Accton Technology SMC2552WG2 EliteConnect 2.4GHz Wireless Access Point User Manual WA4101X 2 17
Accton Technology Corp EliteConnect 2.4GHz Wireless Access Point WA4101X 2 17
UserManual.wiki
>
Accton Technology
>
SMC2552WG2 User Manual
Users Manual
Navigation menu
Upload a User Manual
Namespaces
Wiki Guide
HTML
PDF
Info
Views
User Manual
Discussion / Help
Navigation
![4-1Chapter 4: Initial ConfigurationThe 2.4 GHz Wireless Access Point offers a variety of management options, including a web-based interface, a direct connection to the console port, Telnet, Secure Shell (SSH), or using SNMP software.The initial configuration steps can be made through the web browser interface or CLI. The access point requests an IP address via DHCP by default. If no response is received from the DHCP server, then the access point uses the default address 192.168.2.2. If this address is not compatible with your network, you can first use the command line interface (CLI) as described below to configure a valid address. Note: Units sold in countries outside the United States are not configured with a specific country code. You must use the CLI to set the country code and enable wireless operation (page 4-3).Initial Setup through the CLIRequired ConnectionsThe access point provides an RS-232 serial port that enables a connection to a PC or terminal for monitoring and configuration. Attach a VT100-compatible terminal, or a PC running a terminal emulation program to the access point. You can use the console cable provided with this package, or use a cable that complies with the wiring assignments shown on page B-3.To connect to the console port, complete the following steps:1. Connect the console cable to the serial port on a terminal, or a PC running terminal emulation software, and tighten the captive retaining screws on the DB-9 connector.2. Connect the other end of the cable to the RS-232 serial port on the access point.3. Make sure the terminal emulation software is set as follows:• Select the appropriate serial port (COM port 1 or 2).• Set the data rate to 9600 baud.• Set the data format to 8 data bits, 1 stop bit, and no parity.• Set flow control to none.• Set the emulation mode to VT100.• When using HyperTerminal, select Terminal keys, not Windows keys.4. Once you have set up the terminal correctly, press the [Enter] key to initiate the console connection. The console login screen will be displayed.](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-41.png)
![System Configuration5-245designated ports. After determining the lowest cost spanning tree, it enables all root ports and designated ports, and disables all other ports. Network packets are therefore only forwarded between root ports and designated ports, eliminating any possible network loops.Once a stable network topology has been established, all bridges listen for Hello BPDUs (Bridge Protocol Data Units) transmitted from the root bridge. If a bridge does not get a Hello BPDU after a predefined interval (Maximum Age), the bridge assumes that the link to the root bridge is down. This bridge will then initiate negotiations with other bridges to reconfigure the network to reestablish a valid network topology.•Bridge – Enables/disables STP on the wireless bridge or repeater. (Default: Disabled)•Bridge Priority – Used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STP root device. However, if all devices have the same priority, the device with the lowest MAC address will then become the root device. (Note that lower numeric values indicate higher priority.)• Range: 0-65535• Default: 32768•Bridge Max Age – The maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure. All device ports (except for designated ports) should receive configuration messages at regular intervals. Any port that ages out STP information (provided in the last configuration message) becomes the designated port for the attached LAN. If it is a root port, a new root port is selected from among the device ports attached to the network. (Range: 6-40 seconds)• Default: 20• Minimum: The higher of 6 or [2 x (Hello Time + 1)].• Maximum: The lower of 40 or [2 x (Forward Delay - 1)]•Bridge Hello Time – Interval (in seconds) at which the root device transmits a configuration message. (Range: 1-10 seconds)• Default: 2• Minimum: 1• Maximum: The lower of 10 or [(Max. Message Age / 2) -1]•Bridge Forwarding Delay – The maximum time (in seconds) this device waits before changing states (i.e., discarding to learning to forwarding). This delay is required because every device must receive information about topology changes before it starts to forward frames. In addition, each port needs time to listen for conflicting information that would make it return to a discarding state; otherwise, temporary data loops might result. (Range: 4-30 seconds)• Default: 15• Minimum: The higher of 4 or [(Max. Message Age / 2) + 1]• Maximum: 30](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-68.png)
![Advanced Configuration5-315CLI Commands for Downloading Software from a TFTP Server – Use the copy tftp file command from the Exec mode and then specify the file type, name, and IP address of the TFTP server. When the download is complete, the dir command can be used to check that the new file is present in the access point file system. To run the new software, use the reset board command to reboot the access point.Enterprise AP#copy tftp file 6-561. Application image2. Config file3. Boot block imageSelect the type of download<1,2,3>: [1]:1TFTP Source file name:img.binTFTP Server IP:192.168.2.29Enterprise AP#dir 6-58File Name Type File Size-------------------------- ---- -----------dflt-img.bin 2 1319939img.bin 2 1629577syscfg 5 17776syscfg_bak 5 17776 262144 byte(s) availableEnterprise AP#reset board 6-10Reboot system now? <y/n>: y](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-75.png)
![Radio Interface5-535CLI Commands for Radio Settings – From the global configuration mode, enter the interface wireless g command to access the 802.11g radio interface. From the 802.11g interface mode, you can access radio settings that apply to all VAP interfaces. Use the turbo command to enable this feature before setting the radio channel with the channel command. Set any other radio setting as required before enabling the VAP interface (with the no shutdown command). To view the current 802.11g radio settings for the VAP interface, use the show interface wireless g [0~7] command as shown on 6-95.Enterprise AP(config)#interface wireless g 6-88Enter Wireless configuration commands, one per line.Enterprise AP(if-wireless g)#super-g 6-104Enterprise AP(if-wireless g)#channel 42 6-97Enterprise AP(if-wireless g)#transmit-power full 6-97Enterprise AP(if-wireless g)#speed 9 6-96Enterprise AP(if-wireless g)#antenna id 0000 6-100Enterprise AP(if-wireless g)#antenna control right 6-99Enterprise AP(if-wireless g)#antenna location indoor 6-101Enterprise AP(if-wireless g)#mic_mode hardware 6-120Enterprise AP(if-wireless g)#super-g 7-104Enterprise AP(if-wireless g)#beacon-interval 150 6-101Enterprise AP(if-wireless g)#beacon-interval 150 6-101Enterprise AP(if-wireless g)#dtim-period 5 6-102Enterprise AP(if-wireless g)#multicast-data-rate 6 6-96Enterprise AP(if-wireless g)#fragmentation-length 512 6-102Enterprise AP(if-wireless g)#rts-threshold 256 6-103Enterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-97.png)
![Radio Interface5-555WPA2 PMKSA Life Time – WPA2 provides fast roaming for authenticated clients by retaining keys and other security settings in a cache for each VAP. In this way, when clients roam back into a VAP they had previously been using, re-authentication is not required. When a WPA2 client is first authenticated, it receives a Pairwise Master Key (PMK) that is used to generate the other keys used for unicast data encryption. This key and other client information form a client Security Association (SA) that the VAP holds in a cache. When the lifetime expires, the security association and keys are deleted from the cache. If the client returns to an access point after the association has been deleted, it will require full re-authentication. (Range: 1-1440 minutes; Default: 720 minutes)CLI Commands for the Configuring the VAPs – From the global configuration mode, enter the interface wireless g command to access the 802.11b/g radio interface. From the 802.11b/g interface mode, you can access radio settings that apply to all VAP interfaces. To access a specific VAP interface (numbered 0 to 7), use the vap command. You can configure a name for each interface using the description command. You can also use the closed-system command to stop sending the SSID in beacon messages. Set any other VAP parameters and radio setting as required before enabling the VAP interface (with the no shutdown command). To view the current 802.11b/g radio settings for the VAP interface, use the show interface wireless g 0 command as shown on 6-95.Configuring Rogue AP DetectionTo configure Rouge AP detection, select the Radio Settings page, and scroll down to the “Rouge AP” section.Enterprise AP(if-wireless g)#vap 0 6-95Enterprise AP(if-wireless g: VAP[0])#description RD-AP#3 6-104Enterprise AP(if-wireless g: VAP[0])#vlan-id 1 6-129Enterprise AP(if-wireless g: VAP[0])#closed-system 6-105Enterprise AP(if-wireless g: VAP[0])#authentication-timeout- interval 30 6-106Enterprise AP(if-wireless g: VAP[0])#association-timeout- interval 20 6-106Enterprise AP(if-wireless g: VAP[0])#max-association 32 6-106Enterprise AP(if-wireless g: VAP[0])#pmksa-lifetime 900 6-121Enterprise AP(if-wireless g: VAP[0])#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-99.png)
