Configure a Wi-Fi client and add client networks

Required configuration items

Create the Wi-Fi client.
The AnywhereUSB PlusW device's Wi-Fi radio that the Wi-Fi client will use.
SSID of the access point that the client will log into.
The encryption type used by the access point:
- If a personal or mixed mode option is selected, identify the Pre-shared key.
- If an enterprise option is selected:
  - Select the Extensible Authentication Protocol (EAP), one of:
    - TLS: Client certificate authentication.
      If TLS is selected, include:
      - The username.
      - The CA certificate in PEM format.
      - The client certificate in PEM format.
      - The private key in PEM format.
      - (Optional) The private key passphrase.
    - PEAP: Username/password authentication.
      If PEAP is selected, identify the username and password.
    - SCEP certificates: Simple Certificate Enrollment Protocol (SCEP) certificate management.
      If SCEP certificates is selected:
      - Identify the username.
      - Select the SCEP client. See Configure a Simple Certificate Enrollment Protocol client for information about SCEP clients.
WAN assignment. Once you configure a Wi-Fi client, you must assign the Wi-Fi client to a WAN. See Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) for further information.

Additional configuration items

Enable and configure background scanning, which allows the Wi-Fi client to move between access points that have the same SSID as their signal strength varies.
Additional access points that client will attempt to use. If connection to one access point fails, the device will attempt to connect to the next access point in the list.

To configure a Wi-Fi client:

 Web

Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
Access the device configuration:
Remote Manager:
1. Locate your device as described in Use Digi Remote Manager to view and manage your device.
2. Click the Device ID.
3. Click Settings.
4. Click to expand Config.
Local Web UI:
1. On the menu, click System. Under Configuration, click Device Configuration.
  The Configuration window is displayed.
Click Network > WiFi > Client mode connections.
For Add WiFi client:, type the name of the client and click .

The Wi-Fi client configuration window is displayed.

New Wi-Fi clients are enabled by default. To disable, toggle off Enable.
Configure the Wi-Fi network that the client will use:
1. Click to expand SSID list.
2. Enter the SSID of the access point that the client will use to connect to the Wi-Fi network.
3. Select the type of Encryption used by the access point.
  - If a personal or mixed mode is selected, for Pre-shared key, enter the password that the client will use to connect to the access point.
    Note If you need to configure a Wi-Fi passphrase with any non-printable ASCII characters, you can use the wpa_passphrase tool to generate the appropriate pre-shared key. The wpa_passphrase command is available in the shell console of a DAL OS Digi device. For details about the command, see the wpa_passphrase Linux command.
  - If WPA2 Enterprise is selected:
    - Select the Extensible Authentication Protocol (EAP), one of:
      - TLS: Client certificate authentication.
        If TLS is selected, include:
        The Username.
        The CA certificate in PEM format.
        The Client certificate in PEM format.
        The Private key in PEM format.
        (Optional) The Private key passphrase.
      - PEAP: Username/password authentication.
        If PEAP is selected, identify the Username and Password.
      - SCEP certificates: Simple Certificate Enrollment Protocol (SCEP) certificate management.
        If SCEP certificates is selected:
        Identify the Username.
        Select the SCEP Client. See Configure a Simple Certificate Enrollment Protocol client for information about SCEP clients.
(Optional) Configure Background scanning.
Background scanning allows the device to scan for nearby access points and to move between access points that have the same SSID that is configured for the client connection, based on the signal strength of the access points.
1. Click to expand Background scanning.
2. Click Enable background scanning to enable.
3. For Scan threshold, enter a value in dB that is used to determine the scanning frequency. The allowed value is an integer between-113 and 0.
  The Scan threshold works with the Short interval and Long interval options to determine how often the device should scan for available access points:
  - If the signal strength from the access point to which the client is currently connected is below the Scan threshold, it will use the Short interval to determine how often to scan for available access points.
  - If the signal strength from the access point to which the client is currently connected is stronger the Scan threshold, it will use the Long interval to determine how often to scan for available access points.
  - If Short interval and Long interval are set to the same value, Scan threshold is ignored. For example, the default configuration has both Short interval and Long interval set to 1 second, which means that the device will scan for access points once per second regardless of the Scan threshold.
4. For Short interval, type the number of seconds to wait between scans for access points, when the signal strength from the access point to which the client is currently connected is below the Scan threshold.
5. For Long interval, type the number of seconds to wait between scans for access points, when the signal strength from the access point to which the client is currently connected is stronger than the Scan threshold.
6. Click to expand Scan frequencies list. You must add one or more frequency to scan:
  1. Click  to add a scan frequency.
  2. Select a frequency.
  3. Repeat for additional frequencies.
7. To add a channel, click Add Scan frequency and select the appropriate channel.
Click Apply to save the configuration and apply the change.

