID beacons forces wireless clients to know the SSID in order to connect. This option is unchecked by default.
Schedule IDS Scan: Select a schedule for the IDS (Intrusion Detection Service) scan from the drop-down menu. Select a time when there are fewer demands on the wireless network to schedule an IDS scan to minimize the inconvenience of dropped wireless connections. You can create your own schedule by selecting Create new schedule or disable the feature by selecting Disabled.
Data Rate: Select the speed at which the data is transmitted and received. Best automatically selects the best rate available in your area given interference and other factors. Or you can manually select a data rate.
Transmit Power: Select the transmission power. Transmission power effects the range of the SonicPoint. You can select: Full Power, Half (-3 dB), Quarter (-6 dB), Eighth (-9 dB), or Minimum.
Antenna Diversity: The Antenna Diversity setting determines which antenna the SonicPoint uses to send and receive data.
Best: This is the default setting. When Best is selected, the SonicPoint automatically selects the antenna with the strongest, clearest signal. In most cases, Best is the optimal setting.
1: Select 1 to restrict the SonicPoint to use antenna 1 only. Facing the rear of the SonicPoint, antenna 1 is on the left, closest to the power supply.
2: Select 2 to restrict the SonicPoint to use antenna 2 only. Facing the rear of the SonicPoint, antenna 2 is on the right, closest to the console port.
Beacon Interval (milliseconds): Enter the number of milliseconds between sending out a wireless SSID beacon. This interval represents the amount of time between beacon transmissions. Before a station enters power-save mode, the station needs the beacon interval to know when to wake up to receive the beacon (and learn whether there are buffered frames at the access point).
The minimum interval is 20 milliseconds, the maximum is 1000, milliseconds and the default is 100 milliseconds.
DTIM Interval: Enter to alert 802.11 power-save-mode clients of incoming multicast packets. The Delivery Traffic Indication Message (DTIM) interval specifies the number of beacon frames to wait before sending a DTIM. The minimum is 1 frame, the maximum is 255 frames, and the default is 1 frame.
Fragmentation Threshold (bytes): Enter the number of bytes of fragmented data you want the network to allow. The fragmentation threshold limits the maximum frame size. This reduces the time required to transmit the frame, and therefore reduces the probability that the frame will be corrupted (at the cost of more data overhead). Fragmented wireless frames increase reliability and throughput in areas with RF interference or poor wireless coverage. Lower threshold numbers produce more fragments. The minimum is 256 bytes, the maximum is 2346 bytes, and the default is 2346 bytes.
RTS Threshold (bytes): Enter the threshold, in bytes, for a packet size at which a request to send (RTS) is sent before packet transmission. Sending an RTS ensures that wireless collisions do not take place in situations where clients are in range of the same access point, but might not be in range of each other.
The minimum value is 256 bytes, the maximum is 2346 bytes, and the default is 2346 bytes. The default value used by many vendors is 2346 bytes. Lower threshold numbers produce more fragments.
Maximum Client Associations: Enter the maximum number of clients you want the SonicPoint to support on this radio at one time. The minimum number is 1 client, the maximum is 128 clients, and the default is 32 clients.
Station Inactivity Timeout (seconds): Enter the number of seconds the station can be inactive before it times out. The minimum time is 60 seconds, the maximum time is 36000 seconds, and the default number is 300 seconds.
Preamble Length: Select the length of the preamble—the initial wireless communication sent when associating with a wireless host. You can select Long or Short.
NOTE: This option is available on the Radio 1 Advanced tab only.
WMM (Wi-Fi Multimedia)—Select whether a WMM profile is to be associated with this profile: Disabled (default) or Create new WMM profile. If you select Create new WMM profile, the Add Wlan WMM Profile window displays. For information about configuring a WMM profile, see Configuring Wi-Fi Multimedia Parameters .
SonicPoint NDR Sensor Tab
In the Sensor tab, you enable or disable Wireless Intrusion Detection and Prevention (WIDP) mode.
1
Select Enable WIDF sensor to have the SonicPoint NDR operate as a dedicated WIDP sensor.
2
From the drop-down menu, select the schedule for when the SonicPoint NDR operates as a WIDP sensor or select Create new schedule… to specify a different time; default is Always on.
Configuring a SonicPointN Profile
For a SonicPoint overview, see SonicPoint > SonicPoints .
You can add any number of SonicPoint profiles. The specifics of the configuration will vary slightly depending on which 802.11 protocols you select.
