close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Overview
play_arrow Maintaining Interface Modules
- Maintaining the SRX Series Interface Modules
play_arrow Contacting Customer Support and Returning the Module
- Returning the SRX Series Modules

list Table of Contents

English

Wi-Fi Mini-Physical Interface Module Overview
Wi-Fi Mini-PIM Hardware Specifications
Channels and Frequencies Supported on the Wi-Fi Mini-PIM
Country Codes and Regulatory Domains
RF Specifications for the Wi-Fi Mini-PIM
Installing the Wi-Fi Mini-PIM in an SRX Series Services Gateway
Configuring the Wi-Fi Mini-PIM on an SRX Series Services Gateway
Verify the Status of the Wi-Fi Mini-PIM
Upgrading the Firmware on the Wi-Fi Mini-PIM

keyboard_arrow_right

Wi-Fi Mini-Physical Interface Module

date_range 21-May-21

arrow_backward

arrow_forward

Wi-Fi Mini-Physical Interface Module Overview

The Wi-Fi Mini-Physical Interface Module (Mini-PIM) for branch SRX Series Services Gateways provides a branch-in-a-box solution (which includes an SRX Series device, LTE, and wi-fi) for retail and small office deployments. The Mini-PIM has an embedded enterprise-class wireless system-on-chip (SOC) that supports the 802.11ac Wave 2 wireless standards. The Mini-PIM is backward-compatible with 802.11a, 802.11b, 802.11g, and 802.11n.

The Mini-PIM supports the following key features:

2x2 MU-MIMO—Enables transmission of data to multiple clients simultaneously.
Dual radios—Provides concurrent dual bands of 2.4 GHz and 5 GHz. The radios operate in any one of the supported radio modes. You can configure each radio to support connectivity from one type of client or different types of clients.
Virtual access points (VAPs)—Allows you to segment the WLAN into multiple broadcast domains that are the wireless equivalent of Ethernet VLANs. A single access point is segregated into multiple individual VAPs, simulating multiple access points in a single system.

Note:
You can configure up to eight VAPs on each radio.
Configurable transmit power—Enables you to configure the transmit power for each radio on a percentage basis. By default, the Mini-PIM assigns 100 percent power to each radio at startup to provide maximum coverage.
Wireless security for client authentication—The Mini-PIM supports the following authentication methods:
- Wi-Fi Protected Access (WPA) Personal, which includes AES-CCMP with preshared key authentication.
- WPA Enterprise, which includes AES-CCMP with RADIUS server authentication.
- MAC authentication, where wireless clients are allowed or denied network access based on their MAC address.

The Mini-PIM is supported on the SRX320, SRX340, SRX345, and SRX550M devices and can coexist with other Mini-PIMs supported on these devices.

Front Panel Components
Wi-Fi Mini-PIM Models
Physical Interface

Front Panel Components

Figure 1 shows the front panel of the Wi-Fi Mini-PIM.

Figure 1: Wi-Fi Mini-PIM Front Panel

Table 1 lists the components on the front panel.

Table 1: Wi-Fi Mini-PIM Front Panel Components
Sl. No.	Component	Description
1, 4	Antenna connectors	Two Reverse Polarity SubMiniature version A (RP-SMA) connectors
2	Console	Mini-USB Type-B port for debugging purposes
3	LEDs	Indicate the status of the Mini-PIM: 2.4 GHz Solid green—2G WLAN connection is established Blinking green—Data activity 5 GHz Solid green—5G WLAN connection is established Blinking green—Data activity STATUS Solid green—The Mini-PIM is operational Blinking green—Powering on or running diagnostics

Wi-Fi Mini-PIM Models

Three models are available based on the regional wireless standards (see Table 2):

Table 2: Wi-Fi Mini-PIM Models
Model or SKU	Supported Region	Notes
SRX-MP-WLAN-US	United States	This model is based on the wireless standards supported in the United States. The country code is fixed and cannot be changed.
SRX-MP-WLAN-IL	Israel	This model is based on the wireless standards supported in Israel. The country code is fixed and cannot be changed.
SRX-MP-WLAN-WW	Other countries	You can set the country code using the `set wlan access-point ap-name access-point-options country country code` command. For information on country codes, see Country Codes and Regulatory Domains

Physical Interface

The physical interface for the Wi-Fi Mini-PIM uses the name wl-x/0/0, where x is the slot on the services gateway where the Mini-PIM is installed. You can install the Mini-PIM in any of the Mini-PIM slots on the services gateway.