![System Configuration5-725Enterprise AP(config)#interface wireless g 6-88Enter Wireless configuration commands, one per line.Enterprise AP(if-wireless g)#key 1 128 ascii abcdeabcdeabc 6-117Enterprise AP(if-wireless g)#vap 0 6-95Enterprise AP(if-wireless g: VAP[0])#no 802.1X 6-65Enterprise AP(if-wireless g: VAP[0])#authentication shared 6-117Enterprise AP(if-wireless g: VAP[0])#encryption 6-116Enterprise AP(if-wireless g: VAP[0])#transmit-key 1 6-118Enterprise AP(if-wireless g: VAP[0])#exitEnterprise AP#show interface wireless g 0 6-108Wireless Interface Information========================================================================----------------Identification------------------------------------------Description : SMC 802.11g Access PointSSID : SMC_G 0Channel : 11 (AUTO)Status : DISABLEDMAC Address : 00:12:cf:05:95:08----------------802.11 Parameters----------------------------------------Radio Mode : b & g mixed modeTransmit Power : FULL (5 dBm)Max Station Data Rate : 54MbpsMulticast Data Rate : 5.5MbpsFragmentation Threshold : 2346 bytesRTS Threshold : 2347 bytesBeacon Interval : 100 TUsAuthentication Timeout Interval : 60 MinsAssociation Timeout Interval : 30 MinsDTIM Interval : 1 beaconPreamble Length : SHORT-OR-LONGMaximum Association : 64 stationsMIC Mode : SoftwareSuper G : DisabledVLAN ID : 1](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-116.png)
![System Configuration5-745CLI Commands for WEP over 802.1X Security – Use the vap command to access each VAP interface to configure the security settings. First set 802.1X to required using the 802.1x command and set the 802.1X key refresh rates. Then, use the authentication command to select open system authentication and the encryption command to enable data encryption. To view the current security settings, use the show interface wireless g 0 command (not shown in example). Wi-Fi Protected Access (WPA)WPA employs a combination of several technologies to provide an enhanced security solution for 802.11 wireless networks. The access point supports the following WPA components and features:IEEE 802.1X and the Extensible Authentication Protocol (EAP): WPA employs 802.1X as its basic framework for user authentication and dynamic key management. The 802.1X client and RADIUS server should use an appropriate EAP type—such as EAP-TLS (Transport Layer Security), EAP-TTLS (Tunneled TLS), or PEAP (Protected EAP)—for strongest authentication. Working together, these protocols provide “mutual authentication” between a client, the access point, and a RADIUS server that prevents users from accidentally joining a rogue network. Only when a RADIUS server has authenticated a user’s credentials will encryption keys be sent to the access point and client.Note: To implement WPA on wireless clients requires a WPA-enabled network card driver and 802.1X client software that supports the EAP authentication type that you want to use. Windows XP provides native WPA support, other systems require additional software.Temporal Key Integrity Protocol (TKIP): WPA specifies TKIP as the data encryption method to replace WEP. TKIP avoids the problems of WEP static keys by dynamically changing data encryption keys. Basically, TKIP starts with a master (temporal) key for each user session and then mathematically generates other keys to encrypt each data packet. TKIP provides further data encryption enhancements by including a message integrity check for each packet and a re-keying mechanism, which periodically changes the master key. Enterprise AP(if-wireless g)#vap 0Enterprise AP(if-wireless g: VAP[0])#802.1X required 6-65Enterprise AP(if-wireless g: VAP[0])#802.1X broadcast-key-refresh-rate 5 6-66Enterprise AP(if-wireless g: VAP[0])#802.1X session-key-refresh-rate 5 6-67Enterprise AP(if-wireless g: VAP[0])#802.1X session-timeout 300 6-67Enterprise AP(if-wireless g: VAP[0])#interface wireless g 6-88Enter Wireless configuration commands, one per line.Enterprise AP(if-wireless g: VAP[0])#authentication open 6-117Enterprise AP(if-wireless g: VAP[0])#encryption 6-116Enterprise AP(if-wireless g: VAP[0])#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-118.png)
![Radio Interface5-795CLI Commands for WPA Using Pre-shared Key Security – Be sure to first disable 802.1X port authentication using the 802.1X command from the configuration mode. Then, from the 802.11g interface configuration mode, use the vap command to access each VAP interface to configure other security settings.From the VAP interface configuration mode, use the authentication command to set the access point to “Open System.” Use the encryption command to enable data encryption. To enable WPA to be required for all clients, use the wpa-clients command. Set the broadcast and multicast key encryption using the multicast-cipher command. Use the wpa-mode command to enable the Pre-shared Key mode. To enter a key value, use the wpa-psk-type command to specify a hexadecimal or alphanumeric key, and then use the wpa-pre-shared-key command to define the key. To view the current security settings, use the show interface wireless g 0 command (not shown in example).Enterprise AP(config)#interface wireless g 6-88Enter Wireless configuration commands, one per line.Enterprise AP(if-wireless g)#vap 0Enterprise AP(if-wireless g: VAP[0])#no 802.1X 6-65Enterprise AP(if-wireless g: VAP[0])#wpa-pre-shared-key passphrase-key agoodsecret 6-121Enterprise AP(if-wireless g: VAP[0])#auth wpa-psk requiredData Encryption is set to Enabled.WPA2 Clients Mode is set to Disabled.WPA Clients Mode is set to Required.WPA Multicast Cipher is set to TKIP.WPA Unicast Cipher can accept TKIP only.WPA Authentication is set to Pre-Shared Key.Enterprise AP(if-wireless g: VAP[0])#Enterprise AP(if-wireless g: VAP[0])#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-123.png)
![System Configuration5-805CLI Commands for WPA Over 802.1X Security – First set 802.1X to required using the 802.1X command and set the 802.1X key refresh rates. Then 802.11g interface configuration mode, use the vap command to access each VAP interface to configure other security settings. From the VAP interface configuration mode, use the authentication command to select open system authentication and the encryption command to enable data encryption. Use the wpa-clients command to set WPA to be required or supported for clients. Use the wpa-mode command to enable WPA dynamic keys over 802.1X. Set the broadcast and multicast key encryption using the multicast-cipher command. To view the current security settings use the show interface wireless g 0 command (not shown in example).Configuring 802.1XIEEE 802.1X is a standard framework for network access control that uses a central RADIUS server for user authentication. This control feature prevents unauthorized access to the network by requiring an 802.1X client application to submit user credentials for authentication. The 802.1X standard uses the Extensible Authentication Protocol (EAP) to pass user credentials (either digital certificates, user names and passwords, or other) from the client to the RADIUS server. Client authentication is then verified on the RADIUS server before the access point grants client access to the network.The 802.1X EAP packets are also used to pass dynamic unicast session keys and static broadcast keys to wireless clients. Session keys are unique to each client and are used to encrypt and correlate traffic passing between a specific client and the access point. You can also enable broadcast key rotation, so the access point provides a dynamic broadcast key and changes it at a specified interval. Enterprise AP(config)#interface wireless g 6-88Enter Wireless configuration commands, one per line.Enterprise AP(if-wireless g)#vap 0Enterprise AP(if-wireless g: VAP[0])#802.required 6-65Enterprise AP(if-wireless g: VAP[0])#802.1X broadcast-key-refresh-rate 5 6-66Enterprise AP(if-wireless g: VAP[0])#802.1X session-key-refresh-rate 5 6-67Enterprise AP(if-wireless g: VAP[0])#802.1X session-timeout 300 6-67Enterprise AP(if-wireless g: VAP[0])#authentication open 6-117Enterprise AP(if-wireless g: VAP[0])#encryption 6-116Enterprise AP(if-wireless g: VAP[0])#wpa-clients required 6-121Enterprise AP(if-wireless g: VAP[0])#multicast-cipher TKIP 6-119Enterprise AP(if-wireless g: VAP[0])#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-124.png)
![System Configuration5-825• 802.1X Reauthentication Refresh Rate: The time period after which a connected client must be re-authenticated. During the re-authentication process of verifying the client’s credentials on the RADIUS server, the client remains connected the network. Only if re-authentication fails is network access blocked. (Range: 0-65535 seconds; Default: 0 means disabled)CLI Commands for 802.1X Authentication – Use the 802.1X supported command from the VAP interface mode to enable 802.1X authentication. Set the session and broadcast key refresh rate, and the re-authentication timeout. To display the current settings, use the show authentication command from the Exec mode.Enterprise AP(if-wireless g: VAP[0])#802.1X supported 6-65Enterprise AP(if-wireless g: VAP[0])#802.1X broadcast-key-refresh-rate 5 6-66Enterprise AP(if-wireless g: VAP[0])#802.1X session-key-refresh-rate 5 6-67Enterprise AP(if-wireless g: VAP[0])#802.1X session-timeout 300 6-67Enterprise AP(if-wireless g: VAP[0])#exitEnterprise AP#show authentication 6-68Authentication Information===========================================================MAC Authentication Server : DISABLEDMAC Auth Session Timeout Value : 0 min802.1x supplicant : DISABLED802.1x supplicant user : EMPTY802.1x supplicant password : EMPTYAddress Filtering : ALLOWEDSystem Default : ALLOW addresses not found in filter table.Filter TableMAC Address Status----------------- ----------00-70-50-cc-99-1a DENIED00-70-50-cc-99-1b ALLOWED=========================================================Enterprise AP#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-126.png)
![System Configuration5-885CLI Commands for Displaying Station Status – To view status of clients currently associated with the access point, use the show station command from the Exec mode.Enterprise AP#show station 6-109Station Table Information===========================================================if-wireless G VAP [0] :802.11g Channel : AutoNo 802.11g Channel Stations.if-wireless G VAP [1] :802.11g Channel : AutoNo 802.11g Channel Stations.....No 802.11g Channel Stations.if-wireless g VAP [7] :802.11g Channel : AutoNo 802.11g Channel Stations.if-wireless G VAP [0] :802.11g Channel : AutoNo 802.11g Channel Stations.if-wireless G VAP [1] :802.11g Channel : AutoNo 802.11g Channel Stations.....No 802.11g Channel Stations.if-wireless G VAP [7] :802.11g Channel : AutoNo 802.11g Channel Stations.===========================================================Enterprise AP#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-132.png)
