How to Install the Wi-Fi Mini-PIM for SRX Series Services

Gateways

IN THIS GUIDE

Wi-Fi Mini-Physical Interface Module Overview | 1

Wi-Fi Mini-PIM Hardware Specifications | 4

Channels and Frequencies Supported on the Wi-Fi Mini-PIM | 5

Country Codes and Regulatory Domains | 9

RF Specifications for the Wi-Fi Mini-PIM | 18

Installing the Wi-Fi Mini-PIM in an SRX Series Services Gateway | 20

Configuring the Wi-Fi Mini-PIM on an SRX Series Services Gateway | 22

Verify the Status of the Wi-Fi Mini-PIM | 27

Upgrading the Firmware on the Wi-Fi Mini-PIM | 30

Regulatory and Safety Information for the Wi-Fi Mini-PIM | 33

Agency Approvals and Compliance Information | 38

Wi-Fi Mini-Physical Interface Module Overview

The Wi-Fi Mini-Physical Interface Module (Mini-PIM) for branch SRX Series Services Gateways provides a branch-in-a-box
solution (which includes an SRX Series device, LTE, and wi-fi) for retail and small office deployments. The Mini-PIM has
an embedded enterprise-class wireless system-on-chip (SOC) that supports the 802.11ac Wave 2 wireless standards. The
Mini-PIM is backward-compatible with 802.11a, 802.11b, 802.11g, and 802.11n.

The Mini-PIM supports the following key features:

• 2x2 MU-MIMO—Enables transmission of data to multiple clients simultaneously.

• Dual radios—Provides concurrent dual bands of 2.4 GHz and 5 GHz. The radios operate in any one of the supported
radio modes. You can configure each radio to support connectivity from one type of client or different types of clients.

• Virtual access points (VAPs)—Allows you to segment the WLAN into multiple broadcast domains that are the wireless
equivalent of Ethernet VLANs. A single access point is segregated into multiple individual VAPs, simulating multiple
access points in a single system.
 2

NOTE: You can configure up to eight VAPs on each radio.

• Configurable transmit power—Enables you to configure the transmit power for each radio on a percentage basis. By
default, the Mini-PIM assigns 100 percent power to each radio at startup to provide maximum coverage.

• Wireless security for client authentication—The Mini-PIM supports the following authentication methods:

• Wi-Fi Protected Access (WPA) Personal, which includes AES-CCMP with preshared key authentication.

• WPA Enterprise, which includes AES-CCMP with RADIUS server authentication.

• MAC authentication, where wireless clients are allowed or denied network access based on their MAC address.

The Mini-PIM is supported on the SRX320, SRX340, SRX345, and SRX550M devices and can coexist with other Mini-PIMs
supported on these devices.

Front Panel Components

Figure 1 shows the front panel of the Wi-Fi Mini-PIM.

Figure 1: Wi-Fi Mini-PIM Front Panel

Table 1 lists the components on the front panel.

Table 1: Wi-Fi Mini-PIM Front Panel Components

Sl. No. Component Description

1, 4 Antenna connectors Two Reverse Polarity SubMiniature version A (RP-SMA) connectors

2 Console Mini-USB Type-B port for debugging purposes

 3

Table 1: Wi-Fi Mini-PIM Front Panel Components (continued)

Sl. No. Component Description

3 LEDs Indicate the status of the Mini-PIM:

2.4 GHz

• Solid green—2G WLAN connection is established

• Blinking green—Data activity
5 GHz

• Solid green—5G WLAN connection is established

• Blinking green—Data activity
STATUS

• Solid green—The Mini-PIM is operational

• Blinking green—Powering on or running diagnostics

Wi-Fi Mini-PIM Models

Three models are available based on the regional wireless standards (see Table 2):

Table 2: Wi-Fi Mini-PIM Models

Model or SKU Supported Region Notes

SRX-MP-WLAN-US United States This model is based on the wireless standards supported in the
United States. The country code is fixed and cannot be changed.

SRX-MP-WLAN-IL Israel This model is based on the wireless standards supported in Israel.
The country code is fixed and cannot be changed.

SRX-MP-WLAN-WW Other countries You can set the country code using the set wlan access-point
ap-name access-point-options country country code command.

For information on country codes, see Table 9

Physical Interface

The physical interface for the Wi-Fi Mini-PIM uses the name wl-x/0/0, where x is the slot on the services gateway where
the Mini-PIM is installed. You can install the Mini-PIM in any of the Mini-PIM slots on the services gateway.
 4

Wi-Fi Mini-PIM Hardware Specifications

Table 3 provides the hardware specifications for the Mini-PIM.

Table 3: Wi-Fi Mini-PIM Hardware Specifications

Description Value

Dimensions H x W x L:

0.79 in. x 3.70 in. x 5.29 in. (2.0 cm x 9.4 cm x 13.43 cm)

Weight 0.29 lb (0.13 kg)

Form factor Mini-PIM

Connector type RP-SMA

Environmental operating temperature 32° F through 104° F (0° C through 40° C)

Storage temperature -40° F through 158° F (-40°C through 70° C)

Relative humidity 5% to 90% noncondensing

Operating altitude 6,000 feet (1828 meters)

Antenna Specifications

The Mini-PIM supports two multi-band swivel-mount dipole antennas, which can be rotated 360 degrees. You can rotate
the antennas and select the angle at which the signal strength is high. Table 4 lists the specifications for the antenna.