Wi-Fi Mini-PIM Hardware Specifications

Table 3 provides the hardware specifications for the Mini-PIM.

Table 3: Wi-Fi Mini-PIM Hardware Specifications
Description	Value
Dimensions	H x W x L: 0.79 in. x 3.70 in. x 5.29 in. (2.0 cm x 9.4 cm x 13.43 cm)
Weight	0.29 lb (0.13 kg)
Form factor	Mini-PIM
Connector type	RP-SMA
Environmental operating temperature	32° F through 104° F (0° C through 40° C)
Storage temperature	-40° F through 158° F (-40°C through 70° C)
Relative humidity	5% to 90% noncondensing
Operating altitude	6,000 feet (1828 meters)

Antenna Specifications

The Mini-PIM supports two multi-band swivel-mount dipole antennas, which can be rotated 360 degrees. You can rotate the antennas and select the angle at which the signal strength is high. Table 4 lists the specifications for the antenna.

Table 4: Specifications for the Wi-Fi Mini-PIM Antenna
Specification	Value
Part number	EDA-1713-25GR2-A3 (Vendor: MAG.LAYERS)
Operating frequency range	2.4~2.5 GHz 5.15~5.85 GHz
Impedance	50 ohm
Voltage standing wave ratio (VSWR)	2 (maximum)
Return loss	10 dB (maximum)
Radiation	Omnidirectional
Peak gain	5dBi +/-0.5
Polarization	Linear
Operating temperature	–4° F (–20° C) to 149° F (65° C)
Connector type	RP-SMA

Channels and Frequencies Supported on the Wi-Fi Mini-PIM

The Wi-Fi Mini-PIM supports channel bandwidths of 20 MHz, 40 MHz, and 80 MHz. The 2.4 GHz radio supports 20 MHz and 40 MHz channel bandwidths, and the 5 GHz radio supports 20 MHz, 40 MHz, and 80 MHz channel bandwidths. You can configure the bandwidth by using the set wlan access-point ap-name radio [1|2] radio-option channel bandwidth bandwidth command.

Note:

You can configure the 80 MHz channel bandwidth only on the 5 GHz radio.

The default channel bandwidth is 20 MHz for the 2.4 GHz radio and 40 MHz for the 5 GHz radio. Setting the bandwidth to 40 MHz or 80 MHz reduces the number of available channels for use.

Table 5 lists the channels supported on the 2.4 GHz radio.

Table 5: Channels Supported on the 2.4 GHz Radio (20 MHz and 40 MHz Bandwidth)
Band	Channel Number	Center Frequency (MHz)
2400~2483.5 MHz	1	2412
	2	2417
	3	2422
	4	2427
	5	2432
	6	2437
	7	2442
	8	2447
	9	2452
	10	2457
	11	2462
	12	2467
	13	2472

Table 6 through Table 8 list the channels supported on the 5 GHz radio.

Table 6: Channels Supported on the 5 GHz Radio (20 MHz Bandwidth)
Band	Channel Number	Center Frequency MHz
5150~5250 MHz	36	5180
	40	5200
	44	5220
	48	5240
5250~5350 MHz	52	5260
	56	5280
	60	5300
	64	5320
5470~5725 MHz	100	5500
	104	5520
	108	5540
	112	5560
	116	5580
	120	5600
	124	5620
	128	5640
	132	5660
	136	5680
	140	5700
5725~5850 MHz	144	5720
	149	5745
	153	5765
	157	5785
	161	5805
	165	5825

Table 7: Channels Supported on the 5 GHz Radio (40 MHz Bandwidth)
Band	Channel Number	Center Frequency MHz
5150~5250 MHz	38	5190
5150~5250 MHz	46	5230
5250~5350 MHz	54	5270
5250~5350 MHz	62	5310
5470~5725 MHz	102	5510
	110	5550
	118	5590
	126	5630
	134	5670
	142	5710
5725~5850 MHz	142	5710
	151	5755
	159	5795

Table 8: Channels Supported on the 5 GHz Radio (80 MHz Bandwidth)
Band	Channel Number	Center Frequency MHz
5150~5250 MHz	42	5210
5250~5350 MHz	58	5290
5470~5725 MHz	106	5530
	122	5610
	138	5690
5725~5850 MHz	138	5690
5725~5850 MHz	155	5775

Dynamic Frequency Selection

Dynamic Frequency Selection (DFS) enables use of 5 GHz frequencies that are typically reserved for radars. In countries where DFS is required, the Wi-Fi card performs appropriate checks for radar. If radar is detected on a channel, the access point selects a radar-free channel and performs a 60-second availability check before operating on that channel.