![Entering Commands6-56Exec CommandsWhen you open a new console session on an access point, the system enters Exec command mode. Only a limited number of the commands are available in this mode. You can access all other commands only from the configuration mode. To access Exec mode, open a new console session with the user name “admin.” The command prompt displays as “Enterprise AP#” for Exec mode. Configuration CommandsConfiguration commands are used to modify access point settings. These commands modify the running configuration and are saved in memory. The configuration commands are organized into four different modes:• Global Configuration (GC) - These commands modify the system level configuration, and include commands such as username and password. • Interface-Ethernet Configuration (IC-E) - These commands modify the Ethernet port configuration, and include command such as dns and ip.• Interface-Wireless Configuration (IC-W) - These commands modify the wireless port configuration of global parameters for the radio, and include commands such as channel and transmit-power.• Interface-Wireless Virtual Access Point Configuration (IC-W-VAP) - These commands modify the wireless port configuration for each VAP, and include commands such as ssid and authentication.To enter the Global Configuration mode, enter the command configure in Exec mode. The system prompt will change to “Enterprise AP(config)#” which gives you access privilege to all Global Configuration commands.To enter Interface mode, you must enter the “interface ethernet,” or “interface wireless g” command while in Global Configuration mode. The system prompt will change to “Enterprise AP(if-ethernet)#,” or Enterprise AP(if-wireless)” indicating that you have access privileges to the associated commands. You can use the end command to return to the Exec mode.Username: adminPassword: [system login password]Enterprise AP#Enterprise AP#configureEnterprise AP(config)#Enterprise AP(config)#interface ethernetEnterprise AP(if-ethernet)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-139.png)
![System Management Commands6-196Example ip https serverUse this command to enable the secure hypertext transfer protocol (HTTPS) over the Secure Socket Layer (SSL), providing secure access (i.e., an encrypted connection) to the access point’s Web interface. Use the no form to disable this function.Syntax ip https serverno ip https serverDefault Setting EnabledCommand Mode Global ConfigurationCommand Usage • Both HTTP and HTTPS service can be enabled independently.• If you enable HTTPS, you must indicate this in the URL: https://device:port_number]• When you start HTTPS, the connection is established in this way:- The client authenticates the server using the server’s digital certificate.- The client and server negotiate a set of security protocols to use for the connection.- The client and server generate session keys for encrypting and decrypting data.• The client and server establish a secure encrypted connection.A padlock icon should appear in the status bar for Internet Explorer 5.x.Example Enterprise AP(config)#ip https port 1234Enterprise AP(config)#Enterprise AP(config)#ip https serverEnterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-153.png)
![Command Line Interface6-206web-redirectUse this command to enable web-based authentication of clients. Use the no form to disable this function.Syntax [no] web-redirectDefault Setting DisabledCommand Mode Global ConfigurationCommand Usage • The web redirect feature is used to support billing for a public access wireless network. After successful association to an access point, a client is “redirected” to an access point login web page as soon as Internet access is attempted. The client is then authenticated by entering a user name and password on the web page. This process allows controlled access for clients without requiring 802.1X or MAC authentication.• Web redirect requires a RADIUS server on the wired network with configured user names and passwords for authentication. The RADIUS server details must also be configured on the access point. (See “show bootfile” on page 6-58.)• Use the show system command to display the current web redirect status.Example Enterprise AP(config)#web-redirectEnterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-154.png)
![Command Line Interface6-226APmgmtUIThis command enables and disables management access to the access point through SNMP, Telnet and web interfaces.Caution: Secure Web (HTTPS) connections are not affected by the UI Management or IP Management settings.SyntaxAPmgmtUI <[SNMP | Telnet | Web] enable | disable>•SNMP - Specifies SNMP management access.•Telnet - Specifies Telnet management access.•Web - Specifies web based management access.-enable/disable - Enables or disables the selected management access method.Default SettingAll enabledCommand ModeGlobal ConfigurationExampleThis example restricts management access to the indicated addresses.show apmagementThis command shows the AP management configuration, including the IP addresses of management stations allowed to access the access point, as well as the interface protocols which are open to management access.Command Mode ExecExampleEnterprise AP(config)#apmgmtui SNMP enableEnterprise AP(config)#Enterprise AP#show apmagementManagement AP Information=================================AP Management IP Mode: Any IPTelnet UI: EnableWEB UI : EnableSNMP UI : Enable==================================Enterprise AP#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-156.png)
![System Management Commands6-276 dot11InterfaceAGFail Enabled dot11InterfaceBFail Enabled dot11StationAssociation Enabled dot11StationAuthentication Enabled dot11StationReAssociation Enabled dot11StationRequestFail Enabled dot1xAuthFail Enabled dot1xAuthNotInitiated Enabled dot1xAuthSuccess Enabled dot1xMacAddrAuthFail Enabled dot1xMacAddrAuthSuccess Enabled iappContextDataSent Enabled iappStationRoamedFrom Enabled iappStationRoamedTo Enabled localMacAddrAuthFail Enabled localMacAddrAuthSuccess Enabled pppLogonFail Enabled sntpServerFail Enabled configFileVersionChanged Enabled radiusServerChanged Enabled systemDown Enabled systemUp Enabled=============================================SNTP Information===========================================================Service State : DisabledSNTP (server 1) IP : 137.92.140.80SNTP (server 2) IP : 192.43.244.18Current Time : 00 : 14, Jan 1st, 1970Time Zone : -5 (BOGOTA, EASTERN, INDIANA)Daylight Saving : Disabled===========================================================Station Table Information===========================================================if-wireless G VAP [0] : 802.11g Channel : AutoNo 802.11g Channel Stations....System Information==============================================================Serial Number : System Up time : 0 days, 0 hours, 16 minutes, 51 secondsSystem Name : SMCSystem Location : System Contact : ContactSystem Country Code : 99 - NO_COUNTRY_SET MAC Address : 00-12-CF-05-B7-84IP Address : 192.168.0.151Subnet Mask : 255.255.255.0Default Gateway : 192.168.0.1VLAN State : DISABLEDManagement VLAN ID(AP): 1IAPP State : ENABLEDDHCP Client : ENABLEDHTTP Server : ENABLEDHTTP Server Port : 80HTTPS Server : ENABLEDHTTPS Server Port : 443Slot Status : Single band(a/g)Boot Rom Version : v3.0.7Software Version : v5.0.0.0](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-161.png)
![System Logging Commands6-296logging onThis command controls logging of error messages; i.e., sending debug or error messages to memory. The no form disables the logging process.Syntax[no] logging onDefault SettingDisabledCommand Mode Global ConfigurationCommand Usage The logging process controls error messages saved to memory. You can use the logging level command to control the type of error messages that are stored in memory. Example logging hostThis command specifies syslog servers host that will receive logging messages. Use the no form to remove syslog server host.Syntaxlogging host <1 | 2 | 3 | 4> <host_name | host_ip_address> [udp_port]no logging host <1 | 2 | 3 | 4>•1 - First syslog server.•2 - Second syslog server.•3 - Third syslog server.•4 - Fourth syslog server.•host_name - The name of a syslog server. (Range: 1-20 characters)•host_ip_address - The IP address of a syslog server.•udp_port - The UDP port used by the syslog server.Default Setting NoneCommand Mode Global ConfigurationEnterprise AP(config)#logging onEnterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-163.png)
![Command Line Interface6-386DHCP Relay CommandsDynamic Host Configuration Protocol (DHCP) can dynamically allocate an IP address and other configuration information to network clients that broadcast a request. To receive the broadcast request, the DHCP server would normally have to be on the same subnet as the client. However, when the access point’s DHCP relay agent is enabled, received client requests can be forwarded directly by the access point to a known DHCP server on another subnet. Responses from the DHCP server are returned to the access point, which then broadcasts them back to clients.dhcp-relay enableThis command enables the access point’s DHCP relay agent. Use the no form to disable the agent.Syntax[no] dhcp-relay enableDefault Setting DisabledCommand Mode Global ConfigurationCommand Usage • For the DHCP relay agent to function, the primary DHCP server must be configured using the dhcp-relay primary command. A secondary DHCP server does not need to be configured, but it is recommended.• If there is no response from the primary DHCP server, and a secondary server has been configured, the agent will then attempt to send DHCP requests to the secondary server.Example Table 6-8. DHCP Relay CommandsCommand Function Mode Pagedhcp-relay enable Enables the DHCP relay agent GC 6-38dhcp-relay Sets the primary and secondary DHCP server address GC 6-39show dhcp-relay Shows current DHCP relay configuration settings Exec 6-39Enterprise AP(config)#dhcp-relay enableEnterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-172.png)