To configure a SonicPointN provisioning profile, perform the following tasks:
1
Navigate to SonicPoint > SonicPoints page.
2
To add a new SonicPointN profile, click the Add SonicPoint N Profile button under the SonicPointN Provisioning Profiles table. To edit an existing profile, select the profile and click the Configure icon in the same line as the profile you are editing. The Add SonicPointN Profile window displays.
3
SonicPoint N Settings Tab
The Settings tab has these sections:
SonicPoint Settings
1
2
Optionally, check Retain Settings to have the SonicPoint Ns provisioned by this profile retain customized settings until system restart or reboot. This option is not selected by default.
If you select this option, Edit becomes active. To specify the settings to retain:
1
Click Edit. The Retain Settings dialog displays.
2
Click Retain All Settings; all the other options are dimmed.
3
3
Optionally, check Enable RF Monitoring to enable wireless RF Threat Real Time Monitoring and Management. This option is not selected by default.
4
Optionally, check Enable LED (Ni/Ne) to turn SonicPointN LEDs on/off.
5
Enter a prefix for the names of all SonicPointNs connected to this zone in the Name Prefix field. This prefix assists in identifying SonicPoints on a zone. When each SonicPointN is provisioned, it is given a name that consists of the name prefix and a unique number, for example: SonicPoint 126008.
6
Select the country where you are operating the SonicPoint Ns from the Country Code drop-down menu. The country code determines which regulatory domain the radio operation falls under.
7
From the EAPOL Version drop-down menu, select the version of EAPoL (Extensible Authentication Protocol over LAN) to use: v1 or v2. The default is v1, but v2 provides better security.
Virtual Access Point Settings
1
Optionally, from the 802.11n Radio Virtual AP Group drop-down menu, select an 802.11n Virtual Access Point (VAP) group to assign these SonicPoint Ns to a VAP. This drop-down menu allows you to create a new VAP group. For more information on VAPs, see SonicPoint > Virtual Access Point .
L3 SSL VPN Tunnel Settings
1
In the SSL VPN Server field, enter the IP address of the SSL VPN server.
2
In the User Name field, enter the user name of the SSL VPN server.
3
In the Password field, enter the password for the SSL VPN server.
4
In the Domain field, enter the domain that the SSL VPN server is located in.
5
Click Auto-Reconnect for the SonicPoint to auto-reconnect to the SSL VPN server.
NOTE: To configure L3 SSL VPN, click the link to SSL VPN > Client Settings. For information about Layer 3 SSL VPN, refer to SonicPoint Layer 3 Management and SSL VPN > Client Settings .
SonicPoint Administrator Settings
1
In the Name field, enter the user name for the network administrator.
2
In the Password field, enter the password for the network administrator.
SonicPoint N 802.11n Radio Tab
NOTE: The sections and options displayed on the 802.11n Radio tab change depending on whether you selected a VAP group in the 802.11n Radio Virtual AP Group drop-down menu on the Settings tab and the mode you select in the Mode drop-down menu.
1
Click the 802.11n Radio tab.
2
802.11n Radio Settings
1
Check Enable Radio to automatically enable the 802.11n radio bands on all SonicPoints provisioned with this profile. This option is selected by default.
From the Enable Radio drop-down menu, select the schedule for when the802.11n radio is on. The default schedule is Always On. You can create a new schedule by selecting Create new schedule.
2
Select your preferred radio mode from the Mode drop-down menu. The wireless security appliance supports the following modes:
NOTE: The available 801.11n Radio Settings options change depending on the mode selected. If the wireless radio is configured for a mode that:
Supports 802.11n, the following options are displayed: Radio Band, Primary Channel, Secondary Channel.
Does not support 802.11n, only the Channel option is displayed.
Supports 5GHz 802.11n/a, the Enable DFS Channels option is displayed.
2.4GHz 802.11n Only - Allows only 802.11n clients access to your wireless network. 802.11a/b/g clients are unable to connect under this restricted radio mode.
2.4GHz 802.11n/g/b Mixed - Supports 802.11b, 802.11g, and 802.11n clients simultaneously. If your wireless network comprises multiple types of clients, select this mode. This is the default.
TIP: For optimal throughput speed solely for 802.11n clients, SonicWALL recommends the 802.11n Only radio mode. Use the 802.11n/b/g Mixed radio mode for multiple wireless client authentication compatibility.