DFS is enabled by default. You can disable DFS by using the dfs-off option:

content_copy zoom_out_map
set wlan access-point ap-name radio
1 radio-options dfs-off

Note:

Only the 5 GHz radio (radio 1) supports DFS.

You can configure the DFS settings in any of the following ways based on your requirement:

DFS enabled (default)

If you set the channel number to auto, the access point selects the channel from the list of DFS and non-DFS channels. If the access point selects a DFS channel and detects radar on the channel, it switches to another channel automatically.
If you set the channel number manually to a DFS channel and if the access point detects a radar on this channel, it switches to another channel automatically;

DFS disabled (dfs-off configured)

If you set the channel number to auto, the access point selects the channel from the list of non-DFS channels.
If you set the channel number manually, you can configure either a DFS or non-DFS channel. If you configure a DFS channel with DFS disabled, a warning message appears when you commit the configuration.

Country Codes and Regulatory Domains

Table 9 lists the country codes and regulatory domains supported on the Wi-Fi Mini-PIM.

Table 9: Country Codes and Regulatory Domains
Country and Country Code	Model	Radio 1 (5 GHz)				Radio 2 (2.4 GHz)
		Regulatory Domain (5 GHz)	20 MHz	40 MHz	80 MHz	Regulatory Domain (2.4 GHz)	20 MHz	40 MHz
Australia (AU)	SRX-MP-WLAN-WW	FCC6	36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112 116, 132, 136, 140, 144, 149, 153, 157, 161, 165	38, 46, 54, 62, 102, 110, 134, 142, 151, 159	42, 58, 106, 138, 155	WORLD	1 to 13	1 to 13
Canada (CA)	SRX-MP-WLAN-WW	FCC6	36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112 116, 132, 136, 140, 144, 149, 153, 157, 161, 165	38, 46, 54, 62, 102, 110, 134, 142, 151, 159	42, 58, 106, 138, 155	FCCA	1 to 11	1 to 11
China (CN)	SRX-MP-WLAN-WW	APL14	36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165	38, 46, 54, 62, 151, 159	42, 58, 155	WORLD	1 to 13	1 to 13
European Union	SRX-MP-WLAN-WW	ETSI11	36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165	38, 46, 54, 62, 102, 110, 118, 126, 134	42, 58, 106, 122	WORLD	1 to 13	1 to 13
India (IN)	SRX-MP-WLAN-WW	APL15	36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165	38, 46, 54, 62, 151, 159	42, 58, 155	WORLD	1 to 13	1 to 13
Indonesia (ID)	SRX-MP-WLAN-WW	APL2	149, 153, 157, 161, 165	151, 159	155	ETSIC	1 to 13	1 to 13
Israel (IL)	SRX-MP-WLAN-IL	ETSI3	36, 40, 44, 48, 52, 56, 60, 64	38, 46, 54, 62	42, 58	WORLD	1 to 13	1 to 13
Japan (JP)	SRX-MP-WLAN-WW	MKK5	36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112 116, 120, 124, 128, 132, 136, 140	38, 46, 54, 62, 102, 110, 118, 126, 134	42, 58, 106, 122	MKKC	1 to 13	1 to 13
Malaysia (MY)	SRX-MP-WLAN-WW	FCC11	36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112 116, 120, 124, 128, 149, 153, 157, 161, 165	38, 46, 54, 62, 102, 110, 118, 126, 151, 159	42, 58, 106, 122, 155	WORLD	1 to 13	1 to 13
Mexico (MX)	SRX-MP-WLAN-WW	FCC3	36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112 116, 120, 124, 128, 132, 136, 140, 144, 149, 153, 157, 161, 165	38, 46, 54, 62, 102, 110, 118, 126, 134, 142, 151, 159	42, 58, 106, 122, 138, 155	ETSIC	1 to 13	1 to 13
New Zealand (NZ)	SRX-MP-WLAN-WW	FCC3	36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112 116, 120, 124, 128, 132, 136, 140, 144, 149, 153, 157, 161, 165	38, 46, 54, 62, 102, 110, 118, 126, 134, 142, 151, 159	42, 58, 106, 122, 138, 155	ETSIC	1 to 13	1 to 13
South Korea (KR)	SRX-MP-WLAN-WW	APL9	36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112 116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165	38, 46, 54, 62, 102, 110, 118, 126, 134, 151, 159	42, 58, 106, 122, 155	WORLD	1 to 13	1 to 13
United States (US)	SRX-MP-WLAN-US	FCC8	36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 144, 149, 153, 157, 161, 165	38, 46, 54, 62, 102, 110, 118, 126, 134, 142, 151, 159	42, 58, 106, 122, 138, 155	FCCA	1 to 11	1 to 11
Vietnam (VN)	SRX-MP-WLAN-WW	FCC3	36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112 116, 120, 124, 128, 132, 136, 140, 144, 149, 153, 157, 161, 165	38, 46, 54, 62, 102, 110, 118, 126, 134, 142, 151, 159	42, 58, 106, 122, 138, 155	WORLD	1 to 13	1 to 13

