Edimax Technology Co 9576791507 AC1750 Ceiling Mount AP User Manual

Edimax Technology Co Ltd AC1750 Ceiling Mount AP

User manual

AC1750CeilingMountAP

User’s Manual
EW7679WAUser
Version: 1.0
(January, 2016)
CONTENTS
I.ProductInformation ............................................................................... 2
I1.PackageContents ..................................................................................................................2
I2.SystemRequirements............................................................................................................3
I3.HardwareOverview...............................................................................................................3
I4.LEDStatus ..............................................................................................................................4
I5.Reset ......................................................................................................................................4
I6.SafetyInformation.................................................................................................................5
II.QuickSetup ............................................................................................ 6
II1.InitialSetup............................................................................................................................6
II2.APMode:BasicSettings ........................................................................................................8
II3.RepeaterMode....................................................................................................................12
III.HardwareInstallation........................................................................... 15
III1.ConnectingtheaccesspointtoarouterorPoEswitch.....................................................15
III2.Mountingtheaccesspointtoaceiling..............................................................................16
III3.TRailMount ......................................................................................................................19
IV.BrowserBasedConfigurationInterface................................................. 21
IV1.Information........................................................................................................................23
IV11.SystemInformation ...........................................................................................................23
IV12.WirelessClients..................................................................................................................28
IV13.WirelessMonitor ...............................................................................................................30
IV14.Log......................................................................................................................................32
IV2.NetworkSettings ...............................................................................................................34
IV21.LANSideIPAddress...........................................................................................................34
IV22.LANPort .............................................................................................................................36
IV23.VLAN ..................................................................................................................................37
IV3.WirelessSettings................................................................................................................38
IV31.WirelessExtender..............................................................................................................38
IV32.ProfileList ..........................................................................................................................40
IV33.2.4GHz11bgn.....................................................................................................................41
IV331.Basic .............................................................................................................................41
IV332.Advanced .....................................................................................................................44
IV333.Security ........................................................................................................................46
IV3331.NoAuthentication .....................................................................................................48
IV3332.WEP............................................................................................................................48
IV3333.IEEE802.1x/EAP..........................................................................................................48
IV3334.WPAPSK ....................................................................................................................48
IV3335.WPAEAP....................................................................................................................49
IV3336.AdditionalAuthentication .........................................................................................49
IV334.WDS .............................................................................................................................51
IV34.5GHz11ac11an .................................................................................................................53
IV341.Basic .............................................................................................................................53
IV342.Advanced .....................................................................................................................55
IV343.Security ........................................................................................................................57
IV344.WDS .............................................................................................................................59
IV35.WPS......................................................................................................................................61
IV36.RADIUS .................................................................................................................................63
IV361.RADIUSSettings ...........................................................................................................64
IV362.InternalServer .............................................................................................................66
IV363.RADIUSAccounts .........................................................................................................68
IV37.MACFilter ..........................................................................................................................70
IV38.WMM...................................................................................................................................72
IV39.Schedule...............................................................................................................................74
IV310.TrafficShaping .....................................................................................................................76
IV4.Management .....................................................................................................................78
IV41.Admin.................................................................................................................................78
IV42.DateandTime....................................................................................................................81
IV43.SyslogServer......................................................................................................................83
IV44.PingTest.............................................................................................................................84
IV45.I’mHere .............................................................................................................................85
IV5.Advanced ...........................................................................................................................86
IV51.LEDSettings .......................................................................................................................86
IV52.UpdateFirmware...............................................................................................................87
IV53.Save/RestoreSettings........................................................................................................88
IV54.FactoryDefault ..................................................................................................................90
IV55.Reboot................................................................................................................................91
IV6.OperationMode ................................................................................................................92
NMS
I.ProductInformation ............................................................................. 95
II.QuickSetup .......................................................................................... 96
III.SoftwareLayout ................................................................................. 103
IV.Features ............................................................................................. 110
IV1.LOGIN,LOGOUT&RESTART ..............................................................................................110
IV2.DASHBOARD ......................................................................................................................112
IV21.SystemInformation ...........................................................................................................113
IV22.DevicesInformation...........................................................................................................113
IV23.ManagedAP.......................................................................................................................114
IV24.ManagedAPGroup............................................................................................................115
IV25.ActiveClients .....................................................................................................................116
IV26.ActiveUsers .......................................................................................................................117
IV3.ZONEPLAN.........................................................................................................................118
IV4.NMSMONITOR ..................................................................................................................120
IV41.AccessPoint .......................................................................................................................120
IV411.ManagedAP...............................................................................................................120
IV412.ManagedAPGroup....................................................................................................122
IV42.WLAN .................................................................................................................................124
IV421.ActiveWLAN ..............................................................................................................124
IV422.ActiveWLANGroup ...................................................................................................125
IV43.Clients ................................................................................................................................125
IV431.ActiveClients .............................................................................................................125