After you configure a Wi-Fi client, you must assign the Wi-Fi client to a WAN. See Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) for further information.

 Command line

Select the device in Remote Manager and click Actions > Open Console, or log into the AnywhereUSB Plus local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
At the command line, type config to enter configuration mode:
```
> config
(config)>
```

Create a new Wi-Fi client:

(config)> add network wifi client new_client
(config network wifi client new_client)>

New clients are enabled by default.

Configure the Wi-Fi network that the client will use:
1. Set the SSID of the access point that the client will use to connect to the Wi-Fi network:
```
(config network wifi client new_client)> ssid 0 ssid value
(config network wifi client new_client)> 
```
2. Set the encryption type for the access point:
```
(config network wifi client new_client)> ssid 0 encryption type value
(config network wifi client new_client)> 
```
  where value is the type of encryption used by the access point. Allowed values are:
  - none: no encryption.
  - owe: WPA3 Enhanced Open, which uses Opportunistic Wireless Encryption (OWE) technology to provide encryption for Wi-Fi networks that do not use password protection.
  - psk: WPA personal encryption.
  - mixedpsk: Uses both WPA and WPA2 personal encryption.
  - psk2: WPA2 personal encryption.
  - psk2sae: Uses WPA2-PSK/WPA3-AES mixed mode.
  - sae: Uses WPA3 Personal mode.
  - wpa2: WPA2 enterprise encryption.
3. If the type of encryption is set to:
  - psk, mixedpsk, psk2, psk2sae, or sae, set the password that the client will use to connect to the access point:
```
(config network wifi client new_client)> ssid 0 encryption key_psk2 password
(config network wifi client new_client)> 
```
    Note If you need to configure a Wi-Fi passphrase with any non-printable ASCII characters, you can use the wpa_passphrase tool to generate the appropriate pre-shared key. The wpa_passphrase command is available in the shell console of a DAL OS Digi device. For details about the command, see the wpa_passphrase Linux command.
  - wpa2:
    1. Set the Extensible Authentication Protocol (EAP):
```
(config network wifi client new_client)> ssid 0 encryption eap_type value
(config network wifi client new_client)> 
```
      where value is one of:
      - peap: Username/password authentication. If peap is set:
        Set the username:
        (config network wifi client new_client)> ssid 0 encryption id_wpa2 username (config network wifi client new_client)>
        Set the password:
        (config network wifi client new_client)> ssid 0 encryption password_wpa2 password (config network wifi client new_client)>
      - scep: Simple Certificate Enrollment Protocol (SCEP) certificate management. If scep is set:
        Set the username:
        (config network wifi client new_client)> ssid 0 encryption id_wpa2 username (config network wifi client new_client)>
        Set the SCEP client:
        Use the ? to determine available SCEP clients:
        (config network wifi client new_client)> ssid 0 encryption scep_client ? SCEP Client: The SCEP client which this Wi-Fi client will use to download the necessary keys and certificates from the SCEP server. Format: SCEP_test_client SCEP_test_client1 Current value: (config network wifi client new_client)>
        Set the SCEP client, for example:
        (config network wifi client new_client)> ssid 0 encryption scep_client SCEP_test_client (config network wifi client new_client)>
        See Configure a Simple Certificate Enrollment Protocol client for information about SCEP clients.
      - tls: Client certificate authentication. If tls is selected:
        Set the username:
        (config network wifi client new_client)> ssid 0 encryption id_wpa2 username (config network wifi client new_client)>
        Set the CA certificate by using the ca_cert paramater and pasting the certificte in PEM format:
        (config network wifi client new_client)> ssid 0 encryption ca_cert certificate (config network wifi client new_client)>
        Set the client certificate by using the client_cert paramater and pasting the certificte in PEM format:
        (config network wifi client new_client)> ssid 0 encryption client_cert certificate (config network wifi client new_client)>
        Set the private key by using the private_key paramater and pasting the private key in PEM format:
        (config network wifi client new_client)> ssid 0 encryption private_key key (config network wifi client new_client)>
        (Optional) Set the private key passphrase:
        (config network wifi client new_client)> ssid 0 encryption private_key_passphrase passphrase (config network wifi client new_client)>
(Optional) Configure background scanning.
Background scanning allows the device to scan for nearby access points and to move between access points that have the same SSID that is configured for the client connection, based on the signal strength of the access points.
1. Enable background scanning:
```
(config network wifi client new_client)> background_scanning enable true
(config network wifi client new_client)> 
```
2. Set the scan threshold (bgscan_strength), in dB, that is used to determine the scanning frequency.
```
(config network wifi client new_client)> bgscan_strength value
(config network wifi client new_client)> 
```
  where value is an integer between -113 and 0.
  The scan threshold works with the short and long intervals (bgscan_short_interval and bgscan_long_interval) to determine how often the device should scan for available access points:
  - If the signal strength from the access point to which the client is currently connected is below the value of bgscan_strength, it will use bgscan_short_interval to determine how often to scan for available access points.
  - If the signal strength from the access point to which the client is currently connected is stronger than the value of bgscan_strength, it will use bgscan_long_interval to determine how often to scan for available access points.
  - If bgscan_short_interval and bgscan_long_interval are set to the same value, bgscan_strength is ignored. For example, the default configuration has both bgscan_short_interval and bgscan_long_interval set to 1 second, which means that the device will scan for access points once per second regardless of the value of bgscan_strength.
3. Set the number of seconds to wait between scans for access points, when the signal strength from the access point to which the client is currently connected is below the value of bgscan_strength:
```
(config network wifi client new_client)> bgscan_short_interval value
(config network wifi client new_client)> 
```
  where value is any integer greater than 0. The default is 1.
4. Set the number of seconds to wait between scans for access points, when the signal strength from the access point to which the client is currently connected is greater than the value of bgscan_strength:
```
(config network wifi client new_client)> bgscan_long_interval value
(config network wifi client new_client)> 
```
  where value is any integer greater than 0. The default is 1.
5. Configure the frequencies that will be scanned for available access points.
  The AnywhereUSB PlusW device has three preconfigured frequencies:
  - 2412 MHz
  - 2437 MHz
  - 2462 MHz
  You can delete the preconfigured frequencies and add additional frequencies. At least one frequencies is required.
6. To delete a preconfigured frequencies:
  1. Use the show command to determine the index number of the channel to be deleted:
    (config network wifi client new_client)> show background_scanning scan_freq 0 2412 1 2437 2 2462 (config network wifi client new_client)>
  2. Use the appropriate index number to delete the channel. For example, to delete the 2412 frequency:
    (config network wifi client new_client)> del 0 (config network wifi client new_client)>
7. To add a frequency:
  1. Use the ? with an existing index number to determine the allowed values for frequencies:
    (config network wifi client new_client)> background_scanning scan_freq 1 Scan frequency: Enable this frequency in the background scan. Format: 2412 2417 2422 2427 2432 2437 2442 2447 2452 2457 2462 Current value: 2437
  2. Add the appropriate frequency. For example, to add the 2457 frequency to the end of the list:
    (config network wifi client new_client)> add background_scanning scan_freq end 2457 (config network wifi client new_client)>

Save the configuration and apply the change

(config network wireless client new_client)> save
Configuration saved.
>

Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.

After you configure a Wi-Fi client, you must assign the Wi-Fi client to a WAN. See Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) for further information.