how to install the wi-fi mini-pim for srx series services ... ·...

How to Install the Wi-Fi Mini-PIM for SRX Series ServicesGateways

IN THIS GUIDE

Wi-Fi Mini-Physical Interface Module Overview | 1

Wi-Fi Mini-PIM Hardware Specifications | 4

Channels and Frequencies Supported on the Wi-Fi Mini-PIM | 5

Country Codes and Regulatory Domains | 9

RF Specifications for the Wi-Fi Mini-PIM | 18

Installing the Wi-Fi Mini-PIM in an SRX Series Services Gateway | 20

Configuring the Wi-Fi Mini-PIM on an SRX Series Services Gateway | 22

Verify the Status of the Wi-Fi Mini-PIM | 27

Upgrading the Firmware on the Wi-Fi Mini-PIM | 30

Regulatory and Safety Information for the Wi-Fi Mini-PIM | 33

Agency Approvals and Compliance Information | 38

Wi-Fi Mini-Physical Interface Module Overview

TheWi-FiMini-Physical InterfaceModule (Mini-PIM) for branch SRX Series Services Gateways provides a branch-in-a-boxsolution (which includes an SRX Series device, LTE, and wi-fi) for retail and small office deployments. The Mini-PIM hasan embedded enterprise-class wireless system-on-chip (SOC) that supports the 802.11acWave 2 wireless standards. TheMini-PIM is backward-compatible with 802.11a, 802.11b, 802.11g, and 802.11n.

The Mini-PIM supports the following key features:

• 2x2 MU-MIMO—Enables transmission of data to multiple clients simultaneously.

• Dual radios—Provides concurrent dual bands of 2.4 GHz and 5 GHz. The radios operate in any one of the supportedradio modes. You can configure each radio to support connectivity from one type of client or different types of clients.

• Virtual access points (VAPs)—Allows you to segment the WLAN into multiple broadcast domains that are the wirelessequivalent of Ethernet VLANs. A single access point is segregated into multiple individual VAPs, simulating multipleaccess points in a single system.

NOTE: You can configure up to eight VAPs on each radio.

• Configurable transmit power—Enables you to configure the transmit power for each radio on a percentage basis. Bydefault, the Mini-PIM assigns 100 percent power to each radio at startup to provide maximum coverage.

• Wireless security for client authentication—The Mini-PIM supports the following authentication methods:

• Wi-Fi Protected Access (WPA) Personal, which includes AES-CCMP with preshared key authentication.

• WPA Enterprise, which includes AES-CCMP with RADIUS server authentication.

• MAC authentication, where wireless clients are allowed or denied network access based on their MAC address.

TheMini-PIM is supported on the SRX320, SRX340, SRX345, and SRX550Mdevices and can coexist with otherMini-PIMssupported on these devices.

Front Panel Components

Figure 1 shows the front panel of the Wi-Fi Mini-PIM.

Figure 1: Wi-Fi Mini-PIM Front Panel

Table 1 lists the components on the front panel.

Table 1: Wi-Fi Mini-PIM Front Panel Components

DescriptionComponentSl. No.

Two Reverse Polarity SubMiniature version A (RP-SMA) connectorsAntenna connectors1, 4

Mini-USB Type-B port for debugging purposesConsole2

2

Table 1: Wi-Fi Mini-PIM Front Panel Components (continued)

DescriptionComponentSl. No.

Indicate the status of the Mini-PIM:

2.4 GHz

• Solid green—2GWLAN connection is established

• Blinking green—Data activity

5 GHz

• Solid green—5GWLAN connection is established

• Blinking green—Data activity

STATUS

• Solid green—The Mini-PIM is operational

• Blinking green—Powering on or running diagnostics

LEDs3

Wi-Fi Mini-PIM Models

Three models are available based on the regional wireless standards (see Table 2):

Table 2: Wi-Fi Mini-PIM Models

NotesSupported RegionModel or SKU

This model is based on the wireless standards supported in theUnited States. The country code is fixed and cannot be changed.

United StatesSRX-MP-WLAN-US

This model is based on thewireless standards supported in Israel.The country code is fixed and cannot be changed.

IsraelSRX-MP-WLAN-IL

You can set the country code using the set wlan access-pointap-name access-point-options country country code command.

For information on country codes, see Table 9

Other countriesSRX-MP-WLAN-WW

Physical Interface

The physical interface for theWi-Fi Mini-PIM uses the name wl-x/0/0, where x is the slot on the services gateway wherethe Mini-PIM is installed. You can install the Mini-PIM in any of the Mini-PIM slots on the services gateway.

3

Wi-Fi Mini-PIM Hardware Specifications

Table 3 provides the hardware specifications for the Mini-PIM.

Table 3: Wi-Fi Mini-PIM Hardware Specifications

ValueDescription

H x W x L:

0.79 in. x 3.70 in. x 5.29 in. (2.0 cm x 9.4 cm x 13.43 cm)

Dimensions

0.29 lb (0.13 kg)Weight

Mini-PIMForm factor

RP-SMAConnector type

32° F through 104° F (0° C through 40° C)Environmental operating temperature

-40° F through 158° F (-40°C through 70° C)Storage temperature

5% to 90% noncondensingRelative humidity

6,000 feet (1828 meters)Operating altitude

Antenna Specifications

The Mini-PIM supports two multi-band swivel-mount dipole antennas, which can be rotated 360 degrees. You can rotatethe antennas and select the angle at which the signal strength is high. Table 4 lists the specifications for the antenna.