IV44.RogueDevices....................................................................................................................126
IV45.Information........................................................................................................................127
IV451.AllEvents/Activities ...................................................................................................127
IV452.Monitoring .................................................................................................................128
IV5.NMSSettings......................................................................................................................129
IV51.AccessPoint .......................................................................................................................129
IV52.WLAN .................................................................................................................................142
IV521.NoAuthentication ...................................................................................................144
IV522.WEP..........................................................................................................................144
IV523.IEEE802.1x/EAP........................................................................................................145
IV524.WPAPSK ..................................................................................................................145
IV525.WPAEAP..................................................................................................................146
IV526.AdditionalAuthentication .......................................................................................146
IV53.RADIUS ...............................................................................................................................148
IV54.AccessControl....................................................................................................................154
IV55.GuestNetwork...................................................................................................................157
IV56.ZoneEdit ............................................................................................................................161
IV57.Schedule.............................................................................................................................163
IV58.DeviceMonitoring ...........................................................................................................165
IV59.FirmwareUpgrade .............................................................................................................166
IV510.Advanced .........................................................................................................................167
IV5101.SystemSecurity..........................................................................................................167
IV5102.Date&Time ...............................................................................................................167
IV6.LocalNetwork ....................................................................................................................169
IV61.NetworkSettings ...............................................................................................................169
IV611.LANSideIPAddress...................................................................................................169
IV612.LANPortSettings .......................................................................................................172
IV613.VLAN ..........................................................................................................................173
IV62.2.4GHz11bgn.....................................................................................................................174
IV621.Basic ...........................................................................................................................174
IV622.Advanced ...................................................................................................................176
IV623.Security ......................................................................................................................178
IV6231.NoAuthentication ...................................................................................................179
IV6232.WEP..........................................................................................................................179
IV6233.IEEE802.1x/EAP........................................................................................................180
IV6234.WPAPSK ..................................................................................................................180
IV6235.WPAEAP..................................................................................................................180
IV6236.AdditionalAuthentication .......................................................................................181
IV624.WDS ...........................................................................................................................182
IV63.5GHz11ac11an ...............................................................................................................184
IV631.Basic ...........................................................................................................................184
IV632.Advanced .................................................................................................................186
IV633.Security ....................................................................................................................188
IV634.WDS ...........................................................................................................................190
IV64.WPS....................................................................................................................................192
IV65.RADIUS ...............................................................................................................................193
IV651.RADIUSSettings .........................................................................................................194
IV652.InternalServer ...........................................................................................................195
IV653.RADIUSAccounts .......................................................................................................197
IV66.MACFilter ..........................................................................................................................199
IV67.WMM.................................................................................................................................201
IV7.LocalSettings .....................................................................................................................203
IV71.OperationMode ................................................................................................................203
IV72.SystemSettings..................................................................................................................203
IV721.SystemInformation .................................................................................................203
IV722.WirelessClients..........................................................................................................205
IV723.WirelessMonitor .....................................................................................................206
IV724.Log............................................................................................................................207
IV73.Management .....................................................................................................................208
IV731.Admin.......................................................................................................................208
IV732.DateandTime..........................................................................................................210
IV733.SyslogServer............................................................................................................212
IV734.I’mHere ...................................................................................................................213
IV74.Advanced ...........................................................................................................................214
IV741.LEDSettings ...............................................................................................................214
IV742.UpdateFirmware.....................................................................................................215
IV743.Save/RestoreSettings..............................................................................................216
IV744.FactoryDefault ........................................................................................................217
IV745.Reboot......................................................................................................................217
IV8.Toolbox ..............................................................................................................................218
IV81.NetworkConnectivity ......................................................................................................218
IV811.Ping ..........................................................................................................................218
IV812.TraceRoute..............................................................................................................218
V.Appendix ............................................................................................ 219
V1.ConfiguringyourIPaddress.............................................................................................219
V11.WindowsXP .....................................................................................................................220
V12.WindowsVista .................................................................................................................222
V13.Windows7 .......................................................................................................................224
V14.Windows8 .......................................................................................................................228
V15.Mac ..................................................................................................................................232
VI.BestPractice....................................................................................... 234
VI1.HowtoCreateandLinkWLAN&AccessPointGroups...................................................235
1
OVERVIEW
Youraccesspointcanfunctioninfourdifferentmodes.
ThedefaultmodeforyouraccesspointisAPmode.
APmodeisaregularaccesspointforuseinyourwirelessnetwork.
APControllermodeactsasthedesignatedmasterofanAParray(groupof
linkedaccesspoints).InAPControllermodetheuserinterfacewillswitchto
NMS.
ManagedAPmodeactsasa“slave”APwithintheAParray(controlledbythe
APController“master”).
InRepeatermodetheaccesspointconnectswirelesslytoyourexisting
2.4GHzand/or5GHznetworkandrepeatsthewirelesssignal(s).
2
I. ProductInformation
I1.PackageContents
1234

1. AC1750AccessPoint
2. CeilingMountBracket
3. TRailMountingKit&Screws
4. CeilingMountingKit&Screws
5. QuickInstallationGuide
6. EthernetCable
7. PowerAdapter
8. CeilingMountScrewTemplate
5
3
I2.SystemRequirements
Existingcable/DSLmodem&router
Computerwithwebbrowserforaccesspointconfiguration
I3.HardwareOverview
EthernetPort
Power Port
MicroUSBPort
4
I4.LEDStatus
LEDColorLEDStatusDescription
OnTheaccesspointison.