Table 4: Specifications for the Wi-Fi Mini-PIM Antenna

Specification Value

Part number EDA-1713-25GR2-A3 (Vendor: MAG.LAYERS)

Operating frequency range • 2.4~2.5 GHz

• 5.15~5.85 GHz

Impedance 50 ohm

Voltage standing wave ratio (VSWR) 2 (maximum)

Return loss 10 dB (maximum)

 5

Table 4: Specifications for the Wi-Fi Mini-PIM Antenna (continued)

Specification Value

Radiation Omnidirectional

Peak gain 5dBi +/-0.5

Polarization Linear

Operating temperature –4° F (–20° C) to 149° F (65° C)

Connector type RP-SMA

Channels and Frequencies Supported on the Wi-Fi Mini-PIM

The Wi-Fi Mini-PIM supports channel bandwidths of 20 MHz, 40 MHz, and 80 MHz. The 2.4 GHz radio supports 20 MHz
and 40 MHz channel bandwidths, and the 5 GHz radio supports 20 MHz, 40 MHz, and 80 MHz channel bandwidths. You
can configure the bandwidth by using the set wlan access-point ap-name radio [1|2] radio-option channel bandwidth
bandwidth command.

NOTE: You can configure the 80 MHz channel bandwidth only on the 5 GHz radio.

The default channel bandwidth is 20 MHz for the 2.4 GHz radio and 40 MHz for the 5 GHz radio. Setting the bandwidth
to 40 MHz or 80 MHz reduces the number of available channels for use.

Table 5 lists the channels supported on the 2.4 GHz radio.

 6

Table 5: Channels Supported on the 2.4 GHz Radio (20 MHz and 40 MHz Bandwidth)

Band Channel Number Center Frequency (MHz)

2400~2483.5 MHz 1 2412

2 2417

3 2422

4 2427

5 2432

6 2437

7 2442

8 2447

9 2452

10 2457

11 2462

12 2467

13 2472

Table 6 through Table 8 list the channels supported on the 5 GHz radio.

Table 6: Channels Supported on the 5 GHz Radio (20 MHz Bandwidth)

Band Channel Number Center Frequency MHz

5150~5250 36 5180
MHz
40 5200

44 5220

48 5240
 7

Table 6: Channels Supported on the 5 GHz Radio (20 MHz Bandwidth) (continued)

Band Channel Number Center Frequency MHz

5250~5350 52 5260
MHz
56 5280

60 5300

64 5320

5470~5725 100 5500

MHz
104 5520

108 5540

112 5560

116 5580

120 5600

124 5620

128 5640

132 5660

136 5680

140 5700

5725~5850 144 5720

MHz
149 5745

153 5765

157 5785

161 5805

165 5825
 8

Table 7: Channels Supported on the 5 GHz Radio (40 MHz Bandwidth)

Band Channel Number Center Frequency MHz

5150~5250 MHz 38 5190

46 5230

5250~5350 MHz 54 5270

62 5310

5470~5725 MHz 102 5510

110 5550

118 5590

126 5630

134 5670

5725~5850 MHz 142 5710

151 5755

159 5795

Table 8: Channels Supported on the 5 GHz Radio (80 MHz Bandwidth)

Band Channel Number Center Frequency MHz

5150~5250 MHz 42 5210

5250~5350 MHz 58 5290

5470~5725 MHz 106 5530

122 5610

5725~5850 MHz 138 5690

155 5775
 9

Dynamic Frequency Selection

Dynamic Frequency Selection (DFS) enables use of 5 GHz frequencies that are typically reserved for radars. In countries
where DFS is required, the Wi-Fi card performs appropriate checks for radar. If radar is detected on a channel, the access
point selects a radar-free channel and performs a 60-second availability check before operating on that channel.

DFS is enabled by default. You can disable DFS by using the dfs-off option:

set wlan access-point ap-name radio 1 radio-options dfs-off

NOTE: Only the 5 GHz radio (radio 1) supports DFS.

You can configure the DFS settings in any of the following ways based on your requirement:

DFS enabled (default)

• If you set the channel number to auto, the access point selects the channel from the list of DFS and non-DFS channels.
If the access point selects a DFS channel and detects radar on the channel, it switches to another channel automatically.

• If you set the channel number manually to a DFS channel and if the access point detects a radar on this channel, it
switches to another channel automatically;

DFS disabled (dfs-off configured)

• If you set the channel number to auto, the access point selects the channel from the list of non-DFS channels.

• If you set the channel number manually, you can configure either a DFS or non-DFS channel. If you configure a DFS
channel with DFS disabled, a warning message appears when you commit the configuration.

Country Codes and Regulatory Domains

Table 9 lists the country codes and regulatory domains supported on the Wi-Fi Mini-PIM.
 10

Table 9: Country Codes and Regulatory Domains

Country
and
Country
Code Model Radio 1 (5 GHz) Radio 2 (2.4 GHz)

Regulatory Regulatory
Domain 20 40 80 Domain 20 40
(5 GHz) MHz MHz MHz (2.4 GHz) MHz MHz

Australia SRX-MP-WLAN-WW FCC6 36, 40, 38, 46, 42, 58, WORLD 1 to 13 1 to 13
(AU) 44, 48, 54, 62, 106,
52, 56, 102, 138,
60, 64, 110, 155
100, 134,
104, 142,
108, 151,
112 159
116,
132,
136,
140,
144,
149,
153,
157,
161,
165

Canada (CA) SRX-MP-WLAN-WW FCC6 36, 40, 38, 46, 42, 58, FCCA 1 to 11 1 to 11
44, 48, 54, 62, 106,
52, 56, 102, 138,
60, 64, 110, 155
100, 134,
104, 142,
108, 151,
112 159
116,
132,
136,
140,
144,
149,
153,
157,
161,
165
 11

Table 9: Country Codes and Regulatory Domains (continued)

Country
and
Country
Code Model Radio 1 (5 GHz) Radio 2 (2.4 GHz)

Regulatory Regulatory
Domain 20 40 80 Domain 20 40
(5 GHz) MHz MHz MHz (2.4 GHz) MHz MHz

China (CN) SRX-MP-WLAN-WW APL14 36, 40, 38, 46, 42, 58, WORLD 1 to 13 1 to 13
44, 48, 54, 62, 155
52, 56, 151,
60, 64, 159
149,
153,
157,
161,
165