Table 4: Specifications for the Wi-Fi Mini-PIM Antenna

ValueSpecification

EDA-1713-25GR2-A3 (Vendor: MAG.LAYERS)Part number

• 2.4~2.5 GHz

• 5.15~5.85 GHz

Operating frequency range

50 ohmImpedance

2 (maximum)Voltage standing wave ratio (VSWR)

10 dB (maximum)Return loss

4

Table 4: Specifications for the Wi-Fi Mini-PIM Antenna (continued)

ValueSpecification

OmnidirectionalRadiation

5dBi +/-0.5Peak gain

LinearPolarization

–4° F (–20° C) to 149° F (65° C)Operating temperature

RP-SMAConnector type

Channels and Frequencies Supported on theWi-Fi Mini-PIM

TheWi-Fi Mini-PIM supports channel bandwidths of 20MHz, 40MHz, and 80MHz. The 2.4 GHz radio supports 20MHzand 40 MHz channel bandwidths, and the 5 GHz radio supports 20 MHz, 40 MHz, and 80 MHz channel bandwidths. Youcan configure the bandwidth by using the set wlan access-point ap-name radio [1|2] radio-option channel bandwidthbandwidth command.

NOTE: You can configure the 80 MHz channel bandwidth only on the 5 GHz radio.

The default channel bandwidth is 20 MHz for the 2.4 GHz radio and 40 MHz for the 5 GHz radio. Setting the bandwidthto 40 MHz or 80 MHz reduces the number of available channels for use.

Table 5 lists the channels supported on the 2.4 GHz radio.

5

Table 5: Channels Supported on the 2.4 GHz Radio (20 MHz and 40 MHz Bandwidth)

Center Frequency (MHz)Channel NumberBand

241212400~2483.5 MHz

24172

24223

24274

24325

24376

24427

24478

24529

245710

246211

246712

247213

Table 6 through Table 8 list the channels supported on the 5 GHz radio.

Table 6: Channels Supported on the 5 GHz Radio (20 MHz Bandwidth)

Center Frequency MHzChannel NumberBand

5180365150~5250MHz

520040

522044

524048

6

Table 6: Channels Supported on the 5 GHz Radio (20 MHz Bandwidth) (continued)


5260525250~5350MHz

528056

530060

532064

55001005470~5725MHz

5520104

5540108

5560112

5580116

5600120

5620124

5640128

5660132

5680136

5700140

57201445725~5850MHz

5745149

5765153

5785157

5805161

5825165

7



5190385150~5250 MHz

523046

5270545250~5350 MHz

531062

55101025470~5725 MHz

5550110

5590118

5630126

5670134

57101425725~5850 MHz

5755151

5795159



5210425150~5250 MHz

5290585250~5350 MHz

55301065470~5725 MHz

5610122

56901385725~5850 MHz

5775155

8

Dynamic Frequency Selection

Dynamic Frequency Selection (DFS) enables use of 5 GHz frequencies that are typically reserved for radars. In countrieswhere DFS is required, theWi-Fi card performs appropriate checks for radar. If radar is detected on a channel, the accesspoint selects a radar-free channel and performs a 60-second availability check before operating on that channel.

DFS is enabled by default. You can disable DFS by using the dfs-off option:

set wlan access-point ap-name radio 1 radio-options dfs-off

NOTE: Only the 5 GHz radio (radio 1) supports DFS.

You can configure the DFS settings in any of the following ways based on your requirement:

DFS enabled (default)

• If you set the channel number to auto, the access point selects the channel from the list of DFS and non-DFS channels.If the access point selects a DFS channel and detects radar on the channel, it switches to another channel automatically.

• If you set the channel number manually to a DFS channel and if the access point detects a radar on this channel, itswitches to another channel automatically;

DFS disabled (dfs-off configured)

• If you set the channel number to auto, the access point selects the channel from the list of non-DFS channels.

• If you set the channel number manually, you can configure either a DFS or non-DFS channel. If you configure a DFSchannel with DFS disabled, a warning message appears when you commit the configuration.

Country Codes and Regulatory Domains

Table 9 lists the country codes and regulatory domains supported on the Wi-Fi Mini-PIM.

9

Table 9: Country Codes and Regulatory Domains

Radio 2 (2.4 GHz)Radio 1 (5 GHz)Model

CountryandCountryCode

40MHz

20MHz

RegulatoryDomain(2.4GHz)

80MHz

40MHz

20MHz

RegulatoryDomain(5 GHz)

1 to 131 to 13WORLD42, 58,106,138,155

38, 46,54, 62,102,110,134,142,151,159

36, 40,44, 48,52, 56,60, 64,100,104,108,112116,132,136,140,144,149,153,157,161,165

FCC6SRX-MP-WLAN-WWAustralia(AU)

1 to 111 to 11FCCA42, 58,106,138,155

38, 46,54, 62,102,110,134,142,151,159

36, 40,44, 48,52, 56,60, 64,100,104,108,112116,132,136,140,144,149,153,157,161,165

FCC6SRX-MP-WLAN-WWCanada (CA)

10

Table 9: Country Codes and Regulatory Domains (continued)



40MHz

20MHz


80MHz

40MHz

20MHz


1 to 131 to 13WORLD42, 58,155

38, 46,54, 62,151,159

36, 40,44, 48,52, 56,60, 64,149,153,157,161,165

APL14SRX-MP-WLAN-WWChina (CN)