LongFlashingUpgradingfirmware.
Blue
ShortFlashing Resettingtofactorydefaults.
OnStartingup.Amber
FlashingError.
OffOffTheaccesspointisoff.
I5.Reset
Ifyouexperienceproblemswithyouraccesspoint,youcanresetthedevice
backtoitsfactorysettings.Thisresetsallsettingsbacktodefault.
1. Pressandholdtheresetbuttonontheaccesspointforatleast10
seconds.
Youmayneedtouseapinorsimilarsharpobjecttopushthe
resetbutton.
2. Waitfortheaccesspointtorestart.Theaccesspointisreadyforsetup
whentheLEDisblue.
5
I6.SafetyInformation
Inordertoensurethesafeoperationofthedeviceanditsusers,pleaseread
andactinaccordancewiththefollowingsafetyinstructions.
1.Theaccesspointisdesignedforindooruseonly;donotplacetheaccess
pointoutdoors.
2.Donotplacetheaccesspointinornearhot/humidplaces,suchasakitchen
orbathroom.
3.Donotpullanyconnectedcablewithforce;carefullydisconnectitfromthe
accesspoint.
4.Handletheaccesspointwithcare.Accidentaldamagewillvoidthe
warrantyoftheaccesspoint.
5.Thedevicecontainssmallpartswhichareadangertosmallchildrenunder
3yearsold.Pleasekeeptheaccesspointoutofreachofchildren.
6.Donotplacetheaccesspointonpaper,cloth,orotherflammablematerials.
Theaccesspointmaybecomehotduringuse.
7.Therearenouserserviceablepartsinsidetheaccesspoint.Ifyou
experienceproblemswiththeaccesspoint,pleasecontactyourdealerof
purchaseandaskforhelp.
8.Theaccesspointisanelectricaldeviceandassuch,ifitbecomeswetfor
anyreason,donotattempttotouchitwithoutswitchingthepowersupply
off.Contactanexperiencedelectricaltechnicianforfurtherhelp.
9. Ifyousmellburningorseesmokecomingfromtheaccesspointorpower
adapter,thendisconnecttheaccesspointandpoweradapterimmediately,
asfarasitissafelypossibletodoso.Callyourdealerofpurchaseforhelp.
10.Thisdevicerequiresprofessionalinstallation.
6
II. QuickSetup
Youraccesspointcanbeupandrunninginjustafewminutes.Itcanfunction
asastandaloneaccesspoint(APmode),aspartofanAParray(ManagedAP
mode)orasawirelessrepeater(repeatermode).
ForuseaManagedAPinanAParray,theaccesspointwillautomatically
switchmodewhenanAPControllerisconfiguredasdescribedinNMS.
II1.InitialSetup
1. ConnecttheaccesspointtoacomputerviaEthernetcable.
2. Connectthepoweradaptertotheaccesspoint’s12VDCportandplugthe
poweradapterintoapowersupplyusingtheincludedcable.
3. Pleasewaitamomentfortheaccesspointtostartup.Theaccesspointis
readywhentheLEDisblue.
4. Setyourcomputer’sIPaddressto192.168.2.xwherexisanumberinthe
range3100.Ifyouareunsurehowtodothis,pleaserefertotheuser
manualformoreinformation.
Pleaseensuretherearenootheractivenetworkconnectionson
yourcomputer(disconnectWiFiconnectionsandEthernet
cables).
5. Entertheaccesspoint’sdefaultIPaddress192.168.2.2intotheURLbarof
awebbrowser.
7
6. Youwillbepromptedforausernameandpassword.Enterthedefault
username“admin”andthedefaultpassword“1234”.
7. Youwillarrivethe“SystemInformation”screenshownbelow.
8
8. PleasefollowtheinstructionsbelowinII2.BasicSettingstoconfigurethe
accesspoint’sbasicsettingsforuseasastandaloneAPinAPmode.
ForuseaManagedAPinanAParray,theaccesspointwillautomatically
switchmodewhenanAPControllerisconfiguredasdescribedinNMS.
TousetheAPasanAPController(master)inanAParray,refertoNMS.
II2.APMode:BasicSettings
Theinstructionsbelowwillhelpyoutoconfigurethefollowingbasicsettings
oftheaccesspoint:
LANIPAddress
2.4GHz&5GHzSSID&Security
AdministratorName&Password
Time&Date
Itisrecommendedyouconfigurethesesettingsbeforeusingthe
accesspoint.
1. Tochangetheaccesspoint’sLANIPaddress,goto“NetworkSettings”>
“LANsideIPAddress”andyouwillseethescreenbelow.
2. EntertheIPaddresssettingsyouwishtouseforyouraccesspoint.You
canuseadynamic(DHCP)orstaticIPaddress,dependingonyournetwork
environment.Click“Apply”tosavethechangesandwaitafewmoments
fortheaccesspointtoreload.