![SNMP Commands6-416snmp-server communityThis command defines the community access string for the Simple Network Management Protocol. Use the no form to remove the specified community string.Syntaxsnmp-server community string [ro | rw]no snmp-server community string•string - Community string that acts like a password and permits access to the SNMP protocol. (Maximum length: 23 characters, case sensitive)•ro - Specifies read-only access. Authorized management stations are only able to retrieve MIB objects. •rw - Specifies read/write access. Authorized management stations are able to both retrieve and modify MIB objects.Default Setting • public - Read-only access. Authorized management stations are only able to retrieve MIB objects.• private - Read/write access. Authorized management stations are able to both retrieve and modify MIB objects.Command Mode Global ConfigurationCommand Usage If you enter a community string without the ro or rw option, the default is read only.Example snmp-server contactThis command sets the system contact string. Use the no form to remove the system contact information.Syntaxsnmp-server contact stringno snmp-server contactstring - String that describes the system contact. (Maximum length: 255 characters)Default Setting NoneEnterprise AP(config)#snmp-server community alpha rwEnterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-175.png)
![Command Line Interface6-486Example snmp-server targetsThis command configures SNMP v3 notification targets. Use the no form to delete an SNMP v3 target.Syntaxsnmp-server targets <target-id> <ip-addr> <sec-name> [version {3}] [udp-port {port-number}] [notification-type {TRAP}]no snmp-server targets <target-id>•target-id - A user-defined name that identifies a receiver of SNMP notifications. (Maximum length: 32 characters)•ip-addr - Specifies the IP address of the management station to receive notifications.•sec-name - The defined SNMP v3 user name that is to receive notifications.•version - The SNMP version of notifications. Currently only version 3 is supported in this command.•udp-port - The UDP port that is used on the receiving management station for notifications.•notification-type - The type of notification that is sent. Currently only TRAP is supported.Default Setting NoneCommand Mode Global ConfigurationCommand Usage • The access point supports up to 10 SNMP v3 target IDs.• The SNMP v3 user name that is specified in the target must first be configured using the snmp-server user command.Example Enterprise AP(config)#snmp-server user User Name<1-32> :chrisGroup Name<1-32> :RWPrivAuthtype(md5,<cr>none):md5Passphrase<8-32>:a good secretPrivacy(des,<cr>none) :desPassphrase<8-32>:a very good secretEnterprise AP(config)#Enterprise AP(config)#snmp-server targets mytraps 192.168.1.33 chrisEnterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-182.png)
![SNMP Commands6-496snmp-server filterThis command configures SNMP v3 notification filters. Use the no form to delete an SNMP v3 filter or remove a subtree from a filter.Syntaxsnmp-server filter <filter-id> <include | exclude> <subtree> [mask {mask}]no snmp-server filter <filter-id> [subtree]•filter-id - A user-defined name that identifies an SNMP v3 notification filter. (Maximum length: 32 characters)•include - Defines a filter type that includes objects in the MIB subtree.•exclude - Defines a filter type that excludes objects in the MIB subtree.•subtree - The part of the MIB subtree that is to be filtered.•mask - An optional hexadecimal value bit mask to define objects in the MIB subtree. Default Setting NoneCommand Mode Global ConfigurationCommand Usage • The access point allows up to 10 notification filters to be created. Each filter can be defined by up to 20 MIB subtree ID entries.• Use the command more than once with the same filter ID to build a filter that includes or excludes multiple MIB objects. Note that the filter entries are applied in the sequence that they are defined.• The MIB subtree must be defined in the form “.1.3.6.1” and always start with a “.”.• The mask is a hexadecimal value with each bit masking the corresponding ID in the MIB subtree. A “1” in the mask indicates an exact match and a “0” indicates a “wild card.” For example, a mask value of 0xFFBF provides a bit mask “1111 1111 1011 1111.” If applied to the subtree 1.3.6.1.2.1.2.2.1.1.23, the zero corresponds to the 10th subtree ID. When there are more subtree IDs than bits in the mask, the mask is padded with ones.Example Enterprise AP(config)#snmp-server filter trapfilter include .1Enterprise AP(config)#snmp-server filter trapfilter exclude .1.3.6.1.2.1.2.2.1.1.23](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-183.png)
![Command Line Interface6-526Example show snmp targetThis command displays the SNMP v3 notification target settings.Syntaxshow snmp targetCommand Mode ExecExample show snmp filterThis command displays the SNMP v3 notification filter settings.Syntaxshow snmp filter [filter-id] •filter-id - A user-defined name that identifies an SNMP v3 notification filter. (Maximum length: 32 characters)Command Mode ExecExample Enterprise AP#show snmp group-assignmentsGroupName :RWPrivUserName :chrisEnterprise AP#Enterprise AP#Enterprise AP#show snmp targetHost ID : mytrapsUser : chrisIP Address : 192.168.1.33UDP Port : 162=============================Enterprise AP#Enterprise AP#show snmp filterFilter: trapfilter Type: include Subtree: iso.3.6.1.2.1.2.2.1 Type: exclude Subtree: iso.3.6.1.2.1.2.2.1.1.23=============================Enterprise AP#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-186.png)
![Flash/File Commands6-576The following example shows how to download a configuration file: deleteThis command deletes a file or image.Syntaxdelete <filename>filename - Name of the configuration file or image name.Default Setting NoneCommand Mode ExecCaution: Beware of deleting application images from flash memory. At least one application image is required in order to boot the access point. If there are multiple image files in flash memory, and the one used to boot the access point is deleted, be sure you first use the bootfile command to update the application image file booted at startup before you reboot the access point.Example This example shows how to delete the test.cfg configuration file from flash memory.Related Commandsbootfile (6-55)dir (6-58)Enterprise AP#copy tftp file1. Application image2. Config file3. Boot block imageSelect the type of download<1,2,3>: [1]:2TFTP Source file name:syscfgTFTP Server IP:192.168.1.19Enterprise AP#Enterprise AP#delete test.cfgAre you sure you wish to delete this file? <y/n>:Enterprise AP#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-191.png)
![RADIUS Client6-596RADIUS ClientRemote Authentication Dial-in User Service (RADIUS) is a logon authentication protocol that uses software running on a central server to control access for RADIUS-aware devices to the network. An authentication server contains a database of credentials, such as users names and passwords, for each wireless client that requires access to the access point.radius-server addressThis command specifies the primary and secondary RADIUS servers. Syntaxradius-server [secondary] address <host_ip_address | host_name>•secondary - Secondary server.•host_ip_address - IP address of server.•host_name - Host name of server. (Range: 1-20 characters)Default Setting NoneTable 6-11. RADIUS ClientCommand Function Mode Pageradius-server address Specifies the RADIUS server GC 6-59radius-server port Sets the RADIUS server network port GC 6-60radius-server key Sets the RADIUS encryption key GC 6-60radius-server retransmit Sets the number of retries GC 6-61radius-server timeout Sets the interval between sending authentication requests GC 6-61radius-server port-accounting Sets the RADIUS Accounting server network port GC 6-62radius-server timeout-interim Sets the interval between transmitting accounting updates to the RADIUS server GC 6-62radius-server radius-mac-format Sets the format for specifying MAC addresses on the RADIUS server GC 6-63radius-server vlan-format Sets the format for specifying VLAN IDs on the RADIUS server GC 6-63show radius Shows the current RADIUS settings Exec 6-64](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-193.png)
![Command Line Interface6-606Command Mode Global ConfigurationExample radius-server portThis command sets the RADIUS server network port. Syntaxradius-server [secondary] port <port_number>•secondary - Secondary server.•port_number - RADIUS server UDP port used for authentication messages. (Range: 1024-65535)Default Setting 1812Command Mode Global ConfigurationExample radius-server keyThis command sets the RADIUS encryption key. Syntax radius-server [secondary] key <key_string>•secondary - Secondary server.•key_string - Encryption key used to authenticate logon access for client. Do not use blank spaces in the string. (Maximum length: 20 characters)Default Setting DEFAULTCommand Mode Global ConfigurationExample Enterprise AP(config)#radius-server address 192.168.1.25Enterprise AP(config)#Enterprise AP(config)#radius-server port 181Enterprise AP(config)#Enterprise AP(config)#radius-server key greenEnterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-194.png)
