Configuring WiFi Access Point mode

This procedure describes the steps to configure the JACE-8000 WiFi subsystem to run in Access Point mode. This configuration can be used either as a network for WiFi enabled field bus devices, or to provide browser or Workbench access to local tools.
Prerequisites:
  • JACE is licensed and commissioned
  • Platform connection to the JACE
  • WiFi Selector Switch in the Off (center) position
 
NOTE: The WiFi subsystem must be "stopped" before any WiFi process can be started.
 
 
CAUTION: When enabling more than one LAN port (applies to LAN1, LAN2, WiFi) the IP address for each must be configured on different subnets, otherwise the ports will not function correctly.
 

Perform the following steps:
  1. Click the Access Point Mode tab and if desired, modify the Adapter IPv4 Address and/or Adapter IPv4 Netmask values.
    This sets the address that a client uses to make an IP connection to this unit over WiFi while the unit is functioning as an access point.
     
    NOTE: The IP address and subnet must not conflict with IP addresses used for wired Ethernet connections.
     
  2. In the Access Point Config area, in the SSID field enter a name for this access point. Best practice is to replace the default name with a unique, meaningful network name.
    1. Click the Broadcast SSID checkbox only if configuring the Access Point for field bus devices so that the devices can detect the access point signal and connect as needed. Otherwise, for security purposes do not click the checkbox.
  3. Enter a Passkey for the unit.
    This sets a password that a client must enter to connect to this network.
  4. Click the Wpa Mode dropdown list and select the preferred mode. WPA WPA2 (default) will accommodate most devices.
  5. Click the Key Management Algorithms dropdown list and select an encryption algorithm appropriate for the devices connecting to this network.
  6. Click the Pairwise Cipher Suites dropdown list and select an encryption suite appropriate for the devices connecting to this network.
  7. In the Inactivity Timeout field, enter the desired value (minutes).
    This sets a limit on the amount of time a client connection can be inactive. On reaching the timeout limit, the WiFi adapter is shutdown completely. To restart it you must move the WiFi Selector Switch on the unit to “OFF”. Once the WiFi Current State shows “Stopped”, move the WiFi Selector Switch back to “ACC”.
     
    NOTE: If the intended WiFi usage is for tool connectivity, then set this value to some small number of minutes. If the intended WiFi usage is for field bus integration, then set this value to “0” to disable the Timeout functionality.
     
     
    CAUTION: An Access Point represents a potential target for a cyber attack. Leaving the Access Point disabled by default is a recommended security best practice.
     
  8. To configure a Whitelist, click the Enable Whitelist checkbox and then click theWhitelist button to enter MAC addresses that will be permitted to join the network (up to 16 addresses ).
    A “whitelist” is an inventory of known MAC addresses that are permitted (or denied) access to the WiFi access point, functioning as an added layer of protection for the WiFi network. The format is six HEX addresses separated by a colon, for example: 08:00:69:E2:01:FE
  9. To configure Mode and Channel properties, click the Config Channel button and select from the following:
     
    NOTE: For WW models, if the country code is not pre-configured then you must set it. For US models, the country code is pre-configured at the factory and cannot be changed.
     
    1. Click the County Code dropdown list and select the appropriate two-digit country code.
    2. Click the Radio Mode dropdown list and select an appropriate 802.11 type for the devices connecting to the network.
    3. Click the Bandwidth dropdown list and select the preferred frequency band. The HT20 HT40 (default) option accommodates most devices.
    4. Click the Channel dropdown list and select the least congested channel number for your network.
  10. In the DHCP Server Settings pane, in the Client Range Low field, enter the lowest IP address for the range.
     
    NOTE: The adapter IP should be in the same subnet, but not in the range of addresses defined here.
     
  11. In the Max Number of Clients Allowed field, enter the maximum number of WiFi clients that can attach at a given time (maximum limit is 16).
     
    NOTE: The WiFi adapter supports a maximum of 3 user interface devices such as, a laptop, PC, or WiFi phone, at a given time. However, this limit is not enforced.
     
  12. Click Save.
     
    NOTE: The saved configuration changes take effect the next time WiFi is started.
     
  13. In the platform WiFi Configuration view, click on the WiFi Enabled dropdown list and select True.
  14. Move the WiFi Selector Switch on the controller to the ACC (left) position to start the WiFi adapter.
The WiFi subsystem is enabled in Access Point mode. In the WiFi Configuration view, the Current WiFi State field should reflect only the states that are valid for access point mode, such as SAP starting, SAP running.