9
Whenyouchangeyouraccesspoint’sIPaddress,youneedtouse
thenewIPaddresstoaccessthebrowserbasedconfiguration
interfaceinsteadofthedefaultIP192.168.2.2.
3. TochangetheSSIDofyouraccesspoint’s2.4GHzwirelessnetwork(s),go
to“WirelessSetting”>“2.4GHz11bgn”>“Basic”.EnterthenewSSIDfor
your2.4GHzwirelessnetworkinthe“SSID1”fieldandclick“Apply”.
Toutilizemultiple2.4GHzSSIDs,openthedropdownmenu
labelled“EnableSSIDnumber”andselecthowmanySSIDsyou
require.ThenenteranewSSIDinthecorrespondingnumbered
fieldsbelow,beforeclicking“Apply”.
4. Toconfigurethesecurityofyouraccesspoint’s2.4GHzwireless
network(s),goto“WirelessSetting”>“2.4GHz11bgn”>“Security”.Select
an“AuthenticationMethod”andentera“PresharedKey”or“Encryption
Key”dependingonyourchoice,thenclick“Apply”.
IfusingmultipleSSIDs,specifywhichSSIDtoconfigureusingthe
“SSID”dropdownmenu.
10
5. Goto“WirelessSettings”>“5GHz11ac11an”andrepeatsteps3&4for
theaccesspoint’s5GHzwirelessnetwork.
6. Tochangetheadministratornameandpasswordforthebrowserbased
configurationinterface,goto“Management”>“Admin”.
7. Completethe“AdministratorName”and“AdministratorPassword”fields
andclick“Apply”.
8. Tosetthecorrecttimeforyouraccesspoint,goto“Management”>
“DateandTime”.
11
9. Setthecorrecttimeandtimezoneforyouraccesspointusingthedrop
downmenus.TheaccesspointalsosupportsNTP(NetworkTimeProtocol)
soalternativelyyoucanenterthehostnameorIPaddressofatimeserver.
Click“Apply”whenyouarefinished.
Youcanusethe“AcquireCurrentTimefromyourPC”buttonif
youwishtosettheaccesspointtothesametimeasyourPC.
10. Thebasicsettingsofyouraccesspointarenowconfigured.Please
refertoIV.HardwareInstallationforguidanceonconnectingyouraccess
pointtoarouterorPoEswitch.
12
II3.RepeaterMode
Whenyousettheoperationmodetorepeatermode,theAPwillnotgetanIP
addressfromtherouter/rootAP.Youwillneedtosetyourcomputer’sIP
addressandusetheAPsdefaultIPaddresstoaccesstheUIforthefirsttime,
refertoAppendixformorehelp.
WirelessSettingsÆWirelessExtenderdisplaysdetailsabouttheAPswireless
connectioninrepeatermodeandenablesyoutoconnecttoasourceSSIDand
configurethenew(repeater)SSID.Settingsaresavedasprofiles.
1. Setyourcomputer’sIPaddressto192.168.2.xwherexisanumberinthe
range3100.
Pleaseensuretherearenootheractivenetworkconnectionson
yourcomputer(disconnectWiFiconnectionsandEthernet
cables).
2. Entertheaccesspoint’sdefaultIPaddress192.168.2.2intotheURLbarof
awebbrowser.
3. Youwillbepromptedforausernameandpassword.Enterthedefault
username“admin”andthedefaultpassword“1234”.
13
4. GotoWirelessSettingsÆWirelessExtender.
5. ClickScantosearchforanddisplayavailableSSIDsandclickSelectto
connecttoanavailablesourceSSID.SSIDscanbeconfiguredindependently
foreachfrequency2.4GHz&5GHz.
14
6. EditthenewextendedSSIDaccordingtoyourpreferenceandenterthe
securitydetailsforthesourceSSID,andthenclickConnect.
7. TheAPinrepeatermodewillestablishaconnectiontothesourceSSIDand
repeattheextendedSSID.TherepeaterAPwillbecomeaDHCPclientof
therouter/rootAP.SwitchyourcomputerbacktoadynamicIPaddress.
15
III. HardwareInstallation
III1. ConnectingtheaccesspointtoarouterorPoEswitch
1. ConnectarouterorPoEswitchtotheaccesspoint’sLANportusingan
Ethernetcable.
2. Ifyouareusingarouter,then
connectthepoweradaptertothe
accesspoint’s12VDCportand
plugthepoweradapterintoa
powersupply.
Donotusethepower
adapterifyouareusinga
PoEswitch.
16
III2. Mountingtheaccesspointtoaceiling
Tomounttheaccesspointtoaceiling,pleasefollowtheinstructionsbelow
andrefertodiagramA&B.
ForWoodenCeilings(refertodiagramA):
1. Placetheceilingmountbrackettoaceilinginyourdesiredlocationand
usetheincludedscrewsx4tofixitintoplace(i).
2. Attachtheaccesspointtotheceilingmountbracketbyaligningthe
groovesintheaccesspointtotheceilingmount,asshowninii.