![RADIUS Client6-616radius-server retransmitThis command sets the number of retries. Syntaxradius-server [secondary] retransmit number_of_retries•secondary - Secondary server.•number_of_retries - Number of times the access point will try to authenticate logon access via the RADIUS server. (Range: 1 - 30)Default Setting 3Command Mode Global ConfigurationExample radius-server timeoutThis command sets the interval between transmitting authentication requests to the RADIUS server. Syntax radius-server [secondary] timeout number_of_seconds•secondary - Secondary server.•number_of_seconds - Number of seconds the access point waits for a reply before resending a request. (Range: 1-60)Default Setting 5Command Mode Global ConfigurationExample Enterprise AP(config)#radius-server retransmit 5Enterprise AP(config)#Enterprise AP(config)#radius-server timeout 10Enterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-195.png)
![Command Line Interface6-626radius-server port-accountingThis command sets the RADIUS Accounting server network port. Syntaxradius-server [secondary] port-accounting <port_number>•secondary - Secondary server. If secondary is not specified, then the access point assumes you are configuring the primary RADIUS server.•port_number - RADIUS Accounting server UDP port used for accounting messages. (Range: 0 or 1024-65535)Default Setting 0 (disabled)Command Mode Global ConfigurationCommand Usage • When the RADIUS Accounting server UDP port is specified, a RADIUS accounting session is automatically started for each user that is successfully authenticated to the access point.Example radius-server timeout-interimThis command sets the interval between transmitting accounting updates to the RADIUS server.Syntax radius-server [secondary] timeout-interim <number_of_seconds>•secondary - Secondary server.•number_of_seconds - Number of seconds the access point waits between transmitting accounting updates. (Range: 60-86400)Default Setting 3600Command Mode Global ConfigurationCommand Usage • The access point sends periodic accounting updates after every interim period until the user logs off and a “stop” message is sent.Enterprise AP(config)#radius-server port-accounting 1813Enterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-196.png)
![Command Line Interface6-726Command ModeGlobal ConfigurationExampleRelated Commands802.1x-supplicant user (6-68)mac-authentication serverThis command sets address filtering to be performed with local or remote options. Use the no form to disable MAC address authentication.Syntaxmac-authentication server [local | remote]•local - Authenticate the MAC address of wireless clients with the local authentication database during 802.11 association.•remote - Authenticate the MAC address of wireless clients with the RADIUS server during 802.1X authentication.DefaultDisabledCommand ModeGlobal ConfigurationExampleRelated Commandsaddress filter entry (6-71)radius-server address (6-59)802.1x-supplicant user (6-68)mac-authentication session-timeoutThis command sets the interval at which associated clients will be re-authenticated with the RADIUS server authentication database. Use the no form to disable reauthentication.Syntaxmac-authentication session-timeout <minutes>minutes - Re-authentication interval. (Range: 0-1440)Enterprise AP(config)#address filter delete 00-70-50-cc-99-1b Enterprise AP(config)#Enterprise AP(config)#mac-authentication server remoteEnterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-206.png)
![Command Line Interface6-746Global ConfigurationCommand UsageThis command can disable wireless-to-wireless communications between clients via the access point. However, it does not affect communications between wireless clients and the wired network.Examplefilter ap-manageThis command prevents wireless clients from accessing the management interface on the access point. Use the no form to disable this filtering.Syntaxfilter ap-manageno filter ap-manageDefaultEnabledCommand ModeGlobal ConfigurationExamplefilter uplink enableThis command enables filtering of MAC addresses from the Ethernet port.Syntax[no] filter uplink enableDefaultDisabledCommand ModeGlobal ConfigurationExampleEnterprise AP(config)#filter local-bridgeEnterprise AP(config)#Enterprise AP(config)#filter AP-manageEnterprise AP(config)#Enterprise AP(config)#filter uplink enableEnterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-208.png)
![WDS Bridge Commands6-816show bridge filter-entryThis command displays current entries in the WDS forwarding table.Command Mode ExecExample show bridge linkThis command displays WDS bridge link and spanning tree settings for specified interfaces.Syntaxshow bridge link <ethernet | wireless <g> [index]>•ethernet - Specifies the Ethernet interface.•wireless - Specifies a wireless interface.-g - The 802.11g radio interface.-index - The index number of a bridge link. (Range: 1 - 6)Command Mode ExecEnterprise AP#show bridge filter-entrymax entry numbers =512current entry nums =13**************************************************************************************************** Bridge MAC Addr Table ************************************************************************************************************| MAC | Port |Fwd_type| VlanID|origin life|remain Life| Type | 01 80 c2 00 00 00 0 5 4095 300 300 Static 01 80 c2 00 00 03 0 5 4095 300 300 Static 00 30 f1 f0 9b 20 1 0 1 300 300 Static 00 30 f1 f0 9b 21 1 0 1 300 300 Static 00 30 f1 f0 9b 22 1 0 1 300 300 Static 00 30 f1 f0 9b 23 1 0 1 300 300 Static 00 30 f1 f0 9b 24 1 0 1 300 300 Static 00 30 f1 f0 9b 25 1 0 1 300 300 Static 00 30 f1 f0 9b 26 1 0 1 300 300 Static 00 30 f1 f0 9b 27 1 0 1 300 300 Static 00 30 f1 2f be 30 1 3 0 300 175 Dynamic 00 30 f1 f0 9a 9c 1 0 1 300 300 Static ff ff ff ff ff ff 0 4 4095 300 300 StaticEnterprise AP#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-215.png)
![Command Line Interface6-846bridge stp forwarding-delayUse this command to configure the spanning tree bridge forward time globally for the wireless bridge. Use the no form to restore the default.Syntax bridge stp forwarding-delay <seconds>no bridge stp forwarding-delayseconds - Time in seconds. (Range: 4 - 30 seconds)The minimum value is the higher of 4 or [(max-age / 2) + 1]. Default Setting 15 secondsCommand Mode Global ConfigurationCommand Usage This command sets the maximum time (in seconds) the root device will wait before changing states (i.e., discarding to learning to forwarding). This delay is required because every device must receive information about topology changes before it starts to forward frames. In addition, each port needs time to listen for conflicting information that would make it return to the discarding state; otherwise, temporary data loops might result.Example bridge stp hello-timeUse this command to configure the spanning tree bridge hello time globally for the wireless bridge. Use the no form to restore the default.Syntax bridge stp hello-time <time>no bridge stp hello-timetime - Time in seconds. (Range: 1-10 seconds). The maximum value is the lower of 10 or [(max-age / 2) -1]. Default Setting 2 secondsCommand Mode Global ConfigurationCommand Usage This command sets the time interval (in seconds) at which the root device transmits a configuration message.Enterprise AP(config)#bridge stp forwarding-delay 20Enterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-218.png)
![Spanning Tree Commands6-856Example bridge stp max-ageUse this command to configure the spanning tree bridge maximum age globally for the wireless bridge. Use the no form to restore the default.Syntax bridge stp max-age <seconds>no bridge stp max-ageseconds - Time in seconds. (Range: 6-40 seconds)The minimum value is the higher of 6 or [2 x (hello-time + 1)].The maximum value is the lower of 40 or [2 x (forward-time - 1)].Default Setting 20 secondsCommand Mode Global ConfigurationCommand Usage This command sets the maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure. All device ports (except for designated ports) should receive configuration messages at regular intervals. Any port that ages out STP information (provided in the last configuration message) becomes the designated port for the attached LAN. If it is a root port, a new root port is selected from among the device ports attached to the network.Example bridge stp priorityUse this command to configure the spanning tree priority globally for the wireless bridge. Use the no form to restore the default.Syntax bridge stp priority<priority>no bridge stp prioritypriority - Priority of the bridge. (Range: 0 - 65535) Default Setting 32768Enterprise AP(config)#bridge stp hello-time 5Enterprise AP(config)#Enterprise AP(config)#bridge stp max-age 40Enterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-219.png)
![Command Line Interface6-926shutdown This command disables the Ethernet interface. To restart a disabled interface, use the no form.Syntax shutdownno shutdownDefault Setting Interface enabledCommand Mode Interface Configuration (Ethernet)Command Usage This command allows you to disable the Ethernet port due to abnormal behavior (e.g., excessive collisions), and reenable it after the problem has been resolved. You may also want to disable the Ethernet port for security reasons. Example The following example disables the Ethernet port.show interface ethernetThis command displays the status for the Ethernet interface.Syntaxshow interface [ethernet]Default Setting Ethernet interfaceCommand Mode ExecEnterprise AP(if-ethernet)#shutdownEnterprise AP(if-ethernet)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-226.png)
![Wireless Interface Commands6-956interface wirelessThis command enters wireless interface configuration mode.Syntaxinterface wireless <g>•g - 802.11g radio interface.Default Setting NoneCommand Mode Global Configuration Example To specify the 802.11g interface, enter the following command:vapThis command provides access to the VAP (Virtual Access Point) interface configuration mode.Syntaxvap <vap-id>vap-id - The number that identifies the VAP interface. (Options: 0-7)Default Setting NoneCommand Mode Interface Configuration (Wireless)ExampleEnterprise AP(config)#interface wireless gEnterprise AP(if-wireless g)#Enterprise AP(if-wireless g)#vap 0Enterprise AP(if-wireless g: VAP[0])#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-229.png)