RF Specifications for the Wi-Fi Mini-PIM

Table 10 lists the radio frequency (RF) specifications.

Table 10: RF Specifications for the Wi-Fi Mini-PIM
Operating Mode	Data Rate	Receive Sensitivity (+/-2 dBm) Per Chain	Target Power (+/-2 dBm) Per Chain
802.11ac (VHT20)	MCS0	-88	16.5
802.11ac (VHT20)	MCS8	-67	11.5
802.11ac (VHT40)	MCS0	-87	16
802.11ac (VHT40)	MCS9	-64	11
802.11ac (VHT80)	MCS0	-83	15.5
802.11ac (VHT80)	MCS9	-59	10.5
802.11a	6 Mbps	-88	16.5
802.11a	54 Mbps	-72	13
802.11b	1 Mbps	-94	18
802.11b	11 Mbps	-85	18
802.11g	6 Mbps	-89	18
802.11g	54 Mbps	-71	15
802.11n (HT20) 2G	MCS0	-88	18
802.11n (HT20) 2G	MCS7	-70	15
802.11n (HT20) 5G	MCS0	-88	16.5
802.11n (HT20) 5G	MCS7	-71	13
802.11n (HT40) 2G	MCS0	-86	17
802.11n (HT40) 2G	MCS7	-68	15
802.11n (HT40) 5G	MCS0	-86	16
802.11n (HT40) 5G	MCS7	-69	12

Installing the Wi-Fi Mini-PIM in an SRX Series Services Gateway

You can install the Mini-PIM in any of the Mini-PIM slots on the services gateway.

Note:

You can install only one Wi-Fi Mini-PIM in a services gateway.

To install the Mini-PIM in a services gateway:

Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to the grounding point on the back of the services gateway.
Power off the services gateway by briefly pressing the Power button on the front panel. Wait for the Power LED to turn off before proceeding. Disconnect the services gateway from the power source.
Slide the Mini-PIM in the slot until it lodges firmly in the services gateway. Tighten the screws on each side of the Mini-PIM faceplate. See Figure 2.
Figure 2: Installing the Wi-Fi Mini-PIM
Attach the antennas to the front panel of the Mini-PIM. You can attach the antenna by using one of the following methods:
- Direct mounting—Attach the antennas to the RP-SMA connectors on the front panel (see Figure 3).
  
  Figure 3: Attaching the Antennas (Direct Mounting)
- Using an external antenna base—Attach the antennas to the antenna base. Connect the cables from each antenna base to the RP-SMA connectors on the front panel (see Figure 4).
  
  Figure 4: Attaching the Antennas Using an Antenna Base (Rack Mounting)
  
  For SRX320 Services Gateways, which can be mounted on a wall, you can mount the antennas on a wall as shown in Figure 5.
  
  Figure 5: Attaching the Antennas Using an Antenna Base (Wall Mounting)
Power on the services gateway.

Configuring the Wi-Fi Mini-PIM on an SRX Series Services Gateway

Wi-Fi Mini-PIM Configuration Overview
Radio Configuration Overview
Virtual Access Point Configuration Overview
Configure the Wi-Fi Mini-PIM

Wi-Fi Mini-PIM Configuration Overview

Before you configure the Mini-PIM, configure the network settings on the SRX Series device and connect the device to your network. For details, see the Hardware Guide for your SRX Series device.