3. Securetheaccesspointfirmlyinplaceusingtheincludedscrewasshown
iniii.
ForOtherCeilings(refertodiagramB):
1. Drillfourholesinyourceilingusingtheceilingmountbracketasaguide,
andinsertthefourincludedwallplugs/screwanchors(i).
2. Aligntheceilingmountbracketwithyourwallplugs/screwanchorsanduse
theincludedscrewsx4tofixitintoplace(ii).
3. Attachtheaccesspointtotheceilingmountbracketbyaligningthe
groovesintheaccesspointtotheceilingmount,asshowniniii.
4. Securetheaccesspointfirmlyinplaceusingtheincludedscrewasshown
iniv.
17
A
i
iiiii
18
B
i
ii
iii
iv
19
III3. TRailMount
TomounttheaccesspointtoaTRail,pleasefollowtheinstructionsbelow
andrefertodiagramC,D&E.
1. SelectthecorrectsizeTRailbracketfromthetwosizeswhichare
includedinthepackagecontents.
2. AttachtheTRailbrackettotheceilingmountusingtheincludedscrewsx
2asshownini.
YoucanusetheincludedbracketandlongerscrewsIfyouneed
morespacebetweentheaccesspointandtheTRail.
3. Attachtheaccesspointtotheceilingmountbracketbyaligningthe
groovesintheaccesspointtotheceilingmount,asshowninii.
4. Securetheaccesspointfirmlyinplaceusingtheincludedscrewasshown
iniii.
5. CliptheaccesspointontoyourTRailusingthenowattachedTRail
bracket.
Ci
ii
iii
20
D
E
i
i
ii
ii
iii
iii
21
IV. BrowserBasedConfigurationInterface
InManagedAPmodesomefunctionsofthebrowserbased
configurationinterfacearedisabled.PleaseuseNMSonyour
ControllerAPtoconfigureyourManagedAP(s).
Thebrowserbasedconfigurationinterfaceenablesyoutoconfigurethe
accesspoint’sadvancedfeatures.TheAC1750featuresarangeofadvanced
functionssuchasMACfiltering,MACRADIUSauthentication,VLAN
configurations,upto32SSIDsandmanymore.Toaccessthebrowserbased
configurationinterface:
1. ConnectacomputertoyouraccesspointusinganEthernetcable.
2. Enteryouraccesspoint’sIPaddressintheURLbarofawebbrowser.The
accesspoint’sdefaultIPaddressis192.168.2.2.
3. Youwillbepromptedforausernameandpassword.Thedefault
usernameis“admin”andthedefaultpasswordis“1234”,thoughitwas
recommendedthatyouchangethepasswordduringsetup(seeIII2.Basic
Settings).
Ifyoucannotrememberyourpassword,resettheaccesspoint
backtoitsfactorydefaultsettings.RefertoI5.Reset
4. Youwillarriveatthe“SystemInformation”screenshownbelow.
22
5. Usethemenuacrossthetopanddowntheleftsidetonavigate.Click
“Apply”tosavechangesandreloadtheaccesspoint,or“Cancel”tocancel
changes.
Pleasewaitafewsecondsfortheaccesspointtoreloadafteryou
“Apply”changes,asshownbelow.
6. Pleaserefertothefollowingchaptersforfulldescriptionsofthebrowser
basedconfigurationinterfacefeatures.
23
IV1. Information
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV11. SystemInformation
The“SystemInformation”pagedisplaysbasic
systeminformationabouttheaccesspoint.
24
25
System
ModelDisplaysthemodelnumberoftheaccess
point.
ProductNameDisplaystheproductnameforreference,
whichconsistsof“AP”plustheMACaddress.
UptimeDisplaysthetotaltimesincethedevicewas
turnedon.
BootFromDisplaysinformationforthebooted
hardware,bootedfromeitherUSBorinternal
memory.
FirmwareVersionDisplaysthefirmwareversion.
MACAddressDisplaystheaccesspoint’sMACaddress.
ManagementVLAN
ID
DisplaysthemanagementVLANID.
IPAddressDisplaystheIPaddressofthisdevice.Click
“Refresh”toupdatethisvalue.
Default
Gateway
DisplaystheIPaddressofthedefault
gateway.
DNSIPaddressofDNS(DomainNameServer)
DHCPServerIPaddressofDHCPServer.
WiredLANPortSettings
WiredLANPortSpecifieswhichLANport.USBistheLANport
attachedviaminiUSBadapter.
StatusDisplaysthestatusofthespecifiedLANport
(connectedordisconnected).
VLANMode/IDDisplaystheVLANmode(taggedoruntagged)
andVLANIDforthespecifiedLANport.See
IV23.VLAN
Wireless2.4GHz(5GHz)
StatusDisplaysthestatusofthe2.4GHzor5GHz
wireless(enabledordisabled).
MACAddressDisplaystheaccesspoint’sMACaddress.
ChannelDisplaysthechannelnumberthespecified
wirelessfrequencyisusingforbroadcast.
TransmitPowerDisplaysthewirelessradiotransmitpower
levelasapercentage.