![Wireless Interface Commands6-996ExamplepreambleThis command sets the length of the signal preamble that is used at the start of a 802.11b/g data transmission.Syntaxpreamble [long | short]•long - Sets the preamble to long (192 microseconds).•short - Sets the preamble to short (96 microseconds).Default SettingShort-or-LongCommand ModeInterface Configuration (Wireless - 802.11b/g)Command Usage• Using a short preamble instead of a long preamble can increase data throughput on the access point, but requires that all clients can support a short preamble.• Set the preamble to long to ensure the access point can support all 802.11b and 802.11g clients.Exampleantenna controlThis command selects the use of two diversity antennas or a single antenna for the radio interface.Note: This access point does not support the use of optional external antennas.Syntaxantenna control <diversity | left | right>•diversity - The radio uses both antennas in a diversity system. Select this method when the Antenna ID is set to “Default Antenna” to use the access point's integrated antennas.•left - The radio only uses the antenna on the left side (the side farthest from the access point LEDs).•right - The radio only uses the antenna on the right side (the side closest to the access point LEDs).Enterprise AP(if-wireless g)#radio-mode gEnterprise AP(if-wireless g)#Enterprise AP(if-wireless g)#preamble shortEnterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-233.png)
![Command Line Interface6-1046CTS frame to notify the sending station that it can start sending data. • Access points contending for the wireless medium may not be aware of each other. The RTS/CTS mechanism can solve this “Hidden Node” problem.Examplesuper-g This command enables Atheros proprietary Super G performance enhancements. Use the no form to disable this function.Syntax[no] super-g Default Setting DisabledCommand Mode Interface Configuration (Wireless - 802.11g)Command Usage These enhancements include bursting, compression, fast frames and dynamic turbo. Maximum throughput ranges between 40 to 60 Mbps for connections to Atheros-compatible clients.Exampledescription This command adds a description to a the wireless interface. Use the no form to remove the description.Syntaxdescription <string>no descriptionstring - Comment or a description for this interface. (Range: 1-80 characters)Default Setting NoneCommand Mode Interface Configuration (Wireless-VAP)Enterprise AP(if-wireless g)#rts-threshold 256Enterprise AP(if-wireless g)#Enterprise AP(if-wireless g)#super gEnterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-238.png)
![Wireless Interface Commands6-1056ExamplessidThis command configures the service set identifier (SSID). Syntaxssid <string>string - The name of a basic service set supported by the access point. (Range: 1 - 32 characters)Default Setting 802.11g Radio: SMC_VAP_11G0 (0 to 7)Command Mode Interface Configuration (Wireless-VAP)Command Usage Clients that want to connect to the wireless network via an access point must set their SSIDs to the same as that of the access point.Exampleclosed-systemThis command prohibits access to clients without a pre-configured SSID. Use the no form to disable this feature.Syntaxclosed-system no closed-systemDefault Setting DisabledCommand Mode Interface Configuration (Wireless-VAP)Command Usage When closed system is enabled, the access point will not include its SSID in beacon messages. Nor will it respond to probe requests from clients that do not include a fixed SSID.Enterprise AP(if-wireless g: VAP[0])#description RD-AP#3Enterprise AP(if-wireless g: VAP[0])#Enterprise AP(if-wireless g: VAP[0])#ssid RD-AP#3Enterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-239.png)
![Command Line Interface6-1066Examplemax-association This command configures the maximum number of clients that can be associated with the access point at the same time.Syntaxmax-association <count>count - Maximum number of associated stations. (Range: 0-64)Default Setting 64Command Mode Interface Configuration (Wireless-VAP)Example assoc-timeout-intervalThis command configures the idle time interval (when no frames are sent) after which the client is disassociated from the VAP interface.Syntaxassoc-timeout-interval <minutes>minutes - The number of minutes of inactivity before disassociation. (Range: 5-60)Default Setting 30Command Mode Interface Configuration (Wireless-VAP)Exampleauth-timeout-valueThis command configures the time interval within which clients must complete authentication to the VAP interface.Enterprise AP(if-wireless g: VAP[0])#closed-systemEnterprise AP(if-wireless g)#Enterprise AP(if-wireless g: VAP[0])#max-association 32Enterprise AP(if-wireless g)#Enterprise AP(if-wireless g: VAP[0])#association-timeout-interval 20Enterprise AP(if-wireless g: VAP[0])#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-240.png)
![Wireless Interface Commands6-1076Syntaxauth-timeout-value <minutes>minutes - The number of minutes before re-authentication. (Range: 5-60)Default Setting 60Command Mode Interface Configuration (Wireless-VAP)Exampleshutdown This command disables the wireless interface. Use the no form to restart the interface.Syntax shutdownno shutdownDefault Setting Interface enabledCommand Mode Interface Configuration (Wireless-VAP)Command UsageYou must first enable VAP interface 0 before you can enable VAP interfaces 1, 2, 3, 4, 5, 6, or 7.Example Enterprise AP(if-wireless g: VAP[0])#auth-timeout-value 40Enterprise AP(if-wireless g: VAP[0])#Enterprise AP(if-wireless g: VAP[0])#shutdownEnterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-241.png)
![Rogue AP Detection Commands6-1096show stationThis command shows the wireless clients associated with the access point.Command Mode ExecExample Rogue AP Detection CommandsA “rogue AP” is either an access point that is not authorized to participate in the wireless network, or an access point that does not have the correct security configuration. Rogue APs can potentially allow unauthorized users access to the network. Alternatively, client stations may mistakenly associate to a rogue AP and be prevented from accessing network resources. Rogue APs may also cause radio interference and degrade the wireless LAN performance.The access point can be configured to periodically scan all radio channels and find other access points within range. A database of nearby access points is maintained where any rogue APs can be identified.Enterprise AP#show stationStation Table Information========================================================if-wireless G VAP [1] :802.11g Channel : 1No 802.11g Channel Stations....Enterprise AP#Table 6-18. Rogue AP Detection CommandsCommand Function Mode Pagerogue-ap enable Enables the periodic detection of other nearby access points GC 6-110rogue-ap authenticate Enables identification of all access points GC 6-111rogue-ap duration Sets the duration that all channels are scanned GC 6-111rogue-ap interval Sets the time between each scan GC 6-112rogue-ap scan Forces an immediate scan of all radio channels GC 6-112show rogue-ap Shows the current database of detected access points Exec 6-113](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-243.png)
![Command Line Interface6-1106rogue-ap enableThis command enables the periodic detection of nearby access points. Use the no form to disable periodic detection.Syntax[no] rogue-ap enableDefault SettingDisabledCommand Mode Interface Configuration (Wireless)Command Usage • While the access point scans a channel for rogue APs, wireless clients will not be able to connect to the access point. Therefore, avoid frequent scanning or scans of a long duration unless there is a reason to believe that more intensive scanning is required to find a rogue AP.• A “rogue AP” is either an access point that is not authorized to participate in the wireless network, or an access point that does not have the correct security configuration. Rogue access points can be identified by unknown BSSID (MAC address) or SSID configuration. A database of nearby access points should therefore be maintained on a RADIUS server, allowing any rogue APs to be identified (see “rogue-ap authenticate” on page 6-111). The rogue AP database can be viewed using the show rogue-ap command.• The access point sends Syslog messages for each detected access point during a rogue AP scan.](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-244.png)
![Rogue AP Detection Commands6-1116Example rogue-ap authenticateThis command forces the unit to authenticate all access points on the network. Use the no form to disable this function.Syntax[no] rogue-ap authenticateDefault SettingDisabledCommand Mode Interface Configuration (Wireless)Command Usage Enabling authentication in conjunction with a database of approved access points stored on a RADIUS server allows the access point to discover rogue APs. With authentication enabled and a configure RADIUS server, the access point checks the MAC address/Basic Service Set Identifier (BSSID) of each access point that it finds against a RADIUS server to determine whether the access point is allowed. With authentication disabled, the access point can identify its neighboring access points only; it cannot identify whether the access points are allowed or are rogues. If you enable authentication, you should also configure a RADIUS server for this access point (see “RADIUS” on page 5-7).Example rogue-ap durationThis command sets the scan duration for detecting access points.Syntaxrogue-ap duration <milliseconds>milliseconds - The duration of the scan. (Range: 100-1000 milliseconds)Enterprise AP(if-wireless g)#rogue-ap enableconfigure either syslog or trap or both to receive the rogue APs detected.Enterprise AP(if-wireless g)#Enterprise AP(if-wireless g)#rogue-ap authenticateEnterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-245.png)