European SRX-MP-WLAN-WW ETSI11 36, 40, 38, 46, 42, 58, WORLD 1 to 13 1 to 13
Union 44, 48, 54, 62, 106,
52, 56, 102, 122
60, 64, 110,
100, 118,
104, 126,
108, 134
112,
116,
120,
124,
128,
132,
136,
140,
149,
153,
157,
161,
165
 12

Table 9: Country Codes and Regulatory Domains (continued)

Country
and
Country
Code Model Radio 1 (5 GHz) Radio 2 (2.4 GHz)

Regulatory Regulatory
Domain 20 40 80 Domain 20 40
(5 GHz) MHz MHz MHz (2.4 GHz) MHz MHz

India (IN) SRX-MP-WLAN-WW APL15 36, 40, 38, 46, 42, 58, WORLD 1 to 13 1 to 13
44, 48, 54, 62, 155
52, 56, 151,
60, 64, 159
149,
153,
157,
161,
165

Indonesia SRX-MP-WLAN-WW APL2 149, 151, 155 ETSIC 1 to 13 1 to 13

(ID) 153, 159
157,
161,
165

Israel (IL) SRX-MP-WLAN-IL ETSI3 36, 40, 38, 46, 42, 58 WORLD 1 to 13 1 to 13
44, 48, 54, 62
52, 56,
60, 64

Japan (JP) SRX-MP-WLAN-WW MKK5 36, 40, 38, 46, 42, 58, MKKC 1 to 13 1 to 13
44, 48, 54, 62, 106,
52, 56, 102, 122
60, 64, 110,
100, 118,
104, 126,
108, 134
112
116,
120,
124,
128,
132,
136,
140
 13

Table 9: Country Codes and Regulatory Domains (continued)

Country
and
Country
Code Model Radio 1 (5 GHz) Radio 2 (2.4 GHz)

Regulatory Regulatory
Domain 20 40 80 Domain 20 40
(5 GHz) MHz MHz MHz (2.4 GHz) MHz MHz

Malaysia SRX-MP-WLAN-WW FCC11 36, 40, 38, 46, 42, 58, WORLD 1 to 13 1 to 13
(MY) 44, 48, 54, 62, 106,
52, 56, 102, 122,
60, 64, 110, 155
100, 118,
104, 126,
108, 151,
112 159
116,
120,
124,
128,
149,
153,
157,
161,
165
 14

Table 9: Country Codes and Regulatory Domains (continued)

Country
and
Country
Code Model Radio 1 (5 GHz) Radio 2 (2.4 GHz)

Regulatory Regulatory
Domain 20 40 80 Domain 20 40
(5 GHz) MHz MHz MHz (2.4 GHz) MHz MHz

Mexico SRX-MP-WLAN-WW FCC3 36, 40, 38, 46, 42, 58, ETSIC 1 to 13 1 to 13
(MX) 44, 48, 54, 62, 106,
52, 56, 102, 122,
60, 64, 110, 138,
100, 118, 155
104, 126,
108, 134,
112 142,
116, 151,
120, 159
124,
128,
132,
136,
140,
144,
149,
153,
157,
161,
165
 15

Table 9: Country Codes and Regulatory Domains (continued)

Country
and
Country
Code Model Radio 1 (5 GHz) Radio 2 (2.4 GHz)

Regulatory Regulatory
Domain 20 40 80 Domain 20 40
(5 GHz) MHz MHz MHz (2.4 GHz) MHz MHz

New SRX-MP-WLAN-WW FCC3 36, 40, 38, 46, 42, 58, ETSIC 1 to 13 1 to 13
Zealand 44, 48, 54, 62, 106,
(NZ) 52, 56, 102, 122,
60, 64, 110, 138,
100, 118, 155
104, 126,
108, 134,
112 142,
116, 151,
120, 159
124,
128,
132,
136,
140,
144,
149,
153,
157,
161,
165
 16

Table 9: Country Codes and Regulatory Domains (continued)

Country
and
Country
Code Model Radio 1 (5 GHz) Radio 2 (2.4 GHz)

Regulatory Regulatory
Domain 20 40 80 Domain 20 40
(5 GHz) MHz MHz MHz (2.4 GHz) MHz MHz

South Korea SRX-MP-WLAN-WW APL9 36, 40, 38, 46, 42, 58, WORLD 1 to 13 1 to 13
(KR) 44, 48, 54, 62, 106,
52, 56, 102, 122,
60, 64, 110, 155
100, 118,
104, 126,
108, 134,
112 151,
116, 159
120,
124,
128,
132,
136,
140,
149,
153,
157,
161,
165
 17

Table 9: Country Codes and Regulatory Domains (continued)

Country
and
Country
Code Model Radio 1 (5 GHz) Radio 2 (2.4 GHz)

Regulatory Regulatory
Domain 20 40 80 Domain 20 40
(5 GHz) MHz MHz MHz (2.4 GHz) MHz MHz

United SRX-MP-WLAN-US FCC8 36, 40, 38, 46, 42, 58, FCCA 1 to 11 1 to 11
States (US) 44, 48, 54, 62, 106,
52, 56, 102, 122,
60, 64, 110, 138,
100, 118, 155
104, 126,
108, 134,
112, 142,
116, 151,
120, 159
124,
128,
132,
136,
140,
144,
149,
153,
157,
161,
165
 18

Table 9: Country Codes and Regulatory Domains (continued)

Country
and
Country
Code Model Radio 1 (5 GHz) Radio 2 (2.4 GHz)

Regulatory Regulatory
Domain 20 40 80 Domain 20 40
(5 GHz) MHz MHz MHz (2.4 GHz) MHz MHz

Vietnam SRX-MP-WLAN-WW FCC3 36, 40, 38, 46, 42, 58, WORLD 1 to 13 1 to 13
(VN) 44, 48, 54, 62, 106,
52, 56, 102, 122,
60, 64, 110, 138,
100, 118, 155
104, 126,
108, 134,
112 142,
116, 151,
120, 159
124,
128,
132,
136,
140,
144,
149,
153,
157,
161,
165

RF Specifications for the Wi-Fi Mini-PIM

Table 10 lists the radio frequency (RF) specifications.