RSSIDisplaysReceivedSignalStrengthIndicator.
26
Wireless2.4GHZ(5GHz)/SSID
SSIDDisplaystheSSIDname(s)forthespecified
frequency.
Authentication
Method
Displaystheauthenticationmethodforthe
specifiedSSID.SeeIV3.WirelessSettings
EncryptionTypeDisplaystheencryptiontypeforthespecified
SSID.SeeIV3.WirelessSettings
VLANIDDisplaystheVLANIDforthespecifiedSSID.
SeeIV23.VLAN
Additional
Authentication
Displaystheadditionalauthenticationtypefor
thespecifiedSSID.SeeIV3.WirelessSettings
WirelessClient
Isolation
Displayswhetherwirelessclientisolationisin
useforthespecifiedSSID.SeeIV23.VLAN
Wireless2.4GHZ(5GHz)/WDSStatus
MACAddressDisplaysthepeeraccesspoint’sMACaddress.
EncryptionTypeDisplaystheencryptiontypeforthespecified
WDS.SeeIV314.WDS
VLANMode/IDDisplaystheVLANIDforthespecifiedWDS.
SeeIV314.WDS
RefreshClicktorefreshallinformation.
ExtenderMode:
Wireless2.4GHZ(5GHz)/SSID
ConnectionStatusCurrentstatusoftherepeater’sconnection.
SourceSSIDDisplaystheSSIDname(s)fortherepeater’s
27
source.
ExtendedSSIDDisplaystheSSIDname(s)oftherepeater.
Authentication
Method
Displaystheauthenticationmethodforthe
specifiedSSID.SeeIV3.WirelessSettings
EncryptionTypeDisplaystheencryptiontypeforthespecified
SSID.SeeIV3.WirelessSettings
MACAddressDisplaystheaccesspoint’sMACaddress.
ChannelDisplaysthechannelnumberthespecified
wirelessfrequencyisusingforbroadcast.
TransmitPowerDisplaysthewirelessradiotransmitpower
levelasapercentage.
RSSIDisplaysReceivedSignalStrengthIndicator.
28
IV12. WirelessClients
The“WirelessClients”pagedisplays
informationaboutallwirelessclients
connectedtotheaccesspointonthe2.4GHzor5GHzfrequency.
Refreshtime
AutoRefreshTimeSelectatimeintervalfortheclienttablelistto
automaticallyrefresh.
ManualRefreshClickrefreshtomanuallyrefreshtheclient
table.
2.4GHz(5GHz)WLANClientTable
SSIDDisplaystheSSIDwhichtheclientis
connectedto.
MACAddressDisplaystheMACaddressoftheclient.
TxDisplaysthetotaldatapacketstransmittedby
thespecifiedclient.
RxDisplaysthetotaldatapacketsreceivedby
thespecifiedclient.
29
Signal(%)Displaysthewirelesssignalstrengthforthe
specifiedclient.
ConnectedTimeDisplaysthetotaltimethewirelessclienthas
beenconnectedtotheaccesspoint.
IdleTimeClientidletimeisthetimeforwhichtheclient
hasnottransmittedanydatapacketsi.e.is
idle.
VendorThevendoroftheclient’swirelessadapteris
displayedhere.
30
IV13. WirelessMonitor
WirelessMonitorisatoolbuiltintotheaccess
pointtoscanandmonitorthesurrounding
wirelessenvironment.Selectafrequencyandclick“Scan”todisplayalistof
allSSIDswithinrangealongwithrelevantdetailsforeachSSID.
WirelessMonitor
SiteSurveySelectwhichfrequency(orboth)toscan,and
click“Scan”tobegin.
ChannelSurvey
Result
Afterascaniscomplete,click“Export”tosave
theresultstolocalstorage.
SiteSurveyResults
ChDisplaysthechannelnumberusedbythe
specifiedSSID.
SSIDDisplaystheSSIDidentifiedbythescan.
MACAddressDisplaystheMACaddressofthewireless
router/accesspointforthespecifiedSSID.
SecurityDisplaystheauthentication/encryptiontype
ofthespecifiedSSID.
31
Signal(%)Displaysthecurrentsignalstrengthofthe
SSID.
TypeDisplaysthe802.11wirelessnetworking
standard(s)ofthespecifiedSSID.
VendorDisplaysthevendorofthewireless
router/accesspointforthespecifiedSSID.
32
IV14. Log
Thesystemlogdisplayssystemoperation
informationsuchasuptimeandconnection
processes.Thisinformationisusefulfornetworkadministrators.
Whenthelogisfull,oldentriesareoverwritten.UsetheSearch
functiontoquicklylocatelogentries.
SaveClicktosavethelogasafileonyourlocal
computer.
ClearClearalllogentries.
RefreshRefreshthecurrentlog.
33
Thefollowinginformation/eventsarerecordedbythelog:
USB
Mount&unmount
WirelessClient
Connected&disconnected
Keyexchangesuccess&fail
Authentication
Authenticationfailorsuccessful.
