AX411 Access Point Feature Overview

Use the Junos OS CLI or J-Web interface on the SRX Series Services Gateway to configure the following features of the AX411 Access Point:

• IEEE 802.11 a/b/g/n wireless client stations—The AX411 Access Point supports dual radios, each of which can be configured independently. A radio can operate in any one of the radio modes specified by the IEEE wireless networking standards such as 802.11a, 802.11b/g, or 802.11n. The radio mode determines what type of wireless clients can connect to the access point. The radio on the access point can be configured to support just one type of client or a mixed mode, where different types of clients can connect to the radio.
• Wireless security for client authentication and encryption, including:
  • Wi-Fi Protected Access (WPA) Personal—A Wi-Fi Alliance standard that includes Advanced Encryption Standard-Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (AES-CCMP) and Temporal Key Integrity Protocol (TKIP) with preshared key authentication. Both WPA and the newer WPA2 standards are supported.
  • WPA Enterprise—A Wi-Fi Aliance standard that includes AES-CCMP and TKIP with RADIUS server authentication.
  • 802.1x—An IEEE standard for dynamic key generation using a RADIUS server that supports Extensible Authentication Protocol (EAP). To work with Windows clients, the authentication server must support Protected EAP (PEAP) and version 2 of the Microsoft Challenge Handshake Authentication Protocol (MS-CHAPv2). This is also known as dynamic WEP.
  • Static Wired Equivalent Privacy (WEP) protocol—A data encryption protocol that uses shared keys.
  • MAC authentication—Wireless clients are allowed or denied network access based on their MAC address. The list of MAC addresses that are allowed or denied can be configured on a RADIUS server or on the SRX Series device.

  The access point also supports no security, which allows any client to connect to the access point. Data transferred between the client and the access point is not encrypted.

• IEEE 802.1x supplicant mode—The access point can operate as an 802.1x supplicant to authenticate itself with the network using EAP-MD5 challenge authentication.
• Multiple virtual access points on a single access point—A virtual access point is a logical simulation of a physical access point and is identified by a configured service set identifier (SSID) and a unique basic service set identifier (BSSID). You can configure up to 16 virtual access points per radio.
• DHCP client—At its initial startup, the access point broadcasts requests for an IP address to an available DHCP server. If there is no DHCP server on the network, a static IP address and default gateway can be configured for the access point.
• Quality-of-service (QoS) configuration based on the Wi-Fi Alliance Wi-Fi Multimedia (WMM) specification—This feature allows you to tune throughput and performance for different types of wireless traffic such as voice over IP (VoIP), audio, video, streaming media, and other IP data.

Related Topics

• AX411 Access Point Hardware Guide
• AX411 Access Point Configuration Overview