1 to 131 to 13WORLD42, 58,106,122

38, 46,54, 62,102,110,118,126,134

36, 40,44, 48,52, 56,60, 64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165

ETSI11SRX-MP-WLAN-WWEuropeanUnion

11




40MHz

20MHz


80MHz

40MHz

20MHz


1 to 131 to 13WORLD42, 58,155

38, 46,54, 62,151,159

36, 40,44, 48,52, 56,60, 64,149,153,157,161,165

APL15SRX-MP-WLAN-WWIndia (IN)

1 to 131 to 13ETSIC155151,159

149,153,157,161,165

APL2SRX-MP-WLAN-WWIndonesia(ID)

1 to 131 to 13WORLD42, 5838, 46,54, 62

36, 40,44, 48,52, 56,60, 64

ETSI3SRX-MP-WLAN-ILIsrael (IL)

1 to 131 to 13MKKC42, 58,106,122

38, 46,54, 62,102,110,118,126,134

36, 40,44, 48,52, 56,60, 64,100,104,108,112116,120,124,128,132,136,140

MKK5SRX-MP-WLAN-WWJapan (JP)

12




40MHz

20MHz


80MHz

40MHz

20MHz


1 to 131 to 13WORLD42, 58,106,122,155

38, 46,54, 62,102,110,118,126,151,159

36, 40,44, 48,52, 56,60, 64,100,104,108,112116,120,124,128,149,153,157,161,165

FCC11SRX-MP-WLAN-WWMalaysia(MY)

13




40MHz

20MHz


80MHz

40MHz

20MHz


1 to 131 to 13ETSIC42, 58,106,122,138,155

38, 46,54, 62,102,110,118,126,134,142,151,159

36, 40,44, 48,52, 56,60, 64,100,104,108,112116,120,124,128,132,136,140,144,149,153,157,161,165

FCC3SRX-MP-WLAN-WWMexico(MX)

14




40MHz

20MHz


80MHz

40MHz

20MHz


1 to 131 to 13ETSIC42, 58,106,122,138,155

38, 46,54, 62,102,110,118,126,134,142,151,159

36, 40,44, 48,52, 56,60, 64,100,104,108,112116,120,124,128,132,136,140,144,149,153,157,161,165

FCC3SRX-MP-WLAN-WWNewZealand(NZ)

15




40MHz

20MHz


80MHz

40MHz

20MHz


1 to 131 to 13WORLD42, 58,106,122,155

38, 46,54, 62,102,110,118,126,134,151,159

36, 40,44, 48,52, 56,60, 64,100,104,108,112116,120,124,128,132,136,140,149,153,157,161,165

APL9SRX-MP-WLAN-WWSouthKorea(KR)

16




40MHz

20MHz


80MHz

40MHz

20MHz


1 to 111 to 11FCCA42, 58,106,122,138,155

38, 46,54, 62,102,110,118,126,134,142,151,159

36, 40,44, 48,52, 56,60, 64,100,104,108,112,116,120,124,128,132,136,140,144,149,153,157,161,165

FCC8SRX-MP-WLAN-USUnitedStates (US)

17




40MHz

20MHz


80MHz

40MHz

20MHz


1 to 131 to 13WORLD42, 58,106,122,138,155

38, 46,54, 62,102,110,118,126,134,142,151,159

36, 40,44, 48,52, 56,60, 64,100,104,108,112116,120,124,128,132,136,140,144,149,153,157,161,165

FCC3SRX-MP-WLAN-WWVietnam(VN)

RF Specifications for the Wi-Fi Mini-PIM

Table 10 lists the radio frequency (RF) specifications.

Table 10: RF Specifications for the Wi-Fi Mini-PIM

Target Power (+/-2dBm) Per Chain

Receive Sensitivity (+/-2dBm) Per ChainData RateOperating Mode

16.5-88MCS0802.11ac (VHT20)

11.5-67MCS8

18

Table 10: RF Specifications for the Wi-Fi Mini-PIM (continued)

Target Power (+/-2dBm) Per Chain

Receive Sensitivity (+/-2dBm) Per ChainData RateOperating Mode

16-87MCS0802.11ac (VHT40)

11-64MCS9

15.5-83MCS0802.11ac (VHT80)

10.5-59MCS9

16.5-886 Mbps802.11a

13-7254 Mbps

18-941 Mbps802.11b

18-8511 Mbps

18-896 Mbps802.11g

15-7154 Mbps

18-88MCS0802.11n (HT20) 2G

15-70MCS7

16.5-88MCS0802.11n (HT20) 5G

13-71MCS7

17-86MCS0802.11n (HT40) 2G

15-68MCS7

16-86MCS0802.11n (HT40) 5G

12-69MCS7

19

Installing the Wi-Fi Mini-PIM in an SRX Series ServicesGateway

You can install the Mini-PIM in any of the Mini-PIM slots on the services gateway.

NOTE: You can install only one Wi-Fi Mini-PIM in a services gateway.

To install the Mini-PIM in a services gateway:

1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to the groundingpoint on the back of the services gateway.

2. Power off the services gateway by briefly pressing the Power button on the front panel. Wait for the Power LED toturn off before proceeding. Disconnect the services gateway from the power source.

