Accton Technology AC1200 Dualband Outdoor AP, 802.11ac Outdoor Dual Band Access Point User Manual rev 3

Accton Technology Corp Dualband Outdoor AP, 802.11ac Outdoor Dual Band Access Point rev 3

User Manual rev 3.pdf

QuickStartGuide
802.11
acOutdoorStandAloneAccessPoint
SkyFireAC1200andSkyFire™AC866
Brand:IgniteNet&EdgeCorE
TheAC1200andtheAC866aresingle‐anddualbandaccesspoints(APs)thatare
housedinawaterproofenclosureformountingoutdoors.Theunitsincludeabuilt‐
inmountingbracketforattachingtoa1.5to6inchpoleandtheycanbepowered
throughtheirEthernetcableconnectionfromapowerinjectormodulethatis
installedindoors.
TheOutdoorStandAloneAccessPointsincludethesemodels:
SFAC1200dualbandw/integrated5GHzantennaand2xRPSMA(2.4GHz)
SFAC12001dualbandw/2xRPSMA(5GHz)and2xRPSMA(2.4GHz)
SFAC12002
dualbandw/integrated5GHzantennaand2.4GHzantenna
ECWO5320802.11acOutdoorDualBandAccessPoint
ECWO5320L802.11acOutdoorDualBandAccessPoint
SFAC866
singlebandw/integrated5GHzantenna
SFAC8661
singlebandw/2xRPSMA(5GHz)
Note:ForSafetyandRegulatoryinformation,refertotheSafetyandRegulatory
InformationdocumentincludedwiththeAP.
www.ignitenet.com
12

GettingStarted
Thissectionprovidesanoverviewoftheaccesspoint,andintroducessomebasic
conceptsaboutwirelessnetworking.Italsodescribesthebasicsettingsrequiredto
accessthemanagementinterface.
Thissectionincludesthesechapters:
“Introduction”onpage12
SectionI
13
Introduction
Theaccesspoint(AP)runssoftwarethatincludesanetworkmanagementagent.
Theagentoffersavarietyofmanagementoptions,includingSNMPandaweb‐
basedinterface.TheAPcanalsobeaccessedviaTelnetorSSHforconfiguration
usingacommandlineinterface(CLI).
ConfigurationOptions
Theaccesspoint’swebagentallowsyoutoconfigureAPparameters,monitor
wirelessconnections,anddisplaystatisticsusingastandardwebbrowsersuchas
InternetExplorer9.xorlater,MozillaFirefox5orlater,andGoogleChrome35or
later.TheAP’swebmanagementinterfacecanbeaccessedfromanycomputer
attachedtothenetwork.
TheCLIprogramcanbeaccessedremotelybyaTelnetorSecureShell(SSH)
connectionoverthenetwork.TheCLIisusedprimarilyfortechnicalsupport.
TheAP’smanagementagentalsosupportsSNMP(SimpleNetworkManagement
Protocol).ThisSNMPagentpermitstheAPtobemanagedfromanycomputerin
thenetworkusingnetworkmanagementsoftware.
TheAP’swebinterface,consoleinterface,andSNMPagentallowyoutoperform
managementfunctionssuchas:
Setmanagementaccessusernamesandpasswords
ConfigureIPsettings
ConfigureSNMPparameters
Configure2.4GHzand5GHzradiosettings
Controlaccessthroughwirelesssecuritysettings
FilterpacketsusingAccessControlLists(ACLs)
Downloadsystemfirmware
Downloadoruploadconfigurationfiles
Displaysysteminformationandstatistics
1
14
Chapter1
|
Introduction
NetworkConnections
NetworkConnections
PriortoaccessingtheAP’smanagementagentthroughanetworkconnection,you
mustfirstconfigureitwithavalidIPaddress,subnetmask,anddefaultgateway
usingthewebinterface,ortheDHCPprotocol.
TheAPhasastaticdefaultmanagementaddressof192.168.2.1andasubnetmask
of255.255.255.0.IftheAP’sdefaultIPaddressisnotcompatiblewithyournetwork
oraDHCPserverisnotavailable,theAP’sIPaddressmustbeconfiguredmanually
throughthewebinterface.
FirstconnecttotheAP’sEthernet1portandlogintothewebinterface,as
describedin“ConnectingtotheWebInterface”onpage13.Followthesteps
describedin“SetupWizard”onpage15toselectyourcountryandspecifyoneof
theconfigurationmethods.ThenconfiguretheAPwithanIPaddressthatis
compatiblewithyournetworkasdescribedunder“LANSettings”onpage33.
OncetheAP’sIPsettingsareconfiguredforyournetwork,youcanaccesstheAP’s
managementagentfromanywherewithintheattachednetwork.TheAPcanbe
managedbyanycomputerusingawebbrowser,orfromanetworkcomputerusing
SNMPnetworkmanagementsoftware.
ConnectingtotheWebInterface
TheAPoffersauserfriendlywebbasedmanagementinterfaceforthe
configurationofalltheunit’sfeatures.AnyPCdirectlyattachedtotheunitcan
accessthemanagementinterfaceusingawebbrowser,suchasInternetExplorer
9.xorlater,MozillaFirefox5orlater,andGoogleChrome35orlater.
YoumaywanttomakeinitialconfigurationchangesbyconnectingaPCdirectlyto
theAP’sLANport.TheAPhasadefaultmanagementIPaddressof192.168.2.1and
asubnetmaskof255.255.255.0.YoumustsetyourPCIPaddresstobeonthesame
subnetastheAP(thatis,thePCandAPaddressesmustbothstartwith192.168.2.x).
ToaccesstheAP’swebmanagementinterface,followthesesteps:
1.
Useyourwebbrowsertoconnecttothemanagementinterfaceusingthe
defaultIPaddressof192.168.2.1.
2.
Logintotheinterfacebyenteringthedefaultusername“root”withthe
password“admin123”,thenclickLogin.
15
Chapter1
|
Introduction
ConnectingtotheWebInterface
Note:
Itisstronglyrecommendedtochangethedefaultusernameandpassword
thefirsttimeyouaccessthewebinterface.Forinformationonchanginguser
namesandpasswords,see“UserAccounts”onpage57.
Figure1:LoginPage
16
Chapter1
|
Introduction
SetupWizard
SetupWizard
TheSetupWizardisdesignedtohelpyouconfigurethebasicsettingsrequiredto
gettheAPupandrunning.
Step1 SelectYourCountrySelecttheaccesspoint’scountryofoperationfromthedrop‐
downmenu.YoumustsettheAP’scountrycodetobesurethattheradiosoperate
accordingtopermittedlocalregulations.Thatis,settingthecountrycoderestricts
operationoftheAPtotheradiochannelsandtransmitpowerlevelspermittedfor
wirelessnetworksinthespecifiedcountry.
Figure2:SelectYourCountry
Caution:
Youmustsetthecountrycodetothecountryofoperation.Settingthe
countrycodeensuresthattheradiosoperatewithinthelocalregulationsspecified
forwirelessnetworks.
Note:ThecountrycodeselectionisfornonUSmodelsonlyandisnotavailableto
allUSmodels.PerFCCregulation,allWiFiproductsmarketedintheUSmustbe
fixedtoUSoperationchannelsonly.
17
Chapter1
|
Introduction
SetupWizard
Step2 SelectSetupMethodSelectEasySetuptosetbasicwirelessnetworkaccessand
guestnetworkaccessparameters,orAdvancedSetuptospecifynetworkingmodes
foranAPbridge,AProuter,ormanualconfiguration.
Figure3:SelectSetupMethod
Step3
ConfigureSettings
EasySetupBasicwirelessnetworkandguestnetworkaccessparameters.
Specifythenameandpasswordforthewirelessnetworkandguestnetwork.
TheNetworkingModeissettoAPRouterasdescribedunderAdvancedSetup.
Figure4:EasySetup
WirelessNetworkSetupSetthenameandpasswordfortheprimary
wirelessnetwork.Apasswordmustbespecifiedtoprotectthenetwork
fromunauthorizedaccess.
18
Chapter1
|
Introduction
SetupWizard
GuestNetworkSetupSetthenameandpasswordfortheguestwireless
network.ThiscreatesasecondSSIDforguestusers,limitingtheiraccess
onlytotheInternet.
AdvancedSetupNetworkingmodesforAPBridge,APRouter,ormanual
configuration.
Figure5:AdvancedSetup
APBridgeModeConfiguresaninterfaceasattachedtotheWAN(thatis,
theInternet).Inthefollowingfigure,EthernetPort0andEthernetPort1are
bothattachedtotheWAN.Trafficfromtheseinterfacesisdirectlybridged
intotheInternet.(ThisisalsocalledbridgetoInternet.)
Figure6:BridgetoInternet
APRouterModeConfiguresaninterfaceasamemberoftheLAN.Inthe
followingfigure,EthernetPort1,WirelessLAN0(5GHzRadio),andWireless
LAN1(2.4GHzRadio)areallincludedintheLAN.Trafficfromthese
interfacesisroutedacrosstheaccesspointthroughEthernetPort0tothe
Internet.(ThisisalsocalledroutetoInternet.)
Note:
SinglebandaccesspointsonlysupportoneWLAN.
19
Chapter1
|
Introduction
MainMenu
Figure7:RoutetoInternet
ManualModeAllowsallconfigurationparameterstobemanually
configured.Anywiredmoduleorradiomodulemaybelogicallyplacedon
theWANandLANsideoftheaccesspoint.
MainMenu
ThewebinterfaceMainMenuprovidesaccesstoalltheconfigurationsettings
availablefortheAP.
Toconfiguresettings,clicktherelevantMainMenuitem.EachMainMenuitemis
summarizedbelowwithlinkstotherelevantsectioninthisguidewherethe
configurationparametersaredescribedindetail:
DashboardThedashboardshowsbasicsettingsfortheAP,including
Internetstatus,localnetworksettings,wirelessradiostatus,andtrafficgraphs.
See“StatusInformation”onpage22.
Network
ConfiguresInternet,Ethernet,LAN,andHotspotsettings.See
“NetworkSettings”onpage28.
Wireless
Configures5GHzRadio,2.4GHzRadio,andVLANsettings.See
“WirelessSettings”onpage37
System
ConfiguresSystem(designationandlocation),Maintenance(suchas
viewlog,firmwareupgrade,andreset),UserAccounts,andServices
(managementaccessmethods).