Table 10: RF Specifications for the Wi-Fi Mini-PIM

Receive Sensitivity (+/-2 Target Power (+/-2

Operating Mode Data Rate dBm) Per Chain dBm) Per Chain

802.11ac (VHT20) MCS0 -88 16.5

MCS8 -67 11.5

 19

Table 10: RF Specifications for the Wi-Fi Mini-PIM (continued)

Receive Sensitivity (+/-2 Target Power (+/-2

Operating Mode Data Rate dBm) Per Chain dBm) Per Chain

802.11ac (VHT40) MCS0 -87 16

MCS9 -64 11

802.11ac (VHT80) MCS0 -83 15.5

MCS9 -59 10.5

802.11a 6 Mbps -88 16.5

54 Mbps -72 13

802.11b 1 Mbps -94 18

11 Mbps -85 18

802.11g 6 Mbps -89 18

54 Mbps -71 15

802.11n (HT20) 2G MCS0 -88 18

MCS7 -70 15

802.11n (HT20) 5G MCS0 -88 16.5

MCS7 -71 13

802.11n (HT40) 2G MCS0 -86 17

MCS7 -68 15

802.11n (HT40) 5G MCS0 -86 16

MCS7 -69 12
 20

Installing the Wi-Fi Mini-PIM in an SRX Series Services

Gateway

You can install the Mini-PIM in any of the Mini-PIM slots on the services gateway.

NOTE: You can install only one Wi-Fi Mini-PIM in a services gateway.

To install the Mini-PIM in a services gateway:

1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to the grounding
point on the back of the services gateway.

2. Power off the services gateway by briefly pressing the Power button on the front panel. Wait for the Power LED to
turn off before proceeding. Disconnect the services gateway from the power source.

3. Slide the Mini-PIM in the slot until it lodges firmly in the services gateway. Tighten the screws on each side of the
Mini-PIM faceplate. See Figure 2.

Figure 2: Installing the Wi-Fi Mini-PIM

g022546

4. Attach the antennas to the front panel of the Mini-PIM. You can attach the antenna by using one of the following
methods:

• Direct mounting—Attach the antennas to the RP-SMA connectors on the front panel (see Figure 3).
 21

Figure 3: Attaching the Antennas (Direct Mounting)

g022547
• Using an external antenna base—Attach the antennas to the antenna base. Connect the cables from each antenna
base to the RP-SMA connectors on the front panel (see Figure 4).

Figure 4: Attaching the Antennas Using an Antenna Base (Rack Mounting)

g022549

For SRX320 Services Gateways, which can be mounted on a wall, you can mount the antennas on a wall as shown
in Figure 5.
 22

Figure 5: Attaching the Antennas Using an Antenna Base (Wall Mounting)

> 11 in.
(27.9 cm)

g022548

5. Power on the services gateway.

Configuring the Wi-Fi Mini-PIM on an SRX Series Services

Gateway

IN THIS SECTION

Wi-FI Mini-PIM Configuration Overview | 23

Radio Configuration Overview | 23

Virtual Access Point Configuration Overview | 24

Configure the Wi-Fi Mini-PIM | 25

 23

Wi-FI Mini-PIM Configuration Overview

Before you configure the Mini-PIM, configure the network settings on the SRX Series device and connect the device to
your network. For details, see the Hardware Guide for your SRX Series device.

Configure the following settings for the access point:

• Name for the access point

• Interface—The interface name for the AP is denoted as wl-x/0/0, where x is the slot on the services gateway in which
the Mini-PIM is installed.

• Country code—The country code setting identifies the regulatory domain in which the access point operates.

The country code affects the radio modes, list of channels, and radio transmission power that the access point can
support. Ensure that you select the correct code for the country in which the access point operates so that the access
point complies with the regulations in that country.

• Location

Radio Configuration Overview

Radios on the Wi-Fi Mini-PIM are enabled by default. You can disable a radio. When a radio is disabled, the Mini-PIM
does not send messages to the connected wireless clients.

Configure the following options for each radio:

• Channel number—If you select auto, then the Mini-PIM chooses the channel automatically.

• Mode—You can configure the radio to support either one type of wireless client or a mixed mode. In mixed mode,
different types of clients can connect to the radio. Table 11 lists the modes supported on each radio.

Table 11: Supported Modes on the Wi-Fi Mini-PIM radios

Radio Supported Modes

Radio 1 (5.0 GHz) • an—802.11a and 802.11n clients operating on 5 GHz frequency can connect to the
access point
• acn—802.11a, 802.11n and 802.11ac clients operating on 5 GHz frequency can connect
to the access point

Radio 2 (2.4 GHz) • gn—802.11g, and 802.11n clients operating in 2.4 GHz frequency can connect to the
access point. This is the default mode for this radio.

• Bandwidth—Radio 1 supports 20 MHz, 40 MHz, and 80 MHz bandwidths, whereas Radio 2 supports only 20 MHz and
40 MHz bandwidths.

• Transmit power—You can configure transmit power on a per-radio basis. By default, the access point assigns 100 percent
power to each radio at startup.
 24

To increase the network capacity, place access points closer together and reduce the value of the transmit power. This
helps reduce overlap and interference among access points. A lower transmit power setting can also keep your network
more secure because weaker wireless signals are less likely to propagate outside the physical location of your network.

Virtual Access Point Configuration Overview

Virtual access points (VAPs) allow different security mechanisms for different clients on the same access point. Each VAP
is identified by a configured service set identifier (SSID) and a unique basic service set identifier (BSSID). The access point
supports multiple VLANs, which can be distributed across VAPs and radios.

You can enable or disable each VAP independently. If you do not configure the VAPs, the radio is turned on if you configured
the radio settings. The radio is off if you do not configure the radio settings or if you turned off the radio using the radio-off
option.