3. Slide the Mini-PIM in the slot until it lodges firmly in the services gateway. Tighten the screws on each side of theMini-PIM faceplate. See Figure 2.

Figure 2: Installing the Wi-Fi Mini-PIM

g022

546

4. Attach the antennas to the front panel of the Mini-PIM. You can attach the antenna by using one of the followingmethods:

• Direct mounting—Attach the antennas to the RP-SMA connectors on the front panel (see Figure 3).

20

Figure 3: Attaching the Antennas (Direct Mounting)

g022

547

• Using an external antenna base—Attach the antennas to the antenna base. Connect the cables from each antennabase to the RP-SMA connectors on the front panel (see Figure 4).

Figure 4: Attaching the Antennas Using an Antenna Base (Rack Mounting)

g022

549

For SRX320 Services Gateways, which can be mounted on a wall, you can mount the antennas on a wall as shownin Figure 5.

21

Figure 5: Attaching the Antennas Using an Antenna Base (Wall Mounting)

g022

548

(27.9 cm)

> 11 in.

5. Power on the services gateway.

Configuring the Wi-Fi Mini-PIM on an SRX Series ServicesGateway

IN THIS SECTION

Wi-FI Mini-PIM Configuration Overview | 23

Radio Configuration Overview | 23

Virtual Access Point Configuration Overview | 24

Configure the Wi-Fi Mini-PIM | 25

22

Wi-FI Mini-PIM Configuration Overview

Before you configure the Mini-PIM, configure the network settings on the SRX Series device and connect the device toyour network. For details, see the Hardware Guide for your SRX Series device.

Configure the following settings for the access point:

• Name for the access point

• Interface—The interface name for the AP is denoted as wl-x/0/0, where x is the slot on the services gateway in whichthe Mini-PIM is installed.

• Country code—The country code setting identifies the regulatory domain in which the access point operates.

The country code affects the radio modes, list of channels, and radio transmission power that the access point cansupport. Ensure that you select the correct code for the country in which the access point operates so that the accesspoint complies with the regulations in that country.

• Location

Radio Configuration Overview

Radios on the Wi-Fi Mini-PIM are enabled by default. You can disable a radio. When a radio is disabled, the Mini-PIMdoes not send messages to the connected wireless clients.

Configure the following options for each radio:

• Channel number—If you select auto, then the Mini-PIM chooses the channel automatically.

• Mode—You can configure the radio to support either one type of wireless client or a mixed mode. In mixed mode,different types of clients can connect to the radio. Table 11 lists the modes supported on each radio.

Table 11: Supported Modes on the Wi-Fi Mini-PIM radios

Supported ModesRadio

• an—802.11a and 802.11n clients operating on 5 GHz frequency can connect to theaccess point

• acn—802.11a, 802.11n and 802.11ac clients operating on 5GHz frequency can connectto the access point

Radio 1 (5.0 GHz)

• gn—802.11g, and 802.11n clients operating in 2.4 GHz frequency can connect to theaccess point. This is the default mode for this radio.

Radio 2 (2.4 GHz)

• Bandwidth—Radio 1 supports 20 MHz, 40 MHz, and 80 MHz bandwidths, whereas Radio 2 supports only 20 MHz and40 MHz bandwidths.

• Transmit power—You can configure transmit power on a per-radio basis. By default, the access point assigns 100 percentpower to each radio at startup.

23

To increase the network capacity, place access points closer together and reduce the value of the transmit power. Thishelps reduce overlap and interference among access points. A lower transmit power setting can also keep your networkmore secure because weaker wireless signals are less likely to propagate outside the physical location of your network.

Virtual Access Point Configuration Overview

Virtual access points (VAPs) allow different security mechanisms for different clients on the same access point. Each VAPis identified by a configured service set identifier (SSID) and a unique basic service set identifier (BSSID). The access pointsupports multiple VLANs, which can be distributed across VAPs and radios.

You can enable or disable each VAP independently. If you do not configure the VAPs, the radio is turned on if you configuredthe radio settings. The radio is off if you do not configure the radio settings or if you turned off the radio using the radio-offoption.

A VAP is configured on a per-radio basis. You can configure up to eight VAPs per radio. You can map up to 16 ESSIDS toindividual VLANs.

Configure the following options for each VAP:

• Description (maximum length is 64)

• SSID value for the VAP

The SSID value can include letters, numerals, and the special characters - . _ @ #. The minimum length is 2 charactersand maximum length is 32 characters.

• VLAN ID for the VAP

The value can be in the range of 1 through 4094.

• The maximum number of clients that can connect to the VAP

The value can be in the range of 1 through 127.

• Security for the access point

The access point supports several types of authentication methods that are used by clients to connect to the accesspoint. Each of thesemethods and their associated parameters are configurable on a per-VAP basis. By default, no securityis in place on the access point, and therefore anywireless client can associate with it and access your LAN. You configuresecure wireless client access for each VAP.

• None—The data transferred between clients and the access point is not encrypted. This method allows clients toassociate with the access point without any authentication.

• Wi-Fi Protected Access (WPA) Enterprise—A Wi-Fi Alliance standard that uses RADIUS server authentication withAES-CCMP cipher suite. This mode allows the use of high security encryption along with centrally managed userauthentication. Only the WPA2 standard is supported.

• Wi-Fi Protected Access (WPA) Personal—AWi-Fi Alliance standard that uses preshared key (PSK) authentication withAES-CCMP cipher suite. Only the WPA2 standard is supported.

