AP Properties Tab - Advanced Settings

Field Description
Poll Timeout Type the timeout value, in seconds. The AP uses this value to trigger re-establishing the link with the Controller if the AP does not get an answer to its polling. The default value is 10 seconds.
Note: If you are configuring session availability, the Poll Timeout value should be 1.5 to 2 times of Detect link failure value on AP Properties screen. For more information, see Session Availability.
Secure Tunnel This feature, when enabled, provides encryption, authentication, and key management between the AP and/or controllers.

Select the desired Secure Tunnel mode from the drop-down list:

  • Disabled — Secure Tunnel is turned off and no traffic is encrypted. All SFTP/SSH/TFTP traffic works normally.
  • Encrypt control traffic between AP & Controller — An IPSEC tunnel is established from the AP to the controller and all SFTP/SSH/TFTP/WASSP control traffic is encrypted. The AP skips the registration and authentication phases and when selected, the Secure Tunnel Lifetime feature can be configured.
  • Encrypt control and data traffic between AP & Controller — This mode only benefits routed/bridged@Controller Topologies. An IPSEC tunnel is established from the AP to the controller and all SFTP/SSH/TFTP/WASSP control and data traffic is encrypted. The AP skips the registration and authentication phases, and when selected, the Secure Tunnel Lifetime feature can be configured.
    Note: This option is not available for AP3805 models.
  • Debug mode — An IPSEC tunnel is established from the AP to the controller, no traffic is encrypted, and all SFTP/SSH/TFTP traffic works normally. The AP skips the registration and authentication phases and when selected, the Secure Tunnel Lifetime feature can be configured.
Note: Changing a Secure Tunnel mode will automatically disconnect and reconnect the AP.
Secure Tunnel Lifetime Available when Secure Tunnel is enabled. Enter an interval (in hours) at which time the keys of the IPSEC tunnel are renegotiated.
Note: Changing the Secure Tunnel Lifetime setting will not cause any AP disruption.
Enable SSH Access Click to enable or disable SSH for access to the AP.
Enable location-based-service Enable or disable the AeroScout, Ekahau, or Centrak location-based service for the AP.
Maintain client session in event of poll failure Select this option (if using a bridged at AP VNS) if the AP should remain active if a link loss with the controller occurs. This option is enabled by default.
Restart service in the absence of controller Select this option (if using a bridged at AP VNS) to ensure the AP‘s radios continue providing service if the AP‘s connection to the controller is lost. If this option is enabled, it allows the AP to start a bridged at AP VNS even in the absence of a controller.
Use broadcast for disassociation Select this option if you want the AP to use broadcast disassociation when disconnecting all clients, instead of disassociating each client one by one. This affects the behavior of the AP under the following conditions:
  • If the AP is preparing to reboot or to enter one of the special modes (DRM initial channel selection).
  • If a BSSID is deactivated or removed on the AP.

This option is disabled by default.

Enable LLDP Click to enable or disable the AP from broadcasting LLDP information. This option is disabled by default.

If SNMP is enabled on the controller and you enable LLDP, the LLDP Confirmation dialog is displayed.

Select one of the following:

  • Proceed (not recommended) — Select this option to enable LLDP and keep SNMP running, and then click OK.
  • Disable SNMP publishing, and proceed — Select this option to enable LLDP and disable SNMP, and then click OK.
  • For more information on enabling SNMP, see the ExtremeWireless Maintenance Guide.
Announcement Interval If LLDP is enabled, type how often the AP advertises its information by sending a new LLDP packet. This value is measured in seconds.

If there are no changes to the AP configuration that impact the LLDP information, the AP sends a new LLDP packet according to this schedule.

Note: The Time to Live value cannot be directly edited. The Time to Live value is calculated as four times the Announcement Interval value.
Announcement Delay If LLDP is enabled, type the announcement delay. This value is measured in seconds. If a change to the AP configuration occurs which impacts the LLDP information, the AP sends an updated LLDP packet. The announcement delay is the length of time that delays the new packet delivery. The announcement delay helps minimize LLDP packet traffic.
IP Multicast Assembly Click to Enable or Disable IP Multicast Assembly on this Wireless AP. If Enabled, the IP Multicast Assembly feature assembles multicast data packets that were too large to fit the MTU size of the tunnel and were fragmented in order to fit the tunnel header. This feature is disabled by default.
Balanced Channel List Power This simplifies power settings such that they will function across all channels in the channel plan.
Low Power Mode Override Check this box to have AP ALWAYS operate in 4x4 mode regardless what was negotiated with the Switch PoE4). When this option is cleared, the AP operates in 2x2 or 4x4 depending on what was negotiated with the Switch Poe using the 2-event classification.
  • AP sends Power Status element with "Power Mode" set to 0 when "Low Power Mode Override" is enabled.
  • AP sends Critical Log "entering Low Power mode" only if negotiated .af with Switch PoE (Power over Ethernet) and "Low Power Mode Override" is disabled. Otherwise, Critical Log is not sent.
  • Controller "Network Health" shows only APs that have "Power Mode" bit in the Power Status set to 1.

The default configuration for the 39xx AP is disabled.

LED Select the desired LED pattern from the drop-down list. Options include: Off, WDS Signal Strength, Identify, and Normal.
Real Capture Click Start to start real capture server on the AP. Default capture server timeout is set to 300 seconds and the maximum configurable timeout is 1 hour. While the capture session is active, the AP interface operates in promiscuous mode.

From the Wireshark GUI, set the capture interface to the IP address of the selected AP, and select null authentication. Once Wireshark connects to the AP, the AP's interfaces are listed as available to capture traffic. eth0 is the wired interface, wlan0 is the 5Ghz interface, and wlan1 is the 2.4Ghz interface. You can capture bidirectional traffic on eth0, wifi0, and wifi1. The capture on wifi0 and wifi1 does not include internally generated hardware packets by the capturing AP.

The capturing AP does not report its own Beacons, Retransmission, Ack and 11n Block Ack. If this information is needed, perform Real Capture from a second AP that is close by. Make sure both APs are on the same wireless channel. Broadcast an SSID to activate the radios, but do not broadcast the SSID of the AP you are troubleshooting. You do not want the clients to connect to the second capturing AP.

Capture statistics are found on the Active Wireless APs report (see Viewing Statistics for APs).