A VAP is configured on a per-radio basis. You can configure up to eight VAPs per radio. You can map up to 16 ESSIDS to
individual VLANs.

Configure the following options for each VAP:

• Description (maximum length is 64)

• SSID value for the VAP

The SSID value can include letters, numerals, and the special characters - . _ @ #. The minimum length is 2 characters
and maximum length is 32 characters.

• VLAN ID for the VAP

The value can be in the range of 1 through 4094.

• The maximum number of clients that can connect to the VAP

The value can be in the range of 1 through 127.

• Security for the access point

The access point supports several types of authentication methods that are used by clients to connect to the access
point. Each of these methods and their associated parameters are configurable on a per-VAP basis. By default, no security
is in place on the access point, and therefore any wireless client can associate with it and access your LAN. You configure
secure wireless client access for each VAP.

• None—The data transferred between clients and the access point is not encrypted. This method allows clients to
associate with the access point without any authentication.

• Wi-Fi Protected Access (WPA) Enterprise—A Wi-Fi Alliance standard that uses RADIUS server authentication with
AES-CCMP cipher suite. This mode allows the use of high security encryption along with centrally managed user
authentication. Only the WPA2 standard is supported.

• Wi-Fi Protected Access (WPA) Personal—A Wi-Fi Alliance standard that uses preshared key (PSK) authentication with
AES-CCMP cipher suite. Only the WPA2 standard is supported.
 25

Configure the Wi-Fi Mini-PIM

To configure the Wi-Fi Mini-PIM:

1. Configure the Wi-Fi interface:

a. Configure an IP address for the Wi-Fi interface:

user@host# set interfaces wl-x/0/0 unit 0 family inet address ip-address

b. Configure the address pool. The DHCP address pool and the Wi-FI interface must be in the same network.

user@host# set access address-assignment pool dhcp-pool family inet network ip-address

user@host# set access address-assignment pool dhcp-pool family inet range range low ip-address

user@host# set access address-assignment pool dhcp-pool family inet range range high ip-address

user@host# set access address-assignment pool dhcp-pool family inet dhcp-attributes router ip-address

c. Enable DHCP server on the interface:

user@host# set system services dhcp-local-server group group interface wl-x/0/0.0

The eth0 interface on the Mini-PIM enables the DHCP client. If the DHCP server is enabled on the wl interface,
the server assigns an IP address to the eth0 interface. You can view the binding information by issuing the show
dhcp server binding command.

d. Assign the interface to a security zone:

user@host# set security zones security-zone zone interfaces wl-x/0/0.0

2. Configure the access point settings:

a. Configure the interface:

user@host# set wlan access-point name interface wl-x/0/0

b. Set the country code (applicable only for SRX-MP-WLAN-WW models):

user@host# set wlan access-point name access-point-options country country-code

NOTE: If you do not set the country code for the SRX-MP-WLAN-WW models, the Mini-PIM
considers the country code as US. You cannot set the country code for the SRX-MP-WLAN-US
and SRX-MP-WLAN-IL models.

c. Set the location:

user@host# set wlan access-point name location location

d. Commit the configuration:

user@host# commit

3. Configure the radio settings.

Note that radio 1 operates at 5 GHz and radio 2 operates at 2.4 GHz.
 26

NOTE: Changing the radio settings can cause the access point to stop and restart system processes. If
this occurs, wireless clients that are connected to the access point will temporarily lose connectivity. We
recommend that you change radio settings when WLAN traffic is low.

a. Configure the radio mode. Radio 1 supports acn and an modes. Radio 2 supports only gn.

For radio 1:

user@host# set wlan access-point name radio 1 radio-options mode [acn|an]

For radio 2:

user@host# set wlan access-point name radio 2 radio-options mode gn

b. Configure the channel number.

user@host# set wlan access-point name radio [1|2] radio-options channel number number

c. Configure the channel bandwidth. The default channel bandwidth is 20 MHz for the 2.4 GHz radio and 40 MHz
for the 5 GHz radio.

user@host# set wlan access-point name radio [1|2] radio-options channel bandwidth [20|40|80]

d. Configure the transmit power:

user@host# set wlan access-point name radio [1|2] radio-options transmit-power percent

e. Commit the configuration:

user@host# commit

4. Configure the virtual access point (VAP) settings.

a. Enter an ID and description for the VAP:

user@host# set wlan access-point name radio [1|2] virtual-access-point id description description

b. Enter the SSID value:

user@host# set wlan access-point name radio [1|2] virtual-access-point id ssid ssid

c. Configure one of the following security authentication methods for the VAP:

• none—The data transferred between clients and the access point is not encrypted. Clients can associate with the
access point without any authentication.

user@host# set wlan access-point name radio [1|2] virtual-access-point id security none

• wpa-enterprise—The device authenticates through an 802.1X-compliant RADIUS server.

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise cipher-suites
ccmp

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise radius-server
ip-address

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise radius-port
port
 27

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise radius-key
secret-key

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise wpa-version
v2

• wpa-personal—The device uses preshared keys (PSKs) or a passphrase for authentication and encryption. Keys
are stored on the device and on all wireless clients. You do not need to configure a separate authentication server.