![Command Line Interface6-1166association request to the access point. For mixed-mode operation, the cipher used for broadcast frames is always TKIP. WEP encryption is not allowed.• The “required” option places the VAP into TKIP only mode. The “supported” option places the VAP into TKIP+AES+WEP mode. The “required” mode is used in WPA-only environments. • The “supported” mode can be used for mixed environments with legacy WPA products, specifically WEP. (For example, WPA+WEP. The WPA2+WEP environment is not available because WPA2 does not support WEP). To place the VAP into AES only mode, use “required” and then select the “cipher-ccmp” option for the cipher-suite command.ExampleRelated Commandsencryption (6-116)key (6-117)encryption This command enables data encryption for wireless communications. Use the no form to disable data encryption.Syntaxencryptionno encryptionDefault Setting disabledCommand Mode Interface Configuration (Wireless-VAP)Command Usage • Wired Equivalent Privacy (WEP) is implemented in this device to prevent unauthorized access to your wireless network. For more secure data transmissions, enable encryption with this command, and set at least one static WEP key with the key command. • The WEP settings must be the same on each client in your wireless network.• Note that WEP protects data transmitted between wireless nodes, but does not protect any transmissions over your wired network or over the Internet.• You must enable data encryption in order to enable all types of encryption (WEP, TKIP, and AES-CCMP) in the access point. Enterprise AP(if-wireless g: VAP[0])#auth shared-keyEnterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-250.png)
![Wireless Security Commands6-1176ExampleRelated Commandskey (6-117)key This command sets the keys used for WEP encryption. Use the no form to delete a configured key.Syntaxkey <index> <size> <type> <value>no key index•index - Key index. (Range: 1-4)•size - Key size. (Options: 64, 128, or 152 bits)•type - Input format. (Options: ASCII, HEX)•value - The key string.- For 64-bit keys, use 5 alphanumeric characters or 10 hexadecimal digits.- For 128-bit keys, use 13 alphanumeric characters or 26 hexadecimal digits.- For 152-bit keys, use 16 alphanumeric characters or 32 hexadecimal digits.Default Setting NoneCommand Mode Interface Configuration (Wireless)Command Usage • To enable Wired Equivalent Privacy (WEP), use the auth shared-key command to select the “shared key” authentication type, use the encryption command to enable data encryption, use the key command to configure at least one key, and use the transmit-key command to assign a key to one of the VAP interfaces.• If you enable Wi-Fi Protected Access (WPA/WPA2) with a pre-shared key option, use the encryption command to enable data encryption, use the key command to configure at least one key, and use the transmit-key command to assign a key to one of the VAP interfaces.• If WEP or WPA/WPA2 with a pre-shared key option is enabled, all wireless clients must be configured with the same shared keys to communicate with the access point.Enterprise AP(if-wireless g: VAP[0])#encryptionEnterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-251.png)
![Command Line Interface6-1186• The encryption index, length and type configured in the access point must match those configured in the clients.ExampleRelated Commandskey (6-117)encryption (6-116)transmit-key (6-118)transmit-keyThis command sets the index of the key to be used for encrypting data frames for broadcast or multicast traffic transmitted from the VAP to wireless clients.Syntaxtransmit-key <index>index - Key index. (Range: 1-4)Default Setting 1Command Mode Interface Configuration (Wireless-VAP)Command Usage • If you use WEP key encryption or WPA/WPA2 with a pre-shared key option, the access point uses the transmit key to encrypt multicast and broadcast data signals that it sends to client devices. Other keys can be used for decryption of data from clients.• When using IEEE 802.1X, the access point uses a dynamic key to encrypt unicast and broadcast messages to 802.1X-enabled clients. However, because the access point sends the keys during the 802.1X authentication process, these keys do not have to appear in the client’s key list.• In a mixed-mode environment with clients using static keys and WPA, select transmit key index 2, 3, or 4. The access point uses transmit key index 1 for the generation of dynamic keys.Example Enterprise AP(if-wireless g)#key 1 64 hex 1234512345Enterprise AP(if-wireless g)#key 2 128 ascii asdeipadjsipdEnterprise AP(if-wireless g)#key 3 64 hex 12345123451234512345123456Enterprise AP(if-wireless g)#Enterprise AP(if-wireless g: VAP[0])#transmit-key 2Enterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-252.png)
![Command Line Interface6-1206• AES-CCMP (Advanced Encryption Standard Counter-Mode/CBCMAC Protocol): WPA2 is backward compatible with WPA, including the same 802.1X and PSK modes of operation and support for TKIP encryption. The main enhancement is its use of AES Counter-Mode encryption with Cipher Block Chaining Message Authentication Code (CBC-MAC) for message integrity. The AES Counter-Mode/CBCMAC Protocol (AES-CCMP) provides extremely robust data confidentiality using a 128-bit key. The AES-CCMP encryption cipher is specified as a standard requirement for WPA2. However, the computational intensive operations of AES-CCMP requires hardware support on client devices. Therefore to implement WPA2 in the network, wireless clients must be upgraded to WPA2-compliant hardware.Example mic_mode This command specifies how to calculate the Message Integrity Check (MIC). Syntaxmic_mode <hardware | software>•hardware - Uses hardware to calculate the MIC.•software - Uses software to calculate the MIC.Default Setting softwareCommand Mode Interface Configuration (Wireless)Command Usage • The Michael Integrity Check (MIC) is part of the Temporal Key Integrity Protocol (TKIP) encryption used in Wi-Fi Protected Access (WPA) security. The MIC calculation is performed in the access point for each transmitted packet and this can impact throughput and performance. The access point supports a choice of hardware or software for MIC calculation. The performance of the access point can be improved by selecting the best method for the specific deployment. • Using the “hardware” option provides best performance when the number of supported clients is less than 27. • Using the “software” option provides the best performance for a large number of clients on one radio interface. Throughput may be reduced when interfaces are supporting a high number of clients simultaneously.Enterprise AP(if-wireless g: VAP[0])#multicast-cipher TKIPEnterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-254.png)
![Wireless Security Commands6-1216Example wpa-pre-shared-key This command defines a Wi-Fi Protected Access (WPA/WPA2) preshared-key.Syntaxwpa-pre-shared-key <hex | passphrase-key> <value>•hex - Specifies hexadecimal digits as the key input format.•passphrase-key - Specifies an ASCII pass-phrase string as the key input format.•value - The key string. For ASCII input, specify a string between 8 and 63 characters. For HEX input, specify exactly 64 digits.Command Mode Interface Configuration (Wireless-VAP)Command Usage • To support WPA or WPA2 for client authentication, use the auth command to specify the authentication type, and use the wpa-preshared-key command to specify one static key.• If WPA or WPA2 is used with pre-shared-key mode, all wireless clients must be configured with the same pre-shared key to communicate with the access point’s VAP interface.Example Related Commandsauth (6-114)pmksa-lifetime This command sets the time for aging out cached WPA2 Pairwise Master Key Security Association (PMKSA) information for fast roaming.Syntaxpmksa-lifetime <minutes>minutes - The time for aging out PMKSA information. (Range: 0 - 14400 minutes)Default Setting 720 minutesEnterprise AP(if-wireless g)#mic_mode hardwareEnterprise AP(if-wireless g)#Enterprise AP(if-wireless g: VAP[0])#wpa-pre-shared-key ASCII agoodsecretEnterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-255.png)
![Command Line Interface6-1226Command Mode Interface Configuration (Wireless-VAP)Command Usage • WPA2 provides fast roaming for authenticated clients by retaining keys and other security information in a cache, so that if a client roams away from an access point and then returns reauthentication is not required. • When a WPA2 client is first authenticated, it receives a Pairwise Master Key (PMK) that is used to generate other keys for unicast data encryption. This key and other client information form a Security Association that the access point names and holds in a cache. The lifetime of this security association can be configured with this command. When the lifetime expires, the client security association and keys are deleted from the cache. If the client returns to the access point, it requires full reauthentication.• The access point can store up to 256 entries in the PMKSA cache. Example pre-authentication This command enables WPA2 pre-authentication for fast secure roaming.Syntaxpre-authentication <enable | disable>•enable - Enables pre-authentication for the VAP interface. •disable - Disables pre-authentication for the VAP interface.Default Setting DisabledCommand Mode Interface Configuration (Wireless-VAP)Command Usage • Each time a client roams to another access point it has to be fully re-authenticated. This authentication process is time consuming and can disrupt applications running over the network. WPA2 includes a mechanism, known as pre-authentication, that allows clients to roam to a new access point and be quickly associated. The first time a client is authenticated to a wireless network it has to be fully authenticated. When the client is about to roam to another access point in the network, the access point sends pre-authentication messages to the new access point that include the client’s security association information. Then when the client sends an association request to the new access point the client is Enterprise AP(if-wireless g: VAP[0])#wpa-pre-shared-key ASCII agoodsecretEnterprise AP(if-wireless g: VAP[0])#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-256.png)
