Configure WAN interface as an upstream interface role type.
OpenWiFi has the concept of a virtual dataplane where the definition of the interface role as upstream or downstream defines if the port involved will be mapped to WAN or LAN operation.
It is possible to re-map any LAN port to function as a normal WAN port in this way.
When the above Interfaces configuration section is created, respond to the dialog prompt to define an upstream WAN then select from the available configuration options to suit the local environment.
Within WAN(upstream) select the port(s) for use as WAN.
A variety of Services features may be associated to logical interfaces. For this example, enable LLDP.
IP Addressing set as IPv4 Dynamic will cause the WAN port to use DHCP for its provisioned internet access. IPv6 dual stack is also supported.
Within the example Venue, creating configuration templates for SSIDs and or other configuration sections are possible. These configurations are inherited by device memberships at the Venue level.
It is therefore possible to define many Venues, Child Venues, and Inventory associations that will then inherit global templates from entities in addition to aggregation of Venue templates.
An SSID may be associated to any defined interface. This association ties the dataplane of the VAP together with the underlying interface services.
Most common SSID configuration parameters have been exposed via the Provisioning UI. Consult the OpenWiFi data model for the full list of available configurations.
From an interface select Add SSID.
Assigning the name of the SSID is also the name of the Wi-Fi network itself. Operating band of the SSID is configurable by radio.
| Option | Description |
|---|---|
Name
SSID name
BSS-Mode
Operating mode of the wireless interface Options: ap, sta, mesh, wds-ap, wds-sta
WiFi-Bands
Radio selection(s) of the SSID
Authentication Protocol
Wireless encryption of the BSS Options: None, WPA-PSK, WPA2-PSK, PSK2-RADIUS, WPA-PSK/WPA2-PSK Personal Mixed, WPA-Enterprise, WPA2-Enterprise EAP-TLS, WPA-Enterprise-Mixed, SAE, WPA2/WPA3 Transitional, WPA3-Enterprise EAP-TLS, WPA3-192-Enterprise EAP-TLS
Authentication Key
Pre-Share dKey (when applicable)
Authentication IEEE80211w
Management Frame Protection Options: disabled, optional, required
Advanced
Hidden-SSID
Disable Beacon Frame Broadcast
Services
Services associated to the SSID logical interface
Maximum-Clients
Total associations permitted to the SSID
Purpose
Role the SSID performs Options: Default, Onboarding-AP, Onboarding-sta
Isolate-Clients
BSS client isolation
Power-Save
Unscheduled Automatic Power Save Delivery
Broadcast-Time
Beacon Time Broadcast
Unicast-Conversion
Convert Multicast to Unicast over BSS
Proxy-ARP
BSS respond to host ARP on behalf of another client
Disassoc-Low-Ack
Disassociate stations based on excessive transmission failures or other indications of connection loss
Vendor-Elements
This option allows embedding custom vendor specific IEs inside the beacons of a BSS in AP mode.
Multi-PSK
Per device shared key to associate with unique VLAN
Rate Limit
Ingress-rate and Egress-rate in Mb/s
RRM
Neighbor reporting LCI measurement element content Civic-Location element content FTM-Responder Fine Timing Measurement Stationary-AP
Roaming
Message-Exchange Generate PSK Domain-Identifier PMK-R0-Key-Holder PMK-R1-Key-Holder