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal cipher-suites
ccmp

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal key-type
[ascii|hex]

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal key key

user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal wpa-version
v2

d. Specify the upload and download rate limits:

user@host# set wlan access-point name radio [1|2] virtual-access-point id upload-limit upload-limit-rate

user@host# set wlan access-point name radio [1|2] virtual-access-point id download-limit download-limit-rate

e. Specify the maximum number of clients that can be connected to the VAP:

user@host# set wlan access-point name radio [1|2] virtual-access-point id maximum-stations number

f. Commit the configuration:

user@host# commit

Verify the Status of the Wi-Fi Mini-PIM

Table 12 lists the commands that you can use to verify and monitor the status of the Wi-Fi Mini-PIM:
 28

Table 12: Commands to Verify and Monitor the Status of the Wi-Fi Mini-PIM

Command Purpose

show wlan access-points ap-name Displays the status of the specific access point.
detail
Sample output:

Active access point detail information

Access Point : wap3

Type : Internal
Location : Default Location
Serial Number : EV1119AF0030
Firmware Version : v1.2.7
Alternate Version : v1.1.0
Country : US
Access Interface : wl-2/0/0
System Time : Mon Dec 23 06:50:50 UTC 2019
Packet Capture : Off
Ethernet Port:
MAC Address : 00:00:5e:00:53:c0
Radio1:
Status : On
MAC Address : 00:00:5e:00:53:12
Temperature : 44
Mode : IEEE 802.11a/n/ac
Channel : 120
Bandwidth : 40
Transmit Power : 100
Radio2:
Status : On
MAC Address : 00:00:5e:00:53:56
Temperature : 45
Mode : IEEE 802.11g/n
Channel : 11
Bandwidth : 20
Transmit Power : 100

show wlan access-points Displays the details of all the access points configured on the Mini-PIM.

Sample:

Active access points information

Access-Point Type Interface Radio-mode/Channel/Bandwidth

wap3 Int wl-2/0/0 acn/120/40, gn/11/20
 29

Table 12: Commands to Verify and Monitor the Status of the Wi-Fi Mini-PIM (continued)

Command Purpose

show wlan access-points ap-name Displays the details about the clients connected to the access point.
client-associations

Access point client associations information

Access point: wap3

VAP Client MAC Address Auth Packets Rx/Tx
Bytes Rx/Tx
Radio1:5g_vap1 00:00:5e:00:53:a3 NO 3/0
510/0

show wlan access-points ap-name Displays details about the virtual access points.
virtual-access-points all
Virtual access points information

Access point name: wap3

Radio1:
VAP1:
SSID : 5g_vap1
MAC Address : 00:00:5e:00:53:12
Maximum Station : 127
Broadcast SSID : Enable
Station Isolation : Disable
Upload Limit : Disable
Download Limit : Disable
VLAN ID : 0
Station MAC Filter : Disable
Traffic Statistics:
Input Bytes : 0
Output Bytes : 0
Input Packets : 0
Output Packets : 0
 30

Table 12: Commands to Verify and Monitor the Status of the Wi-Fi Mini-PIM (continued)

Command Purpose

VAP2:
SSID : 5g_vap2
MAC Address : 00:00:5e:00:53:12
Maximum Station : 100
Broadcast SSID : Enable
Station Isolation : Disable
Upload Limit : Disable
Download Limit : Disable
VLAN ID : 0
Station MAC Filter : Disable
Traffic Statistics:
Input Bytes : 0
Output Bytes : 0
Input Packets : 0
Output Packets : 0
Radio2:
VAP0:
SSID : 2.4g
MAC Address : 00:00:5e:00:53:56
Maximum Station : 127
Broadcast SSID : Enable
Station Isolation : Disable
Upload Limit : Disable
Download Limit : Disable
VLAN ID : 0
Station MAC Filter : Disable
Traffic Statistics:
Input Bytes : 10802142
Output Bytes : 6228524
Input Packets : 100266
Output Packets : 36413

Upgrading the Firmware on the Wi-Fi Mini-PIM

To upgrade the firmware on the Mini-PIM using the CLI:

 31

1. Identify the currently installed firmware (jfirmware) version:

user@host > show system firmware

NOTE: Ensure that you upgrade the firmware on the Mini-PIM to the latest version.

The Current version field in the output displays the firmware version that is currently installed on the Mini-PIM. If
there is a newer version of the firmware at https://www.juniper.net/support/downloads/?p=junos-srx#sw, then
proceed to the next step to download the latest firmware.

Part Type Tag Current Available Status

version version
FPC 2
PIC 0 MWAP_FW 1 1.1.2 0 OK
Routing Engine 0 RE BIOS 0 3.0 3.6 OK
Routing Engine 0 RE BIOS Backup 1 3.0 3.6 OK

2. Download the appropriate firmware version from https://www.juniper.net/support/downloads/?p=junos-srx#sw:

user@host > request system software add /var/tmp/jfirmware-<version>-signed.tgz

NOTE: Ensure that the Junos OS version installed on the device is the same as the firmware version or
later. To know the Junos OS version, issue the show version command.

3. Ensure that the latest firmware version is downloaded to the Mini-PIM by verifying the Available version field. The
Available version field should list the latest firmware version that was downloaded in Step 2.

user@host > show system firmware

Part Type Tag Current Available Status

version version
FPC 2
PIC 0 MWAP_FW 1 1.1.8 1.2.1 OK
Routing Engine 0 RE BIOS 0 3.0 3.6 OK
Routing Engine 0 RE BIOS Backup 1 3.0 3.6 OK

4. Upgrade the firmware on the device:

user@host > request system firmware upgrade pic fpc-slot <fpc-slot-number>

Part Type Tag Current Available Status

version version
FPC 2
 32

PIC 0 MWAP_FW 1 1.1.8 1.2.1 OK

Perform indicated firmware upgrade ? [yes,no] (no) yes

Firmware upgrade initiated, use "show system firmware" to monitor status.

