Altai Technologies WA3311NAC-W Altai A3w Indoor Dual-band 3X3 802.11ac WiFi AP User Manual A3 Series Configuration Manual

Altai Technologies Limited Altai A3w Indoor Dual-band 3X3 802.11ac WiFi AP A3 Series Configuration Manual

UserManual.wiki >

Altai Technologies >

WA3311NAC W User Manual

Users Manual

Altai Technologies Ltd. All rights reserved Configuration Guide Version 1.4 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point

ii Altai Technologies Ltd. All rights reserved Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Copyright © 2015 Altai Technologies Limited ALL RIGHTS RESERVED. Altai Technologies Limited Unit 209, 2/F, Lakeside 2, 10 Science Park West Avenue, Hong Kong Science Park, Shatin, New Territories, Hong Kong Telephone: +852 3758 6000 Fax: +852 2607 4021 Web: www.altaitechnologies.com Customer Support Centre: Email: support@altaitechnologies.com

iii Altai Technologies Ltd. All rights reserved Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Radio Frequency Interference Requirements This device complies with Part 15 of FCC Rules. Operation is subject to the following conditions: 1. This device may not cause harmful interference. 2. This device must accept any interference received, including interference that may cause undesired operation. 3. This device should not be co-located or operating in conjunction with any other antenna or transmitter. Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules; these limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:  Reorient or relocate the receiving antenna.  Increase the separation between the equipment and receiver.  Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.  Consult the dealer or an experienced radio/TV technician for help. FCC Caution: To assure continued compliance, (example – use only shielded interface cables when connecting to computer or peripheral devices). Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate this equipment.

iv Altai Technologies Ltd. All rights reserved Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Warning The user is advised to keep apart from the base-station and antenna with at least 45cm when the base-station is in operation. Please install a lightning arrestor to protect the base station for lightning dissipation during rainstorms. Lightning arrestors are mounted outside the structure and must be grounded by means of a ground wire to the nearest ground rod or item that is grounded. A3-Ei requires professional installation. The installer is responsible for ensuring that the 5GHz radio is used exclusively for fixed, point-to-point operations. Disclaimer All specifications are subject to change without prior notice. Altai Technologies assumes no responsibilities for any inaccuracies in this document or for any obligation to update information in this document. This document is provided for information purposes only. Altai Technologies reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

v Altai Technologies Ltd. All rights reserved Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Table of contents 1. INTRODUCTION......................................................................................................................... 1 2. GETTING STARTED .................................................................................................................... 2 2.1. PREPARING THE ADMINISTRATOR COMPUTER .................................................................................. 2 2.2. CONNECT TO YOUR ALTAI ACCESS POINT ........................................................................................ 3 2.3. LOGIN THE AP (VIA ETHERNET) ..................................................................................................... 4 2.4. SECONDARY IP ADDRESS OF A3 SERIES PRODUCTS ........................................................................... 4 2.5. INTERFACE GUIDE ....................................................................................................................... 5 2.6. LOGOUT FROM WEB UI ............................................................................................................... 6 2.7. REBOOT AP VIA WEB UI .............................................................................................................. 6 3. SUMMARY OF BASIC CONFIGURATION TASKS .......................................................................... 7 3.1. CONFIGURE AS ACCESS POINT (AP) ............................................................................................... 7 3.2. CONFIGURE AS STATION (CPE/STA) .............................................................................................. 9 3.3. CONFIGURE AS REPEATER ........................................................................................................... 11 4. CONFIGURE YOUR ACCESS POINT ........................................................................................... 13 4.1. BASIC CONFIGURATIONS ............................................................................................................ 14 4.1.1. Synchronize AP’s system clock with NTP server .............................................................. 14 4.1.2. Assign Internet Connection Type for AP (IPv4) – Static / DCHP ...................................... 15 4.1.3. Configure Radio Interface as Access Point (AP) .............................................................. 16 4.1.3.1. Radio 0 – 2.4GHz Radio ....................................................................................................... 16 4.1.3.1.1. Radio General Configuration ......................................................................................... 16 4.1.3.1.2. WLAN List ....................................................................................................................... 18 4.1.3.1.3. WLAN 0-15 General Configuration................................................................................. 19 4.1.3.1.4. WLAN 0-15 Security Configuration ................................................................................ 21 4.1.3.1.4.1. Configure WLAN as Open network ......................................................................... 21 4.1.3.1.4.2. Configure WLAN as Open network with WEP encryption ....................................... 22 4.1.3.1.4.3. Configure WLAN with Shared Key Authentication .................................................. 23 4.1.3.1.4.4. Configure WLAN with WPA / WPA2 / WPA-auto Authentication ........................... 24 4.1.3.1.4.5. Configure WLAN with WPA-PSK / WPA2-PSK / WPA-auto-PSK Authentication ...... 26 4.1.3.1.4.6. How to configure WLAN with WAPI Authentication ............................................... 27 4.1.3.1.4.7. Configure WLAN with WAPI-PSK Authentication .................................................... 29 4.1.3.2. Radio 1 – 5GHz Radio .......................................................................................................... 30 4.1.3.2.1. Radio General Configuration ......................................................................................... 30 4.1.3.2.2. WLAN List ....................................................................................................................... 32 4.1.3.1.2. WLAN 0 - 15 General Configuration ............................................................................... 32 4.1.3.1.3. WLAN 0 - 15 Security Configuration .............................................................................. 32 4.1.4. Configure Radio Interface as Station (STA/CPE) ............................................................. 33 4.1.4.1. Radio 0 – 2.4GHz Radio ....................................................................................................... 33 4.1.4.1.1. Radio General Configuration ......................................................................................... 33 4.1.4.1.2. Station General Configuration ....................................................................................... 34 4.1.4.1.3. Station Security Configuration ....................................................................................... 36 4.1.4.1.3.1. Configure Station to associate Open network ........................................................ 36 4.1.4.1.3.2. Configure Station to associate Open network with WEP encryption ..................... 36 4.1.4.1.3.3. Configure Station to associate network with Shared Key authentication .............. 37 4.1.4.1.3.4. Configure Station to associate network with WPA / WPA2 authentication ........... 37 4.1.4.1.3.5. Configure Station to associate network with WPA-PSK / WPA2-PSK authentication 38 4.1.4.2. Radio 1 – 5GHz Radio .......................................................................................................... 39 4.1.4.2.1. Radio General Configuration ......................................................................................... 39 4.1.4.2.2. Station Configuration ..................................................................................................... 40 4.1.4.2.3. Station Security Configuration ....................................................................................... 41 4.1.5. Configure Radio Interface as Repeater ........................................................................... 42 4.1.5.1. Radio 0 – 2.4GHz Radio ....................................................................................................... 42 4.1.5.1.1. Radio General Configuration ......................................................................................... 42

vi Altai Technologies Ltd. All rights reserved Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide 4.1.5.1.2. Repeater WLAN Configuration ....................................................................................... 43 4.1.5.2. Radio 1 – 5GHz Radio .......................................................................................................... 44 4.1.5.2.1. Radio General Configuration ......................................................................................... 44 4.1.5.2.2. Repeater WLAN Configuration ....................................................................................... 45 4.2. ADVANCE CONFIGURATIONS ....................................................................................................... 46 4.2.1. Assign a unique identification on AP for network management .................................... 46 4.2.2. How to configure syslog settings .................................................................................... 46 4.2.3. Configure historical statistics settings ............................................................................ 47 4.2.4. Configure refresh interval of on-screen information on Web UI ..................................... 48 4.2.5. Configure AP as IP Gateway ........................................................................................... 49 4.2.6. Enable Spanning Tree Protocol (STP) .............................................................................. 50 4.2.7. Configure the operating mode on Ethernet interface ..................................................... 50 4.2.8. VLAN ............................................................................................................................... 51 4.2.8.1. Enable VLAN ........................................................................................................................ 51 4.2.9. DHCP ............................................................................................................................... 53 4.2.9.1. Enable DHCP server ............................................................................................................. 53 4.2.10. Port Forward .............................................................................................................. 54 4.2.10.1. Enable port forward on A3 device ...................................................................................... 54 4.2.11. Safe Mode .................................................................................................................. 55 4.2.11.1. Enable safe mode on A3 device .......................................................................................... 55 4.2.12. Advanced Settings on Radio Interface ....................................................................... 56 4.2.12.1. Advanced Settings ............................................................................................................... 56 4.2.12.1.1. Configure AMPDU and AMSDU on radio interface ....................................................... 56 4.2.12.1.2. How to enable short guard interval .............................................................................. 57 4.2.12.1.3. Configure the number of transmit radio chains and receive radio chains .................... 57 5.1.4.1.1. Configure beacon interval of BSS ................................................................................... 57 4.2.12.1.4. Configure Delivery Traffic Indication Message (DTIM) time ......................................... 58 4.2.12.1.5. Modify protect mechanism on hidden node problem of Wi-Fi network ...................... 58 4.2.12.1.6. Change distance setting on A3 ...................................................................................... 59 4.2.12.1.7. Enable IGMP Snooping .................................................................................................. 59 4.2.12.1.8. Enable multicast traffic ................................................................................................. 60 4.2.12.1.9. How to enable Nearby AP List on A3............................................................................. 60 4.2.12.2. AirFi Settings ....................................................................................................................... 60 4.2.12.3. Data Rate Setting ................................................................................................................ 61 5.1.4.1.2. Configure data rate setting on A3 .................................................................................. 61 4.2.13. Quality of Service on Radio Interface ......................................................................... 61 4.2.13.1.1. Modify the QoS setting on Radio ................................................................................... 62 4.2.13.1.2. Modify the QoS setting in WLAN 0 – 15 ......................................................................... 62 4.2.14. Bandwidth Control on WLAN ..................................................................................... 63 4.2.14.1.1. Enable bandwidth control for the WLAN on WLAN 0 – 15 ............................................ 63 4.2.14.1.2. How to enable bandwidth control per station on WLAN 0 – 15 .................................... 63 4.2.15. WEP Key ..................................................................................................................... 64 4.2.15.1. Define WEP Key ................................................................................................................... 64 5. MANAGE YOUR ACCESS POINT ............................................................................................... 65 5.1. USER ADMIN ........................................................................................................................... 65 5.1.1. Local authentication ....................................................................................................... 65 5.1.1.1. How to modify admin account’s password ......................................................................... 65 5.1.1.2. How to modify guest account’s password .......................................................................... 65 5.1.2. RADIUS authentication ................................................................................................... 66 5.1.2.1. How to enable RADIUS authentication in A3 products ....................................................... 66 5.2. SNMP ................................................................................................................................... 67 5.2.1. How to enable SNMP in A3 products .............................................................................. 67 5.3. CERTIFICATE ............................................................................................................................ 68 5.3.1. How to upload the customized certification for HTTPS connection on A3 products ....... 68 5.4. FIRMWARE UPDATE .................................................................................................................. 69 5.4.1. How to update A3 device’s firmware .............................................................................. 69 5.5. FACTORY DEFAULT .................................................................................................................... 70 5.5.1. How to restore A3 device’s settings with default settings .............................................. 70

vii Altai Technologies Ltd. All rights reserved Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide 5.6. BACKUP/RESTORE .................................................................................................................... 70 5.6.1. How to backup A3 device’s settings ................................................................................ 70 5.6.2. How to restore A3 device’s settings with configuration file ........................................... 71 5.7. CUSTOMIZATION ...................................................................................................................... 71 5.7.1. How to create customized configuration file for A3 products ........................................ 71 6. MONITOR YOUR ACCESS POINT .............................................................................................. 73 6.1. LED COLORS AND WHAT THEY MEAN .......................................................................................... 73 6.1.1. A3-Ei ................................................................................................................................ 73 6.1.2. A3c / A3w ........................................................................................................................ 74 6.2. STATUS > OVERVIEW ................................................................................................................ 76 6.2.1. System status .................................................................................................................. 76 6.2.2. Thin AP ............................................................................................................................ 77 6.2.3. Networks ......................................................................................................................... 77 6.2.3.1. Switch Mode ....................................................................................................................... 77 6.2.3.2. Gateway Mode .................................................................................................................... 78 6.2.3.2.1. WAN ............................................................................................................................... 78 6.2.3.2.2. LAN................................................................................................................................. 78 6.2.4. Interfaces ........................................................................................................................ 79 6.2.4.1. Ethernet (eth0) .................................................................................................................... 79 6.2.4.2. Ethernet (eth1) .................................................................................................................... 79 6.2.4.3. Radio0 (2.4G) ...................................................................................................................... 80 6.2.4.4. Radio1 (5G) ......................................................................................................................... 80 6.3. STATUS > RADIO0(2.4G) .......................................................................................................... 82 6.3.1. Status > Radio0(2.4G) > Status ....................................................................................... 82 6.3.1.1. Radio Settings ..................................................................................................................... 82 6.3.1.2. Channel Usage List .............................................................................................................. 82 6.3.1.3. Nearby AP List ..................................................................................................................... 83 6.3.1.4. Tx/Rx Statistics .................................................................................................................... 83 6.3.2. Status > Radio0(2.4G) > Association List ......................................................................... 83 6.3.2.1. WAN .................................................................................................................................... 83 6.3.2.2. Station List........................................................................................................................... 83 6.3.2.3. Rouge Station List................................................................................................................ 84 6.3.3. Status > Radio0(2.4G) > Connection Info ........................................................................ 84 6.3.3.1. STA Info ............................................................................................................................... 84 6.3.3.2. AP Info ................................................................................................................................. 84 6.4. STATUS > RADIO1(5G) ............................................................................................................. 85 6.4.1. Status > Radio1(5G) > Status .......................................................................................... 85 6.4.1.1. Radio Settings ..................................................................................................................... 85 6.4.1.2. Channel Usage List .............................................................................................................. 85 6.4.1.3. Nearby AP List ..................................................................................................................... 85 6.4.1.4. Tx/Rx Statistics .................................................................................................................... 86 6.4.2. Status > Radio1(5G) > Association List ............................................................................ 86 6.4.2.1. WAN .................................................................................................................................... 86 6.4.2.2. Station List........................................................................................................................... 86 6.4.2.3. Rouge Station List................................................................................................................ 86 6.4.3. Status > Radio1(5G) > Connection Info ........................................................................... 87 6.4.3.1. STA Info ............................................................................................................................... 87 6.4.3.2. AP Info ................................................................................................................................. 87 6.5. STATUS > ETHERNET ................................................................................................................. 87 6.5.1. Status > Ethernet > Status............................................................................................... 87 6.6. STATUS > LOGS ........................................................................................................................ 88 7. EMBEDDED TOOLS FOR DEPLOYMENT / OPERATION / TROUBLESHOOTING ........................... 89 7.1. CHANNEL SCAN ........................................................................................................................ 89 7.1.1. How to perform channel scan on 2.4G radio .................................................................. 89 7.1.2. How to perform channel scan on 5G radio ..................................................................... 90 7.2. DIAGNOSIS .............................................................................................................................. 90

viii Altai Technologies Ltd. All rights reserved Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide 7.2.1. Ping Test ......................................................................................................................... 90 7.2.2. How to perform ping test ................................................................................................ 90 7.2.3. Traceroute Test ............................................................................................................... 91 7.2.3.1. How to perform traceroute test.......................................................................................... 91 7.2.4. Tcpdump ......................................................................................................................... 92 7.2.4.1. How to perform packet capture on A3’s interface .............................................................. 92 7.3. WATCHDOG ............................................................................................................................ 92 7.3.1. Schedule Reboot ............................................................................................................. 92 7.3.1.1. How to enable periodic reboot ........................................................................................... 93 7.3.1.2. How to enable periodic log upload ..................................................................................... 93 7.3.2. Ping Watchdog ............................................................................................................... 94 7.3.2.1. How to enable ping watchdog ............................................................................................ 94 8. COLLECT DEVICE’S PRODUCT INFORMATION .......................................................................... 95

1 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 1. Introduction This guide covers the initial configuration of Altai A3 Series 3x3 802.11 ac Wireless Access Point via Web Administration Interface (Web UI). Web Administration Interface is the built-in and user-friendly graphic interface on all Altai A3 Series products. It allows you to configure, monitor, and manage the devices using web browser. Mozilla Firefox, Google Chrome, and Internet Explorer 8+ are recommended. This guide is applicable with firmware version 2.0.0.504 or above for hardware platforms with the following models: Product Name A3-Ei A3c A3w Model Number WA3311NAC-E WA3311NAC-C WA3311NAC-W Table 1 – A3 Series products Comment [t1]: Suggest to replace "Web Administration Interface" with "Web UI"

2 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 2. Getting Started This chapter covers the procedures for logging into / out A3 Series Products Web Administration Interface (Web UI) via Ethernet, and restarting the device via Web UI. 2.1. Preparing the Administrator Computer 1. On your Windows XP or Windows 7 computer, open the Network Connections (or Change adapter settings) control panel according to how the Start menu is set up: On Windows XP, click Start > Control Panel > Network Connections. On Windows 7, click Start > Control Panel > Network and Internet > Network and Sharing Center > Change adapter settings. 2. Right-click the icon for Local Area Connection, and then click Properties. 3. When the Local Area Connection Properties dialog box appears, select Internet Protocol (TCP/IP) (or Internet Protocol Version 4 (TCP/IPv4)) from the scrolling list, and then click Properties. The Internet Protocol (TCP/IP) Properties dialog box appears. 4. Write down all of the currently active network settings. You will need this information later when you restore your computer to its current network configuration. 5. Configure the IP address settings with the values listed in Table 2. IP Address Any address in the 192.168.1.x, except 192.168.1.222 and 192.168.1.255 Example: 192.168.1.2 Subnet Mask 255.255.255.0 Default Gateway Blank DNS Blank Table 2 - Configure administrative computer’s IP address settings 6. Click OK to save the changes and close the TCP/IP Properties dialog box. 7. Click OK again to close the Local Area Connection Properties dialog box. Comment [t2]: Suggest to rewrite this section to be independent of OS

3 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 2.2. Connect to Your Altai Access Point 1. Connect your laptop to Data/IN port on the PoE Injector provided in the Altai’s package using Ethernet cable 2. Connect the Ethernet port of AP to P+D/Out port on the PoE Injector provided in the Altai’s package using Ethernet cable. Note: - Connect to Eth0 for A3c and A3w to P+D/Out port on the PoE Injector 3. Connect the power cord to the power port on the PoE Injector. Connect the other end of the power cord to a power outlet. Figure 1 – A3-Ei Connection Diagram Figure 2 – A3c / A3w Connection Diagram 4. Verify the AP’s Power LED is steady orange (Thick AP) or steady green (Thin AP) after a minute

4 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 2.3. Login the AP (via Ethernet) 1. Verify the AP’s Power LED is steady orange (Thick AP) or steady green (Thin AP) 2. Open a Web browser from the computer. 3. Type http://192.168.1.222 in the address bar or location bar (see Figure 3). 4. Type admin (default username) in Username 5. Type admin (default password) in Password 6. Click Login Figure 3 – A3 Series Product’s Login Page 2.4. Secondary IP Address of A3 Series Products The default IP address of A3 series access points is 192.168.1.222/24. A3 series products support a fixed IP address on the Ethernet connection called Secondary IP Address. This secondary IP address is 192.168.99.x/24 where x denotes as the decimal value of the last byte of the Ethernet MAC address on the access point. Example 1: Device Ethernet MAC address: 00:19:BE:20:03:8C Secondary IP Address of this device: 192.168.99.140 (8C (HEX)  140 (DEC)) The secondary IP address uses IP range from 192.168.99.5/24 to 192.168.99.254/24. The rest of IP addresses are reserved. If the last byte of a MAC address matches any of the reserved IP addresses, the supported device shall follow the MAC to IP address mapping shown in Table 3:

5 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Ethernet MAC address Reserved Purpose Replaced MAC byte Secondary IP address XX:XX:XX:XX:XX:00 Invalid IP A0 192.168.99.160 XX:XX:XX:XX:XX:01 For gateway A1 192.168.99.161 XX:XX:XX:XX:XX:02 For operator computer A2 192.168.99.162 XX:XX:XX:XX:XX:03 For operator computer A3 192.168.99.163 XX:XX:XX:XX:XX:04 For operator computer A4 192.168.99.164 XX:XX:XX:XX:XX:FF Invalid IP AF 192.168.99.175 Table 3 - A3 Series Product Secondary IP Address Example 2 Device Ethernet MAC address: 00:19:BE:20:03:FF Secondary IP Address of this device: 192.168.99.175 (FF (HEX)  AF (HEX)  175 (DEC)) 2.5. Interface Guide Figure 4 – AP Status Overview Web Administration Interface (Web UI) consists of five primary tabs: Status Tab - Show system status information, like interfaces status, system logs … etc. Configuration Tab – Allow the configuration of device operation parameters, such as IP address, VLAN, wireless LAN … etc. Administration Tab – Allow the management of device, including firmware update, configuration backup / restore, SNMP … etc. Tools Tab – Provide tools for radio planning, diagnosis, and device’s maintenance, like ping test, channel scan … etc.

6 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved About Tab – Show product information, such as hardware version, firmware version … etc. Also, Web UI has a quick tools bar on its top-right hand corner in all pages. It provides some quick tools and basic information. They are chosen language, device reboot, system logs download, and configuration application …etc. 2.6. Logout from Web UI 1. Click Logout on top-right hand corner of Web UI Figure 5 – Logout from Web UI 2. Click OK 2.7. Reboot AP via Web UI 1. Click Reboot AP on top-right hand corner of Web UI 2. Click Perform reboot Figure 6 – Reboot the device via Web UI

7 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 3. Summary of Basic Configuration Tasks This chapter summarizes the quick setup procedures for configuring A3 Series products to operate in different roles in your network, including Access Point (AP), Station (CPE/STA), Repeater, and Bridge Peer. 3.1. Configure as Access Point (AP) 1. Go to Configuration > Network > General > WAN Settings 2. Select suitable internet connection type (DHCP / Static) Figure 7 – WAN Setting (IPv4) 3. Configure IP Address on the device (static internet connection only) 4. Click Submit 5. For 2.4G Radio: Go to Configuration > Wireless > Radio0(2.4G) > General For 5G Radio: Go to Configuration > Wireless > Radio1(5G) > General Figure 8 – 2.4G Radio General Setting of AP 6. Select AP in Operating Mode 7. Select suitable Country Code that matches your device’s installation location. 8. Select suitable Wireless Mode 802.11 ng HT20 is recommended option on 2.4G radio; 802.11 ac HT80 is recommended option on 5G radio 9. Select the suitable Radio Frequency. 10. Select the suitable Transmission Power. 11. Click Submit

8 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 12. For 2.4G Radio: Go to Configuration > Wireless > Radio0(2.4G) > WLAN For 5G Radio: Go to Configuration > Wireless > Radio1(5G) > WLAN Figure 9 – Radio 2.4G WLAN List 13. Provide unique SSID on each enabled WLAN 14. Click Submit 15. For 2.4G Radio: Go to Configuration > Wireless > Radio0(2.4G) > WLAN > WLAN 0-15 > WLAN Security For 5G Radio: Go to Configuration > Wireless > Radio1(5G) > WLAN > WLAN 0-15 > WLAN Security Figure 10 – Radio 2.4G WLAN0 Security Setting 16. Setup suitable settings of WLAN Security on each operating WLAN 17. Click Submit 18. Save and apply the settings

9 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 3.2. Configure as Station (CPE/STA) 1. Go to Configuration > Network > General > WAN Settings 2. Select your ISP’s internet connection type (DHCP / Static) 3. Configure IP Address on the device (for static internet connection type only) 4. Click Submit 5. For 2.4G Radio: Go to Configuration > Wireless > Radio0(2.4G) > General For 5G Radio: Go to Configuration > Wireless > Radio1(5G) > General Figure 11 –2.4G Radio General Setting of Station 6. Select Station as Operating Mode on 2.4G radio and/or 5G radio the device. 7. Select suitable Country Code that matches your device’s installation location. 8. Select the suitable Transmission Power. 9. Click Submit 10. For 2.4G Radio: Go to Configuration > Wireless > Radio0(2.4G) > Station > More… For 5G Radio: Go to Configuration > Wireless > Radio1(5G) > Station > More… Figure 12 – 2.4G Radio WLAN Setting of Station 11. Scan and select the suitable SSID your ISP provides 12. Click Submit

10 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 13. For 2.4G Radio: Go to Configuration > Wireless > Radio0(2.4G) > Station > WLAN Security For 5G Radio: Go to Configuration > Wireless > Radio1(5G) > Station > WLAN Security 14. Setup suitable settings of WLAN Security that your ISP provides 15. Click Submit 16. Save and apply the settings

11 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 3.3. Configure as Repeater 1. Go to Configuration > Network > General > WAN Settings 2. Select suitable internet connection type (DHCP / Static) 3. Configure IP Address on the device (for static internet connection type only) 4. Click Submit 5. For 2.4G Radio: Go to Configuration > Wireless > Radio0(2.4G) > General For 5G Radio: Go to Configuration > Wireless > Radio1(5G) > General Figure 13 – 2.4G Radio General Setting of Repeater 6. Select Repeater as Operating Mode on 2.4G radio and/or 5G radio the device. 7. Select suitable Country Code that matches your device’s installation location. 8. Select the suitable Transmission Power 9. Click Submit

12 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 10. For 2.4G Radio: Go to Configuration > Wireless > Radio0(2.4G) > Station > More… For 5G Radio: Go to Configuration > Wireless > Radio1(5G) > Station > More… Figure 14 – 2.4G Radio WLAN List 11. Scan and select the suitable SSID from remote AP that your device associate with on WLAN 15 12. Setup suitable settings of WLAN Security that matches the remote AP 13. Click Submit 14. Provide unique SSID on each operating WLAN 15. Setup suitable settings of WLAN Security on each operating WLAN 16. Click Submit 17. Save and apply the settings Comment [t3]: 1.VLAN configuration should also be included in 3.1, 3.2, and 3.3 2. Provide reference to the corresponding section for detailed configuration help

13 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4. Configure Your Access Point This chapter covers the AP configurations including network configuration, wireless configuration, VLAN … etc. Notes: - Click Submit to submit the modified configuration into temporary memory - Click Save & Apply (top-right hand corner) to apply the modified configuration - Click Unsaved Change (top-right hand corner) to review all modified configuration in temporary memory Hints: - You should click Submit to submit all changes on the same configuration page. - You may click Save & Apply to apply all submitted change at the end of configuration

14 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1. Basic Configurations This section covers the basic configuration on A3 Series products. 4.1.1. Synchronize AP’s system clock with NTP server Figure 15 – NTP Setting 1. Go to Configuration > System 2. Change the following settings: NTP Server IP – Type in either the domain name / IP address of NTP server which you want to synchronize with. NTP Polling Interval – Type in the interval in second between each synchronization request from the AP to NTP server. The default setting is 600 seconds NTP Time Zone – Select the appropriate time zone. The default setting is Asia/Hong Kong Daylight Saving Time – Select the checkbox if your place has daylight saving time 3. Click Submit 4. Click Save & Apply Note: - IP Address Type is changed by AP automatically based on whether IPv6 is enabled or not - If providing NTP server’s domain name in NTP Server IP, you must provide valid DNS server information (see 4.1.2 on page 15 for more detail). Otherwise, NTP setting cannot take effect.

15 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.2. Assign Internet Connection Type for AP (IPv4) – Static / DCHP Figure 16 – WAN Settings (IPv4) 1. Go to Configuration > Network > General > WAN Settings 2. Change the following settings: Internet Connection Type – configure AP either as a client with fixed IP address or DCHP client; Static Stand for Static IP addressing; AP will not update its IP address automatically DHCP Client Require an IP address from DCHP server on the network; AP renews its IP address periodically IPv4 Address –Type in an IP address for AP (Static Internet Connection Type only) IPv4 Subnet Mask – Type in a subnet mask for AP (Static Internet Connection Type only) IPv4 Default Gateway – Type in an IP address of default gateway for AP (Static Internet Connection Type only) IPv4 DNS Server – Type in IP address of one or more DNS server for AP (Static Internet Connection Type only). Note: - Click for adding more DNS; - Click to remove existing DNS server entry 3. Click Submit 4. Click Save & Apply

16 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3. Configure Radio Interface as Access Point (AP) 4.1.3.1. Radio 0 – 2.4GHz Radio 4.1.3.1.1. Radio General Configuration Figure 17 – Radio0 (2.4G) General Settings of AP 1. Go to Configuration > Wireless > Radio0(2.4G) > General; 2. Select Enable Radio checkbox to enable radio interface 3. Select AP in Radio Mode 4. Change the following settings: Country Code – Select an option that matches your device’s installation location; Hong Kong is the default setting. Note: - Country code enforces regulatory restrictions on radio frequencies and maximum transmission power that the AP can operate in. Wireless Mode – Select suitable Wi-Fi operating mode for the AP; 2.4G 11Mbps (802.11 b) 2.4G 54Mbps (802.11 bg) 2.4G 54Mbps (802.11 g-only) 2.4G 216.7Mbps (802.11 ng HT20); Default Setting

17 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 2.4G 216.7Mbps (802.11 n-only HT20) 2.4G 450Mbps (802.11 ng HT40+) 2.4G 450Mbps (802.11 n-only HT40+) 2.4G 450Mbps (802.11 ng HT40-) 2.4G 450Mbps (802.11 n-only HT40-) Radio Frequency – Choose the operating channel for the radio interface; AP selects the channel with the least amount of interference if Auto is selected. 2412MHz (Channel 1) is the default setting Note: - Select the radio frequency based on the result of channel scan is recommended Transmission Power – Select the total transmission power for the radio interface. Maximum Client – Specify the maximum associated client between 1 and 256 that the radio interface serves. 256 is the default setting. Disable HT20/HT40 Auto Switch [Optional] – If select the checkbox, AP will NOT switch the channel width between 20 MHz and 40 MHz automatically. This option is only available if any wireless mode with HT40+/- is selected. Enable Inter-WLAN User Isolation [Optional] - Select the checkbox to block the users’ communication across different SSID in the AP directly. Periodic Auto Channel Section [Optional] – Select the checkbox to enable scheduled channel selection task on the radio interface. Schedule Mode Select exact time and day(s) for selecting radio frequency for the interface Periodic Mode Select a countdown timer (minute) for selecting radio frequency for the interface; 0 denotes disable. 5. Click Submit 6. Click Save & Apply Comment [t4]: Suggest to rewrite the description. There are way too many “select” and it gets very confusing. I think channel selection task here is performed by AP. Therefore, we should use ACS to distinguish from manual channel selection by user

18 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3.1.2. WLAN List Figure 18 – WLAN List of Radio0(2.4G) of AP 1. Go to Configuration > Wireless > Radio0(2.4G) > WLAN 2. Select Enable WLAN checkbox to enable the WLAN 0 – 15 individually; Note: - A3 products support up to 16 WLANs on its Radio0 3. Click Submit 4. Click Save & Apply

19 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3.1.3. WLAN 0-15 General Configuration Figure 19 – WLAN Detail Settings of WLAN 0 of AP 1. Go to Configuration > Wireless > Radio0(2.4G) > WLAN 0-15 > More… 2. Change the following settings: Hide SSID [Optional] – Select the checkbox to hide SSID name from its beacon frame SSID – Provide a unique name for the particular WLAN Note: - If you want to configure the same SSID on two different WLAN; their security setting MUST be different from each other. User Isolation [Optional] – Select the checkbox to block user communication within the same SSID in the AP directly. DHCP Trust Port [Optional] - Deselect the checkbox to prevent illegal DHCP servers offering IP address to DHCP clients via this WLAN. Access Traffic Right – Specify the privilege of associated clients; Full Access Associated client can access Internet and manage AP AP Management Only Associated client can manage AP only, but not able to access the Internet AP Management Disable Associated client can access the Internet, but not able to manage AP Max Clients - Specify the maximum associated clients between 1 and 256 on this WLAN. 256 is the default setting. Note: - Max Clients in WLAN 0 – 15 MUST be smaller than or equal to (≥) the Max Clients setting in 4.1.3.1.1 Radio General Configuration

20 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Station Association Requirement [Optional] – Specify and additional requirement on Signal Strength to Noise Ratio (SNR) for associated clients. Reject Station Association if SNR less than X dB X denote the minimum SNR level which allow clients to associate; You can select any integer between 0dB and 100dB; 0 denotes as disable; 0 is default setting Disassociate Station if SNR drops more than Y dB for consecutive Z packets Y denotes the SNR tolerance; Z denotes the number of consecutive packets their SNR are below the difference of X - Y. Notes: - Example for Station Association Requirement with the following settings: Reject Station Association if SNR less than 30 dB (X = 30); Disassociate Station if SNR drops more than 20 dB for consecutive 10 packets (Y = 20; Z = 10) Consequence: AP accepts the clients to associate if the SNR of packets from the clients is high than (>) 30dB; AP kicks out the associated client if the SNR of 10 consecutive packets is below (<) 10 dB (30 dB – 20 dB) 3. Click Submit 4. Click Save & Apply

21 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3.1.4. WLAN 0-15 Security Configuration Figure 20 – WLAN Security Setting for WLAN 0 of AP 4.1.3.1.4.1. Configure WLAN as Open network This option is typically only used in a guest network. No security measure is enforced. Figure 21 – Open network of AP 1. Go to Configuration > Wireless > Radio0(2.4G) > WLAN > WLAN 0-15 > WLAN Security 2. Select Open in Authentication Mode 3. Select Disabled in Cipher Mode 4. Click Submit 5. Click Save & Apply

22 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3.1.4.2. Configure WLAN as Open network with WEP encryption This option provides minimal security as it allows all requesting devices to join a given network. Figure 22 – Open network with WEP encryption of AP 1. Go to Configuration > Wireless > Radio0(2.4G) > WLAN > WLAN 0-15 > WLAN Security 2. Select Open in Authentication Mode 3. Select WEP in Cipher Mode 4. Select key number 1 – 4 in Default WEP Key (see 4.2.15 on page 64 for more detail) 5. Click Submit 6. Click Save & Apply Comment [t9]: What is this about? Missing information? Comment [t5]: What is this about? Missing information?

23 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3.1.4.3. Configure WLAN with Shared Key Authentication Shared Key authentication is one of the authentication methods with WEP encryption. It verifies that station has knowledge of a shared secret. Figure 23 – Shared Key Authentication of AP 1. Go to Configuration > Wireless > Radio0(2.4G) > WLAN > WLAN 0-15 > WLAN Security 2. Select Shared in Authentication Mode 3. Select WEP in Cipher Mode 4. Select key number 1 – 4 in Default WEP Key (see 4.2.15 on page 64 for more detail) 5. Click Submit 6. Click Save & Apply Comment [t6]: What is this about? Missing information?

24 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3.1.4.4. Configure WLAN with WPA / WPA2 / WPA-auto Authentication WPA (Wi-Fi Protected Access) or WPA2 provides enhanced security over WEP, and allows client authentication based on an external authentication server such as a RADIUS server, for corporate networks. WPA-auto is a mixed security mode which supports multiple implementations of the WPA standard, such as WPA and WPA2. Figure 24 –WPA2 setting of AP 1. Go to Configuration > Wireless > Radio0(2.4G) > WLAN > WLAN 0-15 > WLAN Security 2. Select WPA / WPA2 / WPA-auto in Authentication Mode 3. Select suitable encryption mode in Cipher Mode as the followings: If Authentication Mode is WPA: TKIP + AES - This algorithm automatically selects TKIP or AES based on the client’s capabilities TKIP - This algorithm provides greater compatibility with older client devices, but is not supported by the 802.11n standard. AES - This algorithm provides enhanced security over TKIP, and is the only encryption algorithm supported by the 802.11i standard. If Authentication Mode is WPA2: AES - This algorithm provides enhanced security over TKIP, and is the only encryption algorithm supported by the 802.11i standard.

25 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved If Authentication Mode is WPA-auto: TKIP + AES - This algorithm automatically selects TKIP or AES based on the client’s capabilities Note: - TKIP is not supported by 802.11n standard. If selected TKIP, the 802.11n’s devices will be limited to 802.11g transfer rate, i.e. up to 54 Mbps 4. Provide suitable identification in NAS identifier. Remote RADIUS server use this ID to identify its clients [WPA or WPA2 only] 5. Provide transmission timeout interval between 0 and 86400s in RADIUS Retry Timeout [Optional]. 300 is default setting. 6. Provide IP address of remote RADIUS server for authentication in IP Address of RADIUS Server 7. Provide service port of remote RADIUS server in Port of RADIUS Server. 1812 is default setting. 8. Provide suitable secrets in Secret of RADIUS Server. It is used along with the MD5 hashing algorithm to obfuscate passwords. This secret MUST be as the same as that in RADIUS server. 9. Repeat step 28-30 if the backup RADIUS server is available. 10. RADIUS Accounting Server Setting is optional; you may select if the WLAN requires accounting service from remote RADIUS server. You can change the following settings: Accounting interim Interval - indicates the number of seconds between each interim update in seconds; 300 is default setting. IP Address - IP address of remote RADIUS Accounting Server Port - Service port of remote RADIUS server for accounting service Secret - Password MUST be as the same as that in RADIUS server 11. Click Submit 12. Click Save & Apply Comment [t7]: Incorrect step numbers

26 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3.1.4.5. Configure WLAN with WPA-PSK / WPA2-PSK / WPA-auto-PSK Authentication Use of WPA or WPA2 provides enhanced security over WEP, and allows client authentication based on either a pre-shared key (PSK), for home or small office networks. WPA-auto-PSK is a mixed security mode which supports multiple implementations of the WPA standard, such as WPA-PSK and WPA2-PSK. Figure 25 – WPA2-PSK Setting of AP 1. Go to Configuration > Wireless > Radio0(2.4G) > WLAN > WLAN 0-15 > WLAN Security 2. Select WPA-PSK / WPA2-PSK / WPA-auto-PSK in Authentication Mode 3. Select suitable encryption mode in Cipher Mode as the followings: If Authentication Mode is WPA-PSK: TKIP + AES - This algorithm automatically selects TKIP or AES based on the client’s capabilities TKIP - This algorithm provides greater compatibility with older client devices, but is not supported by the 802.11n standard. AES - This algorithm provides enhanced security over TKIP, and is the only encryption algorithm supported by the 802.11i standard. If Authentication Mode is WPA2-PSK: AES - This algorithm provides enhanced security over TKIP, and is the only encryption algorithm supported by the 802.11i standard. If Authentication Mode is WPA-auto-PSK: TKIP + AES - This algorithm automatically selects TKIP or AES based on the client’s capabilities Note: - TKIP is not supported by 802.11n standard. If selected TKIP, the 802.11n’s devices will be limited to 802.11g transfer rate, i.e. up to 54 Mbps

27 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4. Provide time in second in Group Key Update Interval [Optional]. 86400 is default setting. 5. Type in a string between 8 and 64 characters long in Pass Phrase that users will use to connect to the wireless network. 6. Click Submit 7. Click Save & Apply 4.1.3.1.4.6. How to configure WLAN with WAPI Authentication WLAN Authentication and Privacy Infrastructure (WAPI) is a Chinese National Standard for Wireless LANs (GB 15629.11-2003). Figure 26 – WAPI Settings of AP 1. Go to Configuration > Wireless > Radio0(2.4G) > WLAN > WLAN 0-15 > WLAN Security 2. Select WAPI in Authentication Mode 3. Select SMS4 in Cipher Mode 4. Select suitable option in Certificate Mode: Two-Cert – Wi-Fi client is verified by the certification from authentication server (AS) and Access Point (AP) Three-Cert - Wi-Fi client is verified by the certification from authentication server (AS), access point (AP), and certificate authority (CA) 5. Click Install Certificate; a window for installing certificate is shown (see Figure 27 and Figure 28)

28 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Figure 27 – Two-Cert Mode Certification Installation Figure 28 - Three-Cert Mode Certification Installation 6. Click Browse to select suitable certifications 7. Click Upload to upload the selected certifications to A3 8. Click Install to install certifications 9. Type IP address of AS server in AS IP Address 10. Type service port of AS server in AS Port 11. Enter interval time between 60 and 2147483647s in Unicast Key Update Interval [Optional]; 86400 is default setting 12. Enter interval time between 60 and 2147483647s in Multicast Key Update Interval [Optional]; 86400 is default setting 13. Click Submit 14. Click Save & Apply

29 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3.1.4.7. Configure WLAN with WAPI-PSK Authentication Figure 29 – WAPI-PSK Setting of AP 1. Go to Configuration > Wireless > Radio0(2.4G) > WLAN > WLAN 0-15 > WLAN Security 2. Select WAPI in Authentication Mode 3. Select SMS4 in Cipher Mode 4. Type in a string between 8 and 64 characters long in Pass Phrase that users will use to connect to the wireless network. 5. Enter interval time between 60 and 2147483647s in Unicast Key Update Interval [Optional]; 86400 is default setting 6. Enter interval time between 60 and 2147483647s in Multicast Key Update Interval [Optional]; 86400 is default setting 7. Click Submit 8. Click Save & Apply

30 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3.2. Radio 1 – 5GHz Radio Figure 30 – Radio1 (5G) General Setting of AP 4.1.3.2.1. Radio General Configuration 1. Go to Configuration > Wireless > Radio1(5G) > General 2. Select Enable Radio checkbox to enable radio interface 3. Select AP in Radio Mode 4. You can change the following settings: Country Code – Select an option that matches your device’s installation location; Hong Kong is the default setting. Note: - Country code sets the regulatory domain for the radio frequencies and maximum transmission power that AP can use Wireless Mode – Select suitable Wi-Fi operating mode for the AP: 5G 54Mbps (802.11 a) 5G 216.7Mbps (802.11 na HT20); Default Setting 5G 216.7Mbps (802.11 n-only HT20) 5G 450Mbps (802.11 n-only HT40+) 5G 450Mbps (802.11 na HT40+) 5G 450Mbps (802.11 na HT40-) 5G 450Mbps (802.11 n-only HT40-) 5G 289Mbps (802.11 ac HT20) 5G 600Mbps (802.11 ac HT40+) 5G 600Mbps (802.11 ac HT40-) 5G 1.3Gbps (802.11 ac HT80)

31 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Dynamic Radio Frequency Selection (DFS) – Select to enable automatic channel selection that selects the least congested channel where radar is not detected during booting up. Note: - Radio Frequency is set as auto if DFS is enabled Radio Frequency – Choose the operating channel for the radio interface; AP selects the channel with the least amount of interference if Auto is selected. 5180MHz (Channel 36) is the default setting Transmission Power – Select the total transmission power for the radio interface. Maximum Client [Optional] – Specify the maximum associated client between 1 and 256 that the radio interface serves. 256 is the default setting. Disable HT20/HT40 Auto Switch [Optional] – If select the checkbox, AP will NOT switch the channel width between 20 MHz and 40 MHz automatically. This option is only available if any wireless mode with HT40+/- is selected. Enable Inter-WLAN User Isolation [Optional] - Select the checkbox to block the users’ communication across different SSID in the AP directly. Periodic Auto channel Section [Optional] – Select the checkbox to enable scheduled channel selection task on the radio interface: Schedule Mode Select exact time and day(s) for selecting radio frequency for the interface Periodic Mode Select a countdown timer (minute) for selecting radio frequency for the interface; 0 denotes disable. 5. Click Submit 6. Click Save & Apply

32 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.3.2.2. WLAN List Figure 31 – WLAN list on Radio1(5G) of AP 1. Go to Configuration > Wireless > Radio1(5G) > WLAN 2. Please refer to 4.1.3.1.2 on page 18 for more detail. 4.1.3.1.2. WLAN 0 - 15 General Configuration 1. Go to Configuration > Wireless > Radio1(5G) > WLAN 0-15 > More… 2. Please refer to 4.1.3.1.3 on page 19 for more detail. 4.1.3.1.3. WLAN 0 - 15 Security Configuration 1. Go to Configuration > Wireless > Radio1(5G) > WLAN > WLAN 0-15 > WLAN Security 2. Please refer to the following chapters for more detail: Configure WLAN as Open network (see 4.1.3.1.4.1 on page 21) Configure WLAN as Open network with WEP encryption (see 4.1.3.1.4.2 on page 22) Configure WLAN with Shared Key Authentication (see 4.1.3.1.4.3 on page 23) Configure WLAN with WPA / WPA2 / WPA-auto Authentication (see 4.1.3.1.4.4 on page 24) Configure WLAN as with WPA-PSK / WPA2-PSK / WPA-auto-PSK Authentication (see 4.1.3.1.4.5 on page 26)

33 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Configure WLAN with WAPI Authentication (see 4.1.3.1.4.6 on page 27) Configure WLAN with WAPI-PSK Authentication (see 4.1.3.1.4.7 on page 29) 4.1.4. Configure Radio Interface as Station (STA/CPE) 4.1.4.1. Radio 0 – 2.4GHz Radio 4.1.4.1.1. Radio General Configuration Figure 32 – Radio0 General Setting of Station 1. Go to Configuration > Wireless > Radio0(2.4G) > General; 2. Select Enable Radio checkbox to enable radio interface 3. Select Station in Radio Mode 4. Change the following settings: Transmission Power – Select the total transmission power for the radio interface. 5. Click Submit 6. Click Save & Apply

34 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.4.1.2. Station General Configuration Figure 33 – Station Setting 1. Go to Configuration > Wireless > Radio0(2.4G) > Station > More… 2. Change the following settings: Lock AP Mac [Optional] – Select to force station that associate the AP with MAC address in Remote AP MAC only Remote SSID – Enter the SSID that station is going to associate. You may use [Scan] to look for the surrounding SSID.

35 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Figure 34 – SSID scan result - Station Preferred AP0 / AP1 / AP2 Mac [Optional] – Enter up to three AP MAC addresses that station associates them preferentially. AP0 is the highest priority. Roaming Setting [Optional] Enable Roaming - Select to enable roaming on station Scan SNR Threshold – Enter SNR from 0dB to 100dB that station performs channel scanning if the SNR of received signal from associated AP is less than (<) this threshold; 35 is default setting. Roaming SNR Threshold - Enter SNR from 0dB to 100dB that station triggers the roaming if the SNR of received signal from associated AP is less than (<) this threshold; 30 is default setting. Note: - Scan SNR Threshold MUST be larger than (>)Roaming SNR Threshold Max Scan Interval - Specify the maximum duration from 1s to 3600s for channel scanning; 60s is default setting. Min Scan Interval - Specify the minimum duration from 1s to 60s for channel scanning; 10s is default setting Scan SNR Fluctuation Threshold – Enter SNR from 0dB to 10dB; the current AP's signal fluctuation (compared with previous scan result) is higher than (>) this threshold, the station will do scanning. 5dB is default setting. Roaming Hysteresis – Select to enable that station will be stickier to current associated AP. Scan Channel List – Select the particular channel for scan 3. Click Submit 4. Click Save & Apply

36 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.4.1.3. Station Security Configuration Figure 35 – Security Setting of Station 4.1.4.1.3.1. Configure Station to associate Open network 1. Go to Configuration > Wireless > Radio0(2.4G) > Station > WLAN Security 2. Select Open in Authentication Mode 3. Select Disabled in Cipher Mode 4. Click Submit 5. Click Save & Apply 4.1.4.1.3.2. Configure Station to associate Open network with WEP encryption Figure 36 – Open network with WEP of Station 1. Go to Configuration > Wireless > Radio0(2.4G) > Station > WLAN Security 2. Select Open in Authentication Mode 3. Select WEP in Cipher Mode 4. Select key number 1 – 4 in Default WEP Key (see 4.2.15 on page 64 for more detail) 5. Click Submit 6. Click Save & Apply Comment [t8]: What is this about? Missing information?

37 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.4.1.3.3. Configure Station to associate network with Shared Key authentication Figure 37 - Shared Key Authentication of Station 1. Go to Configuration > Wireless > Radio0(2.4G) > Station > WLAN Security 2. Select Shared in Authentication Mode 3. Select WEP in Cipher Mode 4. Select key number 1 – 4 in Default WEP Key (see 4.2.15 on page 64 for more detail) 5. Click Submit 6. Click Save & Apply 4.1.4.1.3.4. Configure Station to associate network with WPA / WPA2 authentication Figure 38 – WPA2 Authentication of Station 1. Go to Configuration > Wireless > Radio0(2.4G) > Station > WLAN Security 2. Select WPA / WPA2 in Authentication Mode 3. Select suitable encryption mode in Cipher Mode as the followings: If Authentication Mode is WPA: TKIP + AES - This algorithm automatically selects TKIP or AES based on the client’s capabilities TKIP - This algorithm provides greater compatibility with older client devices, but is not supported by the 802.11n standard. AES - This algorithm provides enhanced security over TKIP, and is the only encryption algorithm supported by the 802.11i standard.

38 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved If Authentication Mode is WPA2: AES - This algorithm provides enhanced security over TKIP, and is the only encryption algorithm supported by the 802.11i standard. 4. Select suitable EAP method mode in EAP Method: PEAP-MSCHAPV2 TTLS-MSCHAPV2 TTPS-PAP TTLS-CHAP 5. Provide username in Username for authentication. 6. Provide password in Password for authentication. 7. Click Submit 8. Click Save & Apply 4.1.4.1.3.5. Configure Station to associate network with WPA-PSK / WPA2-PSK authentication Figure 39 – WPA2-PSK Authentication of Station 1. Go to Configuration > Wireless > Radio0(2.4G) > Station > WLAN Security 2. Select WPA-PSK / WPA2-PSK in Authentication Mode 3. Select suitable encryption mode in Cipher Mode as the followings: If Authentication Mode is WPA: TKIP + AES - This algorithm automatically selects TKIP or AES based on the client’s capabilities TKIP - This algorithm provides greater compatibility with older client devices, but is not supported by the 802.11n standard. AES - This algorithm provides enhanced security over TKIP, and is the only encryption algorithm supported by the 802.11i standard. If Authentication Mode is WPA2: AES - This algorithm provides enhanced security over TKIP, and is the only encryption algorithm supported by the 802.11i standard. 4. Type a string between 8 and 64 characters long in Pass Phrase that matches with remote AP 5. Click Submit 6. Click Save & Apply

39 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.4.2. Radio 1 – 5GHz Radio Figure 40 – Radio 1 General Setting of Station 4.1.4.2.1. Radio General Configuration 1. Go to Configuration > Wireless > Radio1(5G) > General 2. Select Enable Radio checkbox to enable radio interface 3. Select Station in Radio Mode 4. Change the following settings: Dynamic Radio Frequency Selection (DFS) – Select to enable automatic channel selection that selects the least congested channel where radar is not detected during booting up. Note: - Radio Frequency is set as auto if DFS is enabled Transmission Power – Select the total transmission power for the radio interface. 5. Click Submit 6. Click Save & Apply

40 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.4.2.2. Station Configuration Figure 41 - Station Setting 1. Go to Configuration > Wireless > Radio1(5G) > Station > More… 2. Please refer to 4.1.4.1.2 Station General Configuration on page 34 for more detail.

41 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.4.2.3. Station Security Configuration Figure 42 – Security Settings of Station 1. Go to Configuration > Wireless > Radio1(5G) > Station > WLAN Security 2. Please refer to the following chapters for more detail: Associate to open network (see 4.1.4.1.3.1 on page 36) Associate to open network with WEP encryption (see 4.1.4.1.3.2 on page 36) Associate to network with Shared Key authentication (see 4.1.4.1.3.3 on page 37) Associate to network with WPA / WPA2 authentication (see 4.1.4.1.3.4 on page 37) Associate to network with WPA-PSK / WPA2-PSK (see 4.1.4.1.3.5 on page 38)

42 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.5. Configure Radio Interface as Repeater 4.1.5.1. Radio 0 – 2.4GHz Radio 4.1.5.1.1. Radio General Configuration Figure 43 – Radio 0 General Setting of Repeater 1. Go to Configuration > Wireless > Radio0(2.4G) > General; 2. Select Enable Radio checkbox to enable radio interface 3. Select Repeater in Radio Mode 4. Change the following settings: Country Code – Select an option that matches your device’s installation location; Hong Kong is the default setting. Note: - Country code sets the regulatory domain for maximum transmission power that Repeater can use Transmission Power – Select the total transmission power for the radio interface. Maximum Client – Specify the maximum associated client between 1 and 256 that the radio interface serves. 256 is the default setting. Enable Inter-WLAN User Isolation - Select the checkbox to block the users’ communication across different SSID in the AP directly. 5. Click Submit 6. Click Save & Apply

43 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.5.1.2. Repeater WLAN Configuration Figure 44 – WLAN List of Repeater 1. Go to Configuration > Wireless > Radio0(2.4G) > WLAN 2. Go to Configuration > Wireless > Radio0(2.4G) > WLAN > Station Configuration > More… for associating remote SSID. 3. Please refer to 4.1.4 on page 33 for Station Configuration. 4. Go to Configuration > Wireless > Radio0(2.4G) > WLAN > WLAN Configuration > WLAN 0-14 > More… for extending WLAN service form remote SSID. 5. Please refer to 4.1.3 on page 16 for WLAN Configuration.

44 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.5.2. Radio 1 – 5GHz Radio Figure 45 – Radio 1 General Setting of Repeater 4.1.5.2.1. Radio General Configuration 1. Go to Configuration > Wireless > Radio1(5G) > General 2. Select Enable Radio checkbox to enable radio interface 3. Select Repeater in Radio Mode 4. Change the following settings: Country Code – Select an option that matches your device’s installation location; Hong Kong is the default setting. Note: - Country code sets the regulatory domain for maximum transmission power that Repeater can use Transmission Power – Select the total transmission power for the radio interface. Maximum Client – Specify the maximum associated client between 1 and 256 that the radio interface serves. 256 is the default setting. Enable Inter-WLAN User Isolation - Select the checkbox to block the users’ communication across different SSID in the AP directly. 5. Click Submit 6. Click Save & Apply

45 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.1.5.2.2. Repeater WLAN Configuration Figure 46 1. Go to Configuration > Wireless > Radio1(5G) > WLAN 2. Go to Configuration > Wireless > Radio1(5G) > WLAN > Station Configuration > More… for associating remote SSID. 3. Please refer to 4.1.4 on page 33 for Station Configuration. 4. Go to Configuration > Wireless > Radio1(5G) > WLAN > WLAN Configuration > WLAN 0-14 > More… for extending WLAN service form remote SSID. 5. Please refer to 4.1.3 on page 16 for WLAN Configuration.

46 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2. Advance Configurations 4.2.1. Assign a unique identification on AP for network management If your network contains many AP, consider assigning a unique system info setting for each of them to facilitate network management. Figure 47 – Unique Identification on AP for Network Management 1. Click Configuration > System 2. Type in a string up to 255 characters in System Name 3. Type in a string up to 64 characters in System NE ID 4. Type in a string up to 255 characters in System Location 5. Click Submit 6. Click Save & Apply 4.2.2. How to configure syslog settings Figure 48 – Syslog Setting 1. Click Configuration > System 2. Change the following settings:

47 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Enable Syslog – Select the checkbox to enable system logging function Server IP Address – Type in IP address of the remote syslog server that AP sends system logs instantaneously. 0.0.0.0 denote that AP saves the syslog in its local memory Severity – Set severity level of log that AP stores / send to remote syslog server: Emergency A "panic" condition usually affecting multiple apps/servers/sites. At this level it would usually notify all tech staff on call. Alert Should be corrected immediately, therefore notify staff who can fix the problem. An example would be the loss of a primary ISP connection. Critical Should be corrected immediately, but indicates failure in a secondary system, an example is a loss of a backup ISP connection. Error Non-urgent failures, these should be relayed to developers or admins; each item must be resolved within a given time. Warning Warning messages, not an error, but indicate that an error will occur if action is not taken, e.g. file system 85% full - each item must be resolved within a given time. Notice Events that are unusual but not error conditions - might be summarized in an email to developers or admins to spot potential problems - no immediate action required. Informational Normal operational messages - may be harvested for reporting, measuring throughput, etc. - no action required. (Default Setting) Debug Info useful to developers for debugging the application, not useful during operations. 3. Click Submit 4. Click Save & Apply 4.2.3. Configure historical statistics settings Figure 49 – Historical Statistic Setting 1. Click Configuration > System 2. Change the following settings: Enable Historical Statistics - Select the checkbox to enable AP statistics function

48 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Sampling Frequency - Set the sampling time of statistics: 1s 1 second per sample 5s 5 seconds per sample 10s 10 seconds per sample 30s 30 seconds per sample (Default Setting) 3. Click Submit 4. Click Save & Apply 4.2.4. Configure refresh interval of on-screen information on Web UI Figure 50 – Auto Refresh Interval Setting 1. Click Configuration > System 2. Change the following setting: Auto Refresh Interval - specify the interval in second that Web UI refreshes itself automatically: Disable Refresh manually 5s Refresh every 5 seconds 10s Refresh every 10 seconds (Default Setting) 20s Refresh every 20 seconds 30s Refresh every 30 seconds 40s Refresh every 40 seconds 3. Click Submit 4. Click Save & Apply

49 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2.5. Configure AP as IP Gateway Figure 51 – Gateway Settings 1. Go to Configuration > Network > General 2. Select Gateway in Network Setting 3. Change the followings on WAN setting: Internet Connection Type – Set AP as a client with fixed IP address or DCHP client: Static Stand for Static IP addressing; AP will not update its IP address automatically DHCP Client Require an IP address from DCHP server on the network; AP renews its IP address periodically IPv4 Address – Type in an IP address for AP (Static Internet Connection Type only) IPv4 Subnet Mask – Type in a subnet mask for AP (Static Internet Connection Type only) IPv4 Default Gateway – Type in an IP address of default gateway for AP (Static Internet Connection Type only) IPv4 DNS Server – Type in one or more DNS server for AP (Static Internet Connection Type only). 4. Change the followings on LAN setting: LAN IP Address – Provide an IP address on LAN interface of device LAN IP Address Subnet Mask – Provide a subnet mask on LAN interface of device 5. Assign enabled interfaces into WAN group or LAN group in WAN/LAN Interface Assignment; all interfaces in the same group work as bridge 6. Select Enable NAT Mode to enable NAT in A3 [Optional] 7. Click Submit 8. Click Save & Apply

50 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2.6. Enable Spanning Tree Protocol (STP) Figure 52 – STP Setting 1. Go to Configuration > Network > General > STP Setting 2. Select Enable STP to enable spanning tree protocol on A3 device 3. Click Submit 4. Click Save & Apply 4.2.7. Configure the operating mode on Ethernet interface Figure 53 – Ethernet Setting 1. Go to Configuration > Network > General > Ethernet Setting 2. Change the following settings: Mode (Eth0 and Eth1) – Select the operating mode on Ethernet 0 and Ethernet 1 respectively: Auto A3 device negotiates with connected device automatically and selects the best option Manual Network administrator select speed and duplex mode manually Speed (Eth0 and Eth1) – Select the speed and duplex mode on Ethernet 0 and Ethernet 1 respectively. It is only available if Manual is selected in Mode: 10Mbps/Half 10Mbps/Full 100Mbps/Half 100Mbps/Full 1000Mbps/Full 3. Click Submit 4. Click Save & Apply

51 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2.8. VLAN VLAN is layer-2 network domain that may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them via one or more routers. Note: - VLAN can be enabled on Switch mode ONLY Figure 54 – VLAN Settings 4.2.8.1. Enable VLAN 1. Go to Configuration > Network > VLAN 2. Click Submit 3. Go to Configuration > Network > VLAN > VLAN Profiles Figure 55 – VLAN Setting – Create VLAN 4. Click Add VLAN to create new VLAN 5. Change the following settings: VLAN ID – Type in an identification number that represents a VLAN IPv4 Address – Type in IP address for the VLAN IPv4 Subnet Mask - Type in subnet mask for the VLAN Enable STP Mode – Select the checkbox to enable STP on VLAN 6. Click Submit 7. Select a desired VLAN as Management VLAN 8. Click Submit

53 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2.9. DHCP A3 series products have built-in DHCP server; it can dynamically distribute network configuration parameters to the connected end devices on all LAN interfaces. Note: - DHCP server can be enabled on Gateway mode ONLY Figure 57 – DHCP Server Setting 4.2.9.1. Enable DHCP server 1. Go to Configuration > Network > DHCP 2. Select Server Mode on DHCP Server 3. Click Submit 4. Click under Detail of each pool Figure 58 – DHCP Server – Address Pool Setting 5. Select Enable Pool check box 6. Type in IP address on Start IP Address 7. Type in IP address on End IP Address 8. Specify lease time between 60s and 604800s in Default Lease Time; 86400s is default setting 9. Click Submit 10. Click Save & Apply

54 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2.10. Port Forward Port forward allows remote computers from WAN to connect to a specific computer or service within a private local-area network (LAN). Note: - Port forward can be enabled on Gateway mode ONLY Figure 59 – Port Forward List 4.2.10.1. Enable port forward on A3 device 1. Go to Configuration > Network > Port Forward Figure 60 – Port Forward Setting 2. Click under Detail 3. Select Enable checkbox 4. Type in target host’s IP address in Local IP Address 5. Type in port number of target host in Local Port

55 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 6. Select suitable protocol in Protocol Type: TCP & UDP TCP UDP 7. Type in port number of AP in Global Port 8. [Optional] Type in description in Description 9. Click Submit 10. Click Save & Apply 4.2.11. Safe Mode Safe Mode is for detecting the backhaul link integrity. If the AP loses its backhaul connectivity, it forces the clients to re-associate with another AP by changing its SSID to a default Safe Mode_X, where X is the MAC address of the radio interface in hexadecimal. This action can protect the client from connecting to the AP which has no backhaul to the Internet end. Total duration for AP from losing backhaul link to safe mode is 3 x ping interval seconds. Note: - A3 recovers itself from safe mode if it detects the backhaul link is recovered Figure 61 – Safe Mode Setting 4.2.11.1. Enable safe mode on A3 device 1. Go to Configuration > Network > Safe Mode 2. Select Enable Safe Mode checkbox 3. Type in at least one IP address of remote host in Ping Host 1 / Ping Host 2 / Ping Host 3 4. Type in interval time between 3s and 30s in Ping Interval 5. Click Submit 6. Click Save & Apply

56 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2.12. Advanced Settings on Radio Interface A3 provides advanced settings on each radio interface; these settings include data rate, AirFi, Tx/Rx Stream settings … etc. Caution: - Inappropriate configuration may bring negative impact on the network performance - It is not suggested to change the parameters in Advanced Radio Settings unless you are experienced administrators. - Default setting is recommended Figure 62 – Radio 0’s Advanced Settings 4.2.12.1. Advanced Settings 4.2.12.1.1. Configure AMPDU and AMSDU on radio interface Figure 63 – AMPDU and AMSDU Setting 1. 2.4G Radio: Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 5G Radio: Go to Configuration > Wireless > Radio1 > Advanced > Advanced Settings 2. Select AMPDU checkbox to enable aggregation of MAC protocol unit

57 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 3. Type in the maximum number of data frame between 1 and 64 that A3 pushes them into single PPDU; 64 is default setting 4. Select AMSDU checkbox to enable aggregation of MAC service data unit; A3 pushes aggregated MSDU (MAC service data units) into a single MPDU 5. Click Submit 6. Click Save & Apply 4.2.12.1.2. How to enable short guard interval 1. 2.4G Interface: Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 5G Interface: Go to Configuration > Wireless > Radio1 > Advanced > Advanced Settings Figure 64 – Short GI Setting 2. Select ShortGI checkbox to enable short guard interval 3. Click Submit 4. Click Save & Apply 4.2.12.1.3. Configure the number of transmit radio chains and receive radio chains Figure 65 – transmit radio chains and receive radio chains setting 1. 2.4G Interface: Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 5G Interface: Go to Configuration > Wireless > Radio1 > Advanced > Advanced Settings 2. Select the maximum number of transmission between 1 and 3 on Max Tx Streams 3. Select the maximum number of transmission between 1 and 3 on Max Rx Streams 4. Click Submit 5. Click Save & Apply 5.1.4.1.1. Configure beacon interval of BSS Figure 66 – Beacon Setting 1. 2.4G Interface: Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 5G Interface: Go to Configuration > Wireless > Radio1 > Advanced > Advanced Settings 2. Change the following settings: Beacon Interval Auto – Select checkbox that A3 tunes the interval of beacon transmissions of each supported BSS automatically

58 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Beacon Interval – Available if Beacon Interval Auto is NOT selected; Specify the interval time between 40ms and 3500ms in Beacon Interval. Each BSS share this setting. 3. Click Submit 4. Click Save & Apply 4.2.12.1.4. Configure Delivery Traffic Indication Message (DTIM) time 1. 2.4G Interface: Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 5G Interface: Go to Configuration > Wireless > Radio1 > Advanced > Advanced Settings 2. Specify the interval time between 1 and 255 in DTIM. 3. Click Submit 4. Click Save & Apply Note: - The higher the DTIM period, the longer a client device may sleep and therefore the more power that particular client device may potentially save. 4.2.12.1.5. Modify protect mechanism on hidden node problem of Wi-Fi network Figure 67 – Protection Mechanism Setting 1. 2.4G Interface: Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 5G Interface: Go to Configuration > Wireless > Radio1 > Advanced > Advanced Settings 2. Select suitable mechanism on Protection Mode; you can select: None - no protect mechanism is used. It is the default setting. CTS-only - also known as CTS-to-Self; AP issues a CTS frame to itself before sending data. All clients will not transmit during the time. RTS-CTS - AP sends a RTS frame, waits for the clients CTS frame and then sends the data packet. It allow more robust operation, but at the expense of additional overheads. 3. Specify frame size in byte between 0 and 2347 bytes on RTS/CTS Threshold; 2346 is default setting. If a frame is smaller than the RTS/CTS threshold, it will be sent by the AP without modification. If a frame is larger than the RTS/CTS threshold, then two frames will be sent by the AP. The first frame is an RTS (request to send) frame. After the RTS frame is sent, the AP listens for the corresponding CTS from the target client. Upon reception of the CTS, the AP then sends the data frame. There are trade-offs when considering what value you should set for the RTS/CTS

59 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved threshold. Smaller values will cause RTS to be sent more often, increasing overheads. However, the more often RTS packets are sent, the sooner the system can recover from collisions. It is recommended to use the default value or only minor reductions of the default setting. 4. Click Submit 5. Click Save & Apply 4.2.12.1.6. Change distance setting on A3 Distance setting is the estimate distance of target area (round to the nearest km); A3 adjusts the round-trip time latency according to this setting. 1. 2.4G Interface: Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 5G Interface: Go to Configuration > Wireless > Radio1 > Advanced > Advanced Settings 2. Type in the estimate distance of target area between 1 and 50 km in Distance; 2 km is default setting. 3. Click Submit 4. Click Save & Apply 4.2.12.1.7. Enable IGMP Snooping AP is a Layer 2 device when it is configured as Switch mode. However, IGMP Snooping implementation on AP is a little bit different than that of standard Layer 2 Switch. Each Virtual AP (WLAN) port is similar to a Layer 2 switch port. With IGMP Snooping enabled in the AP, clients associated to a VAP will only receive multicast packets if there is at least one client joined the multicast group in that VAP. Unlike ordinary IGMP Snooping implementation, where Layer 2 switch converts multicast to unicast and delivers them to devices registered with the multicast group, AP should simply send out the multicast packets from the VAP which has at least one client joined the multicast group. This is done because the wireless media is a broadcast media. It does not need to be sent multiple times when there are more than one registered clients. When IGMP Snooping is turned on, multicast packets should be dropped at the VAP exit if there is no client from the VAP who has joined the corresponding multicast group. The IGMP snooping forwarding table (port and multicast MAC address mapping table) should support aging mechanism to age out the entry which has no multicast traffic for a period of time. 1. 2.4G Interface: Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 5G Interface: Go to Configuration > Wireless > Radio1 > Advanced > Advanced Settings 2. Select IGMP Snooping checkbox to enable IGMP Snooping 3. Click Submit

60 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4. Click Save & Apply 4.2.12.1.8. Enable multicast traffic 1. 2.4G Interface: Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 5G Interface: Go to Configuration > Wireless > Radio1 > Advanced > Advanced Settings 2. Select Multicast Traffic checkbox that A3 process multicast traffic in all WLANs; otherwise; AP drops the multicast traffic. 3. Click Submit 4. Click Save & Apply 4.2.12.1.9. How to enable Nearby AP List on A3 1. 2.4G Interface: Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 5G Interface: Go to Configuration > Wireless > Radio1 > Advanced > Advanced Settings 2. Select Nearby AP List checkbox that A3 sniffs the surrounding AP periodically 3. Click Submit 4. Click Save & Apply 4.2.12.2. AirFi Settings AirFi technology is an advanced software control wireless algorithm developed by Altai for optimizing network throughput capacity performance. Using the Altai AirFi control algorithm can optimize the wireless bandwidth for the high speed clients as well as the low speed clients (i.e. 11b and 11g clients), and as a result the system throughput can be improved substantially. Figure 68 – AirFi Setting 1. Go to Configuration > Wireless > Radio0 > Advanced > Advanced Settings 2. Select AirFi checkbox to enable AirFi feature 3. Select suitable level in AirFi Level Level I - favor the fast (802.11n) client most Level I - favor the fast (802.11n) client moderate Level III - favor the fast (802.11n) client less 4. Click Submit 5. Click Save & Apply Note: - Level I is recommended

61 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2.12.3. Data Rate Setting The fact is that low data rate transmissions consume more air time than high data rates. It may affect the system performance. By disabling low data rates, AP rules out some remote clients with poor signal strength and hence low link data rate, preventing them from consuming too much air time and leaves the air time for higher data rates transmissions. In this way, overall system performance can be improved. The most common way we use it is to disable low data rates (e.g., 1M, 2M) when the AP performance is reported poor. 5.1.4.1.2. Configure data rate setting on A3 Figure 69 – Data Rate Setting 1. 2.4G Radio: Go to Configuration > Wireless > Radio0 > Advanced > Data Rate Settings 5G Radio: Go to Configuration > Wireless > Radio1 > Advanced > Data Rate Settings 2. Select suitable data rate on Data Rate; best standard for adaptive data rate; you can enable or disable a particular data rate; otherwise, A3 transmits in fixed data rate; best is default setting 3. Select suitable data rate on Multicast Data Rate; min is default setting 4. Click Submit 5. Click Save & Apply 4.2.13. Quality of Service on Radio Interface A3 provides QoS/WMM configuration on both radio interface and each WLAN.

62 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2.13.1.1. Modify the QoS setting on Radio Figure 70 – QoS Setting on Radio 1. 2.4G Interface: Go to Configuration > Wireless > Radio0 > QoS 5G Interface: Go to Configuration > Wireless > Radio1 > QoS 2. Select suitable configuration in Optimization Mode; you can select: Default Optimization – a set of QoS/WMM parameters for most scenarios; it is a default setting Optimized for throughput – a set of QoS/WMM parameters for single user Wi-Fi network; Wi-Fi network achieves the highest throughput for a single user. Optimized for capacity - a set of QoS/WMM parameters for multi-user (>20) Wi-Fi network; Wi-Fi network can achieve highest system throughput for multiple users Manual Configuration – Specify QoS/WMM parameters manually 3. Click Submit 4. Click Save & Apply 4.2.13.1.2. Modify the QoS setting in WLAN 0 – 15 Figure 71 – QoS Setting on WLAN 0-15 1. 2.4G WLAN 0-15: Go to Configuration > Wireless > Radio0 > WLAN 0-15 > QoS 5G WLAN 0-15: Go to Configuration > Wireless > Radio1 > WLAN 0-15 > QoS 2. Specify QoS/WMM parameters manually 3. Click Submit 4. Click Save & Apply

63 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2.14. Bandwidth Control on WLAN Figure 72 – Bandwidth Control Setting on WLAN 0-15 4.2.14.1.1. Enable bandwidth control for the WLAN on WLAN 0 – 15 1. 2.4G WLAN 0-15: Go to Configuration > Wireless > Radio0 > WLAN 0-15 > Bandwidth Control 5G WLAN 0-15: Go to Configuration > Wireless > Radio1 > WLAN 0-15 > Bandwidth Control 2. Type in maximum throughput in kbps between 0 to 1000000 kbps on Uplink under Based on WLAN; 0 denotes disable, and is default setting 3. Type in maximum throughput in kbps between 0 to 1000000 kbps on Downlink under Based on WLAN; 0 denotes disable, and is default setting 4. Click Submit 5. Click Save & Apply 4.2.14.1.2. How to enable bandwidth control per station on WLAN 0 – 15 1. 2.4G WLAN 0-15: Go to Configuration > Wireless > Radio0 > WLAN 0-15 > Bandwidth Control 5G WLAN 0-15: Go to Configuration > Wireless > Radio1 > WLAN 0-15 > Bandwidth Control 2. Type in maximum throughput in kbps between 0 to 1000000 kbps on Uplink under Based on Station; 0 denotes disable, and is default setting 3. Type in maximum throughput in kbps between 0 to 1000000 kbps on Downlink under Based on Station; 0 denotes disable, and is default setting 4. Click Submit 5. Click Save & Apply

64 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 4.2.15. WEP Key Figure 73 – WEP Key Setting 4.2.15.1. Define WEP Key 1. 2.4G WLAN 0-15: Go to Configuration > Wireless > Radio0 > WEP 5G WLAN 0-15: Go to Configuration > Wireless > Radio1 > WEP 2. Select suitable option in Key Entry Mode; you can select: Ascii Text – key is encoded as ASCII characters (0–9, a–z, A–Z) Hexadecimal - key is encoded as Hexadecimal characters (0–9, A–F) 3. Type in up to four keys in WEP Key 1, WEP Key 2, WEP Key 3 and WEP Key 4 respectively. You can type either up to 5 Ascii characters or up to 10 Hexadecimal characters as WEP Key. 4. Click Submit 5. Click Save & Apply

65 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 5. Manage Your Access Point 5.1. User Admin A3 device allows network administrator to manage user account and privilege for accessing Web UI via local authentication and/or RADIUS authentication. Figure 74 – User Admin Table 4 describes the authentication setting of A3 device. Authentication Description Local (Default) Support 3-level User Login (root/admin/guest) RADIUS Authenticate user through RADIUS; if no response returned from RADIUS server, AP fallbacks to local authentication RADIUS + Local Login AP with local user login or RADIUS user login Table 4 - Different authentication type 5.1.1. Local authentication 5.1.1.1. How to modify admin account’s password 1. Go to Administration > User Admin 2. Select admin in UserName 3. Type a new password in Password 4. Type a new password again in Confirm Password 5. Click Submit 5.1.1.2. How to modify guest account’s password 1. Go to Administration > User Admin 2. Select guest in UserName

66 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 3. Type a new password in Password 4. Type a new password again in Confirm Password 5. Click Submit Note: - Please login as admin for modifying password 5.1.2. RADIUS authentication 5.1.2.1. How to enable RADIUS authentication in A3 products 1. Go to Administration > User Admin > Login Authentication Setting 2. Select RADIUS authentication or RADIUS + Local authentication in Authentication Type 3. Select suitable authentication in Authentication Mode; you can select: PAP EAP 4. Select suitable encryption in Encryption Algorithm; you can select: For authentication Mode is PAP: Disable For authentication Mode is EAP: PEAP-GTC PEAP-MS-CHAP-V2 TTLS-PAP TTLS-CHAP TTLS-MS-CHAP TTLS-MS-CHAP-V2 5. Provide IP address of remote RADIUS server in RADIUS Server 6. Provide suitable secrets in Secret of RADIUS Secret. 7. Left Secondary RADIUS Server blank if no backup RADIUS server is available 8. Provide Secondary RADIUS Secret blank if no backup RADIUS server is available 9. Click Submit 10. Click OK (see Figure 75) Figure 75 – Popup window for confirming the change of RADIUS authentication

67 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 5.2. SNMP Simple Network Management Protocol (SNMP) is a Network management protocol used almost exclusively in TCP/IP networks. SNMP provides a means to monitor and control network devices, and to manage configurations, statistics collection, performance, and security. Figure 76 – SNMP Configuration 5.2.1. How to enable SNMP in A3 products 1. Go to Administration > User Admin > SNMP 2. Select Enable SNMP checkbox to enable SNMP function 3. Type in suitable string in Read Community; the string of Read Community between Network Manage System (NMS) and A3 must be identical, otherwise, NMS cannot get information from A3. public is default setting. 4. Type in suitable string in Write Community; the string of Write Community between Network Manage System (NMS) and A3 must be identical, otherwise, NMS cannot modify A3’s setting. netman is default setting. 5. Click Submit 6. Click Save & Apply Note: - A3 support up to four trap host at the same time. The information about trap hosts will be listed in the trap host table (see Figure 77) Figure 77 – Trap host table

68 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 5.3. Certificate A3 devices support both HTTP and HTTPS connection for their web UI. Certificate management allows network administrator to upload their own certifications for HTTPS connection. Figure 78 – Certificate Management 5.3.1. How to upload the customized certification for HTTPS connection on A3 products 1. Go to Administration > Certificate 2. Click Browse on Http Cert File and select suitable certification file for HTTPS connection 3. Click Upload on Http Cert File to upload certification 4. Click Browse on Http Key File and select suitable certification file for HTTPS connection 5. Click Upload on Http Key File to upload certification 6. Click Install Note: - The existing certification file and key file will be overwritten for executing installation each time

69 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 5.4. Firmware Update Network administrator updates (upgrades or downgrades) A3 device’s firmware via web UI. Figure 79 – Firmware Update 5.4.1. How to update A3 device’s firmware 1. Go to Administration > Firmware Update 2. Click Browse, then select suitable firmware image file (.bin) 3. You may select: Keeps all settings Device keeps all operating setting after updating firmware Keep Network Address settings only Device keeps IP address, subnet mask only after updating firmware; the other settings will be restored as default settings Full Factory Reset Device restores all setting as default settings after updating firmware 4. Click Upload Image 5. If uploaded firmware image is valid, click Proceed to continue; otherwise, error message will be shown 6. Wait unit A3 completes updating firmware 7. Login with correct username and password, then check the firmware version on About > Product Version Caution: - Do not interrupt the process of firmware update. Please maintain network connection and power supply during updating firmware; otherwise A3 may not function.

70 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 5.5. Factory Default Network administrator restores A3 device’s settings as default settings via web UI. Figure 80 – Restore to Factory Default 5.5.1. How to restore A3 device’s settings with default settings 1. Go to Administration > Factory Default 2. Select Keep Network Address settings checkbox for keeping IP address and subnet mask settings; otherwise, deselect the checkbox 3. Click Restore to Factory Default Note: - Please refer to 2.3 Login the AP (via Ethernet) on page 4 for logging in A3 after performing factory default 5.6. Backup/Restore Network administrator backups / restores A3 device’s settings via web UI. Figure 81 – Admin Backup / Restore 5.6.1. How to backup A3 device’s settings 1. Go to Administration > Backup/Restore > Backup Configuration File 2. Click Create backup and save configuration file

71 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 5.6.2. How to restore A3 device’s settings with configuration file 1. Go to Administration > Backup/Restore > Restore Configuration File 2. Click Browse, then select suitable configuration file (.tar.gz) 3. Click Restore backup 5.7. Customization Network administrator may create customized settings as factory default settings for A3 products. Once the customized configuration file is imported, A3 products restore with the customized settings as default settings rather than the original default settings. Figure 82 – Default Configuration Customization 5.7.1. How to create customized configuration file for A3 products 1. Go to Administration > Customization > Default Configuration Customization 2. Click Product Customization Template to download configuration template file (.tar.gz) 3. Use 7-zip software to open the template file, and edit the files in the factory_default.zip. 4. Edit system, network, and wireless files with the desired settings; system Contain settings about SNMP, syslog …etc network Contain network settings about all interfaces, such as IP address, VLAN enabling, and STP …etc. wireless Contain settings about radio interfaces, including radio enabling, WLAN settings … etc 5. Save the modified files 6. Go to Administration > Customization > Default Configuration Customization 7. Click Browse, then select the modified customization file 8. Click Install

72 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Caution: - Do not unzip the file during edit; otherwise, error may appear after uploading the customization file. 7-zip is recommended software to use in customization. Note: - Customization will take effect after reboot. Since improper customization may cause malfunction of A3, please contact Altai support team (support@altaitechnologies.com) for any queries.

73 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 6. Monitor Your Access Point This chapter introduces various information / statistics from Web UI or LED indication that monitoring the device’s status. 6.1. LED Colors and What They Mean 6.1.1. A3-Ei LED Mode LED Status (Color) Meaning Power LED Thick AP Off Power off Blinking slowly (Orange) Booting Solid (Orange) Operating Thin AP Off Power off Blinking slowly (Orange) Booting Blinking slowly (Green) Discovery / Connect to Access Controller Solid (Green) Connect to Access Controller successfully and operating Ethernet LED -- Off Link Down 100Mbps Solid (Green) Link Up Blinking (Green) Activity 1000Mbps Solid (Blue) Link Up Blinking (Blue) Activity Remarks: 1. All LED will be off once pressing down the reset button 2. Pressing and holding the reset button until Power LED blinks once, the device reboots. 3. Pressing and holding the reset button until Power LED blinks twice consecutively, the device restores the factory default setting. Table 5 - A3-Ei operation LED indicators

74 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 6.1.2. A3c / A3w LED Mode LED Status (Color) Meaning PWR Thick AP Off Power off Blinking slowly (Orange) Booting Solid (Orange) Operating Thin AP Off Power off Blinking slowly (Orange) Booting Blinking slowly (Green) Discovery / Connect to Access Controller Solid (Green) Connect to Access Controller successfully and operating Eth0/PoE IN -- Off Link Down 100Mbps Solid (Green) Link Up Blinking (Green) Activity 1000Mbps Solid (Blue) Link Up Blinking (Blue) Activity Eth1 -- Off Link Down 100Mbps Solid (Green) Link Up Blinking (Green) Activity 1000Mbps Solid (Blue) Link Up Blinking (Blue) Activity 2.4G AP Off Radio Off Solid (Green) Radio On; No client associated Blinking (Green) Radio On; At least one client associated Station / Repeater Off Radio Off Solid (Green) Radio On; Not associate with remote AP Blinking (Green) Radio On; Associate with remote AP Bridge Off Radio Off Solid (Green) Radio On; Disconnect with remote peer Blinking (Green) Radio On; Connect with remote peer Table 6 - A3c / A3w operation LED indicators

75 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved LED Mode LED Status (Color) Meaning 5G AP Off Radio Off Solid (Green) Radio On; No client associated Blinking (Green) Radio On; At least one client associated Station / Repeater Off Radio Off Solid (Green) Radio On; Not associate with remote AP Blinking (Green) Radio On; Associate with remote AP Bridge Off Radio Off Solid (Green) Radio On; Disconnect with remote peer Blinking (Green) Radio On; Connect with remote peer Remarks: 1. All LED will be off once pressing down the reset button 2. Pressing and holding the reset button until Power LED blinks once, the device reboots. 3. Pressing and holding the reset button until Power LED blinks twice consecutively, the device restores the factory default setting. Table 7 - A3c / A3w operation LED indicators (continue)

76 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 6.2. Status > Overview Figure 83 – A3 device’s status overview Status overview provides vital information on the device’s status. Information includes system status, thin AP status, network status, and interfaces status. 6.2.1. System status System status provides basic information and real time status of device. Figure 84 – System Status System Name – Name represents the device in Wi-Fi network; it is customized by network administrator. Product Name – Device’s product name

77 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved CPU Usage – indicate that how many CPU resources the device is currently using Memory Usage – indicate that how many memory resources the device is currently using Time of Day – system time of device Uptime – indicate operation time of device from last time boot up / reboot 6.2.2. Thin AP Figure 85 – Thin AP Status Thin AP - indicate status of thin AP feature 6.2.3. Networks Networks provide basic information about Layer 3 status. 6.2.3.1. Switch Mode Figure 86 – Network Status in Switch Mode IPv4 DHCP Client – indicate whether device’s IP address is assigned by DHCP server or not IPv4 Address – Current IPv4 address of device IPv4 Subnet Mask – indicate the subnetwork device belongs to IPv4 Default Gateway – indicate a node that helps device to another network. IPv4 DNS Server - indicate a node that provides DNS service for the device The following information is available if IPv6 option is enabled. IPv6 DHCP Client – indicate whether device’s IP address is assigned by IPv6 DHCP server or not IPv6 Address – Current IPv6 address of device IPv6 Default Gateway – indicate a node that helps device to another network.

78 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved IPv6 DNS Server - indicate a node that provides DNS service for the device 6.2.3.2. Gateway Mode Figure 87 – Network Status in Gateway Mode 6.2.3.2.1. WAN IPv4 DHCP Client – indicate whether device’s IP address is assigned by DHCP server or not IPv4 Address – Current IPv4 address of device on WAN IPv4 Subnet Mask – indicate the subnetwork device belongs to IPv4 Default Gateway – indicate a node that helps device to another network. IPv4 DNS Server - indicate a node that provides DNS service for the device 6.2.3.2.2. LAN IP Address - Current IP address of device on LAN Subnet Mask – indicate the subnetwork device belongs to NAT – indicate whether device performs network address translation (NAT) or not DHCP Server - indicate whether built-in DHCP server is enabled or not

79 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 6.2.4. Interfaces Interfaces provide the real time status of all interfaces on the A3 device. Figure 88 – Status of all available interfaces 6.2.4.1. Ethernet (eth0) Figure 89 – Ethernet 0 Status MAC – MAC address of Ethernet 0 interface Link – indicate the status and operating mode of Ethernet 0 Transmit – indicate the traffic and instant throughput of transmission on Ethernet 0 Receive – indicate the traffic and instant throughput of receive operation on Ethernet 0 6.2.4.2. Ethernet (eth1) Figure 90 – Ethernet 1 Status MAC – MAC address of Ethernet 1 interface Link – indicate the status and operating mode of Ethernet 1 Transmit – indicate the traffic and instant throughput of transmission on Ethernet 1 Receive – indicate the traffic and instant throughput of receive operation on Ethernet 1

80 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 6.2.4.3. Radio0 (2.4G) Figure 91 – Radio 0 Status MAC – MAC address of Radio 0 interface Channel – indicate operating frequency (channel) of Radio 0 Wireless Mode – indicate 802.11 standards that Radio 0 operates Noise Level – indicate the noise level in terms of dBm of operating channel Transmission Power – indicate the total transmission power of Radio 0 Transmit – indicate the traffic and instant throughput of transmission on Radio 0 Receive – indicate the traffic and instant throughput of receive operation on Radio 0 Mode – indicate operating mode of Radio 1 WLANs - indicate the number of operating WLAN on Radio 0 (AP mode and Repeater Mode only) Clients - indicate the number of clients that Radio 0 servers currently (AP mode and Repeater mode only) Connection – indicate connection status between Radio 0 and remote AP (Station mode only) AP SSID – indicate the SSID that station associates with (Station mode only) AP SNR – indicate received SNR from remote AP (Station mode only) Busy – indicate busy of operating channel 6.2.4.4. Radio1 (5G) Figure 92 – Radio 1 Status MAC – MAC address of Radio 1 interface Channel – indicate operating frequency (channel) of Radio 1 Wireless Mode – indicate 802.11 standards that Radio 1 operates Noise Level – indicate the noise level in terms of dBm of operating channel Transmission Power – indicate the total transmission power of Radio 1 Transmit – indicate the traffic and instant throughput of transmission on Radio 1

81 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Receive – indicate the traffic and instant throughput of receive operation on Radio 1 Mode – indicate operating mode of Radio 1 WLANs - indicate the number of operating WLAN on Radio 1 (AP mode and Repeater Mode only) Clients - indicate the number of clients that Radio 1 servers currently (AP mode and Repeater mode only) Connection – indicate connection status between Radio 0 and remote AP (Station mode only) AP SSID – indicate the SSID that station associates with (Station mode only) AP SNR – indicate received SNR from remote AP (Station mode only) Busy – indicate busy of operating channel

82 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 6.3. Status > Radio0(2.4G) 6.3.1. Status > Radio0(2.4G) > Status Figure 93 – Radio 0 Status (detail) 6.3.1.1. Radio Settings Radio Status – indicate the current status of Radio 0 interface MAC – MAC address of Radio 0 interface Radio Channel - indicate operating frequency (channel) of Radio 0 Wireless Mode – indicate 802.11 standards that Radio 0 operates Mode – indicate operating mode of Radio 0 Country Code – indicate country code setting of Radio 0 Transmission Power – indicate the total transmission power of Radio 0 6.3.1.2. Channel Usage List Tx(%) – average transmit frames percentage of operating channel

83 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Rx(%) – average receive frames percentage of operating channel Busy (%) – average busy state percentage of operating channel Noise Floor (dBm) – indicate noise floor of operating channel and noise floor of chain 0, chain 1, and chain 2 on the control channel; if operating with 40MHz bandwidth, it shows the noise floor of chain 0, chain 1, and chain 2 on the extension channel as well. Interference Mitigation Offset (0-50dB) – signal offset option that will mask all noise / valid signal below 0-50 dB; 0 denotes disabled 6.3.1.3. Nearby AP List If Nearby AP List is enabled, device collects nearby AP information and builds Nearby AP List from all beacon frames received during operation. Information shows the SSID, BSSID, authentication mode, cipher mode, operating channel, data rate, and received SNR of collected APs. 6.3.1.4. Tx/Rx Statistics This statistic shows traffic distribution about Radio 0 interface. The statistic data includes distribution in terms of data rate and frame type for all incoming and outgoing data frame via Radio 0 interface. 6.3.2. Status > Radio0(2.4G) > Association List This information is available on AP mode and Repeater mode only. Figure 94 – Radio 0 Association List 6.3.2.1. WAN It shows the current status of all operating WLAN on Radio 0 interface. The information includes WLAN ID, SSID, MAC Address, authentication mode, cipher mode, number of associated clients, instant throughput, and total traffic of each operating WLAN respectively. 6.3.2.2. Station List It shows the real time status of first 50 associated stations. The status includes Station ID, MAC Address, IP address, SNR(dB) of uplink, RSSI

84 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved (dBm) of uplink, instant throughput, cumulated traffic of uplink and downlink, and instant data rate of uplink and downlink for each associated station respectively. 6.3.2.3. Rouge Station List It lists out the stations that can potentially disrupt wireless networks and can sometimes cause irrevocable damage to the network owners. Network administrator inputs the rogue station’s MAC address manually or selects any station from the station List by clicking . 6.3.3. Status > Radio0(2.4G) > Connection Info This information is available on Station mode and Repeater mode only. Figure 95 – Radio 0 Connection Info 6.3.3.1. STA Info It shows station information on Radio 0. The information includes MAC Address, Authentication Mode, Unicast Cipher, Multicast Cipher, and State. 6.3.3.2. AP Info It shows remote AP information on Radio 0. The information includes MAC Address, SSID, SNR (dB), RSSI (dBm), Channel, Max Data Rate, Throughput of uplink and downlink, Data Rate of uplink and downlink, and Connected Status.

85 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 6.4. Status > Radio1(5G) 6.4.1. Status > Radio1(5G) > Status Figure 96 – Radio 1 Status Information 6.4.1.1. Radio Settings Radio Status – indicate the current status of Radio 1 interface MAC – MAC address of Radio 1 interface Radio Channel - indicate operating frequency (channel) of Radio 1 Wireless Mode – indicate 802.11 standards that Radio 1 operates Mode – indicate operating mode of Radio 1 Country Code – indicate country code setting of Radio 1 Transmission Power – indicate the total transmission power of Radio 1 6.4.1.2. Channel Usage List Tx(%) – average transmit frames percentage of operating channel Rx(%) – average receive frames percentage of operating channel Busy (%) – average busy state percentage of operating channel Noise Floor (dBm) – indicate noise floor of operating channel and noise floor of chain 0, chain 1, and chain 2 on the control channel; if operating with 40MHz bandwidth, it shows the noise floor of chain 0, chain 1, and chain 2 on the extension channel as well. Interference Mitigation Offset (0-50dB) – signal offset option that will mask all noise / valid signal below 0-50 dB; 0 denotes disabled 6.4.1.3. Nearby AP List If Nearby AP List is enabled, device collects nearby AP information and builds Nearby AP List from all beacon frames received during operation.

86 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved Information shows the SSID, BSSID, authentication mode, cipher mode, operating channel, data rate, and received SNR of collected APs. 6.4.1.4. Tx/Rx Statistics This statistic shows traffic distribution about Radio 1 interface. The statistic data includes distribution in terms of data rate and frame type for all incoming and outgoing data frame via Radio 1 interface. 6.4.2. Status > Radio1(5G) > Association List Figure 97 – Radio 1 Association List 6.4.2.1. WAN It shows the current status of all operating WLAN on Radio 0 interface. The information includes WLAN ID, SSID, MAC Address, authentication mode, cipher mode, number of associated clients, instant throughput, and total traffic of each operating WLAN respectively. 6.4.2.2. Station List It shows the real time status of first 50 associated stations. The status includes Station ID, MAC Address, IP address, SNR(dB) of uplink, RSSI (dBm) of uplink, instant throughput, cumulated traffic of uplink and downlink, and instant data rate of uplink and downlink for each associated station respectively. 6.4.2.3. Rouge Station List It lists out the stations that can potentially disrupt wireless networks and can sometimes cause irrevocable damage to the network owners. Network administrator inputs the rogue station’s MAC address manually or selects any station from the station List by clicking .

87 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 6.4.3. Status > Radio1(5G) > Connection Info This information is available on Station mode and Repeater mode only. Figure 98 – Radio 1 Connection Info 6.4.3.1. STA Info It shows station information on Radio 1. The information includes MAC Address, Authentication Mode, Unicast Cipher, Multicast Cipher, and State. 6.4.3.2. AP Info It shows remote AP information on Radio 1. The information includes MAC Address, SSID, SNR (dB), RSSI (dBm), Channel, Max Data Rate, Throughput of uplink and downlink, Data Rate of uplink and downlink, and Connected Status. 6.5. Status > Ethernet Figure 99 – Ethernet Status (detail) 6.5.1. Status > Ethernet > Status It shows the current status of Ethernet interfaces. The information includes Port, MAC Address, Auto-negotiation, Speed, Duplex, Link Detected, instant throughput of uplink and downlink and traffic of of uplink and downlink on Ethernet 0 and Ethernet 1 respectively.

88 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 6.6. Status > Logs Figure 100 – Status > Logs In order to realize easier monitoring and diagnosis, A3 products provide log function for system information, association activity, and alarm event. syslog – records the information about system information, such as software, hardware, system configuration, and self-checking result wifi – records the information about association activity, such as association, dissociation, and roaming event alarm – records the alert information of A3 device, such as radio down, too high CPU usage Note: - Syslog is one of the vital information for Altai’s engineer for troubleshooting. It is highly recommended that syslog MUST be enabled

89 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 7. Embedded Tools for Deployment / Operation / Troubleshooting A3 products have various tools to help network administrator or engineer on deployment, operating, and troubleshooting. Tools include channel scan, ping … etc. 7.1. Channel Scan Network administrator and engineer collect the status of 2.4GHz radio and 5GHz radio in the surrounding area. Throughout this tool, network administrator and engineer collect noise floor, percentage of channel busy, and the number of BSS in particular radio channels. Figure 101 – Chanel Scan Result (Overview) A3 shows the channel scan result into Overview tab and AP List tab. Overview Tab – displays general information from channel 1 to channel 11. Information includes noise floor, percentage of channel busy, and the number of BSS on each channel respectively. AP List Tab - displays information scanned WLAN; information includes SSID, BSSID, authentication Mode, cipher, channel, rate in kbps, and received SNR (dB) 7.1.1. How to perform channel scan on 2.4G radio 1. Go to Tools > Channel Scan > Radio 0 (2.4G) 2. [Optional] Provide channel scan interval from 100ms to 1000ms in Duration 3. Click Start Scan 4. Wait until Scan Status is changed from In Process to Success; it will take for 20 seconds approximately Note: - Wi-Fi service will be interrupted during channel scan

90 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 7.1.2. How to perform channel scan on 5G radio 1. Go to Tools > Channel Scan > Radio 1 (5G) 2. [Optional] Provide channel scan interval from 100ms to 1000ms in Duration 3. Click Start Scan 4. Wait until Scan Status is changed from In Process to Success; it will take for 20 seconds approximately Note: - Wi-Fi service will be interrupted during channel scan 7.2. Diagnosis 7.2.1. Ping Test Network administrator and engineer test the reachability of a host and measures the round-trip time between A3 and the host over an Internet Protocol (IP) network by using ping tool. Figure 102 – Ping Test 7.2.2. How to perform ping test 1. Go to Tools > Diagnosis > Ping 2. Type target IP address / host name in Ping IP Address/Host Name 3. [Optional] Specify how many ICMP (ping) packet that A3 sends to the target host in Packet Count; 4 is default setting 4. [Optional] Specify the packet size of ICMP packet in Packet Size; 56 is default setting 5. Click Start 6. Click Stop to terminate ping test if necessary

91 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 7.2.3. Traceroute Test Network administrator tests the route (path) and measuring transit delays of packets across an Internet Protocol (IP) network by using traceroute test. Figure 103 – Traceroute Test 7.2.3.1. How to perform traceroute test 1. Go to Tools > Diagnosis > traceroute 2. Type target IP address / host name in Destination IP Address/Host Name 3. [Optional] Click Enable Resolve IP addresses checkbox to enable IP address to domain name translation 4. [Optional] Specify timeout interval between 1s and 100s in Timeout for traceroute test 5. [Optional] Specify TTL value between 1 and 100 in Pings Per TTL; 3 is default setting 6. [Optional] Specify TTL value between 1 and 100 in Maximum TTL; 30 is default setting 7. Click Start 8. Click Stop to terminate ping test if necessary

92 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 7.2.4. Tcpdump A3 provides a tool to capture packets that passing through a particular interface. It helps network administrator for troubleshooting. Figure 104 – Tcpdump Tool 7.2.4.1. How to perform packet capture on A3’s interface 1. Go to Tools > Diagnosis > Tcpdump 2. Select suitable interface in Interface 3. [Optional] Specify maximum number of packet in Packet Count 4. [Optional] Specify maximum file size in Capture File Size 5. Click Start 6. Click Stop to terminate ping test if necessary 7. Download capture file after finished. 7.3. Watchdog Watchdog is an electronic timer that is used to detect and recover from system malfunctions. That is timer for periodic reboot. 7.3.1. Schedule Reboot Figure 105 – Schedule Root

93 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 7.3.1.1. How to enable periodic reboot 1. Go to Tools > Watchdog > Schedule Reboot 2. Click Periodic Reboot to enable reboot scheduler 3. You may change the following settings: Radom Delay – Select the checkbox to enable a random delay on scheduled rebooting time. It prevents all APs reboot at the same time Schedule Mode Select exact time and day(s) for rebooting device Periodic Mode Select a countdown timer (minute) for rebooting device 4. Click Submit 5. Click Save & Apply 7.3.1.2. How to enable periodic log upload 1. Go to Tools > Watchdog > Schedule Reboot 2. Click Periodic Upload Log to enable upload log scheduler 3. You may change the following settings: Radom Delay – Select the checkbox to enable a random delay on scheduled rebooting time. It prevents all APs reboot at the same time FTP Server User Name – Type in username for logging in remote FTP server FTP Server Password – Type in password for logging in remote FTP server FTP Server IP Address - Type in IP address of remote FTP server FTP Server Port - Specify service port of remote FTP server; 21 is default setting Schedule Mode Select exact time and day(s) for uploading log Periodic Mode Select a countdown timer (minute) for uploading log 4. Click Submit 5. Click Save & Apply

94 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 7.3.2. Ping Watchdog Ping watchdog is mechanism that A3 reboots itself if it fails to communicate (ping) to target host for serval time. Figure 106 – Ping Watchdog 7.3.2.1. How to enable ping watchdog 1. Go to Tools > Watchdog > Ping watchdog 2. Click Enable Ping Watchdog to enable this function 3. Type in IP address of target host in IP Address To Ping 4. [Optional] Specify interval between each ICMP request in Ping Interval; 300 is default setting 5. [Optional] Specify delay time of each ICMP request in Startup Delay; 300 is default setting 6. [Optional] Specify fail tolerant in Failure Count to Reboot; 3 is default setting 7. Click Submit 8. Click Save & Apply

95 Altai A3 Series Dual-band 3x3 802.11 ac WiFi Access Point Configuration Guide Altai Technologies Ltd. All rights reserved 8. Collect Device’s Product Information A3 product shows the information about product information, hardware, software and company information in About tab. Figure 107 – About tab of A3 product

Navigation menu