![Link Integrity Commands6-1236known to be already authenticated, so it proceeds directly to key exchange and association.• To support pre-authentication, both clients and access points in the network must be WPA2 enabled.• Pre-authentication requires all access points in the network to be on the same IP subnet.Example Link Integrity CommandsThe access point provides a link integrity feature that can be used to ensure that wireless clients are connected to resources on the wired network. The access point does this by periodically sending Ping messages to a host device in the wired Ethernet network. If the access point detects that the connection to the host has failed, it disables the radio interfaces, forcing clients to find and associate with another access point. When the connection to the host is restored, the access point re-enables the radio interfaces.Enterprise AP(if-wireless g: VAP[0])#wpa-pre-shared-key ASCII agoodsecretEnterprise AP(if-wireless g: VAP[0])#Table 6-20. Link Integrity CommandsCommand Function Mode Pagelink-integrity ping-detect Enables link integrity detection GC 6-124link-integrity ping-host Specifies the IP address of a host device in the wired network GC 6-124link-integrity ping-interval Specifies the time between each Ping sent to the link host GC 6-125link-integrity ping-fail-retry Specifies the number of consecutive failed Ping counts before the link is determined as lost GC 6-125link-integrity ethernet-detect Enables integrity check for Ethernet link GC 6-125show link-integrity Displays the current link integrity configuration Exec 6-126](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-257.png)
![Command Line Interface6-1246link-integrity ping-detectThis command enables link integrity detection. Use the no form to disable link integrity detection.Syntax[no] link-integrity ping-detectDefault SettingDisabledCommand Mode Global ConfigurationCommand Usage • When link integrity is enabled, the IP address of a host device in the wired network must be specified.• The access point periodically sends an ICMP echo request (Ping) packet to the link host IP address. When the number of failed responses (either the host does not respond or is unreachable) exceeds the limit set by the link-integrity ping-fail-retry command, the link is determined as lost.Example link-integrity ping-hostThis command configures the link host name or IP address. Use the no form to remove the host setting.Syntaxlink-integrity ping-host <host_name | ip_address>no link-integrity ping-host•host_name - Alias of the host. •ip_address - IP address of the host.Default SettingNoneCommand Mode Global ConfigurationExample Enterprise AP(config)#link-integrity ping-detectEnterprise AP(config)#Enterprise AP(config)#link-integrity ping-host 192.168.1.10Enterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-258.png)
![Link Integrity Commands6-1256link-integrity ping-intervalThis command configures the time between each Ping sent to the link host. Syntaxlink-integrity ping-interval <interval>interval - The time between Pings. (Range: 5 - 60 seconds)Default Setting30 secondsCommand Mode Global ConfigurationExample link-integrity ping-fail-retryThis command configures the number of consecutive failed Ping counts before the link is determined as lost.Syntaxlink-integrity ping-fail-retry <counts>counts - The number of failed Ping counts before the link is determined as lost. (Range: 1 - 10)Default Setting6Command Mode Global ConfigurationExample link-integrity ethernet-detectThis command enables an integrity check to determine whether or not the access point is connected to the wired Ethernet.Syntax[no] link-integrity ethernet-detectDefault SettingDISAEnterprise AP(config)#link-integrity ping-interval 20Enterprise AP(config)#Enterprise AP(config)#link-integrity ping-fail-retry 10Enterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-259.png)
![IAPP Commands6-1276IAPP CommandsThe command described in this section enables the protocol signaling required to ensure the successful handover of wireless clients roaming between different 802.11f-compliant access points. In other words, the 802.11f protocol can ensure successful roaming between access points in a multi-vendor environment.iappThis command enables the protocol signaling required to hand over wireless clients roaming between different 802.11f-compliant access points. Use the no form to disable 802.11f signaling.Syntax[no] iappDefaultEnabledCommand ModeGlobal ConfigurationCommand UsageThe current 802.11 standard does not specify the signaling required between access points in order to support clients roaming from one access point to another. In particular, this can create a problem for clients roaming between access points from different vendors. This command is used to enable or disable 802.11f handover signaling between different access points, especially in a multi-vendor environment.ExampleEnterprise AP(config)#iappEnterprise AP(config)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-261.png)
![Command Line Interface6-1286VLAN CommandsThe access point can enable the support of VLAN-tagged traffic passing between wireless clients and the wired network. Up to 64 VLAN IDs can be mapped to specific wireless clients, allowing users to remain within the same VLAN as they move around a campus site.When VLAN is enabled on the access point, a VLAN ID (a number between 1 and 4094) can be assigned to each client after successful authentication using IEEE 802.1X and a central RADIUS server. The user VLAN IDs must be configured on the RADIUS server for each user authorized to access the network. If a user does not have a configured VLAN ID, the access point assigns the user to its own configured native VLAN ID.Caution: When VLANs are enabled, the access point’s Ethernet port drops all received traffic that does not include a VLAN tag. To maintain network connectivity to the access point and wireless clients, be sure that the access point is connected to a device port on a wired network that supports IEEE 802.1Q VLAN tags.The VLAN commands supported by the access point are listed below. vlanThis command enables VLANs for all traffic. Use the no form to disable VLANs.Syntax[no] vlan enable DefaultDisabledCommand ModeGlobal ConfigurationCommand Description• When VLANs are enabled, the access point tags frames received from wireless clients with the VLAN ID configured for each client on the RADIUS server. If the VLAN ID has not been configured for a client on the RADIUS server, then the frames are tagged with the access point’s native VLAN ID.Table 6-21. VLAN CommandsCommand Function Mode Pagevlan Enables a single VLAN for all traffic GC 6-128management-vlanid Configures the management VLAN for the access point GC 6-129vlan-id Configures the default VLAN for the VAP interface IC-W-VAP 6-129](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-262.png)
![Command Line Interface6-1306Default Setting 1Command Mode Interface Configuration (Wireless-VAP)Command Usage • To implement the default VLAN ID setting for VAP interface, the access point must enable VLAN support using the vlan command.• When VLANs are enabled, the access point tags frames received from wireless clients with the default VLAN ID for the VAP interface. If IEEE 802.1X is being used to authenticate wireless clients, specific VLAN IDs can be configured on the RADIUS server to be assigned to each client. Using IEEE 802.1X and a central RADIUS server, up to 64 VLAN IDs can be mapped to specific wireless clients.• If the VLAN ID has not been configured for a client on the RADIUS server, then the frames are tagged with the default VLAN ID of the VAP interface.ExampleWMM CommandsThe access point implements QoS using the Wi-Fi Multimedia (WMM) standard. Using WMM, the access point is able to prioritize traffic and optimize performance when multiple applications compete for wireless network bandwidth at the same time. WMM employs techniques that are a subset of the developing IEEE 802.11e QoS standard and it enables the access point to inter-operate with both WMM- enabled clients and other devices that may lack any WMM functionality.The WMM commands supported by the access point are listed below. Enterprise AP(if-wireless g: VAP[0])#vlan-id 3Enterprise AP(if-wireless g: VAP[0])#Table 6-22. WMM CommandsCommand Function Mode Pagewmm Sets the WMM operational mode on the access point IC-W 6-131wmm-acknowledge- policy Allows the acknowledgement wait time to be enabled or disabled for each Access Category (AC) IC-W 6-131wmmparam Configures detailed WMM parameters that apply to the access point (AP) or the wireless clients (BSS) IC-W 6-132](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-264.png)
![WMM Commands6-1316wmmThis command sets the WMM operational mode on the access point. Use the no form to disable WMM.Syntax[no] wmm <supported | required> •supported - WMM will be used for any associated device that supports this feature. Devices that do not support this feature may still associate with the access point. •required - WMM must be supported on any device trying to associated with the access point. Devices that do not support this feature will not be allowed to associate with the access point. DefaultsupportedCommand ModeInterface Configuration (Wireless)Examplewmm-acknowledge-policyThis command allows the acknowledgement wait time to be enabled or disabled for each Access Category (AC).Syntaxwmm-acknowledge-policy <ac_number> <ack | noack>•ac_number - Access categories. (Range: 0-3) •ack - Require the sender to wait for an acknowledgement from the receiver. •noack - Does not require the sender to wait for an acknowledgement from the receiver. DefaultackCommand ModeInterface Configuration (Wireless)Command Usage • WMM defines four access categories (ACs) – voice, video, best effort, and background. These categories correspond to traffic priority levels and are mapped to IEEE 802.1D priority tags (see Table 5-1). The direct mapping of the four ACs to 802.1D priorities is specifically intended to facilitate Enterprise AP(if-wireless g)#wmm requiredEnterprise AP(if-wireless g)#](https://usermanual.wiki/Accton-Technology/SMC2552WG2/User-Guide-696348-Page-265.png)