Association
Successorfail
WPS
M1‐M8messages
WPSsuccess
ChangeSettings
SystemBoot
Displayscurrentmodelname
NTPClient
WiredLink
LANPortlinkstatusandspeedstatus
ProxyARP
ProxyARPmodulestart&stop
Bridge
Bridgestart&stop.
SNMP
SNMPserverstart&stop.
HTTP
HTTPstart&stop.
HTTPS
HTTPSstart&stop.
SSH
SSHclientserverstart&stop.
Telnet
Telnetclientserverstartorstop.
WLAN(2.4G)
WLAN(2.4G]channelstatusandcountry/regionstatus
WLAN(5G)
WLAN(5G)channelstatusandcountry/regionstatus
34
IV2. NetworkSettings
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV21. LANSideIPAddress
The“LANsideIPaddress”pageallowsyouto
configureyouraccesspointonyourLocalArea
Network(LAN).YoucanenabletheaccesspointtodynamicallyreceiveanIP
addressfromyourrouter’sDHCPserveroryoucanspecifyastaticIPaddress
foryouraccesspoint,aswellasconfigureDNSservers.
Theaccesspoint’sdefaultIPaddressis192.168.2.2.
LANsideIPAddress
IPAddress
Assignment
Select“DHCPClient”foryouraccesspointto
beassignedadynamicIPaddressfromyour
router’sDHCPserver,orselect“StaticIP”to
manuallyspecifyastatic/fixedIPaddressfor
youraccesspoint(below).
IPAddressSpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
255.255.255.0
35
DefaultGatewayForDHCPusers,select“FromDHCP”toget
defaultgatewayfromyourDHCPserveror
“UserDefined”toenteragatewaymanually.
ForstaticIPusers,thedefaultvalueisblank.
DHCPuserscanselecttogetDNSservers’IPaddressfromDHCPormanually
enteravalue.ForstaticIPusers,thedefaultvalueisblank.
PrimaryAddressDHCPuserscanselect“FromDHCP”toget
primaryDNSserver’sIPaddressfromDHCPor
“UserDefined”tomanuallyenteravalue.For
staticIPusers,thedefaultvalueisblank.
SecondaryAddressUserscanmanuallyenteravaluewhenDNS
server’sprimaryaddressissetto
“UserDefined”.
36
IV22. LANPort
The“LANPort”pageallowsyouto
configurethesettingsforyouraccess
point’stwowiredLAN(Ethernet)ports.
WiredLANPortIdentifiesLANport.USBistheLANport
attachedviaminiUSBadapter.
EnableEnable/disablespecifiedLANport.
Speed&DuplexSelectaspeed&duplextypeforspecifiedLAN
port,orusethe“Auto”value.LANportscan
operateupto1000Mbpsandfullduplex
enablessimultaneousdatapackets
transfer/receive.
FlowControlEnable/disableflowcontrol.Flowcontrolcan
pausenewsessionrequestuntilcurrentdata
processingiscomplete,inordertoavoid
deviceoverloadsunderheavytraffic.
802.3azEnable/disable802.3az.802.3azisanEnergy
EfficientEthernetfeaturewhichdisables
unusedinterfacestoreducepowerusage.
37
IV23. VLAN
The“VLAN”(VirtualLocalAreaNetwork)
enablesyoutoconfigureVLANsettings.A
VLANisalocalareanetworkwhichmaps
workstationsvirtuallyinsteadofphysicallyandallowsyoutogrouptogether
orisolateusersfromeachother.VLANIDs14095aresupported.
VLANIDsintherange14095aresupported.
VLANInterface
WiredLAN
Port/Wireless
IdentifiesLANportnumberandwirelessSSIDs.
USBistheLANportattachedviaminiUSB
adapter.
VLANModeSelect“TaggedPort”or“UntaggedPort”for
specifiedLANinterface.
VLANIDSetaVLANIDforspecifiedinterface,if
“UntaggedPort”isselected.
ManagementVLAN
VLANIDSpecifytheVLANIDofthemanagementVLAN.
OnlythehostsbelongingtothesameVLANcan
managethedevice.
38
IV3. WirelessSettings
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV31. WirelessExtender
OnlyavailableinRepeaterMode
Thewirelessextenderpagedisplaysdetails
abouttheAPswirelessconnectioninrepeater
modeandenablesyoutoconnecttoasourceSSIDandconfigurethenew
(repeater)SSID.Settingsaresavedasprofiles.ClickScantosearchforand
displayavailableSSIDsandclickSelecttoconnecttoanavailableSSID.SSIDs
canbeconfiguredindependentlyforeachfrequency2.4GHz&5GHz.
39
Wireless2.4GHz/5GHz
SelectClicktoselectanSSIDanddisplayanewCreate
Profilewindowtoentersecurityinformation
(below).
ChannelDisplaysthechannelnumberoflistedSSID.
SSIDDisplaystheSSID.
MACAddressDisplaystheMACaddressofspecifiedSSID.
SecurityDisplaystheexistingsecuritytypeforlisted
SSID.
Signal(%)Displaystheavailablesignalstrengthforlisted
SSID.