5. Verify that the firmware is upgraded successfully. The status should show OK.

user@host > show system firmware

Part Type Tag Current Available Status

version version
FPC 2
PIC 0 MWAP_FW 1 1.1.8 1.2.1 PROGRAMMING (0%)
Routing Engine 0 RE BIOS 0 3.0 3.6 OK
Routing Engine 0 RE BIOS Backup 1 3.0 3.6 OK

user@host > show system firmware

Part Type Tag Current Available Status

version version
FPC 2
PIC 0 MWAP_FW 1 1.1.8 1.2.1 PROGRAMMING (25%)
Routing Engine 0 RE BIOS 0 3.0 3.6 OK
Routing Engine 0 RE BIOS Backup 1 3.0 3.6 OK

user@host > show system firmware

Part Type Tag Current Available Status

version version
FPC 2
PIC 0 MWAP_FW 1 1.1.8 1.2.1 PROGRAMMING (100%)
Routing Engine 0 RE BIOS 0 3.0 3.6 OK
Routing Engine 0 RE BIOS Backup 1 3.0 3.6 OK

user@host > show system firmware

Part Type Tag Current Available Status

version version
FPC 2
PIC 0 MWAP_FW 1 1.1.8 1.2.1 UPGRADED
SUCCESSFULLY
Routing Engine 0 RE BIOS 0 3.0 3.6 OK
Routing Engine 0 RE BIOS Backup 1 3.0 3.6 OK

user@host > show system firmware

 33

Part Type Tag Current Available Status

version version
FPC 2
PIC 0 MWAP_FW 1 1.2.1 1.2.1 OK
Routing Engine 0 RE BIOS 0 3.0 3.6 OK
Routing Engine 0 RE BIOS Backup 1 3.0 3.6 OK

The device reboots after the firmware is upgraded. Note that if you issue the show system firmware command after
the reboot, the Current Version field shows the latest firmware version and the Available Version field shows zero(0).

Regulatory and Safety Information for the Wi-Fi Mini-PIM

FCC

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of
the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential
installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee
that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct
the interference by one of the following measures:

• Reorient or relocate the receiving antenna

• Increase the separation between the equipment and receiver

• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected

• Consult the dealer or an experienced radio/TV technician for help

FCC Caution

Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s
authority to operate this equipment.

This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. This device
complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not
cause harmful interference, and (2) this device must accept any interference received, including interference that may
cause undesired operation.
 34

For products available in the USA/Canada markets, only channels 1–11 can be operated. Selection of other channels is
not possible.

FCC Radiation Exposure Statement

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment
should be installed and operated with minimum distance 20 cm between the radiator and your body.

This module is intended for OEM integrator. This module is only FCC authorized for the specific rule parts listed on the
grant, and that the host product manufacturer is responsible for compliance to any other FCC rules that apply to the host
not covered by the modular transmitter grant of certification. The final host product still requires Part 15 Subpart B
compliance testing with the modular transmitter installed. Additional testing and certification may be necessary when
multiple modules are used.

Users Manual of the End Product

In the users manual of the end product, the end user has to be informed to keep at least 20 cm separation with the antenna
while this end product is installed and operated. The end user has to be informed that the FCC radio-frequency exposure
guidelines for an uncontrolled environment can be satisfied.

The end user has to also be informed that any changes or modifications not expressly approved by the manufacturer could
void the user's authority to operate this equipment.

This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: (1) this device may
not cause harmful interference and (2) this device must accept any interference received, including interference that may
cause undesired operation.

Label of the End Product

The final end product must be labeled in a visible area with the following " Contains TX FCC ID: QZEMPWAPUS ".

This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: (1) this device may
not cause harmful interference and (2) this device must accept any interference received, including interference that may
cause undesired operation.
 35

Industry Canada Statement

• This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two
conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including
interference that may cause undesired operation of the device.

Le présent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence.
L'exploitation est autorisée aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2)
l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d'en
compromettre le fonctionnement.

• For product available in the USA/Canada market, only channels 1–11 can be operated. Selection of other channels is
not possible.

Pour les produits disponibles aux États-Unis / Canada du marché, seul le canal 1 à 11 peuvent être exploités. Sélection
d'autres canaux n'est pas possible.

• Dynamic Frequency Selection (DFS) for devices operating in the bands 5250- 5350 MHz, 5470-5600 MHz and 5650-5725
MHz.

Sélection dynamique de fréquences (DFS) pour les dispositifs fonctionnant dans les bandes 5250-5350 MHz, 5470-5600
MHz et 5650-5725 MHz.

• This device and its antenna(s) must not be co-located with any other transmitters except in accordance with IC
multi-transmitter product procedures. Referring to the multi-transmitter policy, multiple-transmitter(s) and module(s)
can be operated simultaneously without reassessment permissive change.

Cet appareil et son antenne (s) ne doit pas être co-localisés ou fonctionnement en association avec une autre antenne
ou transmetteur.

• The device for operation in the band 5150–5250 MHz is only for indoor use to reduce the potential for harmful
interference to co-channel mobile satellite systems.

les dispositifs fonctionnant dans la bande 5150-5250 MHz sont réservés uniquement pour une utilisation à l’intérieur
afin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux.

• The maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall be such that
the equipment still complies with the e.i.r.p. limit.

le gain maximal d’antenne permis pour les dispositifs utilisant les bandes 5250-5350 MHz et 5470-5725 MHz doit se
conformer à la limite de p.i.r.e.

• The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still
complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate.

le gain maximal d’antenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz) doit se conformer à la limite
de p.i.r.e. spécifiée pour l’exploitation point à point et non point à point, selon le cas.

• For indoor use only.

Pour une utilisation en intérieur uniquement

• This radio transmitter [4558A-MPWAPUS] has been approved by Innovation, Science and Economic Development
Canada to operate with the antenna types listed below, with the maximum permissible gain indicated. Antenna types
 36

not included in this list that have a gain greater than the maximum gain indicated for any type listed are strictly prohibited
for use with this device.

Cet émetteur radio [4558A-MPWAPUS] a été approuvé par Innovation, Sciences et Développement économique Canada
pour fonctionner avec les types d’antennes énumérés ci-dessous, avec le gain maximal admissible indiqué. Les types
d'antenne non inclus dans cette liste et dont le gain est supérieur au gain maximal indiqué pour l'un des types répertoriés
ne sont strictement pas autorisés pour une utilisation avec cet appareil.

Antenna Information:

Model Name Antenna Type Connector Gain (dBi) Remark

EDA-1713-25G R2-A3 Dipole Antenna Reversed-SMA 5.5 2.4 GHz

EDA-1713-25G R2-A3 Dipole Antenna Reversed-SMA 5.5 5 GHz

• IC Radiation Exposure Statement

This equipment complies with IC RSS-102 radiation exposure limits set forth for an uncontrolled environment. This
equipment should be installed and operated with minimum distance 20 cm between the radiator and your body.