Configure the following settings for the access point:

Name for the access point
Interface—The interface name for the AP is denoted as wl-x/0/0, where x is the slot on the services gateway in which the Mini-PIM is installed.
Country code—The country code setting identifies the regulatory domain in which the access point operates.

The country code affects the radio modes, list of channels, and radio transmission power that the access point can support. Ensure that you select the correct code for the country in which the access point operates so that the access point complies with the regulations in that country.
Location

Radio Configuration Overview

Radios on the Wi-Fi Mini-PIM are enabled by default. You can disable a radio. When a radio is disabled, the Mini-PIM does not send messages to the connected wireless clients.

Configure the following options for each radio:

Channel number—If you select auto, then the Mini-PIM chooses the channel automatically.

Mode—You can configure the radio to support either one type of wireless client or a mixed mode. In mixed mode, different types of clients can connect to the radio. Table 11 lists the modes supported on each radio.

Table 11: Supported Modes on the Wi-Fi Mini-PIM radios
Radio	Supported Modes
Radio 1 (5.0 GHz)	an—802.11a and 802.11n clients operating on 5 GHz frequency can connect to the access point acn—802.11a, 802.11n and 802.11ac clients operating on 5 GHz frequency can connect to the access point
Radio 2 (2.4 GHz)	gn—802.11g, and 802.11n clients operating in 2.4 GHz frequency can connect to the access point. This is the default mode for this radio. g (supported from Junos OS Release 20.4R1)—802.11g clients operating in 2.4 GHz frequency can connect to the access point.

Bandwidth—Radio 1 supports 20 MHz, 40 MHz, and 80 MHz bandwidths, whereas Radio 2 supports only 20 MHz and 40 MHz bandwidths.
Transmit power—You can configure transmit power on a per-radio basis. By default, the access point assigns 100 percent power to each radio at startup.

To increase the network capacity, place access points closer together and reduce the value of the transmit power. This helps reduce overlap and interference among access points. A lower transmit power setting can also keep your network more secure because weaker wireless signals are less likely to propagate outside the physical location of your network.

Virtual Access Point Configuration Overview

Virtual access points (VAPs) allow different security mechanisms for different clients on the same access point. Each VAP is identified by a configured service set identifier (SSID) and a unique basic service set identifier (BSSID). The access point supports multiple VLANs, which can be distributed across VAPs and radios.

You can enable or disable each VAP independently. If you do not configure the VAPs, the radio is turned on if you configured the radio settings. The radio is off if you do not configure the radio settings or if you turned off the radio using the radio-off option.

A VAP is configured on a per-radio basis. You can configure up to eight VAPs per radio. You can map up to 16 ESSIDS to individual VLANs.

Configure the following options for each VAP:

Description (maximum length is 64)
SSID value for the VAP

The SSID value can include letters, numerals, and the special characters - . _ @ #. The minimum length is 2 characters and maximum length is 32 characters.
VLAN ID for the VAP

The value can be in the range of 1 through 4094.
The maximum number of clients that can connect to the VAP

The value can be in the range of 1 through 127.
Security for the access point

The access point supports several types of authentication methods that are used by clients to connect to the access point. Each of these methods and their associated parameters are configurable on a per-VAP basis. By default, no security is in place on the access point, and therefore any wireless client can associate with it and access your LAN. You configure secure wireless client access for each VAP.
- None—The data transferred between clients and the access point is not encrypted. This method allows clients to associate with the access point without any authentication.
- Wi-Fi Protected Access (WPA) Enterprise—A Wi-Fi Alliance standard that uses RADIUS server authentication with AES-CCMP cipher suite. This mode allows the use of high security encryption along with centrally managed user authentication. Only the WPA2 standard is supported.
- Wi-Fi Protected Access (WPA) Personal—A Wi-Fi Alliance standard that uses preshared key (PSK) authentication with AES-CCMP cipher suite. Only the WPA2 standard is supported.