24

Configure the Wi-Fi Mini-PIM

To configure the Wi-Fi Mini-PIM:

1. Configure the Wi-Fi interface:

a. Configure an IP address for the Wi-Fi interface:

user@host# set interfaces wl-x/0/0 unit 0 family inet address ip-address

b. Configure the address pool. The DHCP address pool and the Wi-FI interface must be in the same network.

user@host# set access address-assignment pool dhcp-pool family inet network ip-address

user@host# set access address-assignment pool dhcp-pool family inet range range low ip-address

user@host# set access address-assignment pool dhcp-pool family inet range range high ip-address

user@host# set access address-assignment pool dhcp-pool family inet dhcp-attributes router ip-address

c. Enable DHCP server on the interface:

user@host# set system services dhcp-local-server group group interface wl-x/0/0.0

The eth0 interface on the Mini-PIM enables the DHCP client. If the DHCP server is enabled on the wl interface,the server assigns an IP address to the eth0 interface. You can view the binding information by issuing the showdhcp server binding command.

d. Assign the interface to a security zone:

user@host# set security zones security-zone zone interfaces wl-x/0/0.0

2. Configure the access point settings:

a. Configure the interface:

user@host# set wlan access-point name interface wl-x/0/0

b. Set the country code (applicable only for SRX-MP-WLAN-WWmodels):

user@host# set wlan access-point name access-point-options country country-code

NOTE: If you do not set the country code for the SRX-MP-WLAN-WWmodels, the Mini-PIMconsiders the country code as US. You cannot set the country code for the SRX-MP-WLAN-USand SRX-MP-WLAN-IL models.

c. Set the location:

user@host# set wlan access-point name location location

d. Commit the configuration:

user@host# commit

3. Configure the radio settings.

Note that radio 1 operates at 5 GHz and radio 2 operates at 2.4 GHz.

25

NOTE: Changing the radio settings can cause the access point to stop and restart system processes. Ifthis occurs, wireless clients that are connected to the access point will temporarily lose connectivity. Werecommend that you change radio settings when WLAN traffic is low.

a. Configure the radio mode. Radio 1 supports acn and an modes. Radio 2 supports only gn.

For radio 1:

user@host# set wlan access-point name radio 1 radio-options mode [acn|an]

For radio 2:

user@host# set wlan access-point name radio 2 radio-options mode gn

b. Configure the channel number.

user@host# set wlan access-point name radio [1|2] radio-options channel number number

c. Configure the channel bandwidth. The default channel bandwidth is 20 MHz for the 2.4 GHz radio and 40 MHzfor the 5 GHz radio.

user@host# set wlan access-point name radio [1|2] radio-options channel bandwidth [20|40|80]

d. Configure the transmit power:

user@host# set wlan access-point name radio [1|2] radio-options transmit-power percent

e. Commit the configuration:

user@host# commit

4. Configure the virtual access point (VAP) settings.

a. Enter an ID and description for the VAP:

user@host# set wlan access-point name radio [1|2] virtual-access-point id description description

b. Enter the SSID value:

user@host# set wlan access-point name radio [1|2] virtual-access-point id ssid ssid

c. Configure one of the following security authentication methods for the VAP:

• none—The data transferred between clients and the access point is not encrypted. Clients can associate with theaccess point without any authentication.

user@host# set wlan access-point name radio [1|2] virtual-access-point id security none

• wpa-enterprise—The device authenticates through an 802.1X-compliant RADIUS server.

user@host# setwlan access-point name radio [1|2] virtual-access-point id securitywpa-enterprise cipher-suitesccmp

user@host# setwlan access-point name radio [1|2] virtual-access-point id securitywpa-enterprise radius-serverip-address

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise radius-portport

26

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise radius-keysecret-key

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise wpa-versionv2

• wpa-personal—The device uses preshared keys (PSKs) or a passphrase for authentication and encryption. Keysare stored on the device and on all wireless clients. You do not need to configure a separate authentication server.

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal cipher-suitesccmp

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal key-type[ascii|hex]

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal key key

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal wpa-versionv2

d. Specify the upload and download rate limits:

user@host# set wlan access-point name radio [1|2] virtual-access-point id upload-limit upload-limit-rate

user@host# set wlan access-point name radio [1|2] virtual-access-point id download-limit download-limit-rate

e. Specify the maximum number of clients that can be connected to the VAP:

user@host# set wlan access-point name radio [1|2] virtual-access-point idmaximum-stations number

f. Commit the configuration:

user@host# commit

Verify the Status of the Wi-Fi Mini-PIM

Table 12 lists the commands that you can use to verify and monitor the status of the Wi-Fi Mini-PIM:

27

Table 12: Commands to Verify and Monitor the Status of the Wi-Fi Mini-PIM

PurposeCommand

Displays the status of the specific access point.

Sample output:

Active access point detail information

Access Point : wap3

Type : Internal

Location : Default Location

Serial Number : EV1119AF0030

Firmware Version : v1.2.7

Alternate Version : v1.1.0

Country : US

Access Interface : wl-2/0/0

System Time : Mon Dec 23 06:50:50 UTC 2019

Packet Capture : Off

Ethernet Port:

MAC Address : 00:00:5e:00:53:c0

Radio1:

Status : On

MAC Address : 00:00:5e:00:53:12

Temperature : 44

Mode : IEEE 802.11a/n/ac

Channel : 120

Bandwidth : 40

Transmit Power : 100

Radio2:

Status : On

MAC Address : 00:00:5e:00:53:56

Temperature : 45

Mode : IEEE 802.11g/n

Channel : 11

Bandwidth : 20

Transmit Power : 100

show wlan access-points ap-namedetail

Displays the details of all the access points configured on the Mini-PIM.

