Juniper AX411 Configuration And Deployment Guide

10 Copyright © 2011, Juniper Networks, Inc.
APPLICATION NOTE - Configuring and Deploying the AX411 Wireless Access Point
#Enable PoE if you will be using that to power the AX411.
set poe interface all
#DHCP Server cong. A dierent pool per (AP) interface is used
set system services dhcp name-server 4.2.2.2
set system services dhcp pool 192.168.1.0/24 address-range low 192.168.1.2
set system services dhcp pool 192.168.1.0/24 address-range high 192.168.1.254
set system services dhcp pool 192.168.1.0/24 router 192.168.1.1
set system services dhcp pool 192.168.2.0/24 address-range low 192.168.2.2
set system services dhcp pool 192.168.2.0/24 address-range high 192.168.2.254
set system services dhcp pool 192.168.2.0/24 router 192.168.2.1
set system services dhcp pool 192.168.3.0/24 address-range low 192.168.3.2
set system services dhcp pool 192.168.3.0/24 address-range high 192.168.3.254
set system services dhcp pool 192.168.3.0/24 router 192.168.3.1
#Interface congurations
set interfaces ge-0/0/1 unit 0 family inet address 192.168.1.1/24
set interfaces ge-0/0/2 unit 0 family inet address 192.168.2.1/24
set interfaces ge-0/0/3 unit 0 family inet address 192.168.3.1/24
#Security Zones and policies conguration.
#An intra-zone policy is added to allow traic between clients connected to
dierent APs
set security zones security-zone untrust interfaces ge-0/0/0.0
set security zones security-zone WiNet interfaces ge-0/0/1.0
set security zones security-zone WiNet interfaces ge-0/0/1.0 host-inbound-traic
system-services dhcp
set security zones security-zone WiNet interfaces fe-0/0/2.0
set security zones security-zone WiNet interfaces fe-0/0/2.0 host-inbound-traic
system-services dhcp
set security zones security-zone WiNet interfaces fe-0/0/3.0
set security zones security-zone WiNet interfaces fe-0/0/3.0 host-inbound-traic
system-services dhcp
set security policies from-zone WiNet to-zone WiNet policy permit-egress-traic
match source-address any
set security policies from-zone WiNet to-zone WiNet policy permit-egress-traic
match destination-address any
set security policies from-zone WiNet to-zone WiNet policy permit-egress-traic
match application any
set security policies from-zone WiNet to-zone WiNet policy permit-egress-traic
then permit
set security policies from-zone WiNet to-zone untrust policy allow-internet-
access match source-address any
set security policies from-zone WiNet to-zone untrust policy allow-internet-
access match destination-address any
set security policies from-zone WiNet to-zone untrust policy allow-internet-
access match application any
set security policies from-zone WiNet to-zone untrust policy allow-internet-
access then permit
#APs conguration. The APs cong is identical to the one in our previous example
set wlan access-point AP-1 mac-address 00:12:cf:c5:4a:40
set wlan access-point AP-1 access-point-options country US
set wlan access-point AP-1 radio 1 virtual-access-point 0 ssid WiNet
set wlan access-point AP-1 radio 1 virtual-access-point 0 security none
set wlan access-point AP-1 radio 2 virtual-access-point 0 ssid WiNet
set wlan access-point AP-1 radio 2 virtual-access-point 0 security none
#AP-2

Juniper AX411 Specifications

General

Brand	Juniper
Model	AX411
Category	Wireless Access Point
Language	English