Configure the Wi-Fi Mini-PIM

To configure the Wi-Fi Mini-PIM:

Configure the Wi-Fi interface:
1. Configure an IP address for the Wi-Fi interface:
  
  user@host# set interfaces wl-x/0/0 unit 0 family inet address ip-address
2. Configure the address pool. The DHCP address pool and the Wi-Fi interface must be in the same network.
  
  user@host# set access address-assignment pool dhcp-pool family inet network ip-address
  
  user@host# set access address-assignment pool dhcp-pool family inet range range low ip-address
  
  user@host# set access address-assignment pool dhcp-pool family inet range range high ip-address
  
  user@host# set access address-assignment pool dhcp-pool family inet dhcp-attributes router ip-address
3. Enable DHCP server on the interface:
  
  user@host# set system services dhcp-local-server group group interface wl-x/0/0.0
  
  The eth0 interface on the Mini-PIM enables the DHCP client. If the DHCP server is enabled on the wl interface, the server assigns an IP address to the eth0 interface. You can view the binding information by issuing the show dhcp server binding command.
4. Assign the interface to a security zone:
  
  user@host# set security zones security-zone zone interfaces wl-x/0/0.0
Configure the access point settings:
1. Configure the interface:
  
  user@host# set wlan access-point name interface wl-x/0/0
2. Set the country code (applicable only for SRX-MP-WLAN-WW models):
  
  user@host# set wlan access-point name access-point-options country country-code
  
  Note:
  If you do not set the country code for the SRX-MP-WLAN-WW models, the Mini-PIM considers the country code as US. You cannot set the country code for the SRX-MP-WLAN-US and SRX-MP-WLAN-IL models.
3. Set the location:
  
  user@host# set wlan access-point name location location
4. Commit the configuration:
  
  user@host# commit
Configure the radio settings.
Note that radio 1 operates at 5 GHz and radio 2 operates at 2.4 GHz.

Note:
Changing the radio settings can cause the access point to stop and restart system processes. If this occurs, wireless clients that are connected to the access point will temporarily lose connectivity. We recommend that you change radio settings when WLAN traffic is low.
1. Configure the radio mode. Radio 1 supports acn and an modes. Radio 2 supports only gn.
  
  For radio 1:
  
  user@host# set wlan access-point name radio 1 radio-options mode [acn|an]
  
  For radio 2:
  
  user@host# set wlan access-point name radio 2 radio-options mode gn
  
  Starting from Junos OS Release 20.4R1, radio 2 supports two modes, g and gn.
2. Configure the channel number.
  
  user@host# set wlan access-point name radio [1|2] radio-options channel number number
3. Configure the channel bandwidth. The default channel bandwidth is 20 MHz for the 2.4 GHz radio and 40 MHz for the 5 GHz radio.
  
  user@host# set wlan access-point name radio [1|2] radio-options channel bandwidth [20|40|80]
4. Configure the transmit power:
  
  user@host# set wlan access-point name radio [1|2] radio-options transmit-power percent
5. Commit the configuration:
  
  user@host# commit
Configure the virtual access point (VAP) settings.
1. Enter an ID and description for the VAP:
  
  user@host# set wlan access-point name radio [1|2] virtual-access-point id description description
2. Enter the SSID value:
  
  user@host# set wlan access-point name radio [1|2] virtual-access-point id ssid ssid
3. Configure one of the following security authentication methods for the VAP:
  - none—The data transferred between clients and the access point is not encrypted. Clients can associate with the access point without any authentication.
    
    user@host# set wlan access-point name radio [1|2] virtual-access-point id security none
  - wpa-enterprise—The device authenticates through an 802.1X-compliant RADIUS server.
    
    user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise cipher-suites ccmp
    
    user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise radius-server ip-address
    
    user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise radius-port port
    
    user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise radius-key secret-key
    
    user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-enterprise wpa-version v2
  - wpa-personal—The device uses preshared keys (PSKs) or a passphrase for authentication and encryption. Keys are stored on the device and on all wireless clients. You do not need to configure a separate authentication server.
    
    user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal cipher-suites ccmp
    
    user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal key-type [ascii|hex]
    
    user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal key key
    
    user@host# set wlan access-point name radio [1|2] virtual-access-point id security wpa-personal wpa-version v2
4. Specify the upload and download rate limits:
  
  user@host# set wlan access-point name radio [1|2] virtual-access-point id upload-limit upload-limit-rate
  
  user@host# set wlan access-point name radio [1|2] virtual-access-point id download-limit download-limit-rate
5. Specify the maximum number of clients that can be connected to the VAP:
  
  user@host# set wlan access-point name radio [1|2] virtual-access-point id maximum-stations number
6. Commit the configuration:
  
  user@host# commit

Verify the Status of the Wi-Fi Mini-PIM

Table 12 lists the commands that you can use to verify and monitor the status of the Wi-Fi Mini-PIM:

Table 12: Commands to Verify and Monitor the Status of the Wi-Fi Mini-PIM
Command	Purpose
`show wlan access-points ap-name detail`	Displays the status of the specific access point. Sample output: Active access point detail information Access Point : wap3 Type : Internal Location : Default Location Serial Number : EV1119AF0030 Firmware Version : v1.2.7 Alternate Version : v1.1.0 Country : US Access Interface : wl-2/0/0 System Time : Mon Dec 23 06:50:50 UTC 2019 Packet Capture : Off Ethernet Port: MAC Address : 00:00:5e:00:53:c0 Radio1: Status : On MAC Address : 00:00:5e:00:53:12 Temperature : 44 Mode : IEEE 802.11a/n/ac Channel : 120 Bandwidth : 40 Transmit Power : 100 Radio2: Status : On MAC Address : 00:00:5e:00:53:56 Temperature : 45 Mode : IEEE 802.11g/n Channel : 11 Bandwidth : 20 Transmit Power : 100
`show wlan access-points`	Displays the details of all the access points configured on the Mini-PIM. Sample: Active access points information Access-Point Type Interface Radio-mode/Channel/Bandwidth wap3 Int wl-2/0/0 acn/120/40, gn/11/20
`show wlan access-points ap-name client-associations`	Displays the details about the clients connected to the access point. Access point client associations information Access point: wap3 VAP Client MAC Address Auth Packets Rx/Tx Bytes Rx/Tx Radio1:5g_vap1 00:00:5e:00:53:a3 NO 3/0 510/0
`show wlan access-points ap-name virtual-access-points all`	Displays details about the virtual access points. Virtual access points information Access point name: wap3 Radio1: VAP1: SSID : 5g_vap1 MAC Address : 00:00:5e:00:53:12 Maximum Station : 127 Broadcast SSID : Enable Station Isolation : Disable Upload Limit : Disable Download Limit : Disable VLAN ID : 0 Station MAC Filter : Disable Traffic Statistics: Input Bytes : 0 Output Bytes : 0 Input Packets : 0 Output Packets : 0 VAP2: SSID : 5g_vap2 MAC Address : 00:00:5e:00:53:12 Maximum Station : 100 Broadcast SSID : Enable Station Isolation : Disable Upload Limit : Disable Download Limit : Disable VLAN ID : 0 Station MAC Filter : Disable Traffic Statistics: Input Bytes : 0 Output Bytes : 0 Input Packets : 0 Output Packets : 0 Radio2: VAP0: SSID : 2.4g MAC Address : 00:00:5e:00:53:56 Maximum Station : 127 Broadcast SSID : Enable Station Isolation : Disable Upload Limit : Disable Download Limit : Disable VLAN ID : 0 Station MAC Filter : Disable Traffic Statistics: Input Bytes : 10802142 Output Bytes : 6228524 Input Packets : 100266 Output Packets : 36413

Upgrading the Firmware on the Wi-Fi Mini-PIM

To upgrade the firmware on the Mini-PIM using the CLI:

Identify the currently installed firmware (jfirmware) version:
user@host > show system firmware

Note:
Ensure that you upgrade the firmware on the Mini-PIM to the latest version.
The Current version field in the output displays the firmware version that is currently installed on the Mini-PIM. If there is a newer version of the firmware at https://www.juniper.net/support/downloads/?p=junos-srx#sw, then proceed to the next step to download the latest firmware.
```
Part               Type           Tag Current     Available     Status
                                       version     version
FPC 2           
PIC 0            MWAP_FW           1   1.1.2         0               OK                
Routing Engine 0 RE BIOS           0   3.0         3.6               OK                
Routing Engine 0 RE BIOS Backup    1   3.0         3.6               OK                
```
Download the appropriate firmware version from https://www.juniper.net/support/downloads/?p=junos-srx#sw:
user@host > request system software add /var/tmp/jfirmware-<version>-signed.tgz

Note:
Ensure that the Junos OS version installed on the device is the same as the firmware version or later. To know the Junos OS version, issue the show version command.