Sample:

Active access points information

Access-Point Type Interface Radio-mode/Channel/Bandwidth

wap3 Int wl-2/0/0 acn/120/40, gn/11/20

show wlan access-points

28

Table 12: Commands to Verify and Monitor the Status of the Wi-Fi Mini-PIM (continued)

PurposeCommand

Displays the details about the clients connected to the access point.

Access point client associations information

Access point: wap3

VAP Client MAC Address Auth Packets Rx/Tx

Bytes Rx/Tx

Radio1:5g_vap1 00:00:5e:00:53:a3 NO 3/0

510/0

show wlan access-points ap-nameclient-associations

Displays details about the virtual access points.show wlan access-points ap-namevirtual-access-points all

Virtual access points information

Access point name: wap3

Radio1:

VAP1:

SSID : 5g_vap1

MAC Address : 00:00:5e:00:53:12

Maximum Station : 127

Broadcast SSID : Enable

Station Isolation : Disable

Upload Limit : Disable

Download Limit : Disable

VLAN ID : 0

Station MAC Filter : Disable

Traffic Statistics:

Input Bytes : 0

Output Bytes : 0

Input Packets : 0

Output Packets : 0

29

Table 12: Commands to Verify and Monitor the Status of the Wi-Fi Mini-PIM (continued)

PurposeCommand

VAP2:

SSID : 5g_vap2

MAC Address : 00:00:5e:00:53:12






VLAN ID : 0


Traffic Statistics:

Input Bytes : 0

Output Bytes : 0

Input Packets : 0

Output Packets : 0

Radio2:

VAP0:

SSID : 2.4g

MAC Address : 00:00:5e:00:53:56






VLAN ID : 0


Traffic Statistics:

Input Bytes : 10802142

Output Bytes : 6228524

Input Packets : 100266

Output Packets : 36413

Upgrading the Firmware on the Wi-Fi Mini-PIM

To upgrade the firmware on the Mini-PIM using the CLI:

30

1. Identify the currently installed firmware (jfirmware) version:

user@host > show system firmware

NOTE: Ensure that you upgrade the firmware on the Mini-PIM to the latest version.

The Current version field in the output displays the firmware version that is currently installed on the Mini-PIM. Ifthere is a newer version of the firmware at https://www.juniper.net/support/downloads/?p=junos-srx#sw, thenproceed to the next step to download the latest firmware.

Part Type Tag Current Available Status

version version

FPC 2

PIC 0 MWAP_FW 1 1.1.2 0 OK

Routing Engine 0 RE BIOS 0 3.0 3.6 OK

Routing Engine 0 RE BIOS Backup 1 3.0 3.6 OK

2. Download the appropriate firmware version from https://www.juniper.net/support/downloads/?p=junos-srx#sw:

user@host > request system software add /var/tmp/jfirmware-<version>-signed.tgz

NOTE: Ensure that the Junos OS version installed on the device is the same as the firmware version orlater. To know the Junos OS version, issue the show version command.

3. Ensure that the latest firmware version is downloaded to the Mini-PIM by verifying the Available version field. TheAvailable version field should list the latest firmware version that was downloaded in Step 2.



version version

FPC 2

PIC 0 MWAP_FW 1 1.1.8 1.2.1 OK



4. Upgrade the firmware on the device:

user@host > request system firmware upgrade pic fpc-slot <fpc-slot-number>


version version

FPC 2

31

https://www.juniper.net/support/downloads/?p=junos-srx#sw

https://www.juniper.net/support/downloads/?p=junos-srx#sw

PIC 0 MWAP_FW 1 1.1.8 1.2.1 OK

Perform indicated firmware upgrade ? [yes,no] (no) yes

Firmware upgrade initiated, use "show system firmware" to monitor status.

5. Verify that the firmware is upgraded successfully. The status should show OK.



version version

FPC 2

PIC 0 MWAP_FW 1 1.1.8 1.2.1 PROGRAMMING (0%)





version version

FPC 2






version version

FPC 2






version version

FPC 2

PIC 0 MWAP_FW 1 1.1.8 1.2.1 UPGRADED

SUCCESSFULLY




32


version version

FPC 2

PIC 0 MWAP_FW 1 1.2.1 1.2.1 OK



The device reboots after the firmware is upgraded. Note that if you issue the show system firmware command afterthe reboot, the Current Version field shows the latest firmware version and the Available Version field shows zero(0).

Regulatory and Safety Information for the Wi-Fi Mini-PIM

FCC

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 ofthe FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residentialinstallation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used inaccordancewith the instructions, may cause harmful interference to radio communications. However, there is no guaranteethat interference will not occur in a particular installation. If this equipment does cause harmful interference to radio ortelevision reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correctthe interference by one of the following measures:

• Reorient or relocate the receiving antenna

• Increase the separation between the equipment and receiver

• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected

• Consult the dealer or an experienced radio/TV technician for help

FCC Caution

Any changes or modifications not expressly approved by the party responsible for compliance could void the user’sauthority to operate this equipment.