20
Chapter1
|
Introduction
MainMenu
Dashboard Afterloggingintothewebinterface,thedashboarddisplays.Thedashboardshows
basicsettingsfortheAP,includingInternetstatus,localnetworksettings,wireless
radiostatus,andtrafficgraphs.
Figure8:TheDashboard
CommonWebPage
Buttons
Thelistbelowdescribesthecommonbuttonsfoundonmostoftheweb
managementpages:
Save
AppliesthenewparametersandsavesthemtotemporaryRAM
memory.Alsodisplaysamessageatthetopofthescreentoinformyouthatthe
changeshavenotyetbeensavedtoFlashmemory.Therunningconfiguration
will
not
besaveduponarebootunlessyouclickthe“Apply”button.
Figure9:SetConfigurationChanges
Apply
Savesthecurrentconfigurationsothatitisretainedafterarestart.
RevertCancelsthenewlyenteredsettingsandrestorestheoriginals.
Welcome>Logout
OpentheWelcomelistandclickLogouttoendtheweb
managementsession.
Welcome>ViewUsers
OpentheWelcomelistandclickViewUserstoopen
theUserAccountsmenu.
20
Chapter1
|
Introduction
MainMenu
21
WebConfiguration
Thissectionprovidesdetailsonconfiguringtheaccesspointusingtheweb
browserinterface.
Thissectionincludesthesechapters:
“StatusInformationonpage22
“NetworkSettings”onpage28
“WirelessSettings”onpage37
“SystemSettings”onpage52
SectionII
22
StatusInformation
TheDashboarddisplaysinformationonthecurrentsystemconfiguration,including
Internetstatus,localnetworksettings,wirelessradiostatus,andtrafficgraphs.
StatusInformationincludesthefollowingsections:
“SystemandProductInformation”onpage22
“InternetStatus”onpage22
“LocalNetworks”onpage24
“WirelessStatus”onpage25
“TrafficGraphsonpage27
SystemandProductInformation
TheSystemandProductInfosectionshowsdescriptiveinformationabouttheAP.
Figure10:SystemandProductInformation
Thefollowingitemsaredisplayedinthissection:
Themodelnameoftheunit.
Thesoftwareversionnumber.
Theserialnumberofthephysicalaccesspoint.
Lengthoftimethemanagementagenthasbeenup.
Thelast1minute,5minuteand15minuteCPUloadaverage.
InternetStatus
TheInternetStatussectionshowsinformationabouttheInternetconnection.
2
23
Chapter2
|
StatusInformation
InternetStatus
Figure11:InternetStatus
Thefollowingitemsaredisplayedinthissection:
InternetSource
TheEthernetportconnectedtotheInternet.Bydefault,
thisisEthernetPort0.
PortsbridgedtoInternetAdditionalinterfacesattacheddirectlytothe
Internet.(SeeConfigureSettings“Step3”onpage16foramoredetailed
description.)
IPAddress
IPaddressoftheInternetconnection.
GatewayIPaddressofthegatewayrouterusedtopasstrafficbetweenthis
deviceandothernetworksegments.
DNSTheIPaddressoftheDomainNameServeronthenetwork.ADNS
mapsnumericalIPaddressestodomainnamesandcanbeusedtoidentify
networkhostsbyfamiliarnamesinsteadoftheIPaddresses.
HotspotStatus
Showsifthehotspotisenabledordisabled,andtheports
onwhichthisserviceisenabled.
Options
IncludesshowingtheARPcache,showingDHCPleases,or
renewingDHCPleases.
Figure12:Options
24
Chapter2
|
StatusInformation
LocalNetworks
Figure13:ARPTable
Figure14:DHCPLeases
LocalNetworks
TheLocalNetworkssectionshowsinformationaboutthelocalnetworkconnection.
Figure15:LocalNetworks
Thefollowingitemsaredisplayedinthissection:
Name
Showsinformationonthenameofthelocalnetwork,whetherstatic
ordynamicconfigurationisused,andthenetworkmask.
DHCPServer
ShowsifDHCPserviceisenabledonthisnetwork.
MembersShowstheportsandwirelessradiosattachedtothisnetwork.
PortStatus
ShowsthestatusoftheEthernetports,includinglinkupstate,
MACaddress,speed,andduplexmode.
25
Chapter2
|
StatusInformation
WirelessStatus
WirelessStatus
TheWirelessStatussectionshowsinformationabouttheradiosettingsand
associatedclients.
Figure16:WirelessStatus
Thefollowingitemsaredisplayedinthissection:
Radio#
Indicatesthe5GHzor2.4GHzwirelessinterface.
RadioStatusShowsifthewirelessinterfaceisenabledordisabled.
OpModeShowsiftheunitisconfiguredtooperateasanaccesspoint
(manuallyconfigured),anAPinbridgemode,oranAPinroutermode.
ChannelTheradiochanneltheaccesspointusestocommunicatewith
wirelessclients.Theavailablechannelsdependonthe802.11Mode
1
,
ChannelBandwidth
1
,andCountryCodesettings
2
.
IEEEModeThe802.11wirelessLANstandardssupportedbytheaccess
point.
1.
See“RadioSettings”onpage37.
2.
See“SetupWizard”onpage15.
26
Chapter2
|
StatusInformation
WirelessStatus
TxPowerThepoweroftheradiosignalstransmittedfromtheaccess
point.
TotalClientsThetotalnumberofclientsattachedtothisinterface.
SSID#Servicesetidentifier.Clientsthatwanttoconnecttothewireless
networkthroughanaccesspointmustsettheirSSIDstothesameasthatofthe
accesspoint.
NetworkNameAuniqueidentifierforthelocalwirelessnetwork.
SecurityShowswhetherornotsecurityhasbeenenabled.
AssociatedclientsShowsdetailedinformationaboutclients.
NameClientname.
MACAddressTheMACaddressofthewirelessclient.
IPAddressTheIPaddressassignedtothewirelessclient.
SignalSignalstrength(TX/RX)indBm.
DurationThetimethewirelessclienthasbeenassociated.
TxRateThedatatransmitratetothewirelessclient.
RxRateThedatareceiveratefromthewirelessclient.
TxBytesThenumberoftransmittedbytestothisclient.
RxBytesThenumberofreceivedbytesfromthisclient
TxPacketsThenumberoftransmittedpacketstothisclient.
RxPacketsThenumberofreceivedpacketsfromthisclient.
27
Chapter2
|
StatusInformation
TrafficGraphs
TrafficGraphs
TheTrafficGraphssectionshowsthedataratefortheEthernetportsandwireless
interfaces.
Figure17:TrafficGraphs
28
NetworkSettings
Thischapterdescribesbasicnetworksettingsontheaccesspoint.Itincludesthe
followingsections:
“InternetSettings”onpage28
“EthernetSettings”onpage31
“LANSettings”onpage33
“HotspotSettingsonpage34
InternetSettings
TheInternetSettingspageconfiguresthebasicInternetsettingsfortheAP,suchas
thesourceport,IPaliases,aswellasthehostnameandmaximumMTUsize.
Figure18:InternetSettings
Thefollowingitemsaredisplayedonthispage:
InternetSourceTheEthernetportusedtoaccesstheInternet.
(Default:EthernetPort0;Options:EthernetPort01)
IPAddressModeThemethodusedtoprovideanIPaddressfortheInternet
accessport.(Default:DHCP;Options:DHCP,staticIP,PPPoE)
DHCP
ConfigurationoptionsdisplayedforDHCPareshowninFigure18,
“InternetSettings",onpage28.
3
29
Chapter3
|
NetworkSettings
InternetSettings
StaticIPToconfigureastaticIPaddressfortheselectedEthernet
interface,thefollowingitemsmustbespecified.
Figure19:IPAddressModeStaticIP
IPAddressSpecifiesanIPaddressfortheaccesspoint.ValidIP
addressesconsistoffourdecimalnumbers,0to255,separatedby
periods.(Default:192.168.1)
SubnetMaskIndicatesthelocalsubnetmask.
(Default:255.255.255.0)
DefaultGatewayTheIPaddressofthedefaultgateway,whichis
usediftherequesteddestinationaddressisnotonthelocalsubnet.
Ifyouhavemanagementstations,DNS,RADIUS,orothernetwork
serverslocatedonanothersubnet,typetheIPaddressofthedefault
gatewayrouterinthetextfieldprovided.
AddlDNSServerTheIPaddressofDomainNameServersonthe
network.ADNSmapsnumericalIPaddressestodomainnamesand
canbeusedtoidentifynetworkhostsbyfamiliarnamesinsteadofthe
IPaddresses.
IfyouhaveaDNSserverslocatedonthelocalnetwork,typetheIP
addressinthetextfieldsprovided.
30
Chapter3
|
NetworkSettings
InternetSettings
PPPoEToobtainanIPaddressfortheselectedEthernetinterfaceusing
PPPoE,thefollowingitemsmustbespecified.
Figure20:IPAddressModePPPoE
UserNameTheusernamespecifiedbytheserviceprovider.
(Range:132characters)
PasswordThepasswordspecifiedbytheserviceprovider.
(Range:132characters)
ServiceName
TheservicenameassignedforthePPPoEconnection.
Theservicenameisnormallyoptional,butmayberequiredbysome
serviceproviders.(Range:132alphanumericcharacters)
IPAliasesAddsastaticIPv4addressunderwhichtheaccesspointcanalso
bereached.
Figure21:IPAlias
MTUSizeSetsthesizeofthemaximumtransmissionunit(MTU)forpackets
sentonthisinterface.(Range:14001500bytes;Default1500bytes)
31
Chapter3
|
NetworkSettings
EthernetSettings
EthernetSettings
TheEthernetSettingspageconfiguresthenetworkbehavioroftheEthernetports,
indicatingthataportprovidesanInternetconnectionforwirelessclientsattached
tothelocalnetwork(routedtotheInternet),isbridgeddirectlytotheInternet,
connectedtotheguestnetwork,orprovideshotspotservice.
