Edimax Technology Co 9574791704 AC1300 DBDC Ceiling-mount AP User Manual 2
Edimax Technology Co Ltd AC1300 DBDC Ceiling-mount AP 2
Contents
- 1. User Manual
- 2. User Manual-1
- 3. User Manual-2
- 4. User Manual-3
User Manual-2

EdimaxProNMS
IV‐3.ZONEPLAN
TheZonePlancanbefullycustomizedtomatchyournetworkenvironment.
YoucanmovetheAPiconsandselectdifferentlocationimages(upload
locationimagesinNMSSettingsZoneEdit)tocreateavisualmapofyour
AParray.
Usethemenuontherightsidetomakeadjustmentsandmouse‐overan
APiconinthezonemaptoseemoreinformation.ClickanAPiconinthe
zonemaptoselectitanddisplayactionicons:
95

EdimaxProNMS
ClickanddraganAPicontomovetheiconaroundthezonemap.Thesignal
strengthforeachAPisdisplayedaccordingtothe“Signal”keyinthemenu
ontherightside:
Location Selectapre‐definedlocationfromthedrop
downmenu.Whenyouuploadalocation
imageinNMSSettings
ZoneEdit,itwillbe
availableforselectionhere.
APGroup YoucanselectanAPGrouptodisplayinthe
zonemap.EditAPGroupsinNMSSettings
AccessPoint.
Search UsethesearchboxtoquicklylocateanAP.
Radio UsethecheckboxestodisplayAPsaccording
to2.4GHzor5GHzwirelessradiofrequency.
Signal Signalstrengthkeyforthesignalstrength
displayaroundeachAPinthezonemap.
Zoom Usetheslidertoadjustthezoomlevelofthe
map.
Transparency Usetheslidertoadjustthetransparencyof
locationimages.
Scale Zonemapscale.
Device/Number Displaysnumberandtypeof devicesinthe
zonemap.
96

EdimaxProNMS
IV‐4.NMSMONITOR
IV‐4‐1.AccessPoint
IV‐4‐1‐1. ManagedAP
DisplaysinformationabouteachManagedAPinthelocalnetwork:Index
(referencenumber),MACAddress,DeviceName,Model,IPAddress,2.4GHz&
5GHzWirelessChannelNumber,No.ofClientsconnectedtoeachaccesspoint,
andStatus(connected,connectingordisconnected).
ThesearchfunctioncanbeusedtolocateaspecificManagedAP.Typein
thesearchboxandthelistwillupdate:
TheStatusicondisplaysthestatusofeachManagedAP.
StatusIcons
Icon
Color
StatusDefinition
ManagedAPisdisconnected.Please
Grey
Disconnectedcheckthenetworkconnectionandensure
theManagedAPisinthesameIPsubnet
astheAPController.
Authentication Systemsecuritymustbethesameforall
FailedaccesspointsintheAParray.Please
checksecuritysettings(refertoIV‐5‐8‐1.
Red
Or
S
ystemSecurity).
IncompatibleAccesspointsmustusethesameversion
ofEdimaxNMS:themanagedAPwillnot
NMSVersion
beabletomakeconfigurations.Please
97

EdimaxProNMS
usetheAPController’sfirmwareupgrade
f
unction(refertoIV‐5‐7.Firmware
Upgrade).
ConfiguringorPleasewaitwhiletheManagedAPmakes
OrangeUpgradingconfigurationsorwhilethefirmwareis
upgrading.
PleasewaitwhileManagedAPis
YellowConnectingconnecting.
ManagedAPisconnected.
Green
Connected
ManagedAPiswaitingforapproval.
RefertoIV‐5‐1.AccessPoint:Auto
Blue
Waitingfor
A
pprova
l
.Note:EightManagedAPsare
Approvalsupported.AdditionalAPswilldisplaythis
statusuntilanexistingManagedAPis
removed.
EachManagedAPhas“Action”iconswiththefollowingfunctions:
1. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
1. Edit
EditvarioussettingsfortheManagedAP(refertoIV‐5‐1.AccessPoint).
2. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&
locateaccesspoints.
3. Buzzer
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&
locateaccesspoints.
4. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
98

EdimaxProNMS
5. Restart
RestartstheManagedAP.
IV‐4‐1‐2. ManagedAPGroup
ManagedAPscanbegroupedaccordingtoyourrequirements.ManagedAP
GroupdisplaysinformationabouteachManagedAPgroupinthelocalnetwork:
GroupName,MACAddress,DeviceName,Model,IPAddress,2.4GHz
& 5GHzWirelessChannelNumber,No.ofClientsconnectedtoeach
accesspoint,andStatus(connectedordisconnected).
ToeditManagedAPGroupsgotoNMSSettingsAccessPoint(refertoIV‐5‐1.
AccessPoint).
ThesearchfunctioncanbeusedtolocateaspecificManagedAPGroup.
Typeinthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),red(authentication
failed/incompatibleNMSversion),orange(upgradingfirmware),yellow
(connecting),green(connected)orblue(waitingforapproval)foreach
individualManagedAP.RefertoIV‐4‐1‐1.ManagedAP:StatusIconsforfull
descriptions.
EachManagedAPhas“Action”iconswiththefollowingfunctions:
2. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
99

EdimaxProNMS
3. Edit
EditvarioussettingsfortheManagedAP(refertoIV‐5‐1.AccessPoint).
4. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&
locateaccesspoints.
5. Buzzer
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&
locateaccesspoints.
6. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
7. Restart
RestartstheManagedAP.
100

EdimaxProNMS
IV‐4‐2.WLAN
IV‐4‐2‐1. ActiveWLAN
DisplaysinformationabouteachSSIDintheAPArray:Index(reference
number),Name/SSID,VLANID,Authentication,Encryption,IPAddress
andAdditionalAuthentication.
ToconfigureencryptionandVLANsforManagedAPsgotoNMSSettingsWLAN.
ThesearchfunctioncanbeusedtolocateaspecificSSID.Typeinthe
searchboxandthelistwillupdate:
101

EdimaxProNMS
IV‐4‐2‐2. ActiveWLANGroup
WLANgroupscanbecreatedaccordingtoyourpreference.ActiveWLAN
GroupdisplaysinformationaboutWLANgroup:GroupName,Name/SSID,
VLANID,Authentication,Encryption,IPAddressandAdditional
Authentication.
ThesearchfunctioncanbeusedtolocateaspecificActiveWLANGroup.
Typeinthesearchboxandthelistwillupdate:
IV‐4‐3.Clients
IV‐4‐3‐1. ActiveClients
DisplaysinformationaboutclientscurrentlyconnectedtotheAPArray:Index
(referencenumber),ClientMACAddress,APMACAddress,WLAN(SSID),
Radio(2.4GHzor5GHz),SignalStrengthreceivedbyClient,ConnectedTime,
IdleTime,Tx&Rx(DatatransmittedandreceivedbyClientinKB),andthe
Vendoroftheclientdevice.
Youcansetordisabletheauto‐refreshtimefortheclientlistor
click“Refresh”tomanuallyrefresh.
Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthe
searchboxandthelistwillupdate:
102

EdimaxProNMS
IV‐4‐4.RogueDevices
Rogueaccesspointdetectioncanidentifyanyunauthorizedaccess
pointswhichmayhavebeeninstalledinthenetwork.
Click“Start”toscanforroguedevices:
UnknownRogueDevicesdisplaysinformationaboutroguedevices
discoveredduringthescan:Index(referencenumber),Channel,SSID,MAC
Address,Security,SignalStrength,Type,VendorandAction.
Thesearchfunctioncanbeusedtolocateaknownroguedevice.Typein
thesearchboxandthelistwillupdate:
103

EdimaxProNMS
IV‐4‐5.Information
IV‐4‐5‐1. AllEvents/Activities
Displaysalogoftime‐stampedeventsforeachaccesspointintheArray–
usethedropdownmenutoselectanaccesspointandviewthelog.
104

EdimaxProNMS
IV‐4‐5‐2. Monitoring
DisplaysgraphicalmonitoringinformationaboutaccesspointsintheArray
for2.4GHz&5GHz:TrafficTx(datatransmittedinMB),TrafficRx(data
receivedinMB),No.ofClients,WirelessChannel,TxPower(wirelessradio
power),CPUUsageandMemoryUsage.
Usethedropdownmenustoselectanaccesspointanddate.
Youcansetordisabletheauto‐refreshtimeforthedata:
105

EdimaxProNMS
IV‐5.NMSSettings
IV‐5‐1.AccessPoint
Displaysinformationabouteachaccesspointandaccesspointgroupin
thelocalnetworkandallowsyoutoeditaccesspointsandeditoradd
accesspointgroups.
Thesearchfunctioncanbeusedtolocateanaccesspointoraccess
pointgroup.Typeinthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),red(authentication
failed/incompatibleNMSversion),orange(upgradingfirmware),yellow
(connecting),green(connected)orblue(waitingforapproval)foreach
individualManagedAP.RefertoIV‐4‐1‐1.ManagedAP:StatusIconsforfull
descriptions.
The“Action”iconsenableyoutoallowordisallowanaccesspoint:
106

EdimaxProNMS
Selectanaccesspointoraccesspointgroupusingthe
check‐boxesandclick“Edit”tomakeconfigurations,orclick
“Add”toaddanewaccesspointgroup:
TheAccessPointSettingspanelcanenableordisableAuto
ApproveforallManagedAPs.Whenenabled,ManagedAPswillautomatically
jointheAPArraywiththeControllerAP.Whendisabled,ManagedAPsmustbe
manuallyapprovedtojointheAPArraywiththeControllerAP.
AccessPointSettings
AutoApproveEnableordisableAutoApproveforall
ManagedAPs.
TomanuallyapproveaManagedAP,usetheallow“Action”iconfor
thespecifiedaccesspoint:
EditAccessPoint
ConfigureyourselectedaccesspointonyourLAN.Youcansettheaccess
pointasaDHCPclientorspecifyastaticIPaddressforyouraccesspoint,and
assigntheaccesspointtoanAPgroup,aswellasedit2.4GHz&5GHz
wirelessradiosettings.Aneventslogisdisplayedatthebottomofthepage.
YoucanalsouseProfileSettingstoassigntheaccesspointtoWLAN,Guest
Network,RADIUSandAccessControlgroupsindependentlyfromAccess
PointGroupsettings.
Checkthe“OverrideGroupSettings”boxtousedifferentindividual
settingsforaccesspointsassignedtoAPGroups:
107

EdimaxProNMS
BasicSettings
Name Edittheaccesspointname.Thedefaultname
isAP+MAC address.
Description Enteradescriptionoftheaccesspointfor
referencee.g.2
nd
FloorOffice.
MACAddress DisplaysMACaddress.
APGroup UsethedropdownmenutoassigntheAPto
anAPGroup.YoucaneditAPGroupsfrom
theNMSSettings
AccessPointpage.
IPAddress Select“DHCPClient”foryouraccesspointto
Assignment beassignedadynamicIPaddressfromyour
router’sDHCPserver,orselect“StaticIP”to
manuallyspecifyastatic/fixedIPaddressfor
youraccesspoint (below).Checkthebox
“OverrideGroupSetting”iftheAPisa
memberofanAPGroupandyouwishtouse
adifferentsettingthantheAPGroupsetting.
IPAddress SpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
replacethedefaultIPaddress.
SubnetMask Specifyasubnetmask.Thedefaultvalueis
255.255.255.0
108

EdimaxProNMS
DefaultGatewayForDHCPusers,select“FromDHCP”toget
defaultgatewayfromyourDHCPserveror
“User‐Defined”toenteragatewaymanually.
ForstaticIPusers,thedefaultvalueisblank.
PrimaryDNSDHCPuserscanselect“FromDHCP”toget
primaryDNSserver’sIPaddressfromDHCPor
“User‐Defined”tomanuallyenteravalue.For
staticIPusers,thedefaultvalueisblank.
SecondaryDNS DHCPuserscanselect“FromDHCP”toget
secondaryDNSserver’sIPaddressfromDHCP
or“User‐Defined”tomanuallyenteravalue.
ForstaticIPusers,thedefaultvalueisblank.
RadioSettings
Wireless Enableordisabletheaccesspoint’s2.4GHzor
5GHzwirelessradio.Whendisabled,noSSIDs
onthatfrequencywillbeactive.
Band Selectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11b,
802.11g,802.11n&802.11accanbeselected.
AutoPilot Enable/disableautochannelselection.Auto
109

EdimaxProNMS
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s2.4GHz
or5GHzfrequencybasedonavailabilityand
potentialinterference.Whendisabled,select
achannelmanually.
AutoPilotRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoPilotIntervalSpecifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidthoruseAuto
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyof
thevaluesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
AdvancedSettings
ContentionSlot Select“Short”or“Long”
–
this valueisusedfor
contentionwindowsinWMM(seeIV‐6‐7.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
110

EdimaxProNMS
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
FragmentSetthefragmentthresholdofthewireless
Thresholdradio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconInterval Setthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
StationidleSettheintervalforkeepalivemessagesfrom
timeouttheaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
ProfileSettings
WLANGroup Assigntheaccesspoint’s2.4GHzor5GHz
111

EdimaxProNMS
SSID(s)toaWLANGroup.YoucaneditWLAN
groupsinNMSSettings
WLAN.
GuestNetwork Assigntheaccesspoint’s2.4GHzor5GHz
GroupSSID(s)toaGuestNetworkGroup.Youcan
editGuestNetworkgroupsinNMSSettings
GuestNetwork.
RADIUSGroupAssigntheaccesspoint’s2.4GHzSSID(s)toa
RADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettings
RADIUS.
AccessControlAssigntheaccesspoint’s2.4GHzSSID(s)toa
GroupRADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettings
AccessControl
112

EdimaxProNMS
Add/EditAccessPointGroup
Configureyourselectedaccesspointgroup.Accesspointgroupsettings
applytoallaccesspointsinthegroup,unlessindividuallysettooverride
groupsettings.
YoucanuseProfileGroupSettingstoassigntheaccesspointgrouptoWLAN,
GuestNetwork,RADIUSandAccessControlgroups.
TheGroupSettingspanelcanbeusedtoquicklymoveaccesspointsbetween
exsitinggroups:selectanaccesspointandusethedropdownmenuor
searchtoselectaccesspointgroupsanduse<<and>>arrowstomoveAPs
betweengroups.
BasicGroupSettings
NameEdittheaccesspointgroupname.
DescriptionEnteradescriptionoftheaccesspointgroup
forreferencee.g.2
nd
FloorOfficeGroup.
113

EdimaxProNMS
RadioGroupSettings
WirelessEnableordisabletheaccesspointgroup’s
2.4GHzor5GHzwirelessradio.When
disabled,noSSIDsonthatfrequencywillbe
active.
BandSelectthewirelessstandardusedforthe
accesspointgroup.Combinationsof802.11b,
802.11g,802.11n&802.11accanbeselected.
AutoPilotEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspointgroup’s
2.4GHzor5GHzfrequencybasedon
availabilityandpotentialinterference.When
disabled,selectachannelmanually.
AutoPilotRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoPilotIntervalSpecifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidthoruseAuto
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyof
thevaluesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoints.
AdvancedSettings
ContentionSlotSelect“Short”or“Long”–thisvalueisusedfor
contentionwindowsinWMM(seeIV‐6‐7.
WMM).
114

EdimaxProNMS
PreambleType Setthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardInterval Settheguardinterval.Ashorterintervalcan
improveperformance.
802.11gProtection Enable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
802.11nProtection Enable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
access point,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriod SettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThreshold SettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment Setthefragmentthresholdofthewireless
Threshold radio.Thedefaultvalueis2346.
MulticastRate Setthetransferrateformulticastpacketsor
usethe“Auto” setting.
TxPower Setthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconInterval Setthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle Settheintervalforkeepalivemessagesfrom
timeout theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
115

EdimaxProNMS
ProfileGroupSettings
WLANGroupAssigntheaccesspointgroup’s2.4GHzor
5GHzSSIDstoaWLANGroup.Youcanedit
WLANgroupsinNMSSettings
WLAN.
GuestNetwork Assigntheaccesspointgroup’s2.4GHzor
Group5GHzSSIDstoaGuestNetworkGroup.You
caneditGuestNetworkgroupsinNMS
Settings
GuestNetwork.
RADIUSGroupAssigntheaccesspointgroup’s2.4GHzSSIDs
toaRADIUSgroup.YoucaneditRADIUS
groupsinNMSSettings
RADIUS.
AccessControlAssigntheaccesspoint’s2.4GHzSSIDstoa
GroupRADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettings
AccessControl.
116

EdimaxProNMS
IV‐5‐2.WLAN
DisplaysinformationabouteachWLANandWLANgroupinthelocalnetwork
andallowsyoutoaddoreditWLANs&WLANGroups.WhenyouaddaWLAN
Group,itwillbeavailableforselectioninNMSSettingsAccessPointaccess
pointProfileSettings&accesspointgroupProfileGroupSettings(IV‐5‐1.)
ThesearchfunctioncanbeusedtolocateaWLANorWLANGroup.Type
inthesearchboxandthelistwillupdate:
SelectaWLANorWLANGroupusingthecheck‐boxesand
click“Edit”orclick“Add”toaddanewWLANorWLAN
Group:
117

EdimaxProNMS
Add/EditWLAN
WLANSettings
Name/ESSID EdittheWLANname(SSID).
Description EnteradescriptionoftheSSIDforreference
e.g.2
nd
FloorOfficeHR.
SSID SelectwhichSSIDtoconfiguresecurity
settingsfor.
VLANID SpecifytheVLANID.
BroadcastSSID EnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsas
anavailableWi‐Finetwork.Whendisabled,
theSSIDwillnotbevisibleasanavailable
Wi‐Finetworktoclients
–
clientsmust
manuallyentertheSSIDinordertoconnect.
Ahidden(disabled)SSIDistypicallymore
securethanavisible(enabled)SSID.
WirelessClient Enableordisablewirelessclientisolation.
Isolation Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattackson
118

EdimaxProNMS
clients’usernamesandpasswords.
LoadBalancing Loadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication Selectanauthenticationmethodfromthe
Methoddropdownmenu.
AdditionalSelectanadditionalauthenticationmethod
Authentication fromthedropdownmenu.
Varioussecurityoptions(wirelessdataencryption)areavailable.Whendata
isencrypted,informationtransmittedwirelesslycannotbereadbyanyone
whodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthard‐to‐guesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
PleaserefertoIV‐6‐2‐3.Securityformoreinformationonauthentication
andadditionalauthenticationtypes.
WLANAdvancedSettings
SmartHandoverEnableordisableSmartHandover.
RSSIThresholdSetaRSSIThresholdlevel.
119

EdimaxProNMS
Add/EditWLANGroup
WhenyouaddaWLANGroup,itwillbeavailableforselectioninNMSSettings
AccessPointaccesspointProfileSettings&accesspointgroupProfileGroup
Settings(IV‐5‐1.)
WLANGroupSettings
NameEdittheWLANGroupname.
DescriptionEnteradescriptionoftheWLANGroupfor
referencee.g.2
nd
FloorOfficeHRGroup.
MembersSelectSSIDstoincludeinthegroupusingthe
checkboxesandassignVLANIDs.
120

EdimaxProNMS
IV‐5‐3.RADIUS
DisplaysinformationaboutExternal&InternalRADIUSServers,Accounts
andGroupsandallowsyoutoaddoreditRADIUSServers,Accounts&
Groups.WhenyouaddaRADIUSGroup,itwillbeavailableforselectionin
NMSSettingsAccessPointaccesspointProfileSettings&accesspoint
groupProfileGroupSettings(IV‐5‐1.)
ThesearchfunctioncanbeusedtolocateaRADIUSServer,AccountorGroup.
Typeinthesearchboxandthelistwillupdate:
Makeaselectionusingthecheck‐boxesandclick“Edit”
orclick“Add”toaddanewWLANorWLANGroup:
121

EdimaxProNMS
Add/EditExternalRADIUSServer
NameEnteranamefortheRADIUSServer.
DescriptionEnteradescriptionoftheRADIUSServerfor
reference.
RADIUSServerEntertheRADIUSserverhostIPaddress.
AuthenticationSettheUDPportusedintheauthentication
PortprotocoloftheRADIUSserver.Valuemustbe
between1
–
65535.
SharedSecretEnterasharedsecret/passwordbetween1
–
99charactersinlength.Thisshouldmatchthe
“MAC‐RADIUS”passwordusedinIV‐3‐1‐3‐6or
IV‐3‐2‐3.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between0
–
86400.
AccountingEnableordisableRADIUSaccounting.
AccountingPortWhenaccountingisenabled(above),setthe
UDPportusedintheaccountingprotocolof
theRADIUSserver.Valuemustbebetween1
–
65535.
122

EdimaxProNMS
Add/EditInternalRADIUSServer
UploadEAPCertificateFile
EAPCertificateFileDisplaystheEAPcertificatefileformat:
FormatPCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaself‐made
certificate.
InternalRADIUSServer
Name EnteranamefortheInternalRADIUSServer.
Description EnteradescriptionoftheInternalRADIUS
Serverforreference.
EAPCertificateFile DisplaystheEAPcertificatefileformat:
Format PCK#12(*.pfx/*.p12)
EAPCertificateFile Click“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaself‐made
certificate.
EAPInternal SelectEAPinternalauthenticationtypefrom
Authentication thedropdownmenu.
123

EdimaxProNMS
SharedSecretEnterasharedsecret/passwordforuse
betweentheinternalRADIUSserverand
RADIUSclient.Thesharedsecretshouldbe1
–
99charactersinlength.
SessionTimeout Setadurationofsessiontimeoutinseconds
between0
–
86400.
TerminationActionSelectatermination‐actionattribute:
“Reauthentication”sendsaRADIUSrequestto
theaccesspoint,“Not‐Reathentication”sends
adefaulttermination‐actionattributetothe
accesspoint,“Not‐Send”no
termination‐actionattributeissenttothe
accesspoint.
Add/EditRADIUSAccounts
TheinternalRADIUSservercanauthenticateupto256useraccounts.
The“RADIUSAccounts”pageallowsyoutoconfigureandmanageusers.
124

EdimaxProNMS
RADIUSAccounts
UserName Entertheusernameshere,separatedby
commas.
Add Click“Add”toaddtheusertotheuser
registrationlist.
Reset Cleartextfromtheusernamebox.
UserRegistrationList
Select Checktheboxtoselectauser.
UserName Displaystheusername.
Password Displaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured).
Customize Click“Edit”toopenanewfieldtoset/edita
passwordforthespecifiedusername(below).
DeleteSelected Deleteselecteduserfromtheuserregistration
list.
DeleteAll Deleteallusersfromtheuserregistrationlist.
EditUserRegistrationList
UserNameExistingusernameisdisplayedhereandcan
beeditedaccordingtoyourpreference.
PasswordEnteroreditapasswordforthespecifieduser.
125

EdimaxProNMS
Add/EditRADIUSGroup
WhenyouaddaRADIUSGroup,itwillbeavailableforselectioninNMSSettings
AccessPointaccesspointProfileSettings&accesspointgroupProfileGroup
Settings(IV‐5‐1.)
RADIUSGroupSettings
GroupNameEdittheRADIUSGroupname.
DescriptionEnteradescriptionoftheRADIUSGroupfor
reference.
2.4GHzRADIUS Enable/Disableprimary&secondaryRADIUS
serversfor2.4GHz.
5GHzRADIUSEnable/Disableprimary&secondaryRADIUS
serversfor5GHz.
MembersAddRADIUSuseraccountstotheRADIUS
group.
126

EdimaxProNMS
IV‐5‐4.AccessControl
MACAccessControlisasecurityfeaturethatcanhelptoprevent
unauthorizedusersfromconnectingtoyouraccesspoint.
Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto
connecttotheaccesspoint.Devicesareeachidentifiedbytheirunique
MACaddress.IfadevicewhichisnotonthelistofpermittedMAC
addressesattemptstoconnecttotheaccesspoint,itwillbedenied.
TheAccessControlpaneldisplaysinformationaboutMACAccessControl&
MACAccessControlGroupsandGroupsandallowsyoutoaddoreditMAC
AccessControl&MACAccessControlGroupsettings.Whenyouaddan
AccessControlGroup,itwillbeavailableforselectioninNMSSettings
AccessPointaccesspointProfileSettings&accesspointgroupProfile
GroupSettings(IV‐5‐1.)
ThesearchfunctioncanbeusedtolocateaMACaddressorMAC
AccessControlGroup.Typeinthesearchboxandthelistwillupdate:
Makeaselectionusingthecheck‐boxesandclick“Edit”or
click“Add”toaddanewMACAddressorMACAccess
ControlGroup:
127

EdimaxProNMS
Add/EditMACAccessControl
AddMACAddressEnteraMACaddressofcomputerornetwork
devicemanuallye.g.‘aa‐bb‐cc‐dd‐ee‐ff’or
entermultipleMACaddressesseparatedwith
commas,e.g.
‘aa‐bb‐cc‐dd‐ee‐ff,aa‐bb‐cc‐dd‐ee‐gg’
AddClick“Add”toaddtheMACaddresstothe
MACaddressfilteringtable.
ResetClearallfields.
MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.
Selectanentryusingthe“Select”checkbox.
SelectDeleteselectedorallentriesfromthetable.
MACAddressTheMACaddressislistedhere.
DeleteSelectedDeletetheselectedMACaddressfromthe
list.
DeleteAllDeleteallentriesfromtheMACaddress
filteringtable.
ExportClick“Export”tosaveacopyoftheMAC
filteringtable.Anewwindowwillpopupfor
youtoselectalocationtosavethefile.
128

EdimaxProNMS
Add/EditMACAccessControlGroup
WhenyouaddanAccessControlGroup,itwillbeavailableforselectioninNMS
SettingsAccessPointaccesspointProfileSettings&accesspointgroup
ProfileGroupSettings(IV‐5‐1.)
MACFilterGroupSettings
GroupNameEdittheMACAccessControlGroupname.
DescriptionEnteradescriptionoftheMACAccessControl
Groupforreference.
ActionSelect“Blacklist”todenyaccesstospecified
MACaddresses inthegroup,andselect
“Whitelist”topermitaccesstospecifiedMAC
addressinthegroup.
MembersAddMACaddressestothegroup.
129

EdimaxProNMS
IV‐5‐5.GuestNetwork
Youcansetupanadditional“Guest”Wi‐Finetworksoguestuserscan
enjoyWi‐Ficonnectivitywithoutaccessingyourprimarynetworks.The
“Guest”screendisplayssettingsforyourguestWi‐Finetwork.
TheGuestNetworkpaneldisplaysinformationaboutGuestNetworksand
GuestNetworkGroupsandallowsyoutoaddoreditGuestNetworkand
GuestNetworkGroupsettings.WhenyouaddaGuestNetworkGroup,itwill
beavailableforselectioninNMSSettingsAccessPointaccesspoint
ProfileSettings&accesspointgroupProfileGroupSettings(IV‐5‐1.)
ThesearchfunctioncanbeusedtolocateaGuestNetworkorGuest
NetworkGroup.Typeinthesearchboxandthelistwillupdate:
Makeaselectionusingthecheck‐boxesandclick“Edit”or
click“Add”toaddanewGuestNetworkorGuest
NetworkGroup.
130

EdimaxProNMS
Add/EditGuestNetwork
GuestNetworkSettings
Name/ESSID EdittheGuestNetworkname(SSID).
Description EnteradescriptionoftheGuestNetworkfor
referencee.g.2
nd
FloorOfficeHR.
VLANID SpecifytheVLANID.
BroadcastSSID EnableordisableSSIDbroadcast.When
enabled,theSSIDwill bevisibletoclientsas
anavailableWi‐Finetwork.Whendisabled,
theSSIDwillnotbevisibleasanavailable
Wi‐Finetworktoclients
–
clientsmust
manuallyentertheSSIDinordertoconnect.
Ahidden(disabled)SSIDistypicallymore
securethanavisible(enabled)SSID.
WirelessClient Enableordisablewirelessclientisolation.
Isolation Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattackson
131

EdimaxProNMS
clients’usernamesandpasswords.
LoadBalancing Loadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
WMMEnableordisableWMM(Wi‐FiMultimedia)
trafficprioritizing.
Authentication Selectanauthenticationmethodfromthe
Methoddropdownmenu.
AdditionalSelectanadditionalauthenticationmethod
Authentication fromthedropdownmenu.
Varioussecurityoptions(wirelessdataencryption)areavailable.Whendata
isencrypted,informationtransmittedwirelesslycannotbereadbyanyone
whodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthard‐to‐guesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
PleaserefertoIV‐6‐2‐3.Securityformoreinformationonauthentication
andadditionalauthenticationtypes.
GuestAccessPolicy
TrafficShapingEnableordisabletrafficshapingfortheguest
network.
DownlinkEnteradownlinklimitinMB.
UplinkEnteranuplinklimitinMB.
IPFilteringSelect“Deny”or“Allow”todenyorallow
specifiedIPaddressestoaccesstheguest
network.Select“Disable”todisableIP
filtering.
RulesEnterIPaddressestobefilteredaccordingto
theDenyorAllowrulespecifiedaboveand
checktheboxforeachIPaddresstobe
filtered.
132

EdimaxProNMS
Add/EditGuestNetworkGroup
WhenyouaddaGuestNetworkGroup,itwillbeavailableforselectioninNMS
SettingsAccessPointaccesspointProfileSettings&accesspointgroup
ProfileGroupSettings(IV‐5‐1.)
GuestNetworkGroupSettings
GroupNameEdittheGuestNetworkGroupname.
DescriptionEnteradescriptionoftheGuestNetworkfor
reference.
MembersAddSSIDstotheGuestNetworkgroup.
133

EdimaxProNMS
IV‐5‐6.ZoneEdit
ZoneEditdisplaysinformationaboutzonesforusewiththeZonePlan
featureandallowsyoutoaddoreditzones.
Thesearchfunctioncanbeusedtofindexistingzones.Typeinthesearch
boxandthelistwillupdate:
Makeaselectionusingthecheck‐boxesandclick“Edit”
orclick“Add”toaddanewzone.
134

EdimaxProNMS
Add/EditZone
UploadZoneImage
ChooseFileClicktolocateanimagefiletobedisplayedas
amapintheZonePlanfeature.Typicallya
floorplanimageisuseful.
ZoneSetting
Name/Location Enteranameofthezone/location.
DescriptionEnteradescriptionofthezone/locationfor
reference.
MembersAssignaccesspointstothespecified
zone/locationforusewiththeZonePlan
feature.
135

EdimaxProNMS
IV‐5‐7.FirmwareUpgrade
FirmwareUpgradeallowsyoutoupgradefirmwaretoAccessPointGroups.
First,uploadthefirmwarefilefromalocaldiskorexternalFTPserver:
locatethefileandclick“Upload”or“Check”.Thetablebelowwilldisplay
theFirmwareName,FirmwareVersion,NMSVersion,ModelandSize.
Thenclick“UpgradeAll”toupgradeallaccesspointsintheArrayorselect
AccessPointgroupsfromthelistusingcheck‐boxesandclick“Upgrade
Selected”toupgradeonlyselectedaccesspoints.
136

EdimaxProNMS
IV‐5‐8.Advanced
IV‐5‐8‐1. SystemSecurity
ConfiguretheNMSsystemloginnameandpassword.
IV‐5‐8‐2. Date&Time
Configurethedate×ettingsoftheAPArray.Thedateandtimeofthe
accesspointscanbeconfiguredmanuallyorcanbesynchronizedwitha
timeserver.
DateandTimeSettings
LocalTime Settheaccesspoint’sdateandtimemanually
usingthedropdownmenus.
AcquireCurrent Click“AcquireCurrentTimefromYourPC”to
TimefromyourPC
entertherequiredvaluesautomatically
accordingtoyourcomputer’scurrenttimeand
date.
137

EdimaxProNMS
NTPTimeServer
UseNTPTheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddate
setup.
ServerNameEnterthehostnameorIPaddressofthetime
serverifyouwish.
UpdateInterval Specifyafrequency(inhours)fortheaccess
pointtoupdate/synchronizewiththeNTP
server.
TimeZone
TimeZoneSelectthetimezoneofyourcountry/region.If
yourcountry/regionisnotlisted,pleaseselect
anothercountry/regionwhosetimezoneisthe
sameasyours.
138

EdimaxProNMS
IV‐6.LocalNetwork
IV‐6‐1.NetworkSettings
IV‐6‐1‐1. LAN‐SideIPAddress
The“LAN‐sideIPaddress”pageallowsyoutoconfigureyourAPController
onyourLocalAreaNetwork(LAN).Youcanenabletheaccesspointto
dynamicallyreceiveanIPaddressfromyourrouter’sDHCPserveroryoucan
specifyastaticIPaddressforyouraccesspoint,aswellasconfigureDNS
servers.YoucanalsosetyourAPControllerasaDHCPservertoassignIP
addressestootherdevicesonyourLAN.
Theaccesspoint’sdefaultIPaddressis192.168.2.2
DisableotherDHCPserversontheLANifusingAPControllers
DHCPServer.
LAN‐sideIPAddress
IPAddress Select“StaticIP”tomanuallyspecifya
Assignment static/fixedIPaddressforyouraccesspoint.
Select“DHCPClient”foryouraccesspointto
beassignedadynamicIPaddressfromyour
router’sDHCPserver,orselect“DHCPServer”
foryouraccesspointtoactasaDHCPserver
andassignIPaddressesonyourLAN.
StaticIPAddress
IPAddress SpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
139

EdimaxProNMS
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
255.255.255.0
DefaultGatewayForDHCPusers,select“FromDHCP”toget
defaultgatewayfromyourDHCPserveror
“User‐Defined”toenteragatewaymanually.
ForstaticIPusers,thedefaultvalueisblank.
PrimaryDNSForstaticIPusers,thedefaultvalueisblank.
Address
SecondaryDNS ForstaticIPusers,thedefaultvalueisblank.
Address
DHCPClient
IPAddressWhen“DHCPClient”isselectedthisvalue
cannotbemodified.
SubnetMaskWhen“DHCPClient”isselectedthisvalue
cannotbemodified.
DefaultGatewaySelect“FromDHCP”orselect“User‐Defined”
andenteradefaultgateway.
PrimaryDNSSelect“FromDHCP”orselect“User‐Defined”
AddressandenteraprimaryDNSaddress.
SecondaryDNS Select“FromDHCP”orselect“User‐Defined”
AddressandenterasecondaryDNSaddress.
140

EdimaxProNMS
DHCPServer
IPAddressSpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
255.255.255.0
IPAddressRangeEnterthestartandendIPaddressoftheIP
addressrangewhichyouraccesspoint’sDHCP
serverwillassigntodevicesonthenetwork.
DomainNameEnteradomainname.
LeaseTimeSelectaleasetimefromthedropdown
menu.IPaddresseswillbeassignedforthis
periodoftime.
DefaultGatewayEnteradefaultgateway.
PrimaryDNSEnteraprimaryDNSaddress.
Address
SecondaryDNS EnterasecondaryDNSaddress.
Address
Youraccesspoint’sDHCPservercanbeconfiguredtoassignstatic(fixed)IP
addressestospecifiednetworkdevices,identifiedbytheiruniqueMACaddress:
DHCPServerStaticIPAddress
MACAddress EntertheMACaddressofthenetworkdevice
tobeassignedastaticIPaddress.
141

EdimaxProNMS
IPAddressSpecifytheIPaddresstoassignthedevice.
AddClicktoassigntheIPaddresstothedevice.
IV‐6‐1‐2. LANPortSettings
The“LANPort”pageallowsyoutoconfigurethesettingsforyour
APControllerswiredLAN(Ethernet)ports.
WiredLANPortIdentifiesLANport1or2.
EnableEnable/disablespecifiedLANport.
Speed&DuplexSelectaspeed&duplextypeforspecifiedLAN
port,orusethe“Auto”value.LANportscan
operateupto1000Mbpsandfull‐duplex
enablessimultaneousdatapackets
transfer/receive.
FlowControlEnable/disableflowcontrol.Flowcontrolcan
pausenewsessionrequestuntilcurrentdata
processingiscomplete,inordertoavoid
deviceoverloadsunderheavytraffic.
802.3azEnable/disable802.3az.802.3azisanEnergy
EfficientEthernetfeaturewhichdisables
unusedinterfacestoreducepowerusage.
142

EdimaxProNMS
IV‐6‐1‐3. VLAN
The“VLAN”(VirtualLocalAreaNetwork)pageenablesyoutoconfigure
VLANsettings.AVLANisalocalareanetworkwhichmapsworkstations
virtuallyinsteadofphysicallyandallowsyoutogrouptogetherorisolate
usersfromeachother.VLANIDs1–4095aresupported.
VLANIDsintherange1–4095aresupported.
VLANInterface
WiredLANIdentifiesLANport1or2andwirelessSSIDs
Port/Wireless(2.4GHzor5GHz).
VLANModeSelect“TaggedPort”or“UntaggedPort”for
specifiedLANinterface.
VLANIDSetaVLANIDforspecifiedinterface,if
“UntaggedPort”isselected.
ManagementVLAN
VLANIDSpecifytheVLANIDofthemanagementVLAN.
OnlythehostsbelongingtothesameVLANcan
managethedevice.
143

EdimaxProNMS
IV‐6‐2.2.4GHz11bgn
The“2.4GHz11bgn”menuallowsyoutoviewandconfigureinformation
foryouraccesspoint’s2.4GHzwirelessnetworkacrossfourcategories:
Basic,Advanced,SecurityandWDS.
IV‐6‐2‐1. Basic
The“Basic”screendisplaysbasicsettingsforyouraccesspoint’s2.4GHzWi‐Fi
network(s).
Wireless Enableordisablethe accesspoint’s2.4GHz
wirelessradio.Whendisabled,no2.4GHz
SSIDswillbeactive.
Band Selectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11b,
802.11g&802.11ncanbeselected.
EnableSSID
Number Selecthow manySSIDstoenableforthe
2.4GHzfrequencyfromthedropdownmenu.
Amaximumof16canbeenabled.
SSID# EntertheSSIDnameforthespecifiedSSID(up
144

EdimaxProNMS
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s2.4GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannelSpecifyafrequencyforhowoftentheauto
Intervalchannelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:
ChannelSelectawirelesschannelfrom1
–
11.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
145

EdimaxProNMS
IV‐6‐2‐2. Advanced
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyof
thevaluesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
ContentionSlot Select“Short”or“Long”
–
thisvalueisusedfor
contentionwindowsinWMM(seeIV‐6‐7.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint, andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
146

EdimaxProNMS
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
FragmentSetthefragmentthresholdofthewireless
Thresholdradio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconInterval Setthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
StationidleSettheintervalforkeepalivemessagesfrom
timeouttheaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
147

EdimaxProNMS
IV‐6‐2‐3. Security
Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption).
Whendataisencrypted,informationtransmittedwirelesslycannotberead
byanyonewhodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthard‐to‐guesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
SSID SelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSID EnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWi‐Finetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWi‐Fi
networktoclients
–
clientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
WirelessClient Enableordisablewirelessclientisolation.
Isolation Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
148

EdimaxProNMS
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum 50).
AuthenticationSelectanauthenticationmethodfromthedrop
Methoddownmenuandrefertotheinformation
belowappropriateforyourmethod.
AdditionalSelectanadditionalauthenticationmethod
Authenticationfromthedropdownmenuandrefertothe
informationbelow(IV‐6‐2‐3‐6.)appropriatefor
yourmethod.
IV‐6‐2‐3‐1.NoAuthentication
Authenticationisdisabledandnopassword/keyisrequiredtoconnectto
theaccesspoint.
Disablingwirelessauthenticationisnotrecommended.When
disabled,anybodywithinrangecanconnecttoyourdevice’sSSID.
IV‐6‐2‐3‐2.WEP
WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Fora
higherlevelofsecurityconsiderusingWPAencryption.
KeyLengthSelect64‐bitor128‐bit. 128‐bitismoresecure
than64‐bitandisrecommended.
KeyTypeChoosefrom“ASCII”(anyalphanumerical
character0‐9,a‐zandA‐Z)or“Hex”(any
charactersfrom0‐9,a‐fandA‐F).
DefaultKeySelectwhichencryptionkey(1
–
4below)isthe
defaultkey.Forsecuritypurposes,youcanset
uptofourkeys(below)andchangewhichis
thedefaultkey.
EncryptionKey1
–
Enteryourencryptionkey/passwordaccording
4totheformatyouselectedabove.
149

EdimaxProNMS
IV‐6‐2‐3‐3.IEEE802.1x/EAP
KeyLengthSelect64‐bitor128‐bit.128‐bitismoresecure
than64‐bitandisrecommended.
IV‐6‐2‐3‐4.WPA‐PSK
WPA‐PSKisasecurewirelessencryptiontypewithstrongdata
protectionanduserauthentication,utilizing128‐bitencryptionkeys.
WPATypeSelectfromWPA/WPA2MixedMode‐PSK,
WPA2orWPAonly.WPA2issaferthanWPA
only,butnotsupportedbyallwirelessclients.
Pleasemakesureyourwirelessclientsupports
yourselection.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewalSpecifyafrequencyforkeyrenewalin
Intervalminutes.
Pre‐SharedKeyChoosefrom“Passphrase”(8
–
63
Typealphanumericcharacters)or“Hex”(upto64
charactersfrom0‐9,a‐fandA‐F).
Pre‐SharedKeyPleaseenterasecuritykey/passwordaccording
totheformatyouselectedabove.
IV‐6‐2‐3‐5.WPA‐EAP
WPATypeSelectfromWPA/WPA2MixedMode‐EAP,
WPA2‐EAPorWPA‐EAP.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewalSpecifyafrequencyforkeyrenewalin
Intervalminutes.
WPA‐EAPmustbedisabledtouseMAC‐RADIUSauthentication.
150

EdimaxProNMS
IV‐6‐2‐3‐6.AdditionalAuthentication
Additionalwirelessauthenticationmethodscanalsobeused:
MACAddressFilter
RestrictwirelessclientsaccessbasedonMACaddressspecifiedinthe
MACfiltertable.
SeeIV‐6‐6.MACFiltertoconfigureMACfiltering.
MACFilter&MAC‐RADIUSAuthentication
RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering
&RADIUSauthenticationmethods.
MAC‐RADIUSAuthentication
RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,
orpasswordauthenticationviaaRADIUSserver.
SeeIV‐6‐5.RADIUStoconfigureRADIUSservers.
WPSmustbedisabledtouseMAC‐RADIUSauthentication.See
IV‐6‐4.forWPSsettings.
MACRADIUSSelectwhethertouseMACaddressor
PasswordpasswordauthenticationviaRADIUSserver.If
youselect “Usethefollowingpassword”,enter
thepasswordinthefieldbelow.Thepassword
shouldmatchthe“SharedSecret”usedin
IV‐6‐5.RADIUS.
151

EdimaxProNMS
IV‐6‐2‐4. WDS
WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogether
inanextendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspoint
tobeinthesamesubnetandensurethereisonlyoneactive
DHCPserveramongconnectedaccesspoints,preferablyonthe
WANside.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
152

EdimaxProNMS
2.4GHz
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
WDS#EntertheMACaddressforuptofourother
WDSdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryptionmethod
EncryptionSelectwhethertouse“None”or“AES”encryptionand
enterapre‐sharedkeyforAESconsistingof8‐
63alphanumericcharacters.
153

EdimaxProNMS
IV‐6‐3. 5GHz11ac11an
The“5GHz11ac11an”menuallowsyoutoviewandconfigureinformation
foryouraccesspoint’s5GHzwirelessnetworkacrossfourcategories:Basic,
Advanced,SecurityandWDS.
IV‐6‐3‐1. Basic
The“Basic”screendisplaysbasicsettingsforyouraccesspoint’s5GHzWi‐
Finetwork(s).
Wireless Enableordisabletheaccesspoint’s5GHz
wirelessradio.Whendisabled,no5GHzSSIDs
willbeactive.
Band Selectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11a,
802.11n&802.11accanbeselected.
EnableSSID
Number SelecthowmanySSIDstoenableforthe5GHz
frequencyfromthedropdownmenu.A
maximumof16canbeenabled.
154

EdimaxProNMS
SSID#EntertheSSIDnameforthespecifiedSSID(up
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s5GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannelSpecifyafrequencyforhowoftentheauto
Intervalchannelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:
ChannelSelectawirelesschannel.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
155

EdimaxProNMS
IV‐6‐3‐2. Advanced
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyof
thevaluesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
GuardInterval Settheguardinterval.Ashorterintervalcan
improveperformance.
802.11nProtection Enable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriod SettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThreshold SettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment Setthefragmentthresholdofthewireless
Threshold radio.Thedefaultvalueis2346.
MulticastRate Setthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPower Setthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeable toaccessyoursignal.
156

EdimaxProNMS
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
StationidleSettheintervalforkeepalivemessagesfrom
timeouttheaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
157

EdimaxProNMS
IV‐6‐3‐3. Security
Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption).
Whendataisencrypted,informationtransmittedwirelesslycannotberead
byanyonewhodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthard‐to‐guesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
SSID SelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSID EnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWi‐Finetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWi‐Fi
networktoclients
–
clientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
WirelessClient Enableordisablewirelessclientisolation.
Isolation Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
158

EdimaxProNMS
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
AuthenticationSelectanauthenticationmethodfromthedrop
Methoddownmenuandrefertotheinformation
belowappropriateforyourmethod.
AdditionalSelectanadditionalauthenticationmethod
Authenticationfromthedropdownmenuandrefertothe
informationbelowappropriateforyour
method.
PleasereferbacktoIV‐6‐2‐3.Securityformoreinformationon
authenticationandadditionalauthenticationtypes.
159

EdimaxProNMS
IV‐6‐3‐4. WDS
WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogether
inanextendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspoint
tobeinthesamesubnetandensurethereisonlyoneactive
DHCPserveramongconnectedaccesspoints,preferablyonthe
WANside.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
5GHzWDSMode
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
160

EdimaxProNMS
WDS#EntertheMACaddressforuptofourother
WDAdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryption
EncryptionSelectwhethertouse“None”or“AES”
encryptionandenterapre‐sharedkeyforAES
with8‐63alphanumericcharacters.
161

EdimaxProNMS
IV‐6‐4.WPS
Wi‐FiProtectedSetupisasimplewaytoestablishconnectionsbetweenWPS
compatibledevices.WPScanbeactivatedoncompatibledevicesbypushinga
WPSbuttononthedeviceorfromwithinthedevice’sfirmware/configuration
interface(knownasPBCor“PushButtonConfiguration”).WhenWPSis
activatedinthecorrectmannerandatthecorrecttimefortwocompatible
devices,theywillautomaticallyconnect.“PINcodeWPS”isavariationofPBC
whichincludestheadditionaluseofaPINcodebetweenthetwodevicesfor
verification.
Pleaserefertomanufacturer’sinstructionsforyourotherWPS
device.
WPS Check/uncheckthisboxtoenable/disableWPS
functionality.WPSmustbedisabledwhen
usingMAC‐RADIUSauthentication(see
IV‐6‐2‐3‐6.&IV‐6‐5).
ProductPIN DisplaystheWPSPINcodeofthedevice,used
forPINcodeWPS.Youwillberequiredtoenter
thisPINcodeintoanotherWPSdeviceforPIN
codeWPS.Click“GeneratePIN”togeneratea
newWPSPINcode.
Push‐ButtonWPS Click“Start”toactivateWPSontheaccess
pointforapproximately2minutes.Thishasthe
sameeffectasphysicallypushingtheaccess
point’sWPSbutton.
WPSbyPIN EnterthePINcodeofanotherWPSdeviceand
click“Start”toattempttoestablishaWPS
connectionforapproximately2minutes.
162

EdimaxProNMS
WPSStatusWPSsecuritystatusisdisplayedhere.Click
“Release”tocleartheexistingstatus.
IV‐6‐5.RADIUS
TheRADIUSsubmenuallowsyoutoconfiguretheaccesspoint’sRADIUS
serversettings,categorizedintothreesubmenus:RADIUSsettings,
InternalServerandRADIUSaccounts.
ARADIUSserverprovidesuser‐basedauthenticationtoimprovesecurity
andofferwirelessclientcontrol–userscanbeauthenticatedbeforegaining
accesstoanetwork.
Theaccesspointcanutilizebothaprimaryandsecondary(backup)RADIUS
serverforeachofitswirelessfrequencies(2.4GHz&5GHz).ExternalRADIUS
serverscanbeusedortheaccesspoint’sinternalRADIUSservercanbeused.
TouseRADIUSservers,goto“LocalNetwork”
“Security”
“AdditionalAuthentication”andselect“MACRADIUS
Authentication”(seeIV‐6‐2‐3.&IV‐6‐3‐3).
163

EdimaxProNMS
IV‐6‐5‐1. RADIUSSettings
ConfiguretheRADIUSserversettingsfor2.4GHz&5GHz.Eachfrequency
canuseaninternalorexternalRADIUSserver.
164

EdimaxProNMS
RADIUSTypeSelect“Internal”tousetheaccesspoint’s
built‐inRADIUSserveror“external”tousean
externalRADIUSserver.
RADIUSServerEntertheRADIUSserverhostIPaddress.
AuthenticationSettheUDPportusedintheauthentication
PortprotocoloftheRADIUSserver.Valuemustbe
between1
–
65535.
SharedSecretEnterasharedsecret/passwordbetween1
–
99charactersinlength.Thisshouldmatchthe
“MAC‐RADIUS”passwordusedinIV‐3‐1‐3‐6or
IV‐3‐2‐3.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between0
–
86400.
AccountingEnableordisableRADIUSaccounting.
AccountingPortWhenaccountingisenabled(above),setthe
UDPportusedintheaccountingprotocolof
theRADIUSserver.Valuemustbebetween1
–
65535.
IV‐6‐5‐2. InternalServer
Theaccesspointfeaturesabuilt‐inRADIUSserverwhichcanbeconfiguredas
shownbelowusedwhen“Internal”isselectedfor“RADIUSType”inthe
“LocalNetwork”“RADIUSSettings”menu.
TouseRADIUSservers,goto“WirelessSettings”
“Security”
“AdditionalAuthentication”andselect“MACRADIUS
Authentication”(seeIV‐6‐2‐3.&IV‐6‐3‐3).
165

EdimaxProNMS
InternalServerCheck/unchecktoenable/disabletheaccess
point’sinternalRADIUSserver.
EAPInternalSelectEAPinternalauthenticationtypefrom
Authenticationthedropdownmenu.
EAPCertificateFileDisplaystheEAPcertificatefileformat:
FormatPCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaself‐made
certificate.
SharedSecretEnterasharedsecret/passwordforuse
betweentheinternalRADIUSserverand
RADIUSclient.Thesharedsecretshouldbe1
–
99charactersinlength.Thisshouldmatchthe
“MAC‐RADIUS”passwordusedinIV‐6‐2‐3‐6or
IV‐6‐3‐3.
SessionTimeout Setadurationofsessiontimeoutinseconds
between0
–
86400.
TerminationActionSelectatermination‐actionattribute:
“Reauthentication”sendsaRADIUSrequestto
theaccesspoint,“Not‐Reathentication”sends
adefaulttermination‐actionattributetothe
accesspoint,“Not‐Send”no
termination‐actionattributeissenttothe
accesspoint.
166

EdimaxProNMS
IV‐6‐5‐3. RADIUSAccounts
TheinternalRADIUSservercanauthenticateupto256useraccounts.
The“RADIUSAccounts”pageallowsyoutoconfigureandmanageusers.
UserName Entertheusernameshere,separatedby
commas.
Add Click“Add”toaddtheusertotheuser
registrationlist.
Reset Cleartextfromtheusernamebox.
Select Checktheboxtoselectauser.
UserName Displaystheusername.
Password Displaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured).
Customize Click“Edit”toopenanewfieldtoset/edita
passwordforthespecifiedusername(below).
167

EdimaxProNMS
DeleteSelected Deleteselecteduserfromtheuserregistration
list.
DeleteAllDeleteallusersfromtheuserregistrationlist.
EditUserRegistrationList
UserNameExistingusernameisdisplayedhereandcan
beeditedaccordingtoyourpreference.
PasswordEnteroreditapasswordforthespecifieduser.
168

EdimaxProNMS
IV‐6‐6.MACFilter
Macfilteringisasecurityfeaturethatcanhelptopreventunauthorized
usersfromconnectingtoyouraccesspoint.
Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto
connecttotheaccesspoint.Devicesareeachidentifiedbytheirunique
MACaddress.IfadevicewhichisnotonthelistofpermittedMAC
addressesattemptstoconnecttotheaccesspoint,itwillbedenied.
ToenableMACfiltering,goto“LocalSettings”
“Security”
“AdditionalAuthentication”andselect“MACFilter”(seeIV‐6‐2‐3.
& IV‐6‐3‐3).
TheMACaddressfilteringtableisdisplayedbelow:
AddMACAddressEnteraMACaddressofcomputerornetwork
devicemanuallye.g.‘aa‐bb‐cc‐dd‐ee‐ff’or
entermultipleMACaddressesseparatedwith
169

EdimaxProNMS
commas,e.g.
‘aa‐bb‐cc‐dd‐ee‐ff,aa‐bb‐cc‐dd‐ee‐gg’
AddClick“Add”toaddtheMACaddresstothe
MACaddressfilteringtable.
ResetClearallfields.
MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.
Selectanentryusingthe“Select”checkbox.
SelectDeleteselectedorallentriesfromthetable.
MACAddressTheMACaddressislistedhere.
DeleteSelectedDeletetheselectedMACaddressfromthe
list.
DeleteAllDeleteallentriesfromtheMACaddress
filteringtable.
ExportClick“Export”tosaveacopyoftheMAC
filteringtable.Anewwindowwillpopupfor
youtoselectalocationtosavethefile.
170

EdimaxProNMS
IV‐6‐7.WMM
Wi‐FiMultimedia(WMM)isaWi‐FiAllianceinteroperabilitycertification
basedontheIEEE802.11estandard,whichprovidesQualityofService(QoS)
featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofour
categories:background,besteffort,videoandvoice.
ConfiguringWMMconsistsofadjustingparametersonqueuesfordifferent
categoriesofwirelesstraffic.Trafficissenttothefollowingqueues:
BackgroundLow Highthroughput,nontimesensitivebulk
Prioritydatae.g.FTP
BestEffortMediumTraditionalIPdata,mediumthroughputand
Prioritydelay.
VideoHigh Timesensitivevideodatawithminimum
Prioritytime delay.
VoiceHigh TimesensitivedatasuchasVoIPand
Prioritystreamingmediawithminimumtimedelay.
Queuesautomaticallyprovideminimumtransmissiondelaysforvideo,voice,
multimediaandcriticalapplications.Thevaluescanfurtherbeadjusted
manually:
CWMinMinimumContentionWindow(milliseconds):
Thisvalueisinputtotheinitialrandom
backoffwaittimealgorithmforretryofadata
frametransmission.Thebackoffwaittimewill
171

EdimaxProNMS
begeneratedbetween0andthisvalue.Ifthe
frameisnotsent,therandombackoffvalueis
doubleduntilthevaluereachesthenumber
definedbyCWMax(below).TheCWMinvalue
mustbelowerthantheCWMaxvalue.The
contentionwindowschemehelpstoavoid
framecollisionsanddeterminepriorityof
frametransmission.Ashorterwindowhasa
higherprobability(priority)oftransmission.
CWMaxMaximumContentionWindow(milliseconds):
Thisvalueistheupperlimittorandom
backoffvaluedoubling(seeabove).
AIFSNArbitrationInter‐FrameSpace(milliseconds):
Specifiesadditionaltimebetweenwhena
channelgoesidleandtheAP/clientsends
dataframes.TrafficwithalowerAIFSNvalue
hasahigherpriority.
TxOPTransmissionOpportunity(milliseconds):The
maximumintervaloftimeanAP/clientcan
transmit.Thismakeschannelaccessmore
efficientlyprioritized.Avalueof0meansonly
oneframepertransmission.Agreatervalue
effectshigherpriority.
172

EdimaxProNMS
IV‐7.LocalSettings
IV‐7‐1.OperationMode
Settheoperationmodeoftheaccesspoint.APmodeisastandaloneaccess
point,APcontrollermodeactsasthedesignatedmasteroftheAParray,
andManagedAPmodeactsasaslaveAPwithintheAParray.
IV‐7‐2.NetworkSettings
IV‐7‐2‐1. SystemInformation
The“SystemInformation”pagedisplaysbasicsysteminformationabout
theaccesspoint.
173

EdimaxProNMS
System
Model Displaysthemodelnumberoftheaccess
point.
ProductName Displaystheproductnameforreference,
whichconsistsof“AP”plustheMACaddress.
Uptime Displaysthetotaltimesincethedevicewas
turnedon.
BootFrom Displaysinformationforthebooted
hardware,bootedfromeitherUSBorinternal
memory.
Version Displaysthefirmwareversion.
MACAddress Displaystheaccesspoint’sMACaddress.
ManagementVLAN DisplaysthemanagementVLANID.
ID
IPAddress DisplaystheIPaddressofthisdevice.Click
“Refresh”toupdatethisvalue.
Default DisplaystheIPaddressofthedefault
Gateway gateway.
DNS IPaddressofDNS(DomainNameServer)
DHCPServer IPaddressofDHCPServer.
WiredLANPortSettings
WiredLANPort SpecifieswhichLANport(1or2).
Status DisplaysthestatusofthespecifiedLANport
(connectedordisconnected).
174

EdimaxProNMS
VLANMode/IDDisplaystheVLANmode(taggedoruntagged)
andVLANIDforthespecifiedLANport.See
IV‐6‐1‐3.VLAN
Wireless2.4GHz(5GHz)
StatusDisplaysthestatusofthe2.4GHzor5GHz
wireless(enabledordisabled).
MACAddressDisplaystheaccesspoint’sMACaddress.
ChannelDisplaysthechannelnumberthespecified
wirelessfrequencyisusingforbroadcast.
TransmitPower Displaysthewirelessradiotransmitpower
levelasapercentage.
Wireless2.4GHZ(5GHz)/SSID
SSIDDisplaystheSSIDname(s)forthespecified
frequency.
AuthenticationDisplaystheauthenticationmethodforthe
MethodspecifiedSSID.SeeIV‐6.WirelessSettings
EncryptionType Displaystheencryptiontypeforthespecified
SSID.SeeIV‐6.WirelessSettings
VLANIDDisplaystheVLANIDforthespecifiedSSID.
SeeIV‐6‐1‐3.VLAN
AdditionalDisplaystheadditionalauthenticationtypefor
AuthenticationthespecifiedSSID.SeeIV‐6.WirelessSettings
WirelessClientDisplayswhetherwirelessclientisolationisin
IsolationuseforthespecifiedSSID.SeeIV‐6‐1‐3.VLAN
Wireless2.4GHZ(5GHz)/WDSStatus
MACAddressDisplaysthepeeraccesspoint’sMACaddress.
EncryptionType Displaystheencryptiontypeforthespecified
WDS.SeeIV‐6‐2‐4.WDS
VLANMode/IDDisplaystheVLANIDforthespecifiedWDS.
SeeIV‐6‐2‐4.WDS
RefreshClicktorefreshallinformation.
175

EdimaxProNMS
IV‐7‐2‐2. WirelessClients
The“WirelessClients”pagedisplaysinformationaboutallwireless
clientsconnectedtotheaccesspointonthe2.4GHzor5GHzfrequency.
Refreshtime
AutoRefreshTime Selectatimeintervalfortheclienttablelistto
automaticallyrefresh.
ManualRefresh Clickrefreshtomanuallyrefreshtheclient
table.
2.4GHz(5GHz)WLANClientTable
SSID DisplaystheSSIDwhichtheclientis
connectedto.
MACAddress DisplaystheMACaddressoftheclient.
Tx Displaysthetotaldatapacketstransmittedby
thespecifiedclient.
Rx Displaysthetotaldatapacketsreceivedby
thespecifiedclient.
Signal(%) Displaysthewirelesssignalstrengthforthe
specifiedclient.
ConnectedTime Displaysthetotaltimethewirelessclienthas
beenconnectedtotheaccesspoint.
IdleTime Clientidletimeisthetimeforwhichtheclient
hasnottransmittedanydatapacketsi.e.is
idle.
Vendor Thevendoroftheclient’swirelessadapteris
displayedhere.
176

EdimaxProNMS
IV‐7‐2‐3. WirelessMonitor
WirelessMonitorisatoolbuiltintotheaccesspointtoscanandmonitorthe
surroundingwirelessenvironment.Selectafrequencyandclick“Scan”to
displayalistofallSSIDswithinrangealongwithrelevantdetailsforeachSSID.
WirelessMonitor
SiteSurveySelectwhichfrequency(orboth)toscan,and
click“Scan”tobegin.
ChannelSurvey Afterascaniscomplete,click“Export”tosave
Resulttheresultstolocalstorage.
SiteSurveyResults
ChDisplaysthechannelnumberusedbythe
specifiedSSID.
SSIDDisplaystheSSIDidentifiedbythescan.
MACAddressDisplaystheMACaddressofthewireless
router/accesspointforthespecifiedSSID.
SecurityDisplaystheauthentication/encryptiontype
ofthespecifiedSSID.
Signal(%)Displaysthecurrentsignalstrengthofthe
SSID.
TypeDisplaysthe802.11wirelessnetworking
standard(s)ofthespecifiedSSID.
VendorDisplaysthevendorofthewireless
router/accesspointforthe specifiedSSID.
177

EdimaxProNMS
IV‐7‐2‐4.Log
Thesystemlogdisplayssystemoperationinformationsuchasuptimeand
connectionprocesses.Thisinformationisusefulfornetworkadministrators.
Whenthelogisfull,oldentriesareoverwritten.
SaveClicktosavethelogasafileonyourlocal
computer.
ClearClearalllogentries.
RefreshRefreshthecurrentlog.
178

EdimaxProNMS
Thefollowinginformation/eventsarerecordedbythelog:
USB
Mount&unmount
WirelessClientConnected&
disconnectedKeyexchange
success&fail
Authentication
Authenticationfailorsuccessful.
Association
Successorfail
WPS
M1‐M8messages
WPSsuccess
ChangeSettings
SystemBoot
Displayscurrentmodelname
NTPClient
WiredLink
LANPortlinkstatusandspeedstatus
ProxyARP
ProxyARPmodulestart&stop
Bridge
Bridgestart&stop.
SNMP
SNMPserverstart&stop.
HTTP
HTTPstart&stop.
HTTPS
HTTPSstart&stop.
SSH
SSH‐clientserverstart&stop.
Telnet
Telnet‐clientserverstartorstop.
WLAN(2.4G)
WLAN(2.4G]channelstatusandcountry/regionstatus
WLAN(5G)
WLAN(5G)channelstatusandcountry/regionstatus
ADT
179

EdimaxProNMS
IV‐7‐3.Management
IV‐7‐3‐1. Admin
Youcanchangethepasswordusedtologintothebrowser‐based
configurationinterfacehere.Itisadvisedtodosoforsecuritypurposes.
Ifyouchangetheadministratorpassword,pleasemakeanote
ofthenewpassword.Intheeventthatyouforgetthis
passwordandareunabletologintothebrowserbased
configurationinterface,seeIV‐7‐4‐4.FactoryDefaultforhow
toresettheaccesspoint.
AccounttoManageThisDevice
AdministratorSettheaccesspoint’sadministratorname.
NameThisisusedtologintothebrowserbased
configurationinterfaceandmustbebetween
4‐16alphanumericcharacters(casesensitive).
AdministratorSettheaccesspoint’sadministratorpassword.
PasswordThisisusedtologintothebrowserbased
configurationinterfaceandmustbebetween
4‐32alphanumericcharacters(casesensitive).
180

EdimaxProNMS
AdvancedSettings
ProductNameEdittheproductnameaccordingtoyour
preferenceconsistingof1‐32alphanumeric
characters.Thisnameisusedforreference
purposes.
ManagementCheck/unchecktheboxestoenable/disable
Protocolspecifiedmanagementinterfaces(seebelow).
WhenSNMPisenabled,completetheSNMP
fieldsbelow.
SNMPVersionSelectSNMPversionappropriateforyour
SNMPmanager.
SNMPGetEnteranSNMPGetCommunitynamefor
CommunityverificationwiththeSNMPmanagerfor
SNMP‐GETrequests.
SNMPSetEnteranSNMPSetCommunitynamefor
CommunityverificationwiththeSNMPmanagerfor
SNMP‐SETrequests.
SNMPTrapEnableordisableSNMPTraptonotifySNMP
managerofnetworkerrors.
SNMPTrapEnteranSNMPTrapCommunitynamefor
CommunityverificationwiththeSNMPmanagerfor
SNMP‐TRAPrequests.
SNMPTrapSpecifytheIPaddressorsevername(2‐128
Manageralphanumericcharacters)oftheSNMP
manager.
HTTP
InternetbrowserHTTPprotocolmanagementinterface
HTTPS
InternetbrowserHTTPSprotocolmanagementinterface
TELNET
Clientterminalwithtelnetprotocolmanagementinterface
SSH
ClientterminalwithSSHprotocolversion1or2managementinterface
SNMP
SimpleNetworkManagementProtocol.SNMPv1,v2&v3protocolsupported.
SNMPv2canbeusedwithcommunitybasedauthentication.SNMPv3uses
user‐basedsecuritymodel(USM)architecture.
181

EdimaxProNMS
IV‐7‐3‐2. DateandTime
Youcanconfigurethetimezonesettingsofyouraccesspointhere.The
dateandtimeofthedevicecanbeconfiguredmanuallyorcanbe
synchronizedwithatimeserver.
DateandTimeSettings
LocalTime Settheaccesspoint’sdateandtimemanually
usingthedropdownmenus.
AcquireCurrent Click“AcquireCurrentTimefromYourPC”to
TimefromyourPC
entertherequiredvaluesautomatically
accordingtoyourcomputer’scurrenttimeand
date.
NTPTimeServer
UseNTP TheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddate
setup.
ServerName EnterthehostnameorIPaddressofthetime
serverifyouwish.
UpdateInterval Specifyafrequency(inhours)fortheaccess
pointtoupdate/synchronizewiththeNTP
server.
TimeZone
TimeZone Selectthetimezoneofyour country/region.If
182

EdimaxProNMS
yourcountry/regionisnotlisted,pleaseselect
anothercountry/regionwhosetimezoneisthe
sameasyours.
IV‐7‐3‐3. SyslogServer
Thesystemlogcanbesenttoaserver,attachedtoUSBstorageorsent
viaemail.
SyslogServerSettings
TransferLogs Check/unchecktheboxtoenable/disablethe
useofasyslogserver,andenterahost
name,domainorIPaddressfortheserver,
consistingofupto128 alphanumeric
characters.
CopyLogsto Check/unchecktheboxtoenable/disable
AttachedUSBDevicecopyinglogstoattachedUSBstorage.
SyslogEmailSettings
EmailLogs Check/unchecktheboxtoenable/disableemail
logs.Whenenabled,thelogwillbeemailed
accordingtothesettingsbelow.
EmailSubject Enterthesubjectlineoftheemailwhichwillbe
sentcontainingthelog.
SMTPServer SpecifytheSMTPserveraddressforthesender
Address emailaccount.
SMTPServerPort SpecifytheSMTPserverportforthesender
emailaccount.
183

EdimaxProNMS
SenderEmailEnterthesender’semailaddress.
ReceiverEmailSpecifytheemailrecipientofthelog.
AuthenticationSelect“Disable”,“SSL”or“TLS”accordingto
youremailauthentication.
AccountWhenauthenticationisusedabove,enterthe
accountname.
PasswordWhenauthenticationisusedabove,enterthe
password.
IV‐7‐3‐4. I’mHere
Theaccesspointfeaturesabuilt‐inbuzzerwhichcansoundoncommand
usingthe“I’mHere”page.Thisisusefulfornetworkadministratorsand
engineersworkingincomplexnetworkenvironmentstolocatethe
accesspoint.
Thebuzzerisloud!
DurationofSoundSetthedurationforwhichthebuzzerwill
soundwhenthe“SoundBuzzer”buttonis
clicked.
SoundBuzzerActivatethebuzzersoundfortheabove
specifieddurationoftime.
184

EdimaxProNMS
IV‐7‐4.Advanced
Wi‐FiMultimedia(WMM)isaWi‐FiAllianceinteroperabilitycertification
basedontheIEEE802.11estandard,whichprovidesQualityofService(QoS)
featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofour
categories:background,besteffort,videoandvoice.
IV‐7‐4‐1. LEDSettings
Theaccesspoint’sLEDscanbemanuallyenabledordisabledaccording
toyourpreference.
PowerLEDSelectonoroff.
DiagLEDSelectonoroff.
IV‐7‐4‐2. UpdateFirmware
The“Firmware”pageallowsyoutoupdatethesystemfirmwaretoamore
recentversion.Updatedfirmwareversionsoftenofferincreased
performanceandsecurity,aswellasbugfixes.Youcandownloadthelatest
firmwarefromtheEdimaxwebsite.
Thisfirmwareupdateisforanindividualaccesspoint.To
updatefirmwareformultipleaccesspointsintheAParray,
gotoNMSSettings
FirmwareUpgrade.
185

EdimaxProNMS
Donotswitchoffordisconnecttheaccesspointduringa
firmwareupgrade,asthiscoulddamagethedevice.
UpdateFirmwareSelect“afileonyourPC”touploadfirmware
Fromfromyourlocalcomputerorfroman
attachedUSBdevice.
FirmwareUpdateFileClick“Browse”toopenanewwindowto
locateandselectthefirmwarefileinyour
computer.
UpdateClick“Update”touploadthespecified
firmwarefiletoyouraccesspoint.
186

EdimaxProNMS
IV‐7‐4‐3. Save/RestoreSettings
Theaccesspoint’s“Save/RestoreSettings”pageenablesyoutosave/backup
theaccesspoint’scurrentsettingsasafiletoyourlocalcomputeroraUSB
deviceattachedtotheaccesspoint,andrestoretheaccesspointto
previouslysavedsettings.
Save/RestoreSettings
UsingDeviceSelect“UsingyourPC”tosavetheaccess
point’ssettingstoyourlocalcomputerorto
anattachedUSBdevice.
SaveSettingstoPC
SaveSettingsClick“Save”tosavesettingsandanew
windowwillopentospecifyalocationto
savethesettingsfile.Youcanalsocheckthe
“Encrypttheconfigurationfilewitha
password”boxandenterapasswordto
protectthefileinthefieldunderneath,ifyou
wish.
RestoreSettingsfromPC
RestoreSettings Clickthebrowsebuttontofindapreviously
savedsettingsfileonyourcomputer,then
click“Restore”toreplaceyourcurrent
settings.Ifyoursettingsfileisencryptedwith
apassword,checkthe“Openfilewith
187

EdimaxProNMS
password”boxandenterthepasswordin
thefieldunderneath.
IV‐7‐4‐4. FactoryDefault
Iftheaccesspointmalfunctionsorisnotresponding,thenitis
recommendedthatyourebootthedevice(seeIV‐7‐4‐5.)orresetthedevice
backtoitsfactorydefaultsettings.Youcanresettheaccesspointbacktoits
defaultsettingsusingthisfeatureifthelocationoftheaccesspointisnot
convenienttoaccesstheresetbutton.
FactoryDefault Click“FactoryDefault”torestoresettingsto
thefactorydefault.Apop‐upwindowwill
appearandaskyoutoconfirm.
Afterresettingtofactorydefaults,pleasewaitfortheaccess
pointtoresetandrestart.
IV‐7‐4‐5. Reboot
Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommended
thatyourebootthedeviceorresettheaccesspointbacktoitsfactory
defaultsettings(seeIV‐7‐4‐4).Youcanreboottheaccesspointremotely
usingthisfeature.
RebootClick“Reboot”torebootthedevice.A
countdownwillindicatetheprogressofthe
reboot.
188

EdimaxProNMS
IV‐8.Toolbox
IV‐8‐1. NetworkConnectivity
IV‐8‐1‐1. Ping
Pingisacomputernetworkadministrationutilityusedtotestwhether
aparticularhostisreachableacrossanIPnetworkandtomeasurethe
round‐triptimeforsentmessages.
DestinationAddressEntertheaddressofthehost.
Execute Clickexecutetopingthehost.
IV‐8‐1‐2.TraceRoute
Tracerouteisadiagnostictoolfordisplayingtheroute(path)and
measuringtransitdelaysofpacketsacrossanIPnetwork.
DestinationAddressEntertheaddressofthehost.
ExecuteClickexecutetoexecutethetraceroute
command.
189

V.Appendix
V‐1. ConfiguringyourIPaddress
TheaccesspointusesthedefaultIPaddress192.168.2.2.Inordertoaccess
thebrowserbasedconfigurationinterface,youneedtomodifytheIPaddress
ofyourcomputertobeinthesameIPaddresssubnete.g.192.168.2.x(x=
3–254).
TheprocedureformodifyingyourIPaddressvariesacrossdifferentoperating
systems;pleasefollowtheguideappropriateforyouroperatingsystem.
InthefollowingexamplesweusetheIPaddress192.168.2.10thoughyou
canuseanyIPaddressintherange192.168.2.x(x=3–254).
IfyouchangedtheAPController’sIPaddress,orifyour
gateway/routerusesaDHCPserver,ensureyouenterthecorrect
IPaddress.Refertoyourgateway/router’ssettings.Your
computer’sIPaddressmustbeinthesamesubnetastheAP
Controller.
IfusingaDHCPserveronthenetwork,itisadvisedtouseyour
DHCPserver’ssettingstoassigntheAPControllerastaticIP
address.
190

V‐1‐1. WindowsXP
1.Clickthe“Start”button(itshouldbelocatedinthelower‐leftcornerof
yourcomputer),thenclick“ControlPanel”.Double‐clickthe“Networkand
InternetConnections”icon,click“NetworkConnections”,andthendouble‐
click“LocalAreaConnection”.The“LocalAreaConnectionStatus”window
willthenappear,click“Properties”.
2.Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
191

192

V‐1‐2. WindowsVista
1.Clickthe“Start”button(itshouldbelocatedinthelower‐leftcornerofyour
computer),thenclick“ControlPanel”.Click“ViewNetworkStatusandTasks”,
thenclick“ManageNetworkConnections”.Right‐click“LocalAreaNetwork”,
thenselect“Properties”.The“LocalAreaConnectionProperties”windowwill
thenappear,select“InternetProtocolVersion4(TCP/IPv4)”,andthenclick
“Properties”.
2.Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
193

194