This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. This devicecomplies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may notcause harmful interference, and (2) this device must accept any interference received, including interference that maycause undesired operation.

33

For products available in the USA/Canada markets, only channels 1–11 can be operated. Selection of other channels isnot possible.

FCC Radiation Exposure Statement

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipmentshould be installed and operated with minimum distance 20 cm between the radiator and your body.

This module is intended for OEM integrator. This module is only FCC authorized for the specific rule parts listed on thegrant, and that the host product manufacturer is responsible for compliance to any other FCC rules that apply to the hostnot covered by the modular transmitter grant of certification. The final host product still requires Part 15 Subpart Bcompliance testing with the modular transmitter installed. Additional testing and certification may be necessary whenmultiple modules are used.

Users Manual of the End Product

In the users manual of the end product, the end user has to be informed to keep at least 20 cm separationwith the antennawhile this end product is installed and operated. The end user has to be informed that the FCC radio-frequency exposureguidelines for an uncontrolled environment can be satisfied.

The end user has to also be informed that any changes or modifications not expressly approved by themanufacturer couldvoid the user's authority to operate this equipment.

This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: (1) this device maynot cause harmful interference and (2) this device must accept any interference received, including interference that maycause undesired operation.

Label of the End Product

The final end product must be labeled in a visible area with the following " Contains TX FCC ID: QZEMPWAPUS ".

This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: (1) this device maynot cause harmful interference and (2) this device must accept any interference received, including interference that maycause undesired operation.

34

Industry Canada Statement

• This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following twoconditions: (1) this device may not cause interference, and (2) this device must accept any interference, includinginterference that may cause undesired operation of the device.

Le présent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence.L'exploitation est autorisée aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2)l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d'encompromettre le fonctionnement.

• For product available in the USA/Canada market, only channels 1–11 can be operated. Selection of other channels isnot possible.

Pour les produits disponibles aux États-Unis / Canada du marché, seul le canal 1 à 11 peuvent être exploités. Sélectiond'autres canaux n'est pas possible.

• Dynamic Frequency Selection (DFS) for devices operating in the bands 5250- 5350MHz, 5470-5600MHz and 5650-5725MHz.

Sélection dynamique de fréquences (DFS) pour les dispositifs fonctionnant dans les bandes 5250-5350MHz, 5470-5600MHz et 5650-5725 MHz.

• This device and its antenna(s) must not be co-located with any other transmitters except in accordance with ICmulti-transmitter product procedures. Referring to the multi-transmitter policy, multiple-transmitter(s) and module(s)can be operated simultaneously without reassessment permissive change.

Cet appareil et son antenne (s) ne doit pas être co-localisés ou fonctionnement en association avec une autre antenneou transmetteur.

• The device for operation in the band 5150–5250 MHz is only for indoor use to reduce the potential for harmfulinterference to co-channel mobile satellite systems.

les dispositifs fonctionnant dans la bande 5150-5250 MHz sont réservés uniquement pour une utilisation à l’intérieurafin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux.

• The maximum antenna gain permitted for devices in the bands 5250-5350MHz and 5470-5725MHz shall be such thatthe equipment still complies with the e.i.r.p. limit.

le gain maximal d’antenne permis pour les dispositifs utilisant les bandes 5250-5350 MHz et 5470-5725 MHz doit seconformer à la limite de p.i.r.e.

• The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment stillcomplies with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate.

le gain maximal d’antenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz) doit se conformer à la limitede p.i.r.e. spécifiée pour l’exploitation point à point et non point à point, selon le cas.

• For indoor use only.

Pour une utilisation en intérieur uniquement

• This radio transmitter [4558A-MPWAPUS] has been approved by Innovation, Science and Economic DevelopmentCanada to operate with the antenna types listed below, with the maximum permissible gain indicated. Antenna types

35

not included in this list that have a gain greater than themaximum gain indicated for any type listed are strictly prohibitedfor use with this device.

Cet émetteur radio [4558A-MPWAPUS] a été approuvé par Innovation, Sciences et Développement économique Canadapour fonctionner avec les types d’antennes énumérés ci-dessous, avec le gain maximal admissible indiqué. Les typesd'antenne non inclus dans cette liste et dont le gain est supérieur au gain maximal indiqué pour l'un des types répertoriésne sont strictement pas autorisés pour une utilisation avec cet appareil.

Antenna Information:

RemarkGain (dBi)ConnectorAntenna TypeModel Name

2.4 GHz5.5Reversed-SMADipole AntennaEDA-1713-25G R2-A3

5 GHz5.5Reversed-SMADipole AntennaEDA-1713-25G R2-A3

• IC Radiation Exposure Statement

This equipment complies with IC RSS-102 radiation exposure limits set forth for an uncontrolled environment. Thisequipment should be installed and operated with minimum distance 20 cm between the radiator and your body.

Cet équipement est conforme aux limites d'exposition aux rayonnements IC établies pour un environnement non contrôlé.Cet équipement doit être installé et utilisé avec un minimum de 20 cm de distance entre la source de rayonnement etvotre corps.

• IMPORTANT NOTE

This module is intended for OEM integrator. The OEM integrator is responsible for the compliance to all the rules thatapply to the product into which this certified RF module is integrated. Additional testing and certification may benecessary when multiple modules are used.