Cet équipement est conforme aux limites d'exposition aux rayonnements IC établies pour un environnement non contrôlé.
Cet équipement doit être installé et utilisé avec un minimum de 20 cm de distance entre la source de rayonnement et
votre corps.

• IMPORTANT NOTE

This module is intended for OEM integrator. The OEM integrator is responsible for the compliance to all the rules that
apply to the product into which this certified RF module is integrated. Additional testing and certification may be
necessary when multiple modules are used.

NOTE IMPORTANTE:

Ce module est destiné à l'intégrateur OEM. L’intégrateur OEM est responsable de la conformité à toutes les règles
applicables au produit dans lequel ce module RF certifié est intégré. Des tests et une certification supplémentaires
peuvent être nécessaires lorsque plusieurs modules sont utilisés.

• USERS MANUAL OF THE END PRODUCT

In the users manual of the end product, the end user has to be informed to keep at least 20 cm separation with the
antenna while this end product is installed and operated. The end user has to be informed that the IC radio-frequency
exposure guidelines for an uncontrolled environment can be satisfied.

MANUEL UTILISATEUR DU PRODUIT FINAL:

Dans le manuel d'utilisation du produit final, l'utilisateur final doit être informé de la nécessité de maintenir une distance
d'au moins 20 cm avec l'antenne pendant l'installation et l'utilisation du produit final. L'utilisateur final doit être informé
que les consignes d'IC relatives à l'exposition aux fréquences radioélectriques pour un environnement non contrôlé
peuvent être satisfaites.

The end user has to also be informed that any changes or modifications not expressly approved by the manufacturer
could void the user's authority to operate this equipment. Operation is subject to the following two conditions: (1) this
device may not cause harmful interference (2) this device must accept any interference received, including interference
that may cause undesired operation.
 37

L'utilisateur final doit également être informé du fait que tout changement ou modification non expressément approuvé
par le fabricant pourrait annuler son droit d'utiliser cet équipement. Son utilisation est soumise aux deux conditions
suivantes: (1) cet appareil ne doit pas causer d'interférences nuisibles (2) cet appareil doit accepter toutes les interférences
reçues, y compris celles pouvant entraîner un fonctionnement indésirable.

• LABEL OF THE END PRODUCT

The final end product must be labeled in a visible area with the following " Contains IC: 4558A-MPWAPUS ".

The Host Model Number (HMN) must be indicated at any location on the exterior of the end product or product packaging
or product literature which shall be available with the end product or online.

ETIQUETTE DU PRODUIT FINAL

Le produit final doit être étiqueté de manière visible dans la zone "Contient le composant IC: 4558A-MPWAPUS".

Le numéro de modèle de l'hôte (HMN) doit être indiqué à n'importe quel endroit à l'extérieur du produit final ou de
l'emballage du produit final ou de la documentation sur le produit, qui doit être disponible avec le produit final ou en
ligne.

CE

This equipment complies with EU radiation exposure limits set forth for an uncontrolled environment. This equipment
should be installed and operated with minimum distance 20cm between the radiator & your body.

All operational modes:

2.4 GHz: 802.11b, 802.11g, 802.11n (HT20), 802.11n (HT40)

5 GHz: 802.11a, 802.11n (HT20), 802.11n (HT40), 802.11ac (VHT20), 802.11ac (VHT40), 802.11ac (VHT80)

The frequency and the maximum transmitted power in EU are listed below:

• 2412-2472 MHz: 19.99 dBm

• 5180-5240 MHz: 22.97 dBm

• 5260-5320 MHz: 22.91 dBm

• 5500-5700 MHz: 28.16 dBm

The device is restricted to indoor use only when operating in the 5150 to 5350 MHz frequency range.

AT BE BG HR CY CZ DK

EE FI FR DE EL HU IE

IT LV LT LU MT NL PL

PT RO SK SI ES SE UK
 38

Japan Statement

5 GHz band (W52, W53): Indoor use only

Agency Approvals and Compliance Information

The interface module complies with the following standards:

• Safety

• CAN/CSA-C22.2 No. 60950-1 Information Technology Equipment - Safety

• CAN/CSA C22.2 No. 62368-1-2014, Audio/Video, Information and Communication Technology Equipment – Safety

• UL 60950-1 (2nd Edition) Information Technology Equipment - Safety

• UL 62368-1, Audio/Video, Information and Communication Technology Equipment – Safety

• IEC 60950-1: 2005/ A2:2013 Information Technology Equipment - Safety (All country deviations): CB Scheme

• IEC 62368-1: 2014 Audio/Video, Information and Communication Technology Equipment – Safety CB Scheme

• EN 60950-1: 2006/ A2:2013 Information Technology Equipment

• EMC Emissions

• EN55022 / CISPR22

• EN55032/CISPR 32

• CFR 47 Part 15

• ICES003

• VCCI-V-3

• AS/NZS CISPR22

• AS/NZS CISPR 32

• AS/NZS 2772.2

• AS/NZS 4268

• EN300-386

• EN61000-3-2

• EN61000-3-3

• EN61000-6-1

• United States

• FCC 15.247 (2.4 GHz and 5 GHz)

• FCC 15.407 (5 GHz) and DFS

 39

• FCC RF Exposure calculation

• Canada

• IC RSS-102 and RSS-247 (2.4Ghz and 5.8Ghz) and DFS

• Europe

• ETSI EN 300 328 (2.4 GHz)

• ETSI EN 300 893 (5GHz) and DFS

• EN 50385, EN 50665, and EN 62311 RF exposure

• ETSI EN 301 489-1

• ETSI EN 301 489-17

• EMC Immunity

• EN55024/CISPR24

• EN300-386

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the
United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the
property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper
Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Copyright © 2019
Juniper Networks, Inc. All rights reserved. December 2019.