Getting Started with the Default Access Point Configuration

This topic describes the basic workflow to enable wireless clients to connect to the WLAN using the default configuration for the AX411 Access Point.

If you have not configured a licensed access point before connecting it to the SRX Series device, the factory-default configuration is applied to the access point. You can later configure the access point; the new configuration is applied as well as the access point name you specified.

Note: The following procedures describe the configuration of the SRX Series Services Gateway to enable operation of the AX411 Access Point with its default configuration. You do not need to configure the access point itself before powering it on; wireless clients using Wireless Zero Configuration (WZC) can automatically connect to the default SSID on the access point. To change the default configuration of an access point, you must first specify the MAC address of the access point to be configured. The MAC address links an access point to its configuration.

Before you begin:

• Read Understanding Wireless Client Requirements and Understanding Access Point Licensing
• Refer to the AX411 Access Point Getting Started Guide and the AX411 Access Point Hardware Guide for details about hardware components.
• Read the release notes for your release. The release notes contain important release-related information about release-specific features, unsupported features, changed features, fixed issues, and known issues. The information in the release notes is more current than the information in this guide.

To enable wireless clients to connect to the WLAN with the default configuration for the AX411 Access Point:

1. Install the SRX Series Services Gateway, configure network settings, and connect the device to your network. For details, see the installation guide for your SRX Series device.
2. Install access point licenses as needed in the SRX Series Services Gateway (see Understanding Access Point Licensing). You can install multiple licenses to increase the number of access points that can be configured and managed through the SRX Series device. See the AX411 Access Point Getting Started Guide for instructions.
3. We highly recommend that you connect the AX411 Access Point to a PoE port on the SRX Series device. We also recommend that the port on the SRX Series device be a Gigabit Ethernet port to accommodate the traffic flow from wireless clients.

   To enable the PoE-capable port on the SRX Series device:

   user@host# set poe interface ge-0/0/0

   To enable all PoE-capable ports on the SRX Series device:

   user@host# set poe interface all

   An external power supply for the access point can be used in conjunction with an SRX Series device that does not support PoE.

4. Configure the port on the SRX Series device to which the access point is connected as either a Layer 2 (see Understanding Layer 2 Forwarding Operations) or Layer 3 interface. The DHCP server on the SRX Series device should be configured to provide IP addresses to the access point and to wireless clients that connect to the WLAN.
   • To configure the port as a Layer 2 interface and configure a DHCP server and address pool on the SRX Series device:
     user@host# set interfaces vlan unit 0 family inet address 16.1.1.1/24 user@host# set vlans v100 vlan-id 100 user@host# set vlans v100 l3-interface vlan.0 user@host# set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members v100 user@host# set system services dhcp router 16.1.1.1user@host# set system services dhcp pool 16.1.1.1/24 address-range high 16.1.1.30 low 16.1.1.10

     If the port is a trunk port, configure the native VLAN ID:

     user@host# set interfaces ge-0/0/0 unit 0 family ethernet-switching port-mode trunk native-vlan-id 100
   • To configure the port as a Layer 3 interface and configure a DHCP server and address pool on the SRX Series device:
     user@host# set interfaces ge-0/0/0 unit 0 family inet address 16.1.1.1/24user@host# set system services dhcp router 16.1.1.1user@host# set system services dhcp pool 16.1.1.1/24 address-range high 16.1.1.30 low 16.1.1.10
5. Add the interface to a security zone and configure a security policy to allow traffic to and from the zone. The ge-0/0/0 interface is in the Trust security zone by default; other interfaces on the SRX Series device must be added to a security zone. The default security policy on the SRX Series device permits application traffic to and from the Trust zone. If you connect the access point to the ge-0/0/0 port on the SRX Services Gateway with the default security policy, no further configuration is required on the SRX Series device.

   For more information about configuring security zones and security policies, see the Junos OS Security Configuration Guide.

6. Connect the access point to a PoE port on the SRX Series Services Gateway. The access point powers on and the DHCP client on the access point broadcasts requests for an IP address.

   Upon obtaining an IP address, the access point begins broadcasting the default SSID juniper-default.

7. Connect your wireless clients to this default SSID using the following configuration:
   • WPA2 Personal security
   • Advanced Encryption Standard-Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (AES-CCMP) encryption
   • Preshared key juniper-wireless for authentication

   Note: Client users can allow Windows Wireless Zero Configuration (WZC) service to automatically configure wireless settings on the client.

Related Topics

• Factory-Default Configuration
• AX411 Access Point Configuration Overview