2.4GHz 802.11g Only - If your wireless network consists only of 802.11g clients, you may select this mode for increased 802.11g performance. You may also select this mode if you wish to prevent 802.11b clients from associating.
5 GHz 802.11n Only - Allows only 802.11n clients access to your wireless network. 802.11a/b/g clients are unable to connect under this restricted radio mode.
5 GHz 802.11n/a Mixed - Supports 802.11n and 802.11a clients simultaneously. If your wireless network comprises both types of clients, select this mode.
5 GHz 802.11a Only - Select this mode if only 802.11a clients access your wireless network.
3
For 5GHz 802.11a/n only: Optionally check Enable DFS Channels. Enabling Dynamic Frequency Selection (DFS) allows wireless devices to share spectrum with existing radar systems in the 5GHz band.
4
In the SSID field, enter a recognizable string for the SSID of each SonicPoint using this profile. This is the name that will appear in clients’ lists of available wireless connections.
5
6
Auto - Allows the appliance to automatically detect and set the optimal channel for wireless operation based on signal strength and integrity. This is the default setting. Use Auto unless you have a specific reason to use or avoid specific channels.
 
7
8
For 802.11n only: From the Radio Band drop-down menu, select the band for the 802.11n radio:
Auto - Allows the appliance to automatically detect and set the optimal channel for wireless operation based on signal strength and integrity. This is the default setting.
The Primary Channel and Secondary Channel drop-down menus are set to Auto and cannot be changed.
Standard - 20 MHz Channel - Specifies that the 802.11n radio will use only the standard 20 MHz channel. When this option is selected, the Channel drop-down menu is displayed instead of the Primary Channel and Secondary Channel drop-down menus.
Standard Channel - By default, this is set to Auto, which allows the appliance to set the optimal channel based on signal strength and integrity. Optionally, you can select a single channel within the range of your regulatory domain. Selecting a specific a channel can also help with avoiding interference with other wireless networks in the area. The available channels are the same as for 802.11g in Step 6.
Wide - 40 MHz Channel - Specifies that the 802.11n radio will use only the wide 40 MHz channel. When this option is selected, the Primary Channel and Secondary Channel drop-down menus are displayed:
Primary Channel - By default, this is set to Auto. Optionally, you can specify a specific primary channel. The available channels are the same as for 802.11a in Step 6
Secondary Channel - The configuration of this drop-down menu is controlled by your selection for the primary channel; if the primary channel is set to:
Auto, the secondary channel is also set to Auto.
9
If you selected 5GHz 802.11a Only or 2.4GHz 802.11g Only mode, go to Step 13
10
Enable Short Guard Interval: Specifies a short guard interval of 400ns as opposed to the standard guard interval of 800ns.
NOTE: This option is not available if 5GHz 802.11a Only or 2.4GHz 802.11g Only mode is selected.
A guard interval is a set amount of time between transmissions that is designed to ensure distinct transmissions do not interfere with one another. The guard interval introduces immunity to propagation delays, echoes, and reflections. An AP identifies any signal content received inside this interval as unwanted inter-symbol interference, and rejects that data. The guard interval is a pause in transmission intended to avoid data loss from interference or multipath delays.
The 802.11n standard specifies two guard intervals: 400ns (short) and 800ns (long).
Enabling a short guard interval can decrease network overhead by reducing unnecessary idle time on each AP. A short guard interval of 400 nanoseconds (ns) will work in most office environments as distances between points of reflection, as well as between clients, are short. Most reflections will be received quickly. The shorter the guard interval, the more efficiency there is in the channel usage, but a shorter guard interval also increases the risk of interference
Some outdoor deployments, may, however, require a longer guard interval. The need for a long guard interval of 800 ns becomes more important as areas become larger, such as in warehouses and in outdoor environments, as reflections and echoes become more likely to continue after the short guard interval would be over.
11
Enable Aggregation: Enables 802.11n frame aggregation, which combines multiple frames to reduce overhead and increase throughput.
NOTE: This option is not available if 5GHz 802.11a Only or 2.4GHz 802.11g Only mode is selected.
Data over wireless networks are sent as a stream of packets known as data frames. Frame aggregation takes these packets and combines them into fewer, larger packets, thereby allowing an increase in overall performance. Frame aggregation was added to the 802.11n specification to allow for an additional increase in performance. Frame aggregation is a feature that only 802.11n clients can take advantage of as legacy systems will not be able to understand the new format of the larger packets.
