Configuring the Wireless Network
The Device view > Network section > Wireless page shows the wireless network settings (if applicable). 802.1x is supported.
You can configure your main wireless network and also additional guest or standard wireless networks (VAPs - Virtual Access Points).
-
Guest wireless network - Uses hotspot by default and is unprotected by default (no password required).
-
Standard wireless network - A protected wireless network that requires a password and does not use a hotspot by default.
To delete the wireless network, go to Device > Local Network.
If multiple wireless networks (VAPs) are defined, they appear in a table below 2.4 GHz Radio band and 5GHz Radio band.
1530 / 1550 appliances only: The wireless client search options depend on the frequency that the appliance is set to. The Quantum Spark Appliance can be configured to only one frequency at a time and is set to 2.4 GHz by default. If you change the radio settings to 802.11 ac or 802.11 ac/n, the frequency automatically changes to 5 GHz. The Home > System page shows the wireless radio status.
1570 / 1590 appliances only: There are two radio transmitters: 2.4 GHz and 5 GHz. Each network is configured separately under a specified transmitter.
You can add a new guest or standard wireless network and edit, delete, or disable existing ones. You can also clone an existing VAP.
To enable or disable the Wireless network:
-
Move the slider to select the ON or OFF option. If you configured multiple VAPs, selecting Off turns them all off.
Note - If you turn off the wireless radio and then turn it back on, the VAPs remain disabled. To enable the VAPs, you must select the relevant entries in the table and click Enable.
-
To disable or enable the Wireless network, click Disable/Enable.
To configure a new wireless network or edit an existing network:
-
Select the Radio band (4GHz or 5GHz) and make sure the slider button is turned to ON.
-
For a new network, click Configure.
The New Wireless Network window opens in the Configuration tab.
-
For an existing network, click Edit Settings.
The Edit Wireless Network window opens in the Configuration tab.
-
Enter the Network name (SSID).
Example: Guest1 or VAP 1. If you are editing an existing network, the name is already present in the field.
-
Select to Enable network, or Use hotspot when connecting to network to redirect users to the Hotspot
An area that offers a wireless local area network with Internet access, through a router connected to a link to an Internet service provider. portal before you allow access from this interface.
Hotspot configuration is defined in the Device > Network section > Hotspot page.
-
Select the Wireless radio transmitter from the pull-down menu.
-
In the Wireless Security section, select one of these:
-
Protected network (recommended).
-
If you select this option, select these values from the pull-down menus:
-
Security type.
-
Encryption type.
-
Authenticate using - Password or RADIUS server (Enterprise mode).
Note - The RADIUS servers (Enterprise mode) option requires defining RADIUS servers in the Users & Objects view > User Management section > Authentication Servers page. Each user that tries to connect to the wireless network is authenticated through the RADIUS server. This option is also known as WPA Enterprise. The 802.1x standard is used when WiFi Authentication is set to RADIUS Server (Enterprise Mode).
Optional: Click Show to show the password
-
-
Enter the Network password or click Generate.
-
-
Unprotected network (not recommended).
If you select this option, every wireless client can connect to this network. Transferred data is not encrypted.
-
-
In the Advanced Settings section (click the arrow to expand), select the options you want:
-
Hide the Network Name (SSID) - When selected, this wireless network name is not automatically shown to users scanning for them. Connecting to the wireless network can be done manually by adding the specified network name.
-
Allow Station-to-Station traffic - When selected, allows wireless stations on this network to communicate with each other. When cleared, traffic between wireless stations is blocked.
-
Enable MAC address filtering. If you select his option, you must enter the MAC addresses that are allowed to access the wireless network.
-
-
Click Apply
Dynamic Frequency Selection (DFS)
|
Note - This is only in specific appliances that support WiFi6. |
DFS detects radar signals that must be protected against interference from 5.0 GHz (802.11ac/n) radios. When these signals are detected, the operating frequency of the 5.0 GHz (802.11ac/n) radio switches to one that does not interfere with the radar systems. DFS is enabled by default.
802.1x (a/n/ac/ax) is supported. The advantage of WiFi6 (802.11ax) is that it improves the throughput-per-area in high-density scenarios such as corporate offices, shopping malls, and dense residential areas.
For configuration, see below.
Cloning a VAP
You cannot edit or change the main wireless network, or if you have only a single VAP. However, if you clone your VAP, you can edit the clone.
To clone a VAP:
Select the relevant VAP and click Clone.
When you clone a VAP, it receives a new name which is displayed in the table. The IP address and range of the clone is different than the original.
To edit a VAP:
-
Double click the relevant VAP or select the VAP name and click Edit.
The Edit window opens.
Note - The wireless radio transmitter is the main VAP.
-
In the Configuration tab, select the Wireless Security:
-
Protected network (recommended) – Enter the relevant information in the fields.
-
Unprotected network (not recommended)
-
-
In the Advanced Settings section (click the arrow to expand), select the options you want:
-
Hide the Network Name (SSID) - When selected, this wireless network name is not automatically shown to users scanning for them. Connecting to the wireless network can be done manually by adding the specified network name.
-
Allow Station-to-Station traffic - When selected, allows wireless stations on this network to communicate with each other. When cleared, traffic between wireless stations is blocked.
-
Enable MAC address filtering. If you select his option, you must enter the MAC addresses that are allowed to access the wireless network.
-
-
Click Apply
Additional Configurations