Ensure that the latest firmware version is downloaded to the Mini-PIM by verifying the Available version field. The Available version field should list the latest firmware version that was downloaded in Step 2.

user@host > show system firmware

content_copy zoom_out_map
Part               Type           Tag Current     Available     Status
                                       version     version
FPC 2           
PIC 0            MWAP_FW           1   1.1.8       1.2.1             OK                
Routing Engine 0 RE BIOS           0   3.0         3.6               OK                
Routing Engine 0 RE BIOS Backup    1   3.0         3.6               OK                

Upgrade the firmware on the device:

user@host > request system firmware upgrade pic fpc-slot <fpc-slot-number>

content_copy zoom_out_map
Part          Type           Tag Current          Available         Status
                                   version           version
FPC 2           
PIC 0         MWAP_FW        1   1.1.8             1.2.1             OK                
Perform indicated firmware upgrade ? [yes,no] (no) yes 

Firmware upgrade initiated, use "show system firmware" to monitor status.

Verify that the firmware is upgraded successfully. The status should show OK.

content_copy zoom_out_map
user@host > show system firmware
Part               Type           Tag Current     Available     Status
                                       version     version
FPC 2           
PIC 0            MWAP_FW           1   1.1.8       1.2.1     PROGRAMMING (0%)
Routing Engine 0 RE BIOS           0   3.0         3.6               OK                
Routing Engine 0 RE BIOS Backup    1   3.0         3.6               OK                

content_copy zoom_out_map
user@host > show system firmware
Part               Type           Tag Current     Available     Status
                                       version     version
FPC 2           
PIC 0            MWAP_FW           1   1.1.8       1.2.1     PROGRAMMING (25%)
Routing Engine 0 RE BIOS           0   3.0         3.6               OK                
Routing Engine 0 RE BIOS Backup    1   3.0         3.6               OK                

content_copy zoom_out_map
user@host > show system firmware
Part               Type           Tag Current     Available     Status
                                       version     version
FPC 2           
PIC 0            MWAP_FW           1   1.1.8       1.2.1     PROGRAMMING (100%)
Routing Engine 0 RE BIOS           0   3.0         3.6               OK                
Routing Engine 0 RE BIOS Backup    1   3.0         3.6               OK                

content_copy zoom_out_map
user@host > show system firmware
Part               Type           Tag Current     Available     Status
                                       version     version
FPC 2           
PIC 0            MWAP_FW           1   1.1.8       1.2.1     UPGRADED
                                                             SUCCESSFULLY
Routing Engine 0 RE BIOS           0   3.0         3.6               OK                
Routing Engine 0 RE BIOS Backup    1   3.0         3.6               OK                

content_copy zoom_out_map
user@host > show system firmware
Part               Type           Tag Current     Available     Status
                                       version     version
FPC 2           
PIC 0            MWAP_FW           1   1.2.1       1.2.1             OK                
Routing Engine 0 RE BIOS           0   3.0         3.6               OK                
Routing Engine 0 RE BIOS Backup    1   3.0         3.6               OK                

The device reboots after the firmware is upgraded. Note that if you issue the show system firmware command after the reboot, the Current Version field shows the latest firmware version and the Available Version field shows zero(0).

arrow_backward PREVIOUS LTE Mini-Physical Interface Module

NEXT arrow_forward 8-Port Gigabit Ethernet SFP XPIM

SRX300 Series and SRX550 High Memory Gateway Interface Modules Reference

ON THIS PAGE

Wi-Fi Mini-Physical Interface Module

Wi-Fi Mini-Physical Interface Module Overview

Front Panel Components

Wi-Fi Mini-PIM Models

Physical Interface

Wi-Fi Mini-PIM Hardware Specifications

Antenna Specifications

Channels and Frequencies Supported on the Wi-Fi Mini-PIM

Dynamic Frequency Selection

Country Codes and Regulatory Domains

RF Specifications for the Wi-Fi Mini-PIM

Installing the Wi-Fi Mini-PIM in an SRX Series Services Gateway

Configuring the Wi-Fi Mini-PIM on an SRX Series Services Gateway

Wi-Fi Mini-PIM Configuration Overview

Radio Configuration Overview

Virtual Access Point Configuration Overview

Configure the Wi-Fi Mini-PIM

Verify the Status of the Wi-Fi Mini-PIM

Upgrading the Firmware on the Wi-Fi Mini-PIM

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry