Edimax Technology Co 9574791704 AC1300 DBDC Ceiling-mount AP User Manual 2

Edimax Technology Co Ltd AC1300 DBDC Ceiling-mount AP 2

User Manual-2

EdimaxProNMS
IV3.ZONEPLAN
TheZonePlancanbefullycustomizedtomatchyournetworkenvironment.
YoucanmovetheAPiconsandselectdifferentlocationimages(upload
locationimagesinNMSSettingsZoneEdit)tocreateavisualmapofyour
AParray.
Usethemenuontherightsidetomakeadjustmentsandmouseoveran
APiconinthezonemaptoseemoreinformation.ClickanAPiconinthe
zonemaptoselectitanddisplayactionicons:
95
EdimaxProNMS
ClickanddraganAPicontomovetheiconaroundthezonemap.Thesignal
strengthforeachAPisdisplayedaccordingtothe“Signal”keyinthemenu
ontherightside:
Location Selectapredefinedlocationfromthedrop
downmenu.Whenyouuploadalocation
imageinNMSSettings
ZoneEdit,itwillbe
availableforselectionhere.
APGroup YoucanselectanAPGrouptodisplayinthe
zonemap.EditAPGroupsinNMSSettings
AccessPoint.
Search UsethesearchboxtoquicklylocateanAP.
Radio UsethecheckboxestodisplayAPsaccording
to2.4GHzor5GHzwirelessradiofrequency.
Signal Signalstrengthkeyforthesignalstrength
displayaroundeachAPinthezonemap.
Zoom Usetheslidertoadjustthezoomlevelofthe
map.
Transparency Usetheslidertoadjustthetransparencyof
locationimages.
Scale Zonemapscale.
Device/Number Displaysnumberandtypeof devicesinthe
zonemap.
96
EdimaxProNMS
IV4.NMSMONITOR
IV41.AccessPoint
IV411. ManagedAP
DisplaysinformationabouteachManagedAPinthelocalnetwork:Index
(referencenumber),MACAddress,DeviceName,Model,IPAddress,2.4GHz&
5GHzWirelessChannelNumber,No.ofClientsconnectedtoeachaccesspoint,
andStatus(connected,connectingordisconnected).
ThesearchfunctioncanbeusedtolocateaspecificManagedAP.Typein
thesearchboxandthelistwillupdate:
TheStatusicondisplaysthestatusofeachManagedAP.
StatusIcons
Icon
Color
StatusDefinition
ManagedAPisdisconnected.Please
Grey
Disconnectedcheckthenetworkconnectionandensure
theManagedAPisinthesameIPsubnet
astheAPController.
Authentication Systemsecuritymustbethesameforall
FailedaccesspointsintheAParray.Please
checksecuritysettings(refertoIV581.
Red
Or
S
ystemSecurity).
IncompatibleAccesspointsmustusethesameversion
ofEdimaxNMS:themanagedAPwillnot
NMSVersion
beabletomakeconfigurations.Please
97
EdimaxProNMS
usetheAPController’sfirmwareupgrade
f
unction(refertoIV57.Firmware
Upgrade).
ConfiguringorPleasewaitwhiletheManagedAPmakes
OrangeUpgradingconfigurationsorwhilethefirmwareis
upgrading.
PleasewaitwhileManagedAPis
YellowConnectingconnecting.
ManagedAPisconnected.
Green
Connected
ManagedAPiswaitingforapproval.
RefertoIV51.AccessPoint:Auto
Blue
Waitingfor
A
pprova
l
.Note:EightManagedAPsare
Approvalsupported.AdditionalAPswilldisplaythis
statusuntilanexistingManagedAPis
removed.
EachManagedAPhasActioniconswiththefollowingfunctions:
1. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
1. Edit
EditvarioussettingsfortheManagedAP(refertoIV51.AccessPoint).
2. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&
locateaccesspoints.
3. Buzzer
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&
locateaccesspoints.
4. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
98
EdimaxProNMS
5. Restart
RestartstheManagedAP.
IV412. ManagedAPGroup
ManagedAPscanbegroupedaccordingtoyourrequirements.ManagedAP
GroupdisplaysinformationabouteachManagedAPgroupinthelocalnetwork:
GroupName,MACAddress,DeviceName,Model,IPAddress,2.4GHz
& 5GHzWirelessChannelNumber,No.ofClientsconnectedtoeach
accesspoint,andStatus(connectedordisconnected).
ToeditManagedAPGroupsgotoNMSSettingsAccessPoint(refertoIV51.
AccessPoint).
ThesearchfunctioncanbeusedtolocateaspecificManagedAPGroup.
Typeinthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),red(authentication
failed/incompatibleNMSversion),orange(upgradingfirmware),yellow
(connecting),green(connected)orblue(waitingforapproval)foreach
individualManagedAP.RefertoIV411.ManagedAP:StatusIconsforfull
descriptions.
EachManagedAPhasActioniconswiththefollowingfunctions:
2. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
99
EdimaxProNMS
3. Edit
EditvarioussettingsfortheManagedAP(refertoIV51.AccessPoint).
4. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&
locateaccesspoints.
5. Buzzer
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&
locateaccesspoints.
6. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
7. Restart
RestartstheManagedAP.
100
EdimaxProNMS
IV42.WLAN
IV421. ActiveWLAN
DisplaysinformationabouteachSSIDintheAPArray:Index(reference
number),Name/SSID,VLANID,Authentication,Encryption,IPAddress
andAdditionalAuthentication.
ToconfigureencryptionandVLANsforManagedAPsgotoNMSSettingsWLAN.
ThesearchfunctioncanbeusedtolocateaspecificSSID.Typeinthe
searchboxandthelistwillupdate:
101
EdimaxProNMS
IV422. ActiveWLANGroup
WLANgroupscanbecreatedaccordingtoyourpreference.ActiveWLAN
GroupdisplaysinformationaboutWLANgroup:GroupName,Name/SSID,
VLANID,Authentication,Encryption,IPAddressandAdditional
Authentication.
ThesearchfunctioncanbeusedtolocateaspecificActiveWLANGroup.
Typeinthesearchboxandthelistwillupdate:
IV43.Clients
IV431. ActiveClients
DisplaysinformationaboutclientscurrentlyconnectedtotheAPArray:Index
(referencenumber),ClientMACAddress,APMACAddress,WLAN(SSID),
Radio(2.4GHzor5GHz),SignalStrengthreceivedbyClient,ConnectedTime,
IdleTime,Tx&Rx(DatatransmittedandreceivedbyClientinKB),andthe
Vendoroftheclientdevice.
Youcansetordisabletheautorefreshtimefortheclientlistor
click“Refresh”tomanuallyrefresh.
Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthe
searchboxandthelistwillupdate:
102
EdimaxProNMS
IV44.RogueDevices
Rogueaccesspointdetectioncanidentifyanyunauthorizedaccess
pointswhichmayhavebeeninstalledinthenetwork.
Click“Start”toscanforroguedevices:
UnknownRogueDevicesdisplaysinformationaboutroguedevices
discoveredduringthescan:Index(referencenumber),Channel,SSID,MAC
Address,Security,SignalStrength,Type,VendorandAction.
Thesearchfunctioncanbeusedtolocateaknownroguedevice.Typein
thesearchboxandthelistwillupdate:
103
EdimaxProNMS
IV45.Information
IV451. AllEvents/Activities
DisplaysalogoftimestampedeventsforeachaccesspointintheArray
usethedropdownmenutoselectanaccesspointandviewthelog.
104
EdimaxProNMS
IV452. Monitoring
DisplaysgraphicalmonitoringinformationaboutaccesspointsintheArray
for2.4GHz&5GHz:TrafficTx(datatransmittedinMB),TrafficRx(data
receivedinMB),No.ofClients,WirelessChannel,TxPower(wirelessradio
power),CPUUsageandMemoryUsage.
Usethedropdownmenustoselectanaccesspointanddate.
Youcansetordisabletheautorefreshtimeforthedata:
105
EdimaxProNMS
IV5.NMSSettings
IV51.AccessPoint
Displaysinformationabouteachaccesspointandaccesspointgroupin
thelocalnetworkandallowsyoutoeditaccesspointsandeditoradd
accesspointgroups.
Thesearchfunctioncanbeusedtolocateanaccesspointoraccess
pointgroup.Typeinthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),red(authentication
failed/incompatibleNMSversion),orange(upgradingfirmware),yellow
(connecting),green(connected)orblue(waitingforapproval)foreach
individualManagedAP.RefertoIV411.ManagedAP:StatusIconsforfull
descriptions.
The“Action”iconsenableyoutoallowordisallowanaccesspoint:
106
EdimaxProNMS
Selectanaccesspointoraccesspointgroupusingthe
checkboxesandclickEdittomakeconfigurations,orclick
Addtoaddanewaccesspointgroup:
TheAccessPointSettingspanelcanenableordisableAuto
ApproveforallManagedAPs.Whenenabled,ManagedAPswillautomatically
jointheAPArraywiththeControllerAP.Whendisabled,ManagedAPsmustbe
manuallyapprovedtojointheAPArraywiththeControllerAP.
AccessPointSettings
AutoApproveEnableordisableAutoApproveforall
ManagedAPs.
TomanuallyapproveaManagedAP,usetheallow“Action”iconfor
thespecifiedaccesspoint:
EditAccessPoint
ConfigureyourselectedaccesspointonyourLAN.Youcansettheaccess
pointasaDHCPclientorspecifyastaticIPaddressforyouraccesspoint,and
assigntheaccesspointtoanAPgroup,aswellasedit2.4GHz&5GHz
wirelessradiosettings.Aneventslogisdisplayedatthebottomofthepage.
YoucanalsouseProfileSettingstoassigntheaccesspointtoWLAN,Guest
Network,RADIUSandAccessControlgroupsindependentlyfromAccess
PointGroupsettings.
ChecktheOverrideGroupSettingsboxtousedifferentindividual
settingsforaccesspointsassignedtoAPGroups:
107
EdimaxProNMS
BasicSettings
Name Edittheaccesspointname.Thedefaultname
isAP+MAC address.
Description Enteradescriptionoftheaccesspointfor
referencee.g.2
nd
FloorOffice.
MACAddress DisplaysMACaddress.
APGroup UsethedropdownmenutoassigntheAPto
anAPGroup.YoucaneditAPGroupsfrom
theNMSSettings
AccessPointpage.
IPAddress Select“DHCPClient”foryouraccesspointto
Assignment beassignedadynamicIPaddressfromyour
router’sDHCPserver,orselect“StaticIP”to
manuallyspecifyastatic/fixedIPaddressfor
youraccesspoint (below).Checkthebox
“OverrideGroupSetting”iftheAPisa
memberofanAPGroupandyouwishtouse
adifferentsettingthantheAPGroupsetting.
IPAddress SpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
replacethedefaultIPaddress.
SubnetMask Specifyasubnetmask.Thedefaultvalueis
255.255.255.0
108
EdimaxProNMS
DefaultGatewayForDHCPusers,select“FromDHCP”toget
defaultgatewayfromyourDHCPserveror
“UserDefined”toenteragatewaymanually.
ForstaticIPusers,thedefaultvalueisblank.
PrimaryDNSDHCPuserscanselect“FromDHCP”toget
primaryDNSserver’sIPaddressfromDHCPor
“UserDefined”tomanuallyenteravalue.For
staticIPusers,thedefaultvalueisblank.
SecondaryDNS DHCPuserscanselect“FromDHCP”toget
secondaryDNSserver’sIPaddressfromDHCP
or“UserDefined”tomanuallyenteravalue.
ForstaticIPusers,thedefaultvalueisblank.
RadioSettings
Wireless Enableordisabletheaccesspoint’s2.4GHzor
5GHzwirelessradio.Whendisabled,noSSIDs
onthatfrequencywillbeactive.
Band Selectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11b,
802.11g,802.11n&802.11accanbeselected.
AutoPilot Enable/disableautochannelselection.Auto
109
EdimaxProNMS
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s2.4GHz
or5GHzfrequencybasedonavailabilityand
potentialinterference.Whendisabled,select
achannelmanually.
AutoPilotRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoPilotIntervalSpecifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidthoruseAuto
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyof
thevaluesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
AdvancedSettings
ContentionSlot Select“Short”or“Long”
this valueisusedfor
contentionwindowsinWMM(seeIV67.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
110
EdimaxProNMS
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
FragmentSetthefragmentthresholdofthewireless
Thresholdradio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconInterval Setthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
StationidleSettheintervalforkeepalivemessagesfrom
timeouttheaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
ProfileSettings
WLANGroup Assigntheaccesspoint’s2.4GHzor5GHz
111
EdimaxProNMS
SSID(s)toaWLANGroup.YoucaneditWLAN
groupsinNMSSettings
WLAN.
GuestNetwork Assigntheaccesspoint’s2.4GHzor5GHz
GroupSSID(s)toaGuestNetworkGroup.Youcan
editGuestNetworkgroupsinNMSSettings
GuestNetwork.
RADIUSGroupAssigntheaccesspoint’s2.4GHzSSID(s)toa
RADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettings
RADIUS.
AccessControlAssigntheaccesspoint’s2.4GHzSSID(s)toa
GroupRADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettings
AccessControl
112
EdimaxProNMS
Add/EditAccessPointGroup
Configureyourselectedaccesspointgroup.Accesspointgroupsettings
applytoallaccesspointsinthegroup,unlessindividuallysettooverride
groupsettings.
YoucanuseProfileGroupSettingstoassigntheaccesspointgrouptoWLAN,
GuestNetwork,RADIUSandAccessControlgroups.
TheGroupSettingspanelcanbeusedtoquicklymoveaccesspointsbetween
exsitinggroups:selectanaccesspointandusethedropdownmenuor
searchtoselectaccesspointgroupsanduse<<and>>arrowstomoveAPs
betweengroups.
BasicGroupSettings
NameEdittheaccesspointgroupname.
DescriptionEnteradescriptionoftheaccesspointgroup
forreferencee.g.2
nd
FloorOfficeGroup.
113
EdimaxProNMS
RadioGroupSettings
WirelessEnableordisabletheaccesspointgroup’s
2.4GHzor5GHzwirelessradio.When
disabled,noSSIDsonthatfrequencywillbe
active.
BandSelectthewirelessstandardusedforthe
accesspointgroup.Combinationsof802.11b,
802.11g,802.11n&802.11accanbeselected.
AutoPilotEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspointgroup’s
2.4GHzor5GHzfrequencybasedon
availabilityandpotentialinterference.When
disabled,selectachannelmanually.
AutoPilotRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoPilotIntervalSpecifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidthoruseAuto
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyof
thevaluesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoints.
AdvancedSettings
ContentionSlotSelect“Short”or“Long”thisvalueisusedfor
contentionwindowsinWMM(seeIV67.
WMM).
114
EdimaxProNMS
PreambleType Setthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardInterval Settheguardinterval.Ashorterintervalcan
improveperformance.
802.11gProtection Enable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
802.11nProtection Enable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
access point,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriod SettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThreshold SettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment Setthefragmentthresholdofthewireless
Threshold radio.Thedefaultvalueis2346.
MulticastRate Setthetransferrateformulticastpacketsor
usethe“Auto” setting.
TxPower Setthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconInterval Setthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle Settheintervalforkeepalivemessagesfrom
timeout theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
115
EdimaxProNMS
ProfileGroupSettings
WLANGroupAssigntheaccesspointgroup’s2.4GHzor
5GHzSSIDstoaWLANGroup.Youcanedit
WLANgroupsinNMSSettings
WLAN.
GuestNetwork Assigntheaccesspointgroup’s2.4GHzor
Group5GHzSSIDstoaGuestNetworkGroup.You
caneditGuestNetworkgroupsinNMS
Settings
GuestNetwork.
RADIUSGroupAssigntheaccesspointgroup’s2.4GHzSSIDs
toaRADIUSgroup.YoucaneditRADIUS
groupsinNMSSettings
RADIUS.
AccessControlAssigntheaccesspoint’s2.4GHzSSIDstoa
GroupRADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettings
AccessControl.
116
EdimaxProNMS
IV52.WLAN
DisplaysinformationabouteachWLANandWLANgroupinthelocalnetwork
andallowsyoutoaddoreditWLANs&WLANGroups.WhenyouaddaWLAN
Group,itwillbeavailableforselectioninNMSSettingsAccessPointaccess
pointProfileSettings&accesspointgroupProfileGroupSettings(IV51.)
ThesearchfunctioncanbeusedtolocateaWLANorWLANGroup.Type
inthesearchboxandthelistwillupdate:
SelectaWLANorWLANGroupusingthecheckboxesand
clickEditorclickAddtoaddanewWLANorWLAN
Group:
117
EdimaxProNMS
Add/EditWLAN
WLANSettings
Name/ESSID EdittheWLANname(SSID).
Description EnteradescriptionoftheSSIDforreference
e.g.2
nd
FloorOfficeHR.
SSID SelectwhichSSIDtoconfiguresecurity
settingsfor.
VLANID SpecifytheVLANID.
BroadcastSSID EnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsas
anavailableWiFinetwork.Whendisabled,
theSSIDwillnotbevisibleasanavailable
WiFinetworktoclients
clientsmust
manuallyentertheSSIDinordertoconnect.
Ahidden(disabled)SSIDistypicallymore
securethanavisible(enabled)SSID.
WirelessClient Enableordisablewirelessclientisolation.
Isolation Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattackson
118
EdimaxProNMS
clients’usernamesandpasswords.
LoadBalancing Loadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication Selectanauthenticationmethodfromthe
Methoddropdownmenu.
AdditionalSelectanadditionalauthenticationmethod
Authentication fromthedropdownmenu.
Varioussecurityoptions(wirelessdataencryption)areavailable.Whendata
isencrypted,informationtransmittedwirelesslycannotbereadbyanyone
whodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthardtoguesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
PleaserefertoIV623.Securityformoreinformationonauthentication
andadditionalauthenticationtypes.
WLANAdvancedSettings
SmartHandoverEnableordisableSmartHandover.
RSSIThresholdSetaRSSIThresholdlevel.
119
EdimaxProNMS
Add/EditWLANGroup
WhenyouaddaWLANGroup,itwillbeavailableforselectioninNMSSettings
AccessPointaccesspointProfileSettings&accesspointgroupProfileGroup
Settings(IV51.)
WLANGroupSettings
NameEdittheWLANGroupname.
DescriptionEnteradescriptionoftheWLANGroupfor
referencee.g.2
nd
FloorOfficeHRGroup.
MembersSelectSSIDstoincludeinthegroupusingthe
checkboxesandassignVLANIDs.
120
EdimaxProNMS
IV53.RADIUS
DisplaysinformationaboutExternal&InternalRADIUSServers,Accounts
andGroupsandallowsyoutoaddoreditRADIUSServers,Accounts&
Groups.WhenyouaddaRADIUSGroup,itwillbeavailableforselectionin
NMSSettingsAccessPointaccesspointProfileSettings&accesspoint
groupProfileGroupSettings(IV51.)
ThesearchfunctioncanbeusedtolocateaRADIUSServer,AccountorGroup.
Typeinthesearchboxandthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEdit
orclickAddtoaddanewWLANorWLANGroup:
121
EdimaxProNMS
Add/EditExternalRADIUSServer
NameEnteranamefortheRADIUSServer.
DescriptionEnteradescriptionoftheRADIUSServerfor
reference.
RADIUSServerEntertheRADIUSserverhostIPaddress.
AuthenticationSettheUDPportusedintheauthentication
PortprotocoloftheRADIUSserver.Valuemustbe
between1
65535.
SharedSecretEnterasharedsecret/passwordbetween1
99charactersinlength.Thisshouldmatchthe
“MACRADIUS”passwordusedinIV3136or
IV323.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between0
86400.
AccountingEnableordisableRADIUSaccounting.
AccountingPortWhenaccountingisenabled(above),setthe
UDPportusedintheaccountingprotocolof
theRADIUSserver.Valuemustbebetween1
65535.
122
EdimaxProNMS
Add/EditInternalRADIUSServer
UploadEAPCertificateFile
EAPCertificateFileDisplaystheEAPcertificatefileformat:
FormatPCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaselfmade
certificate.
InternalRADIUSServer
Name EnteranamefortheInternalRADIUSServer.
Description EnteradescriptionoftheInternalRADIUS
Serverforreference.
EAPCertificateFile DisplaystheEAPcertificatefileformat:
Format PCK#12(*.pfx/*.p12)
EAPCertificateFile Click“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaselfmade
certificate.
EAPInternal SelectEAPinternalauthenticationtypefrom
Authentication thedropdownmenu.
123
EdimaxProNMS
SharedSecretEnterasharedsecret/passwordforuse
betweentheinternalRADIUSserverand
RADIUSclient.Thesharedsecretshouldbe1
99charactersinlength.
SessionTimeout Setadurationofsessiontimeoutinseconds
between0
86400.
TerminationActionSelectaterminationactionattribute:
“Reauthentication”sendsaRADIUSrequestto
theaccesspoint,“NotReathentication”sends
adefaultterminationactionattributetothe
accesspoint,“NotSend”no
terminationactionattributeissenttothe
accesspoint.
Add/EditRADIUSAccounts
TheinternalRADIUSservercanauthenticateupto256useraccounts.
The“RADIUSAccounts”pageallowsyoutoconfigureandmanageusers.
124
EdimaxProNMS
RADIUSAccounts
UserName Entertheusernameshere,separatedby
commas.
Add Click“Add”toaddtheusertotheuser
registrationlist.
Reset Cleartextfromtheusernamebox.
UserRegistrationList
Select Checktheboxtoselectauser.
UserName Displaystheusername.
Password Displaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured).
Customize Click“Edit”toopenanewfieldtoset/edita
passwordforthespecifiedusername(below).
DeleteSelected Deleteselecteduserfromtheuserregistration
list.
DeleteAll Deleteallusersfromtheuserregistrationlist.
EditUserRegistrationList
UserNameExistingusernameisdisplayedhereandcan
beeditedaccordingtoyourpreference.
PasswordEnteroreditapasswordforthespecifieduser.
125
EdimaxProNMS
Add/EditRADIUSGroup
WhenyouaddaRADIUSGroup,itwillbeavailableforselectioninNMSSettings
AccessPointaccesspointProfileSettings&accesspointgroupProfileGroup
Settings(IV51.)
RADIUSGroupSettings
GroupNameEdittheRADIUSGroupname.
DescriptionEnteradescriptionoftheRADIUSGroupfor
reference.
2.4GHzRADIUS Enable/Disableprimary&secondaryRADIUS
serversfor2.4GHz.
5GHzRADIUSEnable/Disableprimary&secondaryRADIUS
serversfor5GHz.
MembersAddRADIUSuseraccountstotheRADIUS
group.
126
EdimaxProNMS
IV54.AccessControl
MACAccessControlisasecurityfeaturethatcanhelptoprevent
unauthorizedusersfromconnectingtoyouraccesspoint.
Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto
connecttotheaccesspoint.Devicesareeachidentifiedbytheirunique
MACaddress.IfadevicewhichisnotonthelistofpermittedMAC
addressesattemptstoconnecttotheaccesspoint,itwillbedenied.
TheAccessControlpaneldisplaysinformationaboutMACAccessControl&
MACAccessControlGroupsandGroupsandallowsyoutoaddoreditMAC
AccessControl&MACAccessControlGroupsettings.Whenyouaddan
AccessControlGroup,itwillbeavailableforselectioninNMSSettings
AccessPointaccesspointProfileSettings&accesspointgroupProfile
GroupSettings(IV51.)
ThesearchfunctioncanbeusedtolocateaMACaddressorMAC
AccessControlGroup.Typeinthesearchboxandthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEditor
clickAddtoaddanewMACAddressorMACAccess
ControlGroup:
127
EdimaxProNMS
Add/EditMACAccessControl
AddMACAddressEnteraMACaddressofcomputerornetwork
devicemanuallye.g.‘aabbccddeeff’or
entermultipleMACaddressesseparatedwith
commas,e.g.
‘aabbccddeeff,aabbccddeegg’
AddClick“Add”toaddtheMACaddresstothe
MACaddressfilteringtable.
ResetClearallfields.
MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.
Selectanentryusingthe“Select”checkbox.
SelectDeleteselectedorallentriesfromthetable.
MACAddressTheMACaddressislistedhere.
DeleteSelectedDeletetheselectedMACaddressfromthe
list.
DeleteAllDeleteallentriesfromtheMACaddress
filteringtable.
ExportClick“Export”tosaveacopyoftheMAC
filteringtable.Anewwindowwillpopupfor
youtoselectalocationtosavethefile.
128
EdimaxProNMS
Add/EditMACAccessControlGroup
WhenyouaddanAccessControlGroup,itwillbeavailableforselectioninNMS
SettingsAccessPointaccesspointProfileSettings&accesspointgroup
ProfileGroupSettings(IV51.)
MACFilterGroupSettings
GroupNameEdittheMACAccessControlGroupname.
DescriptionEnteradescriptionoftheMACAccessControl
Groupforreference.
ActionSelect“Blacklist”todenyaccesstospecified
MACaddresses inthegroup,andselect
“Whitelist”topermitaccesstospecifiedMAC
addressinthegroup.
MembersAddMACaddressestothegroup.
129
EdimaxProNMS
IV55.GuestNetwork
Youcansetupanadditional“Guest”WiFinetworksoguestuserscan
enjoyWiFiconnectivitywithoutaccessingyourprimarynetworks.The
“Guest”screendisplayssettingsforyourguestWiFinetwork.
TheGuestNetworkpaneldisplaysinformationaboutGuestNetworksand
GuestNetworkGroupsandallowsyoutoaddoreditGuestNetworkand
GuestNetworkGroupsettings.WhenyouaddaGuestNetworkGroup,itwill
beavailableforselectioninNMSSettingsAccessPointaccesspoint
ProfileSettings&accesspointgroupProfileGroupSettings(IV51.)
ThesearchfunctioncanbeusedtolocateaGuestNetworkorGuest
NetworkGroup.Typeinthesearchboxandthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEditor
clickAddtoaddanewGuestNetworkorGuest
NetworkGroup.
130
EdimaxProNMS
Add/EditGuestNetwork
GuestNetworkSettings
Name/ESSID EdittheGuestNetworkname(SSID).
Description EnteradescriptionoftheGuestNetworkfor
referencee.g.2
nd
FloorOfficeHR.
VLANID SpecifytheVLANID.
BroadcastSSID EnableordisableSSIDbroadcast.When
enabled,theSSIDwill bevisibletoclientsas
anavailableWiFinetwork.Whendisabled,
theSSIDwillnotbevisibleasanavailable
WiFinetworktoclients
clientsmust
manuallyentertheSSIDinordertoconnect.
Ahidden(disabled)SSIDistypicallymore
securethanavisible(enabled)SSID.
WirelessClient Enableordisablewirelessclientisolation.
Isolation Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattackson
131
EdimaxProNMS
clients’usernamesandpasswords.
LoadBalancing Loadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
WMMEnableordisableWMM(WiFiMultimedia)
trafficprioritizing.
Authentication Selectanauthenticationmethodfromthe
Methoddropdownmenu.
AdditionalSelectanadditionalauthenticationmethod
Authentication fromthedropdownmenu.
Varioussecurityoptions(wirelessdataencryption)areavailable.Whendata
isencrypted,informationtransmittedwirelesslycannotbereadbyanyone
whodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthardtoguesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
PleaserefertoIV623.Securityformoreinformationonauthentication
andadditionalauthenticationtypes.
GuestAccessPolicy
TrafficShapingEnableordisabletrafficshapingfortheguest
network.
DownlinkEnteradownlinklimitinMB.
UplinkEnteranuplinklimitinMB.
IPFilteringSelect“Deny”or“Allow”todenyorallow
specifiedIPaddressestoaccesstheguest
network.Select“Disable”todisableIP
filtering.
RulesEnterIPaddressestobefilteredaccordingto
theDenyorAllowrulespecifiedaboveand
checktheboxforeachIPaddresstobe
filtered.
132
EdimaxProNMS
Add/EditGuestNetworkGroup
WhenyouaddaGuestNetworkGroup,itwillbeavailableforselectioninNMS
SettingsAccessPointaccesspointProfileSettings&accesspointgroup
ProfileGroupSettings(IV51.)
GuestNetworkGroupSettings
GroupNameEdittheGuestNetworkGroupname.
DescriptionEnteradescriptionoftheGuestNetworkfor
reference.
MembersAddSSIDstotheGuestNetworkgroup.
133
EdimaxProNMS
IV56.ZoneEdit
ZoneEditdisplaysinformationaboutzonesforusewiththeZonePlan
featureandallowsyoutoaddoreditzones.
Thesearchfunctioncanbeusedtofindexistingzones.Typeinthesearch
boxandthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEdit
orclickAddtoaddanewzone.
134
EdimaxProNMS
Add/EditZone
UploadZoneImage
ChooseFileClicktolocateanimagefiletobedisplayedas
amapintheZonePlanfeature.Typicallya
floorplanimageisuseful.
ZoneSetting
Name/Location Enteranameofthezone/location.
DescriptionEnteradescriptionofthezone/locationfor
reference.
MembersAssignaccesspointstothespecified
zone/locationforusewiththeZonePlan
feature.
135
EdimaxProNMS
IV57.FirmwareUpgrade
FirmwareUpgradeallowsyoutoupgradefirmwaretoAccessPointGroups.
First,uploadthefirmwarefilefromalocaldiskorexternalFTPserver:
locatethefileandclick“Upload”or“Check”.Thetablebelowwilldisplay
theFirmwareName,FirmwareVersion,NMSVersion,ModelandSize.
Thenclick“UpgradeAll”toupgradeallaccesspointsintheArrayorselect
AccessPointgroupsfromthelistusingcheckboxesandclick“Upgrade
Selected”toupgradeonlyselectedaccesspoints.
136
EdimaxProNMS
IV58.Advanced
IV581. SystemSecurity
ConfiguretheNMSsystemloginnameandpassword.
IV582. Date&Time
Configurethedate&timesettingsoftheAPArray.Thedateandtimeofthe
accesspointscanbeconfiguredmanuallyorcanbesynchronizedwitha
timeserver.
DateandTimeSettings
LocalTime Settheaccesspoint’sdateandtimemanually
usingthedropdownmenus.
AcquireCurrent Click“AcquireCurrentTimefromYourPC”to
TimefromyourPC
entertherequiredvaluesautomatically
accordingtoyourcomputer’scurrenttimeand
date.
137
EdimaxProNMS
NTPTimeServer
UseNTPTheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddate
setup.
ServerNameEnterthehostnameorIPaddressofthetime
serverifyouwish.
UpdateInterval Specifyafrequency(inhours)fortheaccess
pointtoupdate/synchronizewiththeNTP
server.
TimeZone
TimeZoneSelectthetimezoneofyourcountry/region.If
yourcountry/regionisnotlisted,pleaseselect
anothercountry/regionwhosetimezoneisthe
sameasyours.
138
EdimaxProNMS
IV6.LocalNetwork
IV61.NetworkSettings
IV611. LANSideIPAddress
The“LANsideIPaddress”pageallowsyoutoconfigureyourAPController
onyourLocalAreaNetwork(LAN).Youcanenabletheaccesspointto
dynamicallyreceiveanIPaddressfromyourrouter’sDHCPserveroryoucan
specifyastaticIPaddressforyouraccesspoint,aswellasconfigureDNS
servers.YoucanalsosetyourAPControllerasaDHCPservertoassignIP
addressestootherdevicesonyourLAN.
Theaccesspoint’sdefaultIPaddressis192.168.2.2
DisableotherDHCPserversontheLANifusingAPControllers
DHCPServer.
LANsideIPAddress
IPAddress Select“StaticIP”tomanuallyspecifya
Assignment static/fixedIPaddressforyouraccesspoint.
Select“DHCPClient”foryouraccesspointto
beassignedadynamicIPaddressfromyour
router’sDHCPserver,orselect“DHCPServer”
foryouraccesspointtoactasaDHCPserver
andassignIPaddressesonyourLAN.
StaticIPAddress
IPAddress SpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
139
EdimaxProNMS
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
255.255.255.0
DefaultGatewayForDHCPusers,select“FromDHCP”toget
defaultgatewayfromyourDHCPserveror
“UserDefined”toenteragatewaymanually.
ForstaticIPusers,thedefaultvalueisblank.
PrimaryDNSForstaticIPusers,thedefaultvalueisblank.
Address
SecondaryDNS ForstaticIPusers,thedefaultvalueisblank.
Address
DHCPClient
IPAddressWhen“DHCPClient”isselectedthisvalue
cannotbemodified.
SubnetMaskWhen“DHCPClient”isselectedthisvalue
cannotbemodified.
DefaultGatewaySelect“FromDHCP”orselect“UserDefined”
andenteradefaultgateway.
PrimaryDNSSelect“FromDHCP”orselect“UserDefined”
AddressandenteraprimaryDNSaddress.
SecondaryDNS Select“FromDHCP”orselect“UserDefined”
AddressandenterasecondaryDNSaddress.
140
EdimaxProNMS
DHCPServer
IPAddressSpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
255.255.255.0
IPAddressRangeEnterthestartandendIPaddressoftheIP
addressrangewhichyouraccesspoint’sDHCP
serverwillassigntodevicesonthenetwork.
DomainNameEnteradomainname.
LeaseTimeSelectaleasetimefromthedropdown
menu.IPaddresseswillbeassignedforthis
periodoftime.
DefaultGatewayEnteradefaultgateway.
PrimaryDNSEnteraprimaryDNSaddress.
Address
SecondaryDNS EnterasecondaryDNSaddress.
Address
Youraccesspoint’sDHCPservercanbeconfiguredtoassignstatic(fixed)IP
addressestospecifiednetworkdevices,identifiedbytheiruniqueMACaddress:
DHCPServerStaticIPAddress
MACAddress EntertheMACaddressofthenetworkdevice
tobeassignedastaticIPaddress.
141
EdimaxProNMS
IPAddressSpecifytheIPaddresstoassignthedevice.
AddClicktoassigntheIPaddresstothedevice.
IV612. LANPortSettings
The“LANPort”pageallowsyoutoconfigurethesettingsforyour
APControllerswiredLAN(Ethernet)ports.
WiredLANPortIdentifiesLANport1or2.
EnableEnable/disablespecifiedLANport.
Speed&DuplexSelectaspeed&duplextypeforspecifiedLAN
port,orusethe“Auto”value.LANportscan
operateupto1000Mbpsandfullduplex
enablessimultaneousdatapackets
transfer/receive.
FlowControlEnable/disableflowcontrol.Flowcontrolcan
pausenewsessionrequestuntilcurrentdata
processingiscomplete,inordertoavoid
deviceoverloadsunderheavytraffic.
802.3azEnable/disable802.3az.802.3azisanEnergy
EfficientEthernetfeaturewhichdisables
unusedinterfacestoreducepowerusage.
142
EdimaxProNMS
IV613. VLAN
The“VLAN”(VirtualLocalAreaNetwork)pageenablesyoutoconfigure
VLANsettings.AVLANisalocalareanetworkwhichmapsworkstations
virtuallyinsteadofphysicallyandallowsyoutogrouptogetherorisolate
usersfromeachother.VLANIDs14095aresupported.
VLANIDsintherange14095aresupported.
VLANInterface
WiredLANIdentifiesLANport1or2andwirelessSSIDs
Port/Wireless(2.4GHzor5GHz).
VLANModeSelect“TaggedPort”or“UntaggedPort”for
specifiedLANinterface.
VLANIDSetaVLANIDforspecifiedinterface,if
“UntaggedPort”isselected.
ManagementVLAN
VLANIDSpecifytheVLANIDofthemanagementVLAN.
OnlythehostsbelongingtothesameVLANcan
managethedevice.
143
EdimaxProNMS
IV62.2.4GHz11bgn
The“2.4GHz11bgn”menuallowsyoutoviewandconfigureinformation
foryouraccesspoint’s2.4GHzwirelessnetworkacrossfourcategories:
Basic,Advanced,SecurityandWDS.
IV621. Basic
The“Basic”screendisplaysbasicsettingsforyouraccesspoint’s2.4GHzWiFi
network(s).
Wireless Enableordisablethe accesspoint’s2.4GHz
wirelessradio.Whendisabled,no2.4GHz
SSIDswillbeactive.
Band Selectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11b,
802.11g&802.11ncanbeselected.
EnableSSID
Number Selecthow manySSIDstoenableforthe
2.4GHzfrequencyfromthedropdownmenu.
Amaximumof16canbeenabled.
SSID# EntertheSSIDnameforthespecifiedSSID(up
144
EdimaxProNMS
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s2.4GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannelSpecifyafrequencyforhowoftentheauto
Intervalchannelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:
ChannelSelectawirelesschannelfrom1
11.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
145
EdimaxProNMS
IV622. Advanced
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyof
thevaluesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
ContentionSlot Select“Short”or“Long”
thisvalueisusedfor
contentionwindowsinWMM(seeIV67.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint, andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
146
EdimaxProNMS
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
FragmentSetthefragmentthresholdofthewireless
Thresholdradio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconInterval Setthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
StationidleSettheintervalforkeepalivemessagesfrom
timeouttheaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
147
EdimaxProNMS
IV623. Security
Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption).
Whendataisencrypted,informationtransmittedwirelesslycannotberead
byanyonewhodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthardtoguesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
SSID SelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSID EnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWiFinetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWiFi
networktoclients
clientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
WirelessClient Enableordisablewirelessclientisolation.
Isolation Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
148
EdimaxProNMS
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum 50).
AuthenticationSelectanauthenticationmethodfromthedrop
Methoddownmenuandrefertotheinformation
belowappropriateforyourmethod.
AdditionalSelectanadditionalauthenticationmethod
Authenticationfromthedropdownmenuandrefertothe
informationbelow(IV6236.)appropriatefor
yourmethod.
IV6231.NoAuthentication
Authenticationisdisabledandnopassword/keyisrequiredtoconnectto
theaccesspoint.
Disablingwirelessauthenticationisnotrecommended.When
disabled,anybodywithinrangecanconnecttoyourdevice’sSSID.
IV6232.WEP
WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Fora
higherlevelofsecurityconsiderusingWPAencryption.
KeyLengthSelect64bitor128bit. 128bitismoresecure
than64bitandisrecommended.
KeyTypeChoosefrom“ASCII”(anyalphanumerical
character09,azandAZ)or“Hex”(any
charactersfrom09,afandAF).
DefaultKeySelectwhichencryptionkey(1
4below)isthe
defaultkey.Forsecuritypurposes,youcanset
uptofourkeys(below)andchangewhichis
thedefaultkey.
EncryptionKey1
Enteryourencryptionkey/passwordaccording
4totheformatyouselectedabove.
149
EdimaxProNMS
IV6233.IEEE802.1x/EAP
KeyLengthSelect64bitor128bit.128bitismoresecure
than64bitandisrecommended.
IV6234.WPAPSK
WPAPSKisasecurewirelessencryptiontypewithstrongdata
protectionanduserauthentication,utilizing128bitencryptionkeys.
WPATypeSelectfromWPA/WPA2MixedModePSK,
WPA2orWPAonly.WPA2issaferthanWPA
only,butnotsupportedbyallwirelessclients.
Pleasemakesureyourwirelessclientsupports
yourselection.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewalSpecifyafrequencyforkeyrenewalin
Intervalminutes.
PreSharedKeyChoosefrom“Passphrase”(8
63
Typealphanumericcharacters)or“Hex”(upto64
charactersfrom09,afandAF).
PreSharedKeyPleaseenterasecuritykey/passwordaccording
totheformatyouselectedabove.
IV6235.WPAEAP
WPATypeSelectfromWPA/WPA2MixedModeEAP,
WPA2EAPorWPAEAP.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewalSpecifyafrequencyforkeyrenewalin
Intervalminutes.
WPAEAPmustbedisabledtouseMACRADIUSauthentication.
150
EdimaxProNMS
IV6236.AdditionalAuthentication
Additionalwirelessauthenticationmethodscanalsobeused:
MACAddressFilter
RestrictwirelessclientsaccessbasedonMACaddressspecifiedinthe
MACfiltertable.
SeeIV66.MACFiltertoconfigureMACfiltering.
MACFilter&MACRADIUSAuthentication
RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering
&RADIUSauthenticationmethods.
MACRADIUSAuthentication
RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,
orpasswordauthenticationviaaRADIUSserver.
SeeIV65.RADIUStoconfigureRADIUSservers.
WPSmustbedisabledtouseMACRADIUSauthentication.See
IV64.forWPSsettings.
MACRADIUSSelectwhethertouseMACaddressor
PasswordpasswordauthenticationviaRADIUSserver.If
youselect “Usethefollowingpassword”,enter
thepasswordinthefieldbelow.Thepassword
shouldmatchthe“SharedSecret”usedin
IV65.RADIUS.
151
EdimaxProNMS
IV624. WDS
WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogether
inanextendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspoint
tobeinthesamesubnetandensurethereisonlyoneactive
DHCPserveramongconnectedaccesspoints,preferablyonthe
WANside.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
152
EdimaxProNMS
2.4GHz
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
WDS#EntertheMACaddressforuptofourother
WDSdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryptionmethod
EncryptionSelectwhethertouse“None”or“AES”encryptionand
enterapresharedkeyforAESconsistingof8
63alphanumericcharacters.
153
EdimaxProNMS
IV63. 5GHz11ac11an
The“5GHz11ac11an”menuallowsyoutoviewandconfigureinformation
foryouraccesspoint’s5GHzwirelessnetworkacrossfourcategories:Basic,
Advanced,SecurityandWDS.
IV631. Basic
The“Basic”screendisplaysbasicsettingsforyouraccesspoint’s5GHzWi
Finetwork(s).
Wireless Enableordisabletheaccesspoint’s5GHz
wirelessradio.Whendisabled,no5GHzSSIDs
willbeactive.
Band Selectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11a,
802.11n&802.11accanbeselected.
EnableSSID
Number SelecthowmanySSIDstoenableforthe5GHz
frequencyfromthedropdownmenu.A
maximumof16canbeenabled.
154
EdimaxProNMS
SSID#EntertheSSIDnameforthespecifiedSSID(up
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s5GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannelSpecifyafrequencyforhowoftentheauto
Intervalchannelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:
ChannelSelectawirelesschannel.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
155
EdimaxProNMS
IV632. Advanced
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyof
thevaluesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
GuardInterval Settheguardinterval.Ashorterintervalcan
improveperformance.
802.11nProtection Enable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriod SettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThreshold SettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment Setthefragmentthresholdofthewireless
Threshold radio.Thedefaultvalueis2346.
MulticastRate Setthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPower Setthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeable toaccessyoursignal.
156
EdimaxProNMS
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
StationidleSettheintervalforkeepalivemessagesfrom
timeouttheaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
157
EdimaxProNMS
IV633. Security
Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption).
Whendataisencrypted,informationtransmittedwirelesslycannotberead
byanyonewhodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthardtoguesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
SSID SelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSID EnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWiFinetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWiFi
networktoclients
clientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
WirelessClient Enableordisablewirelessclientisolation.
Isolation Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
158
EdimaxProNMS
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
AuthenticationSelectanauthenticationmethodfromthedrop
Methoddownmenuandrefertotheinformation
belowappropriateforyourmethod.
AdditionalSelectanadditionalauthenticationmethod
Authenticationfromthedropdownmenuandrefertothe
informationbelowappropriateforyour
method.
PleasereferbacktoIV623.Securityformoreinformationon
authenticationandadditionalauthenticationtypes.
159
EdimaxProNMS
IV634. WDS
WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogether
inanextendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspoint
tobeinthesamesubnetandensurethereisonlyoneactive
DHCPserveramongconnectedaccesspoints,preferablyonthe
WANside.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
5GHzWDSMode
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
160
EdimaxProNMS
WDS#EntertheMACaddressforuptofourother
WDAdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryption
EncryptionSelectwhethertouse“None”or“AES”
encryptionandenterapresharedkeyforAES
with863alphanumericcharacters.
161
EdimaxProNMS
IV64.WPS
WiFiProtectedSetupisasimplewaytoestablishconnectionsbetweenWPS
compatibledevices.WPScanbeactivatedoncompatibledevicesbypushinga
WPSbuttononthedeviceorfromwithinthedevice’sfirmware/configuration
interface(knownasPBCor“PushButtonConfiguration”).WhenWPSis
activatedinthecorrectmannerandatthecorrecttimefortwocompatible
devices,theywillautomaticallyconnect.“PINcodeWPS”isavariationofPBC
whichincludestheadditionaluseofaPINcodebetweenthetwodevicesfor
verification.
Pleaserefertomanufacturer’sinstructionsforyourotherWPS
device.
WPS Check/uncheckthisboxtoenable/disableWPS
functionality.WPSmustbedisabledwhen
usingMACRADIUSauthentication(see
IV6236.&IV65).
ProductPIN DisplaystheWPSPINcodeofthedevice,used
forPINcodeWPS.Youwillberequiredtoenter
thisPINcodeintoanotherWPSdeviceforPIN
codeWPS.Click“GeneratePIN”togeneratea
newWPSPINcode.
PushButtonWPS Click“Start”toactivateWPSontheaccess
pointforapproximately2minutes.Thishasthe
sameeffectasphysicallypushingtheaccess
point’sWPSbutton.
WPSbyPIN EnterthePINcodeofanotherWPSdeviceand
click“Start”toattempttoestablishaWPS
connectionforapproximately2minutes.
162
EdimaxProNMS
WPSStatusWPSsecuritystatusisdisplayedhere.Click
“Release”tocleartheexistingstatus.
IV65.RADIUS
TheRADIUSsubmenuallowsyoutoconfiguretheaccesspoint’sRADIUS
serversettings,categorizedintothreesubmenus:RADIUSsettings,
InternalServerandRADIUSaccounts.
ARADIUSserverprovidesuserbasedauthenticationtoimprovesecurity
andofferwirelessclientcontroluserscanbeauthenticatedbeforegaining
accesstoanetwork.
Theaccesspointcanutilizebothaprimaryandsecondary(backup)RADIUS
serverforeachofitswirelessfrequencies(2.4GHz&5GHz).ExternalRADIUS
serverscanbeusedortheaccesspoint’sinternalRADIUSservercanbeused.
TouseRADIUSservers,goto“LocalNetwork”
“Security”
“AdditionalAuthentication”andselect“MACRADIUS
Authentication”(seeIV623.&IV633).
163
EdimaxProNMS
IV651. RADIUSSettings
ConfiguretheRADIUSserversettingsfor2.4GHz&5GHz.Eachfrequency
canuseaninternalorexternalRADIUSserver.
164
EdimaxProNMS
RADIUSTypeSelect“Internal”tousetheaccesspoint’s
builtinRADIUSserveror“external”tousean
externalRADIUSserver.
RADIUSServerEntertheRADIUSserverhostIPaddress.
AuthenticationSettheUDPportusedintheauthentication
PortprotocoloftheRADIUSserver.Valuemustbe
between1
65535.
SharedSecretEnterasharedsecret/passwordbetween1
99charactersinlength.Thisshouldmatchthe
“MACRADIUS”passwordusedinIV3136or
IV323.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between0
86400.
AccountingEnableordisableRADIUSaccounting.
AccountingPortWhenaccountingisenabled(above),setthe
UDPportusedintheaccountingprotocolof
theRADIUSserver.Valuemustbebetween1
65535.
IV652. InternalServer
TheaccesspointfeaturesabuiltinRADIUSserverwhichcanbeconfiguredas
shownbelowusedwhen“Internal”isselectedfor“RADIUSType”inthe
“LocalNetwork”“RADIUSSettings”menu.
TouseRADIUSservers,goto“WirelessSettings”
“Security”
“AdditionalAuthentication”andselect“MACRADIUS
Authentication”(seeIV623.&IV633).
165
EdimaxProNMS
InternalServerCheck/unchecktoenable/disabletheaccess
point’sinternalRADIUSserver.
EAPInternalSelectEAPinternalauthenticationtypefrom
Authenticationthedropdownmenu.
EAPCertificateFileDisplaystheEAPcertificatefileformat:
FormatPCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaselfmade
certificate.
SharedSecretEnterasharedsecret/passwordforuse
betweentheinternalRADIUSserverand
RADIUSclient.Thesharedsecretshouldbe1
99charactersinlength.Thisshouldmatchthe
“MACRADIUS”passwordusedinIV6236or
IV633.
SessionTimeout Setadurationofsessiontimeoutinseconds
between0
86400.
TerminationActionSelectaterminationactionattribute:
“Reauthentication”sendsaRADIUSrequestto
theaccesspoint,“NotReathentication”sends
adefaultterminationactionattributetothe
accesspoint,“NotSend”no
terminationactionattributeissenttothe
accesspoint.
166
EdimaxProNMS
IV653. RADIUSAccounts
TheinternalRADIUSservercanauthenticateupto256useraccounts.
The“RADIUSAccounts”pageallowsyoutoconfigureandmanageusers.
UserName Entertheusernameshere,separatedby
commas.
Add Click“Add”toaddtheusertotheuser
registrationlist.
Reset Cleartextfromtheusernamebox.
Select Checktheboxtoselectauser.
UserName Displaystheusername.
Password Displaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured).
Customize Click“Edit”toopenanewfieldtoset/edita
passwordforthespecifiedusername(below).
167
EdimaxProNMS
DeleteSelected Deleteselecteduserfromtheuserregistration
list.
DeleteAllDeleteallusersfromtheuserregistrationlist.
EditUserRegistrationList
UserNameExistingusernameisdisplayedhereandcan
beeditedaccordingtoyourpreference.
PasswordEnteroreditapasswordforthespecifieduser.
168
EdimaxProNMS
IV66.MACFilter
Macfilteringisasecurityfeaturethatcanhelptopreventunauthorized
usersfromconnectingtoyouraccesspoint.
Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto
connecttotheaccesspoint.Devicesareeachidentifiedbytheirunique
MACaddress.IfadevicewhichisnotonthelistofpermittedMAC
addressesattemptstoconnecttotheaccesspoint,itwillbedenied.
ToenableMACfiltering,goto“LocalSettings”
“Security”
“AdditionalAuthentication”andselect“MACFilter”(seeIV623.
& IV633).
TheMACaddressfilteringtableisdisplayedbelow:
AddMACAddressEnteraMACaddressofcomputerornetwork
devicemanuallye.g.‘aabbccddeeff’or
entermultipleMACaddressesseparatedwith
169
EdimaxProNMS
commas,e.g.
‘aabbccddeeff,aabbccddeegg’
AddClick“Add”toaddtheMACaddresstothe
MACaddressfilteringtable.
ResetClearallfields.
MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.
Selectanentryusingthe“Select”checkbox.
SelectDeleteselectedorallentriesfromthetable.
MACAddressTheMACaddressislistedhere.
DeleteSelectedDeletetheselectedMACaddressfromthe
list.
DeleteAllDeleteallentriesfromtheMACaddress
filteringtable.
ExportClick“Export”tosaveacopyoftheMAC
filteringtable.Anewwindowwillpopupfor
youtoselectalocationtosavethefile.
170
EdimaxProNMS
IV67.WMM
WiFiMultimedia(WMM)isaWiFiAllianceinteroperabilitycertification
basedontheIEEE802.11estandard,whichprovidesQualityofService(QoS)
featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofour
categories:background,besteffort,videoandvoice.
ConfiguringWMMconsistsofadjustingparametersonqueuesfordifferent
categoriesofwirelesstraffic.Trafficissenttothefollowingqueues:
BackgroundLow Highthroughput,nontimesensitivebulk
Prioritydatae.g.FTP
BestEffortMediumTraditionalIPdata,mediumthroughputand
Prioritydelay.
VideoHigh Timesensitivevideodatawithminimum
Prioritytime delay.
VoiceHigh TimesensitivedatasuchasVoIPand
Prioritystreamingmediawithminimumtimedelay.
Queuesautomaticallyprovideminimumtransmissiondelaysforvideo,voice,
multimediaandcriticalapplications.Thevaluescanfurtherbeadjusted
manually:
CWMinMinimumContentionWindow(milliseconds):
Thisvalueisinputtotheinitialrandom
backoffwaittimealgorithmforretryofadata
frametransmission.Thebackoffwaittimewill
171
EdimaxProNMS
begeneratedbetween0andthisvalue.Ifthe
frameisnotsent,therandombackoffvalueis
doubleduntilthevaluereachesthenumber
definedbyCWMax(below).TheCWMinvalue
mustbelowerthantheCWMaxvalue.The
contentionwindowschemehelpstoavoid
framecollisionsanddeterminepriorityof
frametransmission.Ashorterwindowhasa
higherprobability(priority)oftransmission.
CWMaxMaximumContentionWindow(milliseconds):
Thisvalueistheupperlimittorandom
backoffvaluedoubling(seeabove).
AIFSNArbitrationInterFrameSpace(milliseconds):
Specifiesadditionaltimebetweenwhena
channelgoesidleandtheAP/clientsends
dataframes.TrafficwithalowerAIFSNvalue
hasahigherpriority.
TxOPTransmissionOpportunity(milliseconds):The
maximumintervaloftimeanAP/clientcan
transmit.Thismakeschannelaccessmore
efficientlyprioritized.Avalueof0meansonly
oneframepertransmission.Agreatervalue
effectshigherpriority.
172
EdimaxProNMS
IV7.LocalSettings
IV71.OperationMode
Settheoperationmodeoftheaccesspoint.APmodeisastandaloneaccess
point,APcontrollermodeactsasthedesignatedmasteroftheAParray,
andManagedAPmodeactsasaslaveAPwithintheAParray.
IV72.NetworkSettings
IV721. SystemInformation
The“SystemInformation”pagedisplaysbasicsysteminformationabout
theaccesspoint.
173
EdimaxProNMS
System
Model Displaysthemodelnumberoftheaccess
point.
ProductName Displaystheproductnameforreference,
whichconsistsof“AP”plustheMACaddress.
Uptime Displaysthetotaltimesincethedevicewas
turnedon.
BootFrom Displaysinformationforthebooted
hardware,bootedfromeitherUSBorinternal
memory.
Version Displaysthefirmwareversion.
MACAddress Displaystheaccesspoint’sMACaddress.
ManagementVLAN DisplaysthemanagementVLANID.
ID
IPAddress DisplaystheIPaddressofthisdevice.Click
“Refresh”toupdatethisvalue.
Default DisplaystheIPaddressofthedefault
Gateway gateway.
DNS IPaddressofDNS(DomainNameServer)
DHCPServer IPaddressofDHCPServer.
WiredLANPortSettings
WiredLANPort SpecifieswhichLANport(1or2).
Status DisplaysthestatusofthespecifiedLANport
(connectedordisconnected).
174
EdimaxProNMS
VLANMode/IDDisplaystheVLANmode(taggedoruntagged)
andVLANIDforthespecifiedLANport.See
IV613.VLAN
Wireless2.4GHz(5GHz)
StatusDisplaysthestatusofthe2.4GHzor5GHz
wireless(enabledordisabled).
MACAddressDisplaystheaccesspoint’sMACaddress.
ChannelDisplaysthechannelnumberthespecified
wirelessfrequencyisusingforbroadcast.
TransmitPower Displaysthewirelessradiotransmitpower
levelasapercentage.
Wireless2.4GHZ(5GHz)/SSID
SSIDDisplaystheSSIDname(s)forthespecified
frequency.
AuthenticationDisplaystheauthenticationmethodforthe
MethodspecifiedSSID.SeeIV6.WirelessSettings
EncryptionType Displaystheencryptiontypeforthespecified
SSID.SeeIV6.WirelessSettings
VLANIDDisplaystheVLANIDforthespecifiedSSID.
SeeIV613.VLAN
AdditionalDisplaystheadditionalauthenticationtypefor
AuthenticationthespecifiedSSID.SeeIV6.WirelessSettings
WirelessClientDisplayswhetherwirelessclientisolationisin
IsolationuseforthespecifiedSSID.SeeIV613.VLAN
Wireless2.4GHZ(5GHz)/WDSStatus
MACAddressDisplaysthepeeraccesspoint’sMACaddress.
EncryptionType Displaystheencryptiontypeforthespecified
WDS.SeeIV624.WDS
VLANMode/IDDisplaystheVLANIDforthespecifiedWDS.
SeeIV624.WDS
RefreshClicktorefreshallinformation.
175
EdimaxProNMS
IV722. WirelessClients
The“WirelessClients”pagedisplaysinformationaboutallwireless
clientsconnectedtotheaccesspointonthe2.4GHzor5GHzfrequency.
Refreshtime
AutoRefreshTime Selectatimeintervalfortheclienttablelistto
automaticallyrefresh.
ManualRefresh Clickrefreshtomanuallyrefreshtheclient
table.
2.4GHz(5GHz)WLANClientTable
SSID DisplaystheSSIDwhichtheclientis
connectedto.
MACAddress DisplaystheMACaddressoftheclient.
Tx Displaysthetotaldatapacketstransmittedby
thespecifiedclient.
Rx Displaysthetotaldatapacketsreceivedby
thespecifiedclient.
Signal(%) Displaysthewirelesssignalstrengthforthe
specifiedclient.
ConnectedTime Displaysthetotaltimethewirelessclienthas
beenconnectedtotheaccesspoint.
IdleTime Clientidletimeisthetimeforwhichtheclient
hasnottransmittedanydatapacketsi.e.is
idle.
Vendor Thevendoroftheclient’swirelessadapteris
displayedhere.
176
EdimaxProNMS
IV723. WirelessMonitor
WirelessMonitorisatoolbuiltintotheaccesspointtoscanandmonitorthe
surroundingwirelessenvironment.Selectafrequencyandclick“Scan”to
displayalistofallSSIDswithinrangealongwithrelevantdetailsforeachSSID.
WirelessMonitor
SiteSurveySelectwhichfrequency(orboth)toscan,and
click“Scan”tobegin.
ChannelSurvey Afterascaniscomplete,click“Export”tosave
Resulttheresultstolocalstorage.
SiteSurveyResults
ChDisplaysthechannelnumberusedbythe
specifiedSSID.
SSIDDisplaystheSSIDidentifiedbythescan.
MACAddressDisplaystheMACaddressofthewireless
router/accesspointforthespecifiedSSID.
SecurityDisplaystheauthentication/encryptiontype
ofthespecifiedSSID.
Signal(%)Displaysthecurrentsignalstrengthofthe
SSID.
TypeDisplaysthe802.11wirelessnetworking
standard(s)ofthespecifiedSSID.
VendorDisplaysthevendorofthewireless
router/accesspointforthe specifiedSSID.
177
EdimaxProNMS
IV724.Log
Thesystemlogdisplayssystemoperationinformationsuchasuptimeand
connectionprocesses.Thisinformationisusefulfornetworkadministrators.
Whenthelogisfull,oldentriesareoverwritten.
SaveClicktosavethelogasafileonyourlocal
computer.
ClearClearalllogentries.
RefreshRefreshthecurrentlog.
178
EdimaxProNMS
Thefollowinginformation/eventsarerecordedbythelog:
USB
Mount&unmount
WirelessClientConnected&
disconnectedKeyexchange
success&fail
Authentication
Authenticationfailorsuccessful.
Association
Successorfail
WPS
M1‐M8messages
WPSsuccess
ChangeSettings
SystemBoot
Displayscurrentmodelname
NTPClient
WiredLink
LANPortlinkstatusandspeedstatus
ProxyARP
ProxyARPmodulestart&stop
Bridge
Bridgestart&stop.
SNMP
SNMPserverstart&stop.
HTTP
HTTPstart&stop.
HTTPS
HTTPSstart&stop.
SSH
SSHclientserverstart&stop.
Telnet
Telnetclientserverstartorstop.
WLAN(2.4G)
WLAN(2.4G]channelstatusandcountry/regionstatus
WLAN(5G)
WLAN(5G)channelstatusandcountry/regionstatus
ADT
179
EdimaxProNMS
IV73.Management
IV731. Admin
Youcanchangethepasswordusedtologintothebrowserbased
configurationinterfacehere.Itisadvisedtodosoforsecuritypurposes.
Ifyouchangetheadministratorpassword,pleasemakeanote
ofthenewpassword.Intheeventthatyouforgetthis
passwordandareunabletologintothebrowserbased
configurationinterface,seeIV744.FactoryDefaultforhow
toresettheaccesspoint.
AccounttoManageThisDevice
AdministratorSettheaccesspoint’sadministratorname.
NameThisisusedtologintothebrowserbased
configurationinterfaceandmustbebetween
416alphanumericcharacters(casesensitive).
AdministratorSettheaccesspoint’sadministratorpassword.
PasswordThisisusedtologintothebrowserbased
configurationinterfaceandmustbebetween
432alphanumericcharacters(casesensitive).
180
EdimaxProNMS
AdvancedSettings
ProductNameEdittheproductnameaccordingtoyour
preferenceconsistingof132alphanumeric
characters.Thisnameisusedforreference
purposes.
ManagementCheck/unchecktheboxestoenable/disable
Protocolspecifiedmanagementinterfaces(seebelow).
WhenSNMPisenabled,completetheSNMP
fieldsbelow.
SNMPVersionSelectSNMPversionappropriateforyour
SNMPmanager.
SNMPGetEnteranSNMPGetCommunitynamefor
CommunityverificationwiththeSNMPmanagerfor
SNMPGETrequests.
SNMPSetEnteranSNMPSetCommunitynamefor
CommunityverificationwiththeSNMPmanagerfor
SNMPSETrequests.
SNMPTrapEnableordisableSNMPTraptonotifySNMP
managerofnetworkerrors.
SNMPTrapEnteranSNMPTrapCommunitynamefor
CommunityverificationwiththeSNMPmanagerfor
SNMPTRAPrequests.
SNMPTrapSpecifytheIPaddressorsevername(2128
Manageralphanumericcharacters)oftheSNMP
manager.
HTTP
InternetbrowserHTTPprotocolmanagementinterface
HTTPS
InternetbrowserHTTPSprotocolmanagementinterface
TELNET
Clientterminalwithtelnetprotocolmanagementinterface
SSH
ClientterminalwithSSHprotocolversion1or2managementinterface
SNMP
SimpleNetworkManagementProtocol.SNMPv1,v2&v3protocolsupported.
SNMPv2canbeusedwithcommunitybasedauthentication.SNMPv3uses
userbasedsecuritymodel(USM)architecture.
181
EdimaxProNMS
IV732. DateandTime
Youcanconfigurethetimezonesettingsofyouraccesspointhere.The
dateandtimeofthedevicecanbeconfiguredmanuallyorcanbe
synchronizedwithatimeserver.
DateandTimeSettings
LocalTime Settheaccesspoint’sdateandtimemanually
usingthedropdownmenus.
AcquireCurrent Click“AcquireCurrentTimefromYourPC”to
TimefromyourPC
entertherequiredvaluesautomatically
accordingtoyourcomputer’scurrenttimeand
date.
NTPTimeServer
UseNTP TheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddate
setup.
ServerName EnterthehostnameorIPaddressofthetime
serverifyouwish.
UpdateInterval Specifyafrequency(inhours)fortheaccess
pointtoupdate/synchronizewiththeNTP
server.
TimeZone
TimeZone Selectthetimezoneofyour country/region.If
182
EdimaxProNMS
yourcountry/regionisnotlisted,pleaseselect
anothercountry/regionwhosetimezoneisthe
sameasyours.
IV733. SyslogServer
Thesystemlogcanbesenttoaserver,attachedtoUSBstorageorsent
viaemail.
SyslogServerSettings
TransferLogs Check/unchecktheboxtoenable/disablethe
useofasyslogserver,andenterahost
name,domainorIPaddressfortheserver,
consistingofupto128 alphanumeric
characters.
CopyLogsto Check/unchecktheboxtoenable/disable
AttachedUSBDevicecopyinglogstoattachedUSBstorage.
SyslogEmailSettings
EmailLogs Check/unchecktheboxtoenable/disableemail
logs.Whenenabled,thelogwillbeemailed
accordingtothesettingsbelow.
EmailSubject Enterthesubjectlineoftheemailwhichwillbe
sentcontainingthelog.
SMTPServer SpecifytheSMTPserveraddressforthesender
Address emailaccount.
SMTPServerPort SpecifytheSMTPserverportforthesender
emailaccount.
183
EdimaxProNMS
SenderEmailEnterthesender’semailaddress.
ReceiverEmailSpecifytheemailrecipientofthelog.
AuthenticationSelect“Disable”,“SSL”or“TLS”accordingto
youremailauthentication.
AccountWhenauthenticationisusedabove,enterthe
accountname.
PasswordWhenauthenticationisusedabove,enterthe
password.
IV734. I’mHere
Theaccesspointfeaturesabuiltinbuzzerwhichcansoundoncommand
usingthe“I’mHere”page.Thisisusefulfornetworkadministratorsand
engineersworkingincomplexnetworkenvironmentstolocatethe
accesspoint.
Thebuzzerisloud!
DurationofSoundSetthedurationforwhichthebuzzerwill
soundwhenthe“SoundBuzzer”buttonis
clicked.
SoundBuzzerActivatethebuzzersoundfortheabove
specifieddurationoftime.
184
EdimaxProNMS
IV74.Advanced
WiFiMultimedia(WMM)isaWiFiAllianceinteroperabilitycertification
basedontheIEEE802.11estandard,whichprovidesQualityofService(QoS)
featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofour
categories:background,besteffort,videoandvoice.
IV741. LEDSettings
Theaccesspoint’sLEDscanbemanuallyenabledordisabledaccording
toyourpreference.
PowerLEDSelectonoroff.
DiagLEDSelectonoroff.
IV742. UpdateFirmware
The“Firmware”pageallowsyoutoupdatethesystemfirmwaretoamore
recentversion.Updatedfirmwareversionsoftenofferincreased
performanceandsecurity,aswellasbugfixes.Youcandownloadthelatest
firmwarefromtheEdimaxwebsite.
Thisfirmwareupdateisforanindividualaccesspoint.To
updatefirmwareformultipleaccesspointsintheAParray,
gotoNMSSettings
FirmwareUpgrade.
185
EdimaxProNMS
Donotswitchoffordisconnecttheaccesspointduringa
firmwareupgrade,asthiscoulddamagethedevice.
UpdateFirmwareSelect“afileonyourPC”touploadfirmware
Fromfromyourlocalcomputerorfroman
attachedUSBdevice.
FirmwareUpdateFileClick“Browse”toopenanewwindowto
locateandselectthefirmwarefileinyour
computer.
UpdateClick“Update”touploadthespecified
firmwarefiletoyouraccesspoint.
186
EdimaxProNMS
IV743. Save/RestoreSettings
Theaccesspoint’s“Save/RestoreSettings”pageenablesyoutosave/backup
theaccesspoint’scurrentsettingsasafiletoyourlocalcomputeroraUSB
deviceattachedtotheaccesspoint,andrestoretheaccesspointto
previouslysavedsettings.
Save/RestoreSettings
UsingDeviceSelect“UsingyourPC”tosavetheaccess
point’ssettingstoyourlocalcomputerorto
anattachedUSBdevice.
SaveSettingstoPC
SaveSettingsClick“Save”tosavesettingsandanew
windowwillopentospecifyalocationto
savethesettingsfile.Youcanalsocheckthe
“Encrypttheconfigurationfilewitha
password”boxandenterapasswordto
protectthefileinthefieldunderneath,ifyou
wish.
RestoreSettingsfromPC
RestoreSettings Clickthebrowsebuttontofindapreviously
savedsettingsfileonyourcomputer,then
click“Restore”toreplaceyourcurrent
settings.Ifyoursettingsfileisencryptedwith
apassword,checkthe“Openfilewith
187
EdimaxProNMS
password”boxandenterthepasswordin
thefieldunderneath.
IV744. FactoryDefault
Iftheaccesspointmalfunctionsorisnotresponding,thenitis
recommendedthatyourebootthedevice(seeIV745.)orresetthedevice
backtoitsfactorydefaultsettings.Youcanresettheaccesspointbacktoits
defaultsettingsusingthisfeatureifthelocationoftheaccesspointisnot
convenienttoaccesstheresetbutton.
FactoryDefault Click“FactoryDefault”torestoresettingsto
thefactorydefault.Apopupwindowwill
appearandaskyoutoconfirm.
Afterresettingtofactorydefaults,pleasewaitfortheaccess
pointtoresetandrestart.
IV745. Reboot
Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommended
thatyourebootthedeviceorresettheaccesspointbacktoitsfactory
defaultsettings(seeIV744).Youcanreboottheaccesspointremotely
usingthisfeature.
RebootClick“Reboot”torebootthedevice.A
countdownwillindicatetheprogressofthe
reboot.
188
EdimaxProNMS
IV8.Toolbox
IV81. NetworkConnectivity
IV811. Ping
Pingisacomputernetworkadministrationutilityusedtotestwhether
aparticularhostisreachableacrossanIPnetworkandtomeasurethe
roundtriptimeforsentmessages.
DestinationAddressEntertheaddressofthehost.
Execute Clickexecutetopingthehost.
IV812.TraceRoute
Tracerouteisadiagnostictoolfordisplayingtheroute(path)and
measuringtransitdelaysofpacketsacrossanIPnetwork.
DestinationAddressEntertheaddressofthehost.
ExecuteClickexecutetoexecutethetraceroute
command.
189
V.Appendix
V1. ConfiguringyourIPaddress
TheaccesspointusesthedefaultIPaddress192.168.2.2.Inordertoaccess
thebrowserbasedconfigurationinterface,youneedtomodifytheIPaddress
ofyourcomputertobeinthesameIPaddresssubnete.g.192.168.2.x(x=
3254).
TheprocedureformodifyingyourIPaddressvariesacrossdifferentoperating
systems;pleasefollowtheguideappropriateforyouroperatingsystem.
InthefollowingexamplesweusetheIPaddress192.168.2.10thoughyou
canuseanyIPaddressintherange192.168.2.x(x=3254).
IfyouchangedtheAPController’sIPaddress,orifyour
gateway/routerusesaDHCPserver,ensureyouenterthecorrect
IPaddress.Refertoyourgateway/router’ssettings.Your
computer’sIPaddressmustbeinthesamesubnetastheAP
Controller.
IfusingaDHCPserveronthenetwork,itisadvisedtouseyour
DHCPserver’ssettingstoassigntheAPControllerastaticIP
address.
190
V11. WindowsXP
1.Clickthe“Start”button(itshouldbelocatedinthelowerleftcornerof
yourcomputer),thenclick“ControlPanel”.Doubleclickthe“Networkand
InternetConnections”icon,click“NetworkConnections”,andthendouble
click“LocalAreaConnection”.The“LocalAreaConnectionStatus”window
willthenappear,click“Properties”.
2.Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
191
192
V12. WindowsVista
1.Clickthe“Start”button(itshouldbelocatedinthelowerleftcornerofyour
computer),thenclick“ControlPanel”.Click“ViewNetworkStatusandTasks”,
thenclick“ManageNetworkConnections”.Rightclick“LocalAreaNetwork”,
thenselect“Properties”.The“LocalAreaConnectionProperties”windowwill
thenappear,select“InternetProtocolVersion4(TCP/IPv4)”,andthenclick
“Properties”.
2.Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
193
194

Navigation menu