ThefollowingitemsarecommonforallpagesunderEthernetSettings:
Status
Enablesordisablesthisport.(Default:ON)
AutonegotiationEnablesordisablesautonegotiationforagiven
interface.(Default:ON)
1000BASETdoesnotsupportforcedmode.Autonegotiationshouldalwaysbe
usedtoestablishaconnectionoverany1000BASETport.
Whenautonegotiationisenabled,theaccesspointwillnegotiatethebest
settingsforalinkbasedonadvertisedcapabilities.
Figure22:EthernetSettingsInternetSource
Thefollowingstatusmessageisdisplayedifaninterfaceisconnectedtothe
Internet:
“Thisportistheinternetsourceforthisproduct.ConfigureInternetSettings
IfmorethanoneinterfaceisconnectedtotheInternet,onlythelastconfigured
interfaceisused.
32
Chapter3
|
NetworkSettings
EthernetSettings
Figure23:EthernetSettingsNetworkBehavior
Thefollowingitemsaredisplayedonthispage:
NetworkBehavior
FortheEthernetportwhichisnotprovidingInternet
access,oneofthefollowingconnectionmethodsmustbespecified.
(Default:RoutetoInternet)
BridgetoInternet
ConfiguresaninterfacetobeattachedtotheWAN.
TrafficfromthisinterfaceisdirectlybridgedintotheInternet.(SeeFigure6,
“BridgetoInternet",onpage17.)IfanEthernetportisbridgedtothe
Internet,managementaccesscannotbemadebyadirectconnectionto
thisport.However,ifanotherEthernetportorradiointerfaceiswithinthe
LAN(routedtotheInternet)theaccesspointcanbemanagedthroughthis
interfacebyaPCwhichisconfiguredwithIPaddressinthesamesubnet.
RoutetoInternet
ConfiguresaninterfacetobeamemberoftheLAN.
Trafficfromthisinterfaceisroutedacrosstheaccesspointandoutthrough
aninterfacewhichisbridgedtotheInternet.(SeeFigure7,“Routeto
Internet",onpage18.)Bydefault,EthernetPort1isroutedtoInternet,
allowingmanagementaccessviaadirectconnectiontoaPCconfigured
withanaddressinthesamesubnet.
NetworkName
Thenetworktoberouted.Thedefaultis“Default
localnetwork”asdisplayedunderLANSettingsLocalNetworks.
AddtoGuestNetwork
Thisportcanonlyaccesstheguestnetwork.
HotspotControlled
Thisportcanonlyaccesshotspotservices.
ConfigureHotspot
OpenstheHotspotSettingspage.
33
Chapter3
|
NetworkSettings
LANSettings
LANSettings
TheLANSettingspageconfigurestheLANsettingsforthelocalnetworkandguest
network,includingIPinterfacesetting,DHCPserversettings,STPadministrative
status,andUPnPadministrativestatus.
Figure24:NetworkLANSettings
Thefollowingitemsaredisplayedonthispage:
MembersTheinterfacesattachedtothelocalareanetwork.
IPAddressSpecifiestheIPaddressforthelocalnetworkorguestnetwork.
ValidIPaddressesconsistoffourdecimalnumbers,0to255,separatedby
periods.(Default:192.168.2.1)
SubnetMaskIndicatesthelocalsubnetmask.(Default:255.255.255.0)
MTUSizeSetsthesizeofthemaximumtransmissionunit(MTU)forpackets
sentonthisnetwork.
DHCPServer
Enables/disablesDHCPonthisnetwork.(Default:Enabled)
DHCPStartFirstaddressintheaddresspool.(Range:1256;
Default:x.x.x.100)
DHCPMaxMaximumnumberofaddressesintheaddresspool.
(Range:1255;Default:150)
34
Chapter3
|
NetworkSettings
HotspotSettings
STP
EnablesordisablesprocessingofSpanningTreeProtocolmessages.
(Default:Disabled)
UPnP
EnablesordisablesUniversalPlugandPlaybroadcastmessages.
(Default:Disabled)
HotspotSettings
TheHotspotSettingspagecanconfigureInternetaccesstothegeneralpublicin
placessuchascoffeehouses,librariesandhospitals.Specificaccessrightsmayalso
bedefinedthroughaRADIUSserver.
Figure25:HotspotSettings(NetworkSettings)
Thefollowingitemsaredisplayedonthispage:
NetworkIPSpecifiestheIPaddressforthehotspot.ValidIPaddresses
consistoffourdecimalnumbers,0to255,separatedbyperiods.(Default:
192.168.182.1)
NetworkMaskNetworkmaskfortheassociatedIPsubnet.Thismask
identifiesthehostaddressbitsusedforroutingtospecificsubnets.
DHCPStart
Startingnumberof(lastnumericfield)inaddresspool.
(Range:1254;Default:10)
DHCPEndEndingnumberof(lastnumericfield)inaddresspool.
(Range:1254;Default:254)
DHCPLeaseTimeThedurationthatanIPaddressisassignedtoaDHCP
client.(Range:60043200seconds;Default:600seconds)
35
Chapter3
|
NetworkSettings
HotspotSettings
DNS1TheIPaddressoftheprimaryDomainNameServeronthenetwork.A
DNSmapsnumericalIPaddressestodomainnamesandcanbeusedtoidentify
networkhostsbyfamiliarnamesinsteadoftheIPaddresses.
DNS2
ThesecondaryDNSserveravailabletoDHCPclients.
DNSDomainName
Thedomainnameusedtoresolveincompletehost
namesviatheDomainNameSystem.(Range:132characters)
Figure26:HotspotSettings(RADIUSSettings)
Thefollowingitemsaredisplayedonthispage:
RadiusServer1
IPaddressorhostnameoftheprimaryRADIUSserver.
RadiusServer2IPaddressorhostnameofthesecondaryRADIUSserver.
RadiusSharedSecretAsharedtextstringusedtoencryptmessages
betweentheaccesspointandtheRADIUSserver.Besurethatthesametext
stringisspecifiedontheRADIUSserver.Donotuseblankspacesinthestring.
(Range:1255characters).
RadiusAuthPortRADIUSserverUDPportusedforauthentication
messages.(Range:165535,Default:1812)
RadiusAcctPort
RADIUSserverUDPportusedforaccountingmessages.
(Range:165535,Default:1813)
LocalID
LocalRADIUSserveridentifier.
LocalName
LocalRADIUSservername
OperationID
LocalRADIUSserveroperationidentifier.
36
Chapter3
|
NetworkSettings
HotspotSettings
Figure27:HotspotSettings(CaptivePortalSettings)
Thefollowingitemsaredisplayedonthispage:
CaptivePortalURLHostnameofInternetserviceportalforthehotspot.
Thecaptiveportalforcesahotspotclienttoaccessawelcomewebpage(normally
usedforauthentication)beforegainingfurtheraccesstotheInternet.
The
welcomepagemayrequireauthenticationand/orpayment.
CaptivePortalSecret
Thepasswordusedforloggingintothehotspot.
WalledGardenAlistofwebsitestowhichunauthenticatedusersare
allowedtonavigate.
AuthWhiteListAlistofMACaddressesthatareallowedtobypassthe
captiveportaltoaccesstheinternet.
37
WirelessSettings
Thischapterdescribeswirelesssettingsontheaccesspoint.Itincludesthe
followingsections:
“RadioSettings”onpage37
“VLANSettings”onpage50
RadioSettings
TheIEEE802.11wirelessinterfacesincludeconfigurationoptionsforradiosignal
characteristicsandwirelesssecurityfeatures.
Theaccesspointcanoperateinseveralradiomodes,802.11a/a+n/AC(5GHz)or
802.11b+g/b+g+n(2.4GHz).Supportedmodesdependontheaccesspointmodel.
Notethatthedualbandaccesspointscanoperateat2.4GHzand5GHzatthe
sametime.Thewebinterfaceidentifiestheradioconfigurationpagesas:
Radio0the5GHz802.11a/n/ACradiointerface
Radio1the2.4GHz802.11b/g/nradiointerface
Eachradiosupports8virtualaccesspoint(VAP)interfacesbasedontheSSIDs,
referredtoasVAP0~VAP7.EachVAPfunctionsasaseparateaccesspoint,andcan
beconfiguredwithitsownServiceSetIdentification(SSID)andsecuritysettings.
However,mostradiosignalparametersapplytoallVAPinterfaces.Traffictospecific
VAPscanbesegregatedbasedonusergroupsorapplicationtraffic.Theclients
associatewitheachVAPinthesamewayastheywouldwithseparatephysical
accesspoints.TheAPsupportsuptoatotalof127wirelessclientsacrossallVAP
interfacesperradio.
4
38
Chapter4
|
WirelessSettings
RadioSettings
Figure28:RadioSettings(PhysicalRadioSettings)
Thefollowingitemsaredisplayedonthispage:
Status
Enablesordisablesthewirelessserviceonthisinterface.
ModeSelectsthemodeinwhichtheAPwillfunction.
AccessPoint(AutoWDS)
TheVAPoperatesasanaccesspointinWDS
mode,whichacceptsconnectionsfromAPsinClientWDSmode.(Thisis
thedefaultsetting.)
Inthismode,theAPprovidesservicestoclientsasanormalaccesspoint.
WDSisusedtoautomaticallysearchforandconnecttootherAPnodes
usingthesameSSIDandsecuritysettings.
ClientTheAPcanprovideawirelessconnectiontoanotherAP.Inthis
mode,itcanpassinformationfromortolocallywiredhosts,butdoesnot
provideservicestoanywirelessclients.
ClientWDSTheAPprovidesservicestoclientsasanormalaccesspoint,
andoperatesasaclientstationinWDSmode,whichcanconnecttoother
accesspointsinAutoWDSmode.ConnectiontoanotherAPcanbemade
automaticallybyotheraccesspointsoperatinginAutoWDSmode.
DFSDynamicFrequencySelectioncanbeusedtodetectandavoid
interferencewithRadarsystemsoperatinginthe5GHzrange(UNIIchannels
5264and100140).Ifradarisdetected,theAPwillalterthechannelitis
operatingonandtellassociatedstationsthechanneltowhichitismoving.This
allowsstationstoreassociatewithminimuminterruption.(Thisparameteris
onlyapplicabletothe5GHzradio,andisenabledbydefault.)
802.11Mode
Definestheradiooperationmode.
Radio0(5GHzRadio)Default:11a+n;Options:11a,11a+n,11AC
Radio1
(2.4GHzRadio)Default:11b+g;Options:11b+g,11b+g+n
39
Radio 0(5 GHz) Radio 1(2.4GHz)
Chapter4
|
WirelessSettings
RadioSettings
ChannelBandwidth
TheAPoptionsforchannelbandwidthinclude5,10,
20,40and80MHz.Using20MHzgivesan802.11gconnectionaspeedof
54Mbpsandan802.11nconnectionaspeedofupto108Mbps,andensures
backwardcomplianceforslower802.11bdevices.Settingthechannel
bandwidth
to40MHzprovidesaconnectionspeedfor802.11nofupto300Mbps.Usinga
channelbandwidthof80MHzprovidesaconnectionspeedupto
866.7Mbps.(Default:20MHz;Range:5MHz,10MHz,20MHz,40MHz,80MHz)
ChannelTheradiochannelthattheaccesspointusestocommunicatewith
wirelessclients.Whenmultipleaccesspointsaredeployedinthesamearea,set
thechannelonneighboringaccesspointsatleastfivechannelsaparttoavoid
interferencewitheachother.Forexample,for11g/n20MHzmodeyoucan
deployuptothreeaccesspointsinthesameareausingchannels1,6,11.Note
thatwirelessclientsautomaticallysetthechanneltothesameasthatusedby
theaccesspointtowhichitislinked.(Theavailablechannelsaredependenton
the802.11Mode,ChannelBandwidth,andCountryCodesettings.)
SelectingAutoenablestheaccesspointtoautomaticallyselectanunoccupied
radiochannel.(Default:Auto)
Table1:RadioChannels
RadioChannels
a
Frequency(GHz)
RadioChannels Frequency(GHz)
Auto
Autoscan
Auto
Autoscan
365.18012.412
405.20022.417
445.22032.422
485.24042.427
1495.74552.432
1535.76562.437
1575.78572.422
1615.80582.447
1655.82592.452
 102.457
 112.462
a.Supportedchannelsdependonthe802.11modeandchannelbandwidth.
40
Chapter4
|
WirelessSettings
RadioSettings
Figure29:RadioSettings(WirelessNetworkConfiguration)
Thefollowingitemsaredisplayedonthispage:
GeneralSettings
Status
EnablesordisablesthewirelessserviceonthisVAP.
SSIDThenameofthebasicservicesetprovidedbyaVirtualAccessPoint
(VAP)interface.Clientsthatwanttoconnecttothenetworkthroughtheaccess
pointmustsettheirSSIDtothesameasthatoftheaccesspoint’sVAPinterface.
(Default:ACN0.#(where#is07)for5GHz,ACN1.#(where#is07)for2.4GHz;
Range:132characters)
Broadcast
TheSSIDcanbebroadcastatregularintervalssothatwireless
stationssearchingforanetworkconnectioncandiscoverit.Thisallowswireless
clientstodynamicallydiscoverandroambetweenWLANs.Thisfeaturealso
makesiteasierforhackerstobreakintoyourhomenetwork.BecauseSSIDsare
notencrypted,itiseasytograbonebysnoopingtheWLANlookingforSSID
broadcastmessagescomingfromtheAP.(Default:Enabled)
ClientIsolation
Ifenabled,wirelessclientscantalktotheLAN,andreach
theInternetifsuchconnectionisavailable,buttheycannotcommunicatewith
oneanother.(DefaultDisabled)
41
Chapter4
|
WirelessSettings
RadioSettings
WMMSetstheWMMoperationalmodeontheaccesspoint.Whenenabled,
theparametersforeachAccessCategory(AC)queuewillbeemployedonthe
accesspointandQoScapabilitiesadvertisedtoWMMenabledclients.

(Default:
Enabled)
Whenenabled,WMMmustbesupportedonanydevicetryingtoassociated
with
theaccesspoint.Devicesthatdonotsupportthisfeaturewillnotbe
allowedto
associatewiththeaccesspoint.
Wirelessnetworksofferanequalopportunityforalldevicestotransmitdata
fromanytypeofapplication.Althoughthisisacceptableformostapplications,
multimediaapplications(withaudioandvideodata)areparticularlysensitive
tothedelayandthroughputvariationsthatresultfromthis“equalopportunity”
wirelessaccessmethod.Formultimediaapplicationstorunwelloverawireless
network,aQualityofService(QoS)mechanismisrequiredtoprioritizetraffic
typesandprovidean“enhancedopportunity”wirelessaccessmethod.
TheaccesspointimplementsQoSusingtheWiFiMultimedia(WMM)standard.
UsingWMM,theaccesspointisabletoprioritizetrafficandoptimize
performancewhenmultipleapplicationscompeteforwirelessnetwork
bandwidthatthesametime.WMMemploystechniquesthatareasubsetofthe
IEEE802.11eQoSstandardanditenablestheaccesspointtointeroperatewith
bothWMMenabledclientsandotherdevicesthatmaylackanyWMM
functionality.
AccessCategoriesWMMdefinesfouraccesscategories(ACs):voice,video,
besteffort,andbackground.Thesecategoriescorrespondtotrafficpriority
levelsandaremappedtoIEEE802.1Dprioritytags(seeFigure2,“WMMAccess
Categories",onpage41).ThedirectmappingofthefourACsto802.1D
prioritiesisspecificallyintendedtofacilitateinteroperabilitywithotherwired
networkQoSpolicies.WhilethefourACsarespecifiedforspecifictypesof
traffic,WMMallowstheprioritylevelstobeconfiguredtomatchanynetwork‐
wideQoSpolicy.WMMalsospecifiesaprotocolthataccesspointscanuseto
communicatetheconfiguredtrafficprioritylevelstoQoSenabledwireless
clients.
Table2:WMMAccessCategories
AC_VO(AC3)VoiceHighestpriority,minimumdelay.Timesensitive
datasuchasVoIP(VoiceoverIP)calls.
AC_VI(AC2)VideoHighpriority,minimumdelay.Timesensitivedata
suchasstreamingvideo.
7,6
5,4
AC_BE(AC0)BestEffortNormalpriority,mediumdelayandthroughput.
Dataonlyaffectedbylongdelays.Datafrom
applicationsordevicesthatlackQoScapabilities.
AC_BK(AC1)
Background
Lowestpriority.Datawithnodelayorthroughput
requirements,suchasbulkdatatransfers.
0,3
2,1
Access
Category
WMM
Description
Designation
802.1D
Tags
42
Chapter4
|
WirelessSettings
RadioSettings
WMMOperationWMMusestrafficprioritybasedonthefourACs;Voice,
Video,
BestEffort,andBackground.ThehighertheACpriority,thehighertheprobability
thatdataistransmitted.
Whentheaccesspointforwardstraffic,WMMaddsdatapacketstofour
independenttransmitqueues,oneforeachAC,dependingonthe802.1Dpriority
tagofthepacket.Datapacketswithoutaprioritytagarealwaysadded
totheBest
EffortACqueue.Fromthefourqueues,aninternal“virtual”collision
resolution
mechanismfirstselectsdatawiththehighestprioritytobegrantedatransmit
opportunity.Thenthesamecollisionresolutionmechanismisused
externallyto
determinewhichdevicehasaccesstothewirelessmedium.
ForeachACqueue,thecollisionresolutionmechanismisdependentontwo
timingparameters:
AIFSN(ArbitrationInterFrameSpaceNumber),anumberusedto
calculatetheminimumtimebetweendataframes
CW(ContentionWindow),anumberusedtocalculatearandombackofftime
Afteracollisiondetection,abackoffwaittimeiscalculated.Thetotalwaittimeis
thesumofaminimumwaittime(ArbitrationInterFrameSpace,orAIFS)
determinedfromtheAIFSN,andarandombackofftimecalculatedfromavalue
selectedfromzerototheCW.TheCWvaluevarieswithinaconfigurablerange.
It
startsatCWMinanddoublesaftereverycollisionuptoamaximumvalue,
CWMax.
Afterasuccessfultransmission,theCWvalueisresettoitsCWMin
value.
Figure30:WMMBackoffWaitTimes
Forhighprioritytraffic,theAIFSNandCWvaluesaresmaller.Thesmallervalues
equatetolessbackoffandwaittime,andthereforemoretransmit
opportunities.
High Priority
Low Priority
Time
CWMin CWMax
A
IFS
Random Backof
f
Minimum Wait Time Random Wait Time
CWMin CWMax
A
IFS
Random Backof
f
Minimum Wait Time Random Wait Time
43
Chapter4
|
WirelessSettings
RadioSettings
SecuritySettings
MethodSetsthewirelesssecuritymethodforeachVAP,including
associationmode,encryption,andauthentication.(Default:NoSecurity)
NoSecurityTheVAPbroadcastsabeaconsignalincludingthe
configuredSSID.WirelessclientswithanSSIDsettingof“any”canreadthe
SSIDfromthebeaconandautomaticallysettheirSSIDtoallowimmediate
connection.
WEPOpenSystemTheVAPbroadcastsabeaconsignalincludingthe
configuredSSID.WirelessclientswithanSSIDsettingof“any”canreadthe
SSIDfromthebeaconandautomaticallysettheirSSIDtoallowimmediate
connection.
KeyWEPisusedtoencryptdatatransmittedbetweenwireless
clientsandtheVAP.WEPusesstaticsharedkeys(fixedlength
hexadecimaloralphanumericstrings)thataremanuallydistributedto
allclientsthatwanttousethenetwork.
WEPisthesecurityprotocolinitiallyspecifiedintheIEEE802.11
standardforwirelesscommunications.Unfortunately,WEPhasbeen
foundtobeseriouslyflawedandcannotberecommendedforahigh
levelofnetworksecurity.Formorerobustwirelesssecurity,theaccess
pointprovidesWiFiProtectedAccess(WPA)andWPA2forimproved
dataencryptionanduserauthentication.
BesurethattheWEPsharedkeysarethesameforeachclientinthe
wirelessnetwork.Allclientssharethesamekeys,whichareusedfor
dataencryption.
For64bitWEP,stringlengthmustbe5ASCIIcharacters(lettersand
numbers)or10hexadecimaldigits.For128bitWEP,stringlengthmust
be13ASCIIcharacters(lettersandnumbers)or26hexadecimaldigits.
WPAPSKForenterprisedeployment,WPArequiresaRADIUS
authenticationservertobeconfiguredonthewirednetwork.However,for
smallofficenetworksthatmaynothavetheresourcestoconfigureand
maintainaRADIUSserver,WPAprovidesasimpleoperatingmodethatuses
justapresharedpasswordfornetworkaccess.ThePreSharedKeymode
usesacommonpasswordforuserauthenticationthatismanuallyentered
ontheaccesspointandallwirelessclients.ThePSKmodeusesthesame
TKIPpacketencryptionandkeymanagementasWPAintheenterprise,
providingarobustandmanageablealternativeforsmallnetworks.
Encryption
Dataencryptionusesoneofthefollowingmethods:
CCMP(AES)AESCCMPisusedasthemulticastencryption
cipher.AESCCMPisthestandardencryptioncipherrequiredfor
WPA2.(Thisisthedefaultsetting.)
TKIP
TKIPisusedasthemulticastencryptioncipher.
44
Chapter4
|
WirelessSettings
RadioSettings
Auto:TKIP+CCMP(AES)
Theencryptionmethodusedbythe
clientisdiscoveredbytheaccesspoint.
KeyWPAisusedtoencryptdatatransmittedbetweenwireless
clientsandtheVAP.WPAusesstaticsharedkeys(fixedlength
hexadecimaloralphanumericstrings)thataremanuallydistributedto
allclientsthatwanttousethenetwork.
Stringlengthmustbe8to63ASCIIcharacters(lettersandnumbers).
Nospecialcharactersareallowed.
WPA2PSK:ClientsusingWPA2withaPresharedKeyareacceptedfor
authentication.
WPAwasintroducedasaninterimsolutionforthevulnerabilityofWEP
pendingtheratificationoftheIEEE802.11iwirelesssecuritystandard.In
effect,theWPAsecurityfeaturesareasubsetofthe802.11istandard.WPA2
includesthenowratified802.11istandard,butalsooffersbackward
compatibilitywithWPA.Therefore,WPA2includesthesame802.1XandPSK
modesofoperationandsupportforTKIPencryption.
RefertoWPAPSKforadescriptionofencryptionmethodsandthekey.
WPAEAPWPAemploysacombinationofseveraltechnologiesto
provideanenhancedsecuritysolutionfor802.11wirelessnetworks.A
RADIUSserverisusedforauthentication,andcanalsobeusedfor
accounting.
RefertoWPAPSKforadescriptionofencryptionmethods.
RADIUSSettings
ARADIUSservermustbespecifiedfortheaccesspointtoimplementIEEE
802.1XnetworkaccesscontrolandWiFiProtectedAccess(WPA)wireless
security.
Inaddition,youcanconfigureaRADIUSAccountingservertoreceiveuser
sessionaccountinginformationfromtheaccesspoint.RADIUSAccounting
canbeusedtoprovidevaluableinformationonuseractivityinthe
network.
ThisguideassumesthatyouhavealreadyconfiguredRADIUSserver(s)tosupport
theaccesspoint.ConfigurationofRADIUSserversoftwareisbeyondthescopeof
thisguide,refertothedocumentationprovidedwiththeRADIUSserversoftware.
RadiusAuthServer
SpecifiestheIPaddressorhostnameofthe
RADIUSauthenticationserver.
RadiusAuthPortTheUDPportnumberusedbytheRADIUSserver
forauthenticationmessages.(Range:102465535;Default:1812)
45
Chapter4
|
WirelessSettings
RadioSettings
RadiusAuthSecretAsharedtextstringusedtoencryptmessages
betweentheaccesspointandtheRADIUSserver.Besurethatthesame
textstringisspecifiedontheRADIUSauthenticationserver.Donotuse
blankspacesinthestring.(Maximumlength:255characters)
RadiusAcctServer
SpecifiestheIPaddressorhostnameofthe
RADIUSaccountingserver.
RadiusAcctPort
TheUDPportnumberusedbytheRADIUSserver
foraccountingmessages.(Range:102465535;Default:1813)
RadiusAcctSecretAsharedtextstringusedtoencryptmessages
betweentheaccesspointandtheRADIUSserver.Besurethatthesame
textstringisspecifiedontheRADIUSaccountingserver.Donotuse
blankspacesinthestring.(Maximumlength:255characters)
WPA2EAP—WPAwasintroducedasaninterimsolutionforthe
vulnerabilityofWEPpendingtheratificationoftheIEEE802.11iwireless
securitystandard.Ineffect,theWPAsecurityfeaturesareasubsetofthe
802.11istandard.WPA2includesthenowratified802.11istandard,butalso
offersbackwardcompatibilitywithWPA.Therefore,WPA2includesthe
same802.1XandPSKmodesofoperationandsupportforTKIPencryption.
ARADIUSserverisusedforauthentication,andcanalsobeusedto
accounting.
RefertoWPAPSKforadescriptionofencryptionmethods.
RefertoWPAEAPforainformationonconfiguringtheRADIUSserver.
AccessControlListWirelessclientscanbeauthenticatedfornetworkaccess
bycheckingtheirMACaddressagainstthelocaldatabaseconfiguredonthe
accesspoint.(Default:OFF)
Policy
TheMAClistcanbeconfiguredtoeitherallowordenynetwork
accesstospecifiedclients.(Default:AllowallMACsonlist)
FilteredMACsEnteraphysicaladdressforeachclient.Entersixpairsof
hexadecimaldigitsseparatedbycolons,andfollowedbyanoptional
comment;forexample,00:90:D1:12:AB:89JohnSmith’sPC
NetworkSettings
NetworkBehavior
Oneofthefollowingconnectionmethodsmustbe
specified.(Default:RoutetoInternet)
BridgetoInternet
ConfiguresaninterfaceasattachedtotheWAN.
TrafficfromthisinterfaceisdirectlybridgedintotheInternet.(SeeFigure6,
“BridgetoInternet",onpage17.)
46
Chapter4
|
WirelessSettings
RadioSettings
RoutetoInternet
ConfiguresaninterfaceasamemberoftheLAN.
Trafficfromthisinterfaceisroutedacrosstheaccesspointandoutthrough
aninterfacewhichisbridgedtotheInternet.(SeeFigure7,“Routeto
Internet",onpage18.)
NetworkName
Thenetworktoberouted.Thedefaultis“Default
localnetwork”asdisplayedunderLANSettingsLocalNetwork.
AddtoGuestNetwork
Thisinterfacecanonlysupporttheguest
network.
HotspotControlled
Thisinterfacecanonlysupporthotspotservices.
ConfigureHotspot
OpensHotspotSettingspage.
VLANTagTraffic
TagsanypacketspassingfromthisVAP(virtualaccess
point)totheassociatedEthernetportasconfiguredunder“VLANSettings”
onpage50.(Range:34095)
LimitUploadEnablesratelimitingoftrafficfromtheVAPinterfaceasitis
passedtothewirednetwork.YoucansetamaximumrateinKbytespersecond.
(Range:25610048576Kbytespersecond;Default:OFF)
LimitDownloadEnablesratelimitingoftrafficfromthewirednetworkasit
ispassedtotheVAPinterface.Youcansetamaximumrateinkbytesper
second.(Range:25610048576Kbytespersecond;Default:OFF)
AdvancedSettings
802.11RatesTheminimumdatarateatwhichtheAPtransmitspacketson
thewirelessinterface.
Table3:802.11DataRates
Option
Rate(Max) CodingMethod
Radio0(5GHz)
Radio1(2.4GHz)
Auto
Auto
Basedonsignalstrength
1M1Mbps
CKK
2M2Mbps
CKK
5.5M5.5Mbps
CKK
11M11Mbps
CKK
6M6MbpsOFDM
9M9MbpsOFDM
12M12MbpsOFDM
18M18MbpsOFDM
24M24MbpsOFDM
36M36MbpsOFDM
47
Chapter4
|
WirelessSettings
RadioSettings
Table3:802.11DataRates(Continued)
Option
Rate(Max) CodingMethod
Radio0(5GHz)
Radio1(2.4GHz)
48M48MbpsOFDM
54M54MbpsOFDM
MCS015MbpsBPSK,singlestream
MCS130MbpsQPSK,singlestream
MCS245MbpsQPSK,singlestream
MCS360Mbps16QAM,singlestream
MCS490Mbps16QAM,singlestream
MCS5120Mbps64QAM,singlestream
MCS6135Mbps64QAM,singlestream
MCS7150Mbps64QAM,singlestream
MCS830MbpsBPSK,doublestream
MCS960MbpsQPSK,doublestream
MCS1090MbpsQPSK,doublestream
MCS11120Mbps16QAM,doublestream
MCS12180Mbps16QAM,doublestream
MCS13240Mbps64QAM,doublestream
MCS14270Mbps64QAM,doublestream
MCS15300Mbps64QAM,doublestream
NSS1MCS032.5Mbps256QAM,singlestream
NSS1MCS165Mbps256QAM,singlestream
NSS1MCS297.5Mbps256QAM,singlestream
NSS1MCS3130Mbps256QAM,singlestream
NSS1MCS4195Mbps256QAM,singlestream
NSS1MCS5260Mbps256QAM,singlestream
NSS1MCS6292.5Mbps 256QAM,singlestream
NSS1MCS7325Mbps256QAM,singlestream
NSS1MCS8390Mbps256QAM,singlestream
NSS1MCS9433.3Mbps 256QAM,singlestream
NSS2MCS065Mbps256QAM,doublestream
NSS2MCS1130Mbps256QAM,doublestream
NSS2MCS2195Mbps256QAM,doublestream
NSS2MCS3260Mbps256QAM,doublestream
NSS2MCS4390Mbps256QAM,doublestream
48
Chapter4
|
WirelessSettings
RadioSettings
Table3:802.11DataRates(Continued)
Option
Rate(Max) CodingMethod
Radio0(5GHz)Radio1(2.4GHz)
NSS2MCS5520Mbps256QAM,doublestream
NSS2MCS6585Mbps256QAM,doublestream
NSS2MCS7650Mbps256QAM,doublestream
NSS2MCS8780Mbps256QAM,doublestream
NSS2MCS9866.7Mbps 256QAM,doublestream
TxStreamsSpecifiesasinglestreamat20MHzoradualstreamat20MHz
and40MHzforsignaltransmission.(Options:1,2;Default1)
RxStreamsSpecifiesasinglestreamat20MHzoradualstreamat20MHz
and40MHzforsignalreception.(Options:1,2;Default1)
TxPowerAdjuststhepoweroftheradiosignalstransmittedfromtheaccess
point.Thehigherthetransmissionpower,thefartherthetransmissionrange.
Powerselectionisnotjustatradeoffbetweencoverageareaandmaximum
supportedclients.Youalsohavetoensurethathighpowersignalsdonot
interferewiththeoperationofotherradiodevicesintheservicearea.
(Default:17dBmfor5GHzradio,27dBmfor2.4GHzradio)
Table4:TxPower
Power
Radio0(5GHz) Radio1(2.4GHz)
0dBM(1mW)
4dBM(2mW)
5dBM(3mW)
7dBM(5mW)
8dBM(6mW)
9dBM(7mW)
10dBM(10mW)
11dBM(12mW)
12dBM(15mW)
13dBM(19mW)
14dBM(25mW)
15dBM(31mW)
16dBM(39mW)
17dBM(50mW)
18dBM(63mW)
19dBM(79mW)
49
Chapter4
|
WirelessSettings
RadioSettings
Table4:TxPower(Continued)
20dBM(100mW)√
21dBM(125mW)√
22dBM(158mW)√
23dBM(199mW)√
24dBM(251mW)√
25dBM(316mW)√
26dBM(398mW)√
27dBM(501mW)√
ACKTimeout
Setstheacknowledgementtimeout,whichisusedprimarily
forlongdistanceconnections.Thistimeoutisusedtomakeanadjustmentfor
linkdistance.Itisbasedontheamountoftime,inmicroseconds,thatitshould
taketotransmitaframetotheotherendofthelink,beprocessedbythe
receivingdevice,andhavetheACKframecreatedandreturnedtothesending
device.(Range:0255microseconds;Default:0microseconds)
FragmentationThresh.Setsthemaximumframesizeabovewhichpackets
arefragmented.Thisreducesthetimerequiredtotransmittheframe,and
thereforereducestheprobabilitythatitwillbecorrupted(atthecostofmore
dataoverhead).(Range:2562346bytes;Default:2346bytes)
RTSThresholdSetsthepacketsizethresholdatwhichaRequesttoSend
(RTS)signalmustbesenttoareceivingstationpriortothesendingstation
startingcommunications.TheaccesspointsendsRTSframestoareceiving
stationtonegotiatethesendingofadataframe.AfterreceivinganRTSframe,
thestationsendsaCTS(cleartosend)frametonotifythesendingstationthatit
canstartsendingdata.
IftheRTSthresholdissetto1,theaccesspointalwayssendsRTSsignals.Ifsetto
2346,theaccesspointneversendsRTSsignals.Ifsettoanyothervalue,and
the
packetsizeequalsorexceedstheRTSthreshold,theRTS/CTS(Requestto
Send/
CleartoSend)mechanismwillbeenabled.
Theaccesspointscontendingforthemediummaynotbeawareofeachother.
The
RTS/CTSmechanismcansolvethis“HiddenNodeProblem.(Range:12346bytes:
Default:2346bytes)
SGIThe802.11ndraftspecifiestwoguardintervals:400ns(short)and800ns
(long).Supportofthe400nsShortGuardIntervalisoptionalfortransmitand
receive.Thepurposeofaguardintervalistointroduceimmunityto
propagationdelays,echoes,andreflectionstowhichdigitaldataisnormally
verysensitive.EnablingtheSGIsetsitto400ns.(Default:Disabled)
PowerRadio0(5GHz)Radio1(2.4GHz)
50
Chapter4
|
WirelessSettings
VLANSettings
STBCSpacetimeBlockCodingsendsmultiplecopiesofthesamedataover
anumberofantennas,usingthevariousreceivedversionstoimprovethe
reliabilityofdatatransfer.Thetransmittedsignalmaytraverseadifficult
environmentwithscattering,reflection,andrefractionwhichmaythenbe
furthercorruptedbythermalnoiseinthereceiver,sosomeofthereceived
copieswillbebetterthanothers.Thisredundancyresultsinahigherchanceof
beingabletouseoneormoreofthereceivedcopiestocorrectlydecodethe
receivedsignal.(Default:Disabled)
AMPDUEnablesordisablestheuseofAggregatedMACProtocolDataUnits.
Physicallayer(PHY)datarateimprovementsdonotincreaserealthroughput
beyondapointbecauseof802.11protocoloverheads.Themainmediaaccess
controlfeaturethatprovidesaperformanceimprovementisaggregation.
AggregationofMACprotocoldataunits(MPDUs)isreferredtoasMPDU
aggregationor(AMPDU).(Default:Enabled)
VLANSettings
VLANs(virtuallocalareanetworks)areturnedoffbydefault.Ifturnedontheywill
automaticallytaganypacketspassedtotheLANportfromtherelevantVAP(virtual
accesspoint).
TheaccesspointcanemployVLANtaggingtocontrolaccesstonetworkresources
andincreasesecurity.VLANsseparatetrafficpassingbetweentheaccesspoint,
associatedclients,andthewirednetwork.YoucanconfigureaVLANforupto13
VAPinterfaces.
Notethefollowingpointsabouttheaccesspoint’sVLANsupport:
IfanEthernetLANportontheaccesspointisassignedaVLANID,anytraffic
enteringthatportmustbealsotaggedwiththesameVLANID.
AmanagementVLANcanbeusedformanagingtheaccesspointthrough
remotemanagementtools,suchasthewebinterface,SSH,TelnetorSNMP.
Theaccesspointcanbeconfiguredtoonlyacceptmanagementtrafficthatis
taggedwiththespecifiedmanagementVLANID.ThisIDmustbeassignedto
theEthernetportsorradiointerfaceswhicharedesignatedtohandle
managementtraffic.
WirelessclientsassociatedtotheaccesspointcanbeassignedtoaVLAN.
WirelessclientsareassignedtotheVLANfortheVAPinterfacewithwhichthey
areassociated.TheaccesspointonlyallowstraffictaggedwithcorrectVLAN
IDstobeforwardedtoassociatedclientsoneachVAPinterface.
WhenVLANsupportisenabledontheaccesspoint,trafficpassedtothewired
networkistaggedwiththeappropriateVLANID.WhenanEthernetportonthe
accesspointisconfiguredasaVLANmember,trafficreceivedfromthewired
51
Chapter4
|
WirelessSettings
VLANSettings
networkmustalsobetaggedwiththesameVLANID.Receivedtrafficthathas
an
unknownVLANIDornoVLANtagisdropped.
WhenVLANsupportisdisabled,theaccesspointdoesnottagtrafficpassedto
thewirednetworkandignorestheVLANtagsonanyreceivedframes.
Note:
BeforeenablingVLANtaggingontheaccesspoint,besuretoconfigurethe
attachednetworkswitchporttosupporttaggedVLANframesfortheVLANIDs
configuredontheaccesspoint.Otherwise,connectivitytotheaccesspointwillbe
lostwhenyouenabletheVLANfeature.
Figure31:ConfiguringVLANs
Thefollowingitemsaredisplayedonthispage:
VLANIDAVLANidentifiertobeassigned.(Range:34095)
(VLAN1and2arereservedforinternaluse.)
Ports
TheEthernetportsassignedtothespecifiedVLAN.
SSIDs
TheSSIDofaVAPconfiguredtobeamemberofthespecifiedVLAN.
ThisoptionisconfiguredunderRadioSettings(NetworkSettingsNetwork
Behavior).
52
SystemSettings
Thischapterdescribesmaintenancesettingsontheaccesspoint.Itincludesthe
followingsections:
“SystemSettings”onpage53
“Maintenance”onpage54
“UserAccounts”onpage57
“Servicesonpage57
5
53
Chapter5
|
SystemSettings
SystemSettings
SystemSettings
TheSystemSettingspageisusedtoconfiguregeneraldescriptiveinformation
abouttheaccesspoint,suchasthesystemidentificationname,itsgeographic
coordinates,andlocaltime.
Figure32:SystemSettings
Thefollowingitemsaredisplayedonthispage:
DeviceNameAnaliasfortheAP,enablingthedevicetobeuniquely
identifiedonthenetwork.(Default:none;Range:050characters)
DeviceLatitude
Thegeographiclatitudeoftheaccesspoint,givenin
degreesandminutes.(Range:‐ 90to+90degrees)
DeviceLongitude
Thegeographiclongitudeoftheaccesspoint,givenin
degreesandminutes.(Range:‐ 180to+180degrees)
Enableresetbutton
Enablesordisablesthehardwareresetbutton.
LocalTimeThelocaltime,givenasdayofweek,month,time,year.
ConfigureNetworkTime
LinkstotheNetworkTime(NTP)sectiononthe
Servicespage.
54
Chapter5
|
SystemSettings
Maintenance
Maintenance
TheMaintenancepagesupportsgeneralmaintenancetasksincludingdisplaying
thesystemlog,rebootingthedevice,restoringfactorydefaults,backingupor
restoringconfigurationsettings,andupgradingfirmware.
Figure33:Maintenance
Displaying
SystemLogs
Theaccesspointsaveseventanderrormessagestoalocalsystemlogdatabase.
Thelogmessagesincludethedateandtime,devicename,messagetype,and
messagedetails.
Figure34:SystemLog
55
Chapter5
|
SystemSettings
Maintenance
Rebootingthe
AccessPoint
TheRebootpageallowsyoutoreboottheaccesspoint.
Figure35:RebootingtheAccessPoint
Resettingthe
AccessPoint
TheResetpageallowsyoutoresettheaccesspointtothefactorydefaults.Note
thatalluserconfiguredinformationwillbelost.Youwillhavetoreenterthe
defaultusernameandpasswordtoregainmanagementaccesstothisdevice.
Figure36:ResettingtoDefaults
Note:Itisalsopossibletorebootorresettheaccesspointbyinsertingapininthe
pinholelabeled“RESET”ontheconnectorpaneloftheaccesspointand:
press2secondstoreboottheaccesspoint;
press10secondstoresettheaccesspointtothefactorydefaults.
56
Chapter5
|
SystemSettings
Maintenance
BackingUp
Configuration
Settings
TheBackupfunctionallowsyoutobackuptheaccesspoint’sconfigurationtoa
managementworkstation.InWindows,aGNUZip(*.tar.gz)filewillbestoredinthe
Downloadsfolder.Thisisasamplefilename:backupACNAP20140627.tar.gz
Restoring
Configuration
Settings
TheRestorepageallowsyoutouploadconfigurationsettingsfromamanagement
workstation.Thespecifiedfilemustbeonethatwaspreviouslybackedupfromthe
accesspoint.
Figure37:RestoringConfigurationSettings
UpgradingFirmware Youcanupgradenewaccesspointsoftwarefromalocalfileonthemanagement
workstation.Newsoftwaremaybeprovidedperiodicallyfromyourdistributor.
Afterupgradingnewsoftware,youmustreboottheaccesspointtoimplementthe
newcode.Untilarebootoccurs,theaccesspointwillcontinuetorunthesoftware
itwasusingbeforetheupgradestarted.Theaccesspointsupportsdualsoftware
images,soifnewlyloadedsoftwareiscorrupted,thealternateimagewillbeused
onthenextreboot.Configurationsettingsarestoredseparatelyfromthesoftware,
sothecurrentsettingswillalwaysbeusedforanynewsoftware.However,note
thatifthecurrentconfigurtionsettingsarecorrupted,thesystemdefaultswillbe
used.
Figure38:UpgradingFirmware
57
Chapter5
|
SystemSettings
UserAccounts
UserAccounts
TheUserAccountspageallowsyoutocontrolmanagementaccesstotheswitch
basedonmanuallyconfiguredusernamesandpasswords.
Figure39:UserAccounts
Thefollowingitemsaredisplayedonthispage:
UsernameThenameoftheuser.(Range:315ASCIIcharacters,nospecial
characters)
PasswordTheuserpassword.(Range:315ASCIIcharacters,casesensitive,
nospecialcharacters)
Services
TheServicespageallowsyoutocontrolremotemanagementaccesstotheswitch
andtoconfigureofNTPtimeservers.
RemoteManagement
Settings
TheSSH,Telnet,Web,andSNMPmanagementinterfacesareenabledandopento
accessfromtheInternet.Toprovidemoresecurity,specificservicescanbedisabled
andmanagementaccesspreventedfromtheInternet.
SSH TheSecureShell(SSH)canactasasecurereplacementforTelnet.TheSSHprotocol
usesgeneratedpublickeystoencryptalldatatransferspassingbetweentheaccess
pointandSSHenabledmanagementstationclientsandensuresthatdatatraveling
overthenetworkarrivesunaltered.Clientscanthensecurelyusethelocaluser
nameandpasswordforaccessauthentication.
NotethatSSHclientsoftwareneedstobeinstalledonthemanagementstationto
accesstheaccesspointformanagementviatheSSHprotocol.
58
Chapter5
|
SystemSettings
Services
Figure40:SSHServerSettings
Thefollowingitemsaredisplayedonthispage:
SSHServer
EnablesordisablesSSHaccesstotheaccesspoint.
(Default:Enabled)
PortSetstheTCPportnumberfortheSSHserverontheaccesspoint.
(Range:165535;Default:22)
AllowSSHfromWAN
AllowsSSHmanagementaccessfromtheWAN.
TelnetTelnetisaremotemanagementtoolthatcanbeusedtoconfiguretheaccesspoint
fromanywhereinthenetwork.However,notethatTelnetisnotsecurefromhostile
attacks.
Figure41:TelnetServerSettings
Thefollowingitemsaredisplayedonthispage:
TelnetServer
EnablesordisablesTelnetaccesstotheaccesspoint.
(Default:Enabled)
PortSetstheTCPportnumberfortheTelnetserverontheaccesspoint.
(Range:165535;Default:23)
AllowTelnetfromWAN
AllowsTelnetmanagementaccessfromtheWAN.
WebserverAWebbrowserprovidestheprimarymethodofmanagingtheaccesspoint.Both
HTTPandHTTPSservicecanbeaccessedindependently.IfyouenableHTTPS,you
mustindicatethisintheURL:https://device:port_number]
WhenyoustartHTTPS,theconnectionisestablishedinthisway:
59
Chapter5
|
SystemSettings
Services
Theclientauthenticatestheserverusingtheserver’sdigitalcertificate.
Theclientandservernegotiateasetofsecurityprotocolstouseforthe
connection.
Theclientandservergeneratesessionkeysforencryptinganddecryptingdata.
Theclientandserverestablishasecureencryptedconnection.
Apadlockiconshouldappearinthestatusbarformostbrowsers.
Figure42:WebServerSettings
Thefollowingitemsaredisplayedonthispage:
HTTPPortTheTCPporttobeusedbytheHTTPWebbrowserinterface.
(Range:165535;Default:80)
AllowHTTPfromWAN
AllowsHTTPmanagementaccessfromtheWAN.
HTTPSPortTheTCPporttobeusedbytheHTTPSWebbrowserinterface.
(Range:165535;Default:443)
AllowHTTPSfromWAN
AllowsHTTPSmanagementaccessfromtheWAN.
NetworkTime NetworkTimeProtocol(NTP)allowstheaccesspointtosetitsinternalclockbased
onperiodicupdatesfromatimeserver(SNTPorNTP).Maintaininganaccuratetime
ontheaccesspointenablesthesystemlogtorecordmeaningfuldatesandtimes
forevententries.Iftheclockisnotset,theaccesspointwillonlyrecordthetime
fromthefactorydefaultsetatthelastbootup.
TheaccesspointactsasanNTPclient,periodicallysendingtimesynchronization
requeststospecifiedtimeservers.Theaccesspointwillattempttopolleachserver
intheconfiguredsequence.
60
Chapter5
|
SystemSettings
Services
Figure43:NTPSettings
Thefollowingitemsaredisplayedonthispage:
LocalTimeDisplaysthelocaltimeasdayofweek,month,
hour:minute:second,year,basedonUniversalTimeCoordinates.
NTPServiceEnablesordisablessendingofrequestsfortimeupdates.
(Default:Enabled)
NTPServersSetsthehostnamesfortimeservers.Theswitchattemptsto
updatethetimefromthefirstserver,ifthisfailsitattemptsanupdatefromthe
nextserverinthesequence.Toconfigureadditionalservers,clickthe“+”
buttontoopenaneweditfield.
TimeZone
Todisplayatimecorrespondingtoyourlocaltime,chooseone
ofthepredefinedtimezonesfromthescrolldownlist.
SNMPSimpleNetworkManagementProtocol(SNMP)isacommunicationprotocol
designedspecificallyformanagingdevicesonanetwork.Itistypicallyusedto
configurethesedevicesforproperoperationinanetworkenvironment,aswellas
tomonitorthemtoevaluateperformanceordetectpotentialproblems.
Figure44:SNMPSettings
Thefollowingitemsaredisplayedonthispage:
SNMPServer
EnablesordisablesSNMPontheaccesspoint.
(Default:Enabled)
61
Chapter5
|
SystemSettings
Services
ContactAdministratorresponsiblefortheaccesspoint.
CommunityStringAcommunitystringthatactslikeapasswordand
permitsaccesstotheSNMPprotocol.(Range:132characters,casesensitive;
Default:public)
Thedefaultstring“public”providesreadonlyaccesstotheaccesspoint’s
ManagementInformation(MIB)database.
AllowSNMPfromWAN
AllowsSNMPmanagementaccessfromtheWAN.
61
Appendices
Thissectionprovidesadditionalinformationandincludestheseitems:
“Troubleshooting”onpage62
SectionIII
62
Tro u b l e s h o o t i n g
ProblemsAccessingtheManagementInterface
Table5:TroubleshootingChart
Cannotconnectusing
Telnet,webbrowser,or
SNMPsoftware
BesuretheAPispoweredup.
Checknetworkcablingbetweenthemanagementstationandthe
AP.
CheckthatyouhaveavalidnetworkconnectiontotheAPand
thatintermediateswitchportshavenotbeendisabled.
BesureyouhaveconfiguredtheAPwithavalidIPaddress,subnet
maskanddefaultgateway.
BesurethemanagementstationhasanIPaddressinthesame
subnetastheAP’sIP.
IfyouaretryingtoconnecttotheAPusingataggedVLANgroup,
yourmanagementstation,andtheportsconnectingintermediate
switchesinthenetwork,mustbeconfiguredwiththeappropriate
tag.
IfyoucannotconnectusingTelnet,youmayhaveexceededthe
maximumnumberofconcurrentTelnet/SSHsessionspermitted.
Tryconnectingagainatalatertime.
Forgotorlostthepassword ResettheAPtofactorydefaultsusingitsResetbutton.
UsingSystemLogs
Ifafaultdoesoccur,refertotheQuickStartGuidetoensurethattheproblemyou
encounteredisactuallycausedbytheAP.Iftheproblemappearstobecausedby
theAP,followthesesteps:
1.
EnableSNMPintheSystem>Servciesmenu.
2.
EnableSNMPaccessfromtheWANwhenconnectingfromaremotelocation.
3.
Repeatthesequenceofcommandsorotheractionsthatleaduptotheerror.
4.
Makealistofthecommandsorcircumstancesthatledtothefault.Alsomakea
listofanyerrormessagesdisplayed.
5.
Recordallrelevantsystemsettings.
Symptom
Action
A
63
ChapterA
|
Troubleshooting
UsingSystemLogs
6.
DisplaythelogfilethroughtheSystem>Maintenancemenu,andcopythe
informationfromthelogfile.
7.
Contactyourdistributor’sserviceengineer,andsendadetaileddescriptionof
theproblem,alongwithalloftheinformationmentionedintheabovesteps.
64
QuickStart Guide
2
FollowthestepsinthisguidetoinstalltheAPinyournetwork.
Caution:
TheplanningandinstallationoftheAPrequiresprofessionalpersonnel
thataretrainedintheinstallationofradiotransmittingequipment.Theuseris
responsibleforcompliancewithlocalregulationsconcerningitemssuchas
antennapower,useoflightningarrestors,grounding,andradiomastortower
construction.Therefore,itisrecommendedtoconsultaprofessionalcontractor
knowledgeableinlocalradioregulationspriortoequipmentinstallation.
1.
UnpacktheAP
UnpacktheAPandcheckthepackagecontents.
OutdoorStandAloneAccessPoint
SkyFireAC1200orSkyFireAC866
Polemountingkitincludestwosteelbandclamps
PoEpowerinjectorwithpowercordeitherUS,ContinentalEuropeorUK
DocumentationQuickStartGuideandRegulatoryandSafetyInformation
2.
MounttheAP Afterplanningyourinstallation,mounttheunitonapole,mast,ortowerusingthe
includedtwosteelbandclamps.
Also,formodelsthatrequireexternalantennas,installtheantennasneartheAP
andattachtheRFcoaxialcablestotheappropriateconnectorsontheAP.
PoleMounting
Feedthesteelbandclampsthroughthe
integratedpolemountbracketpointson
thebackoftheAP.
Fastenthesteelbandclampsaroundthe
poletosecuretheAPtothepole.
1
2
1
2
QuickStart Guide
3
AttachExternalAntennas
Removethefrontportcoverby
pushingthelockingtabupandthen
slidingthecoveroff.
Connectexternalantennastothe
AP’s5GHzRPSMAconnectorsusing
RFcoaxialcableprovidedinthe
antennapackage.
Connectexternalantennastothe
AP’s2.4GHzRPSMAconnectors
usingRFcoaxialcableprovidedinthe
antennapackage.
Note:Thenumberofavailable2.4GHzor5GHzexternalantennaconnectors
dependsonthespecificmodel.
3.
ConnectCablesConnectoutdoorratedEthernetcabletothe1000BASETRJ45ETH0(PoE)porton
theunit.
ConnectoutdoorratedCategory5e
orbettercabletotheleftsideRJ45
ETH0(PoE)port.
(Optional)ConnectalocalLAN
switchorcomputertotherightside
ETH1100BASETXRJ45port.
Passthecablesthroughtheaccess
holesatthebottomoftheAP.
ReplacetheportcoverontheAPand
pushthelockingtabdowntosecure
itinplace.
4.
ConnectPower InstallthePoEpowerinjectorindoors.ConnectthepowerinjectortotheEthernet
cablefromtheAP,toaportonalocalLANswitch,andthentoanACpowersource.
Caution:
Thepowerinjectormoduleisdesignedforindooruseonly.Nevermount
thepowerinjectoroutsidewiththeAPunit.
23
1
1
2
3
1
2
2
3
14
34
QuickStart Guide
4
ConnecttheEthernetcablefromtheAPto
the“POE”portonthepowerinjector.
ConnectEthernetcablefromthe“LAN”port
onthepowerinjectortoaLANswitch.
ConnectthepowercordtoanearbyAC
powersource(100240VAC,50/60Hz).
Note
:
ConnectingtheEthernetcablefromtheAPtotheinjectormodulepowers
ontheunit.
5.
VerifyAPOperation
VerifybasicAPoperationbycheckingthesystemLEDs.
ThepowerLEDshouldbeongreen,theETH0portLEDon/blinkinggreen,andthe
2.4GHz/5GHzwirelessLEDon/blinkinggreen(2.4GHz)orblue(5GHz).
2.4GHz/5GHzsignalstrength
LEDs.
2.4GHz/5GHzlink/activityLED.
ETH1portlink/activityLED.

ETH0(PoE)portlink/activityLED.
PowerLED.
1
3
2
3
1
2
1
2
3
4
5
1
2
3
4
5
QuickStart Guide
5
6.
ConnecttotheWeb
UserInterface
ThestandaloneAPsofferawebbasedmanagementinterfaceforthe
configurationofalltheunit’sfeatures.
YoucanmakeinitialconfigurationchangesbyconnectingaPCdirectlytotheAP’s
ETH1RJ45port.TheAPhasadefaultmanagementIPaddressof192.168.2.1anda
subnetmaskof255.255.255.0.YoumustsetyourPCIPaddresstobeonthesame
subnetastheAP(thatis,thePCandAPaddressesmustbothstart192.168.2.x).
Logintothewebinterfaceusingthedefaultsettings:
LoginNameroot
Passwordadmin123
FormoreinformationonstandaloneAPconfigurationusingthewebinterface,
refertotheManagementGuide.
QuickStart Guide
6
HardwareSpecifications
Chassis
Size(HxWxD:)283x94x50mm(11.14x3.7x1.97inches)
Weight
762g(1.68lb)
TemperatureOperating:‐20°Cto65°C(4°Fto149°F)
Storage:‐30°Cto80°C(22°Fto176°F)
Humidity
Operating:15%to95%(noncondensing)
Waterproof/Dustproof
IP55
NetworkInterfaces
PortsETH0(PoE)RJ45Port:1000BASET,passivePoE
ETH1RJ45Port:100BASETX
2.4GHzRadioIEEE802.11b/g/n
5GHzRadioIEEE802.11a/n/ac
RadioFrequencies2412~2472MHz
5745~5825MHz(China)
5180~5320MHz(ETSI)
5500~5700MHz(ETSI)
PowerSupply
PoEInputPower24VDC,1.0A
PowerConsumption24Wmaximum
PowerInjectorModule100240VAC,5060Hz,autosensing
RegulatoryCompliances
RadioEN300328V1.8.1:2012
EN301893V1.7.1:2012
EN3014891V1.9.2(201109)
EN3014897V1.3.1:2005
FCCPart15C15.247/15.207(2.42.4835GHz,5.7255.850GHz)
FCCPart15E15.407(5.150GHz5.250GHz)
EmissionsEN550222010+AC:2011
EN61000322006+A1:2009+A2:2009
FCCClassBPart15
ImmunityEN55024:2010
EN6100042:2009
ItemSpecification
QuickStart Guide
7
FederalCommunicationCommissionInterferenceStatement
ThisdevicecomplieswithPart15oftheFCCRules.Operationissubjecttothefollowingtwoconditions:(
1)Thisdevicemaynotcauseharmfulinterference,and
(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethatmaycauseundesiredoperation.
ThisequipmenthasbeentestedandfoundtocomplywiththelimitsforaClassBdigitaldevice,pursuanttoPart15
oftheFCCRules.Theselimitsaredesignedtoprovidereasonableprotectionagainstharmfulinterferenceina
residentialinstallation.Thisequipmentgenerates,usesandcanradiateradiofrequencyenergyand,ifnotinstalled
andusedinaccordancewiththeinstructions,maycauseharmfulinterferencetoradiocommunications.However,
thereisnoguaranteethatinterferencewillnotoccurinaparticularinstallation.Ifthisequipmentdoescause
harmfulinterferencetoradioortelevisionreception,whichcanbedeterminedbyturningtheequipmentoffandon,
theuserisencouragedtotrytocorrecttheinterferencebyoneofthefollowingmeasures:
‐ Reorientorrelocatethereceivingantenna.
‐ Increasetheseparationbetweentheequipmentandreceiver.
‐ Connecttheequipmentintoanoutletonacircuitdifferentfromthat
towhichthereceiverisconnected.
‐ Consultthedealeroranexperiencedradio/TVtechnicianforhelp.
FCCCaution:Anychangesormodificationsnotexpresslyapprovedbythepartyresponsibleforcompliancecouldvoid
theuser'sauthoritytooperatethisequipment.
Thistransmittermustnotbecolocatedoroperatinginconjunctionwithanyotherantennaortransmitter.
Foroperationwithin5.15~5.25GHz/5.47~5.725GHzfrequencyrange,itisrestrictedtoindoorenvironment.
Thebandfrom56005650MHzwillbedisabledbythesoftwareduringthemanufacturingandcannotbechanged
bytheenduser.ThisdevicemeetsalltheotherrequirementsspecifiedinPart15E,Section15.407oftheFCCRules.
RadiationExposureStatement:
ThisequipmentcomplieswithFCCradiationexposurelimitssetforthforanuncontrolledenvironment.
Thisequipmentshouldbeinstalledandoperatedwithminimumdistance20cmbetweentheradiator&yourbody.
Note:ThecountrycodeselectionisfornonUSmodelonlyandisnotavailabletoallUSmodel.
PerFCCregulation,allWiFiproductmarketedinUSmustfixedtoUSoperationchannelsonly.
QuickStart Guide
8
Professionalinstallationinstruction
1. Installationpersonal
ThisproductisdesignedforspecificapplicationandneedstobeinstalledbyaqualifiedpersonalwhohasRFand
relatedruleknowledge.Thegeneralusershallnotattempttoinstallorchangethesetting.
2. Installationlocation
Theproductshallbeinstalledatalocationwheretheradiatingantennacanbekept20cmfromnearbypersonin
normaloperationconditiontomeetregulatoryRFexposurerequirement.
3. Externalantenna
Useonlytheantennaswhichhavebeenapprovedbytheapplicant.Thenonapprovedantenna(s)mayproduce
unwantedspuriousorexcessiveRFtransmittingpowerwhichmayleadtotheviolationofFCClimitandisprohibited.
4. Installationprocedure
Pleaserefertouser’smanualforthedetail.
5. Warning
Pleasecarefullyselecttheinstallationpositionandmakesurethatthefinaloutputpowerdoesnotexceedthe
limitsetforceinrelevantrules.Theviolationoftherulecouldleadtoseriousfederalpenalty.
低功率電波輻射性電機管理辦法
第十二條 經型式認證合格之低功率射頻電機,非經許可,公司、商號或使用者均不得擅自變更頻率、
加大功率或變更原設計之特性及功能。
第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信;經發現有干擾現象時,應立即停用,
並改善至無干擾時方得繼續使用。前項合法通信,指依電信法規定作業之無線電通信。低功率射頻電機須忍受合法通信或工業、
科學及醫療用電波輻射性電機設備之干擾。
此器材須經專業安裝並限用於固定式點對點操作。
本器材須經專業工程人員安裝及設定,始得設置使用,且不得直接販售給一般消費者。
「電磁波曝露量MPE標準值1mW/cm2,送測產品實測值為 0.736 mW/cm2
To professional installer : Installer must disable UNII band 1 by tool when you install this device for outdoor
usage for complying with FCC rule.

Navigation menu