TIP: The Enable Short Guard Interval and Enable aggregation options can slightly improve throughput. They both function best in optimum network conditions where users have strong signals with little interference. In networks that experience less than optimum conditions (interference, weak signals, and so on), these options may introduce transmission errors that eliminate any efficiency gains in throughput.
12
Selected a VAP from the 802.11n Radio Virtual AP Group drop-down menu in the Virtual Access Point Settings section of the Settings tab, go to Virtual Access Point Encryption Settings .
13
For 802.11a/g only: Select Enable MIMO to enable MIMO (multiple-input multiple output). Enabling this option increases 802.11n throughput by using multiple-input/multiple-output antennas. This option is enabled by default for all 802.11n modes and is dimmed to ensure it is not disabled. The option is activated and selected by default if 5GHz 802.11a Only or 2.4GHz 802.11g Only mode is selected; the option is dimmed if another mode is selected.
Wireless Security
NOTE: If a VAP was selected in the 802.11n Radio Virtual AP Group drop-down menu on the Settings tab, this section is not available. Instead, the Virtual Access Point Encryption Settings section is displayed. Go to Virtual Access Point Settings .
1
In the Wireless Security section, select the method of authentication for your wireless network from the Authentication Type drop-down menu:
WEP - Open System – All options are dimmed; go to ACL Enforcement .
NOTE: For WEP - Both (Open System & Shared Key) and WEP - Shared Key, go to WEP Configuration .
WEP Configuration
WEP (Wired Equivalent Privacy) is a standard for Wi-Fi wireless network security.
A WEP key is a security code system for Wi-Fi networks. WEP keys allow a group of devices on a local network (such as a home network) to exchange encoded messages with each other while hiding the contents of the messages from easy viewing by outsiders.
WEP keys are chosen by a network administrator. When WEP security is enabled on a network, matching WEP keys must be set on Wi-Fi routers and each device connecting over Wi-Fi, for them all to communicate with each other.
1
None – Default for WEP - Both (Open System & Shared Key). If selected, the rest of the options in this section remain dimmed; go to ACL Enforcement .
152 bit - default for WEP - Shared Key
2
From the Default Key drop-down menu, select which key is the default key, that is, the key that is tried first when trying to authenticate a user:
Key 1 (default)
3
From the Key Entry drop-down menu, select whether the key is:
Alphanumeric (default)
4
In the Key 1 - Key 4 fields, enter up to four possible WEP encryptions keys to be used when transferring encrypted wireless traffic. Enter the most likely to be used in the field you selected as the default key:
Key 1: First static WEP key associated with the key index.
Key 2: Second static WEP key associated with the key index.
Key 3: Third static WEP key associated with the key index.
Key 4: Fourth static WEP key associated with the key index.
5
WPA or WPA2 Configuration:
1
From the Cipher Type drop-down menu, select the cipher to encrypt your wireless data:
AES (newer, more secure): AES (Advanced Encryption Standard) is a set of ciphers designed to prevent attacks on wireless networks. AES is available in block ciphers of either 128, 192 or 256 bits depending on the hardware you intend to use with it. In the networking field, AES is considered to be among the most secure of all commonly installed encryption packages.
TKIP (older, more compatible; default): TKIP (Temporary Key Integrity Protocol) is not actually a cipher, but a set of security algorithms meant to improve the overall safety of WEP (wired equivalent privacy networks). WEP is widely known to have a host of serious security vulnerabilities. TKIP adds a few extra layers of protection to WEP.
Auto: the appliance chooses the cipher type automatically.
2
In the Group Key Interval (seconds) field, enter the period for which a Group Key is valid, that is, the time interval before the encryption key is changed automatically for added security. The default value is 86400 seconds (24 hours). Setting too low of a value can cause connection issues.
3
If, from the Authentication Type drop-down menu, you selected:
4
For PSK authentication types only, in the Passphrase field, enter the passphrase your network users must enter to gain network access.
NOTE: This option displays only if you configure WPA-PSK, WPA2-PSK, or WPA2-AUTO-PSK for your authentication type.
5
RADIUS Server Settings
NOTE: This option displays only if you selected WPA-EAP, WPA2-EAP, or WPA2-AUTO-EAP for your authentication type.
1
Click the Configure button. The SonicPoint Radius Server Settings dialog displays.
2
In the Radius Server Retries field, enter the number times, from 1 to 10, the firewall attempts to connect before it fails over to the other Radius server.
