to edit the device group profile.| Field | Description |
|---|---|
| Client Balancing | Enable Client Balancing to distribute client traffic evenly between APs in the same device group. In an availability pair, create a device group on each appliance. The APs within each group will manage the user traffic within that group. |
| Secure Tunnel | Provides encryption, authentication, and key management between the
APs and/or the appliance.
Valid values are:
|
| Enforce Manufacturing Certificate |
Enforce usage of Extreme PKI (Public Key Infrastructure) when establishing an IKE (Internet Key Exchange) tunnel. Both APs and controllers have Extreme CA certificates installed. When this setting is enabled, the controller accepts only APs that provide Extreme PKI.
Note: Supported on the Defender Adapter SA201 and on ExtremeWireless AP39xx models, as well as AP models that use Wi-Fi 6 or higher standards.
This setting is not supported on the AP305C, AP410C, and AP460C access point models. There must be successful mutual authentication between the AP and the controller. If either side of the authentication fails, the tunnel is rejected. When this setting is enabled, APs that are not PKI capable (self-signed certificates) are not able to connect to the controller. The default is to clear this option. When this setting is cleared, the controller accepts the AP with a self-signed certificate. With either type of certificate, the certificate type must match in both directions before the authenticated tunnel is established. Authentication failure messages are logged in the ExtremeCloud IQ Controller Events Log. You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
| Enable SSH | Determines if the Secure Shell (SSH) protocol is enabled. When
enabling SSH, configure a password. To configure an SSH password, go to . By default, this setting is disabled.
You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
| Session Persistence | Determines if session persistence is enabled. A persistent session directs a client's requests to the same backend server for the duration of a session or the time it takes to complete a task or transaction. Enable this option to improve request response times. For more information, see Session Persistence. |
| Mgmt VLAN ID | Separating management traffic from user data traffic is a recommended practice. The Management VLAN ID is 1 by default. AP will accept wireless client even without active connection to ExtremeCloud IQ Controller on WLANs where ExtremeCloud IQ Controller is not required. You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
| Tagged | Check this option to tag the VLAN. Tagged VLAN packets include header information that identifies which VLAN the packet is coming from. You can configure Tagged VLANs for all APs in a device group from the device group Profile Advanced Settings dialog. You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
| MTU | Maximum Transmission Unit in bytes. Determines the maximum size of each packet in transmission. Standard size is 1500 bytes. ExtremeCloud IQ Controller now supports up to 1800 bytes. This enhancement facilitates the transport of MU-DATA specifically between the AP and the appliance (or between the AP and a switch for VxLAN deployments) without incurring fragmentation. You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
| Scan Mode | Note: Supported on AP models that use Wi-Fi 6 or higher standards.
Determines which channels are scanned. Valid values are:
|
| Scan Channels | Select channels for a custom channel list used for Custom Scan Scan Mode. |
| ETH1 Port Function |
Note: Ports on the Universal APs are labeled ETH0, ETH1. Other AP models label the ports GE1, GE2 or LAN1, LAN2. In all cases, the user interface field labels display "ETH0" and "ETH1" which are equivalent to GE1 and GE2, and LAN1 and LAN2, respectively.
Specify the ETH1 Port Function. Choose from the following options:
|
| USB Power |
Note:
This parameter applies to all ExtremeWireless APs that have a USB port. Controls the provision of power to the USB port to power
external USB devices. Options are:
When conditions are met to provide power to the USB port, the amount of power available depends on the AP model, the power source, and radio Operational Mode setting. For further detail, see the AP model descriptions in ExtremeCloud IQ Controller Managed Wireless Access Points. You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
| PSE Power |
Supports power to the PSE port for supported APs: AP310i/-1, AP310e, AP302W, and AP5010. Functions in the AP3xx configuration Profile are set to Auto by default. Valid values are:
You can override the configuration Profile setting for
individual APs from the dialog for the selected AP.
Note: Configuration override is supported for APs running AP firmware version 10.02.01 or later.
|
| AP Event Level | Specify the message level you want included in the AP Events Log. Valid values are:
Additionally, you can override the configuration Profile setting for multiple APs from the Device List Actions menu. |
| Poll Timeout (Seconds) | Specifies the amount of time, in seconds, to wait for a response from
the appliance before rebooting. The value range is from 3 to 600 unless the controller is in
an availability pair without fast failover enabled. The default value is 3.
Note: When configuring a Mesh network, we recommend a value of at least 60 for the non-root AP configuration.
Also, it is a best practice to wait at least 60 seconds before applying configuration changes that are applicable to non-root (node) access points. This ensures that possible interruptions due to configuration changes are resolved. You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
| FA Auth Key | Configure custom Fabric Attach Authentication Keys up to 32 characters
in length. Extreme Networks products offer a default FA AUTHENTICATION-KEY built-in. You can
also configure a custom key here. When a custom key is not configured, the default key is
used. The following special characters are not supported: {? <tab> \ “ `}
You can override the configuration Profile setting for
individual APs from the dialog for the selected AP.
Note: Supported on AP39xx and AP models that use Wi-Fi 6 or higher standards.
|
| LED Status | The LED Status pattern can indicate that the configuration profile has been pushed to the destination appliance. Select an LED Status. Valid values are:
You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
| Selective DNS Interception |
Note: This feature is supported on ExtremeWireless APs models using Wi-Fi 6 or higher standards.
Allows eligible APs to respond to DNS queries for a user-defined fully qualified custom domain name (FQDN). If there is a match, the response to the sender includes the AP's hostname and IP address. This allows connected clients to discover the AP's identity through standard DNS queries. If there is no match, the query is treated as normal DNS traffic and is forwarded without interception. By using an established hostname naming convention, an end-user administrator can identify the responding AP's site name and determine a wireless client's physical or logical location. Enter a valid FQDN (e.g., MyApName.com) consisting of up to 64 characters, including letters (A–Z, a–z), numbers (0-9), hyphens (-), and periods (.). |
| PEAP User Name and Password | Ability to configure the PEAP (Protected Extensible Authentication
Protocol) user name and password for all devices in a device group or for a specific device
override. Used to pre-provision devices for authorization to connect to the network.
Credential and Certificate installation procedures are supported for AP39xx, SA201 Adapter,
and AP models that use Wi-Fi 6 or higher standards.
You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
| Client Bridge
Roaming RSS threshold [dBm] | Determines when the client bridge AP scans to find a better infrastructure AP. Valid range: from -128 to -40. Default value is -70. A scan is triggered when one or more of the following criteria is met:
You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
| Smart Poll | Reports link stability between the AP and a selected target (typically the appliance). Select Enable to enable the report feature and configure the following settings:
You can override the configuration Profile setting for individual APs from the dialog for the selected AP. |