NOTE IMPORTANTE:

Ce module est destiné à l'intégrateur OEM. L’intégrateur OEM est responsable de la conformité à toutes les règlesapplicables au produit dans lequel ce module RF certifié est intégré. Des tests et une certification supplémentairespeuvent être nécessaires lorsque plusieurs modules sont utilisés.

• USERS MANUAL OF THE END PRODUCT

In the users manual of the end product, the end user has to be informed to keep at least 20 cm separation with theantenna while this end product is installed and operated. The end user has to be informed that the IC radio-frequencyexposure guidelines for an uncontrolled environment can be satisfied.

MANUEL UTILISATEUR DU PRODUIT FINAL:

Dans le manuel d'utilisation du produit final, l'utilisateur final doit être informé de la nécessité de maintenir une distanced'au moins 20 cm avec l'antenne pendant l'installation et l'utilisation du produit final. L'utilisateur final doit être informéque les consignes d'IC relatives à l'exposition aux fréquences radioélectriques pour un environnement non contrôlépeuvent être satisfaites.

The end user has to also be informed that any changes or modifications not expressly approved by the manufacturercould void the user's authority to operate this equipment. Operation is subject to the following two conditions: (1) thisdevice may not cause harmful interference (2) this device must accept any interference received, including interferencethat may cause undesired operation.

36

L'utilisateur final doit également être informé du fait que tout changement ou modification non expressément approuvépar le fabricant pourrait annuler son droit d'utiliser cet équipement. Son utilisation est soumise aux deux conditionssuivantes: (1) cet appareil ne doit pas causer d'interférences nuisibles (2) cet appareil doit accepter toutes les interférencesreçues, y compris celles pouvant entraîner un fonctionnement indésirable.

• LABEL OF THE END PRODUCT

The final end product must be labeled in a visible area with the following " Contains IC: 4558A-MPWAPUS ".

TheHostModel Number (HMN)must be indicated at any location on the exterior of the end product or product packagingor product literature which shall be available with the end product or online.

ETIQUETTE DU PRODUIT FINAL

Le produit final doit être étiqueté de manière visible dans la zone "Contient le composant IC: 4558A-MPWAPUS".

Le numéro de modèle de l'hôte (HMN) doit être indiqué à n'importe quel endroit à l'extérieur du produit final ou del'emballage du produit final ou de la documentation sur le produit, qui doit être disponible avec le produit final ou enligne.

CE

This equipment complies with EU radiation exposure limits set forth for an uncontrolled environment. This equipmentshould be installed and operated with minimum distance 20cm between the radiator & your body.

All operational modes:

2.4 GHz: 802.11b, 802.11g, 802.11n (HT20), 802.11n (HT40)

5 GHz: 802.11a, 802.11n (HT20), 802.11n (HT40), 802.11ac (VHT20), 802.11ac (VHT40), 802.11ac (VHT80)

The frequency and the maximum transmitted power in EU are listed below:

• 2412-2472 MHz: 19.99 dBm

• 5180-5240 MHz: 22.97 dBm

• 5260-5320 MHz: 22.91 dBm

• 5500-5700 MHz: 28.16 dBm

The device is restricted to indoor use only when operating in the 5150 to 5350 MHz frequency range.

DKCZCYHRBGBEAT

IEHUELDEFRFIEE

PLNLMTLULTLVIT

UKSEESSISKROPT

37

Japan Statement

5 GHz band (W52, W53): Indoor use only

Agency Approvals and Compliance Information

The interface module complies with the following standards:

• Safety

• CAN/CSA-C22.2 No. 60950-1 Information Technology Equipment - Safety

• CAN/CSA C22.2 No. 62368-1-2014, Audio/Video, Information and Communication Technology Equipment – Safety

• UL 60950-1 (2nd Edition) Information Technology Equipment - Safety

• UL 62368-1, Audio/Video, Information and Communication Technology Equipment – Safety

• IEC 60950-1: 2005/ A2:2013 Information Technology Equipment - Safety (All country deviations): CB Scheme

• IEC 62368-1: 2014 Audio/Video, Information and Communication Technology Equipment – Safety CB Scheme

• EN 60950-1: 2006/ A2:2013 Information Technology Equipment

• EMC Emissions

• EN55022 / CISPR22

• EN55032/CISPR 32

• CFR 47 Part 15

• ICES003

• VCCI-V-3

• AS/NZS CISPR22

• AS/NZS CISPR 32

• AS/NZS 2772.2

• AS/NZS 4268

• EN300-386

• EN61000-3-2

• EN61000-3-3

• EN61000-6-1

• United States

• FCC 15.247 (2.4 GHz and 5 GHz)

• FCC 15.407 (5 GHz) and DFS

38

• FCC RF Exposure calculation

• Canada

• IC RSS-102 and RSS-247 (2.4Ghz and 5.8Ghz) and DFS

• Europe

• ETSI EN 300 328 (2.4 GHz)

• ETSI EN 300 893 (5GHz) and DFS

• EN 50385, EN 50665, and EN 62311 RF exposure

• ETSI EN 301 489-1

• ETSI EN 301 489-17

• EMC Immunity

• EN55024/CISPR24

• EN300-386

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in theUnited States and other countries. All other trademarks, service marks, registered marks, or registered service marks are theproperty of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. JuniperNetworks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Copyright © 2019Juniper Networks, Inc. All rights reserved. December 2019.

39

how to install the wi-fi mini-pim for srx series services ... ·...

Documents