3
In the Retry Interval (seconds) field enter the time, from 0 to 60 seconds, to wait between retries. The default number is 0 or no wait between retries.
4
5
Virtual Access Point Encryption Settings
NOTE: This section displays only if a VAP was selected from the 802.11n Radio Virtual AP Group drop-down menu in the Virtual Access Point Settings section of the Settings tab.
1
Click Configure. The Edit 802.11n Virtual Access Point WEP Key window displays.
2
From the Key Entry Method radio buttons, select whether the key is:
Alphanumeric (default)
3
From the Default Key radio buttons, select the default key that is tried first when trying to authenticate a user:
Key 1 (default)
4
In the Key 1 - Key 4 fields, enter up to four possible WEP encryptions keys to be used when transferring encrypted wireless traffic. Enter the most likely to be used in the field you selected as the default key.
Key 1: First static WEP key associated with the key index.
Key 2: Second static WEP key associated with the key index.
Key 3: Third static WEP key associated with the key index.
Key 4: Fourth static WEP key associated with the key index.
5
From the Key Type drop-down menus, select the size of each key:
None (default)
ACL Enforcement
1
Check the Enable MAC Filter List checkbox to enforce Access Control by allowing or denying traffic from specific devices. By default, this option is not selected and the Allow List and Deny List options are dimmed.
2
3
From the Allow List drop-down menu, select a MAC address group to automatically allow traffic from all devices with MAC address in the group:
Create new Mac Address Object Group… – The Add Address Object Group window displays.
NOTE: It is recommended that the Allow List be set to All MAC Addresses.
4
From the Deny List drop-down menu, select a MAC address group from the drop-down menu to automatically deny traffic from all devices with MAC address in the group.
NOTE: The Deny List is enforced before the Allow List.
Create new Mac Address Object Group… – The Add Address Object Group window displays.
NOTE: It is recommended that the Deny List be set to Default SonicPoint ACL Deny Group.
5
Select Enable MIC Failure ACL Blacklist to detect WPA TKIP MIC failure floods and automatically places the problematic wireless station(s) into a blacklist to stop the attack. As wireless clients generate the TKIP countermeasures, they are also moved automatically into blacklist, so the other wireless stations within the same wireless LAN network are not affected.
6
Enter the maximum number of MIC failures per minute in the MIC Failure Frequency Threshold field; default is 3. After the threshold is reached, the source is blacklisted.
NOTE: When a source is blacklisted, it is added to the dynamically created Default SonicPoint ACL Deny Group. You can view this on the Network > Address Objects page.
Remote MAC Address Access Control Settings
IMPORTANT: If a VAP was selected in the 802.11n Radio Virtual AP Group drop-down menu on the Settings tab, this section is not available. Go to SonicPoint N Advanced Tab .
If an EAP authentication type was selected in the Authentication Type drop-down menu, this message is displayed:
Click OK.
1
Check the Enable Remote MAC Access Control checkbox to enforce radio wireless access control based on MAC-based authentication policy in a remote Radius server.
2
Click the Configure button. The SonicPoint Radius Server Settings window displays.
3
In the Radius Server Retries field, enter the number retries allowed for the Radius server.
4
In the Retry Interval (seconds) field enter the time, in seconds, between retries.
5
SonicPoint N Advanced Tab
In the Advanced tab, configure the performance settings for the 802.11n radio. For most 802.11n advanced options, the default settings give optimum performance
1
Click the Advanced tab.
2
Select Hide SSID in Beacon to have the SSID send null SSID beacons in place of advertising the wireless SSID name. Sending null SSID beacons forces wireless clients to know the SSID in order to connect. This option is unchecked by default.
3
From the Schedule IDS Scan drop-down menu, select a schedule for the IDS (Intrusion Detection Service) scan. Select a time when there are fewer demands on the wireless network to schedule an IDS scan to minimize the inconvenience of dropped wireless connections. You can create your own schedule by selecting Create new schedule or disable the feature by selecting Disabled.
4
From the Data Rate: drop-down menu, select the speed at which the data is transmitted and received. Best automatically selects the best rate available in your area given interference and other factors. This is the default.
5
From the Transmit Power drop-down menu, select the transmission power, which affects the range of the SonicPoint:
Full Power (default)
6
From the Antenna Diversity drop-down menu, select Best, the default. The Antenna Diversity setting determines which antenna the SonicPoint uses to send and receive data. When Best is selected, the SonicPoint automatically selects the antenna with the strongest, clearest signal.
Best: This is the default setting. When Best is selected, the SonicPoint automatically selects the antenna with the strongest, clearest signal. In most cases, Best is the optimal setting.
1: Select 1 to restrict the SonicPoint to use antenna 1 only. Facing the rear of the SonicPoint, antenna 1 is on the left, closest to the power supply.
2: Select 2 to restrict the SonicPoint to use antenna 2 only. Facing the rear of the SonicPoint, antenna 2 is on the right, closest to the console port.
7
In the Beacon Interval (milliseconds) field, enter the number of milliseconds between sending out a wireless SSID beacon. This interval represents the amount of time between beacon transmissions. Before a station enters power-save mode, the station needs the beacon interval to know when to wake up to receive the beacon (and learn whether there are buffered frames at the access point).
The minimum interval is 20 milliseconds, the maximum is 1000, milliseconds and the default is 100 milliseconds.
8
In the DTIM Interval field, enter the interval, in milliseconds, between the sending of Delivery Traffic Indication Messages (DTIMs) in the beacon. This interval is the maximum number of beacon cycles before unacknowledged network broadcasts are flushed. When using wireless clients that use power management features to sleep, the client must revive at least once during the DTIM period to receive broadcasts. 802.11 power-save mode clients will be alerted of incoming multicast packets.
The minimum interval is 1 millisecond, the maximum is 255 milliseconds, and the default is 1 millisecond.
9
In the Fragmentation Threshold (bytes) field, enter the number of bytes of fragmented data you want the network to allow. The fragmentation threshold limits the maximum frame size. This reduces the time required to transmit the frame, and therefore reduces the probability that the frame will be corrupted (at the cost of more data overhead). Fragmented wireless frames increase reliability and throughput in areas with RF interference or poor wireless coverage. Lower threshold numbers produce more fragments.
The minimum is 256 bytes, the maximum is 2346 bytes, and the default is 2346 bytes.
10
In the RTS Threshold (bytes) field, enter the number of bytes of the Request to Send (RTS) threshold. The RTS threshold specifies the frame size the transmitter must use. Fragmented wireless frames increase reliability and throughput in areas with RF interference or poor wireless coverage. Wireless clients transmitting frames larger than this threshold must issue Request to Send (RTS) and wait for the AP to respond with Clear to Send (CTS). This option also not only can be used to avoid hidden node problems, but also helps prevent mid-air collisions for wireless clients that are not within wireless peer range and cannot detect when other wireless clients are transmitting or in range of the same access point, but may not in range of each other.
The minimum value is 256 bytes, the maximum is 2346 bytes, and the default is 2346 bytes. The default value used by many vendors is 2346 bytes. Lower threshold numbers produce more fragments.
11
In the Maximum Client Associations field, enter the maximum number of clients you want each SonicPoint using this profile to support on this radio at one time. The minimum number is 1 client, the maximum is 128 clients, and the default is 32 clients.
12
In the Station Inactivity Timeout (seconds) field, enter the maximum length of wireless client inactivity, in seconds, before access points age out the wireless client. The minimum period is 60 seconds, the maximum is 36000 seconds, and the default number is 300 seconds.
13
From the Preamble Length drop-down menu, select the length of the preamble—the initial wireless communication sent when associating with a wireless host: Long or Short.
14
Select the Enable Short Slot Time checkbox to allow clients to disassociate and reassociate more quickly. Slot time is the amount of time a device waits after a collision before retransmitting a packet. A short slot time increases While selecting this option allows clients to disassociate and reassociate more quickly, it also increases throughput on the 802.11n/g wireless band by shortening the time an access point waits before relaying packets to the LAN. This option is not selected by default.
15
From the WMM (Wi-Fi Multimedia) drop-down menu, select whether a WMM profile is to be associated with this profile:
Create new WMM profile. The Add Wlan WMM Profile window displays. For information about configuring a WMM profile, see Configuring Wi-Fi Multimedia Parameters .
16
Select the Do not allow 802.11b Clients to Connect checkbox to limit wireless connections to 802.11g and 802.11n clients only. Select this option if you are using Turbo G mode and, therefore, are not allowing 802.11b clients to connect. This option is not selected by default.
17
SonicPoint N Sensor Tab
In the Sensor tab, you enable or disable Wireless Intrusion Detection and Prevention (WIDP) mode.
1
Check the Enable WIDF checkbox to have the SonicPoint N operate as a dedicated WIDP sensor.