-
Click Password Protected.
The Change Wireless Network Password window opens.
-
Select the Security type from pull-down menu.
-
Authenticate using: Select Password or RADIUS server from the pull-down menu.
-
For Password - Enter a new password (if want to change).
Optional: Click Show to show the characters.
-
Select if you want to Allow access from this network to local networks (wireless network is trusted).
-
Click Apply

-
For these fields, select options from the pull-down menu:
-
Operation mode
-
Channel width
-
Channel
-
Transmitter power
-
-
In the Advanced section, select the Guard Interval from the pull-down menu.
-
For DFS
With DFS, an unlicensed device can use 5HGz frequency bands already allocated to radar systems without causing interference. The device detects the presence of a radar system on the channel and if the radar level is above a specific threshold, it vacates that channel and selects an alternate channel.
-
For Operation mode, select 802.11a/n/ac/ax (5GHz).
-
Select Enable DFS - When using an automatic channel, this allows the ACS (Automatic Channel Selection) to select channels that overlap with radar frequencies.
Note - It may take a minute for the wireless radio to start transmitting due to regulation requirements when using channels that overlap with radar frequencies.
-
Select Enable Zero-Wait DFS - This allows the wireless module to use a non-DFS channel while scanning channels that overlap with radar frequencies and build a list of "vacant" channels (channels where radar is not detected). When this list is ready, the wireless module may instantly switch to a non DFS channel without turning off the wireless transmission.
Note - If you select the 160MHz channel width, make sure to disable the Enable Zero-Wait DFS feature. Otherwise, due to regulatory constraints, it may take at least 1 hour before the wireless module starts to transmit in 160MHz channel width.
-
-
Click Apply
Depending on your configuration, you may see other tabs and sections to configure:

-
Interface Connection
Assigned to - Select Separate network or one of the existing configured networks.
When selecting a separate network configure this information:
-
IP address - IPv4 and IPv6 addresses
-
Subnet mask - for IPv4 addresses
-
Prefix length - for IPv6 addresses
-
-
DHCPv4 Server
Select one of the options:
-
Enabled - Enter the IP address range and if necessary the IP address exclude range.
The appliance's own IP address is automatically excluded from this range
You can also exclude or reserve specific IP addresses by defining network objects in the Users & Objects view > Network Resources section > Network Objects page.
Reserving specific IP addresses requires the MAC address of the device.
-
Relay - Enter the DHCP server IP address.
-
Disabled.
-
-
IPv6 Auto Assignment
Select one of the options:
-
SLAAC (Stateless Address Autoconfiguration)
-
DHCPv6 Server - Enter the IP address range and the IP addresses exclude range
-
DHCPv6 Server Relay - Enter the DHCPv6 server IP address and the Secondary DHCPv6 server IP address
-

These options create automatic rules that are shown in the Access Policy > Firewall section > Policy page.
-
Allow access from this network to local networks (Wireless network is trusted)
-
Log traffic from this network to local networks

-
Click the checkbox to exclude from DNS proxy.
-
Advanced IPv6 settings
Configure the Router advisement fields.

|
Note - In IPv4-only mode, this tab is called DHCPv4 Settings. |
The values for the DHCP options configured on this tab will be distributed by the DHCP server to the DHCP clients.
-
DNS Server Settings (For DHCPv6/SLAAC)
Select one of these options:
-
Auto - Use the DNS configuration of the device
-
Use the following IP addresses - Enter the first, second and third DNS servers
-
-
DNS Server Settings (For DHCPv4)
These settings are effective only if a DHCPv4 server is enabled.
-
Auto - Use the DNS configuration of the device
-
Use the following IP addresses - Enter the first, second and third DNS servers
-
-
Default Gateway
Select one of these options:
-
Use this gateway's IP address as the default gateway.
-
Use the following IP address - Enter an IP address to use as the default gateway.
-
-
WINS
-
Use the WINS servers configured for the internet connection
-
Use the following WINS servers - Enter the IP addresses of the First and Second WINS servers.
- Lease
- Other Settings
-
Time servers
-
Call manager
-
TFTP server
-
TFTP boot file
-
X Window display manager
-
Avaya IP phone
-
Nortel IP phone
-
Thomson IP phone
- Custom Options
Select one of these options:
Lease time - Configure the timeout in hours for a single device to retain a dynamically acquired IP address.
You can optionally configure these additional parameters so they will be distributed to DHCP clients:
Lets you add custom options that are not listed above.
For each custom option, you must configure the name, tag, type, and data fields.
When you finish editing the network, click Apply.
Wireless Scheduler
You can set scheduled times for the WiFi to be on and off and differentiate between radio bands (2.4GHz and 5GHz).
Use Case: Configure the WiFi to work only during normal business hours and be off on weekends when the business is closed.

-
In the Wireless page, click Radio Settings.
The Wireless Radio Edit window opens.
-
Go to the Scheduler tab.
-
Move the slider to ON to enable the wireless scheduler.

-
In the Wireless Radio Edit window, click New.
-
Under Choose Days, select the specific days.
-
Click Apply