TypeDisplaysthewireless802.11standardforeach
SSID.
WirelessCreateProfile
SSIDDisplaystheselectedsourceSSIDforthis
profile.
ExtendedSSIDEditthenewSSIDforthisprofile.
Authentication
Method
SelectthesourceSSIDsauthenticationmethod
andenterencryptionkey/presharedkey.
40
IV32. ProfileList
OnlyavailableinRepeaterMode
Repeatermodesettingsaresavedasprofiles.
Profilescanbeeditedandmultipleprofiles
canbecreatedtoswitchbetweenprofiles
easilyasrequired.SelectanexistingprofileandclickEditorConnect.
WirelessCreateProfile
SSIDDisplaystheselectedsourceSSIDforthis
profile.
ExtendedSSIDEditthenewSSIDforthisprofile.
Authentication
Method
SelectthesourceSSIDsauthenticationmethod
andenterencryptionkey/presharedkey.
41
IV33. 2.4GHz11bgn
The“2.4GHz11bgn”menuallowsyoutoview
andconfigureinformationforyouraccess
point’s2.4GHzwirelessnetworkacrossfive
categories:Basic,Advanced,Security,WDS&Schedule.
IV331.Basic
The“Basic”screendisplaysbasicsettingsfor
youraccesspoint’s2.4GHzWiFinetwork(s).
42
WirelessEnableordisabletheaccesspoint’s2.4GHz
wirelessradio.Whendisabled,no2.4GHz
SSIDswillbeactive.
BandSelectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11b,
802.11g&802.11ncanbeselected.
EnableSSIDNumberSelecthowmanySSIDstoenableforthe
2.4GHzfrequencyfromthedropdownmenu.
Amaximumof16canbeenabled.
SSID#EntertheSSIDnameforthespecifiedSSID(up
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s2.4GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannel
Interval
Specifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
43
Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel Selectawirelesschannelfrom111.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
44
IV332.Advanced
Thesesettingsareforexperiencedusersonly.
Pleasedonotchangeanyofthevaluesonthis
pageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
ContentionSlotSelect“Short”or“Long”thisvalueisusedfor
contentionwindowsinWMM(seeIV36.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
45
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
46
IV333.Security
Theaccesspointprovidesvarioussecurityoptions
(wirelessdataencryption).Whendatais
encrypted,informationtransmittedwirelesslycannotbereadbyanyonewho
doesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthardtoguesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
47
2.4GHzWirelessSecuritySettings
SSIDSelectionSelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWiFinetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWiFi
networktoclientsclientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication
Method
Selectanauthenticationmethodfromthedrop
downmenuandrefertotheinformation
belowappropriateforyourmethod.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenuandrefertothe
informationbelow(IV3136.)appropriatefor
yourmethod.
2.4GHzWirelessAdvancedSettings
SmartHandoverEnableordisablesmarthandover.
RSSIThresholdSettheReceivedSignalStrengthIndicator
(RSSI)thresholdtomaintainqualityconnection
speeds(minimumreceiversensitivityrequired
foraconnection).
48
IV3331. NoAuthentication
Authenticationisdisabledandnopassword/keyisrequiredtoconnecttothe
accesspoint.
Disablingwirelessauthenticationisnotrecommended.When
disabled,anybodywithinrangecanconnecttoyourdevice’sSSID.
IV3332. WEP
WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Forahigher
levelofsecurityconsiderusingWPAencryption.
KeyLengthSelect64bitor128bit.128bitismoresecure
than64bitandisrecommended.
KeyTypeChoosefrom“ASCII”(anyalphanumerical
character09,azandAZ)or“Hex”(any
charactersfrom09,afandAF).
DefaultKeySelectwhichencryptionkey(14below)isthe
defaultkey.Forsecuritypurposes,youcanset
uptofourkeys(below)andchangewhichis
thedefaultkey.
EncryptionKey1
4
Enteryourencryptionkey/passwordaccording
totheformatyouselectedabove.
IV3333. IEEE802.1x/EAP
KeyLengthSelect64bitor128bit.128bitismoresecure
than64bitandisrecommended.
IV3334. WPAPSK
WPAPSKisasecurewirelessencryptiontypewithstrongdata
protectionanduserauthentication,utilizing128bitencryptionkeys.
WPATypeSelectfromWPA/WPA2MixedModePSK,
WPA2orWPAonly.WPA2issaferthanWPA
only,butnotsupportedbyallwirelessclients.
Pleasemakesureyourwirelessclientsupports
49
yourselection.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
PreSharedKey
Type
Choosefrom“Passphrase”(863
alphanumericcharacters)or“Hex”(upto64
charactersfrom09,afandAF).
PreSharedKeyPleaseenterasecuritykey/passwordaccording
totheformatyouselectedabove.
IV3335. WPAEAP
WPATypeSelectfromWPA/WPA2MixedModeEAP,
WPA2EAPorWPAEAP.
EncryptionType
Select“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
WPAEAPmustbedisabledtouseMACRADIUSauthentication.
IV3336. AdditionalAuthentication
Additionalwirelessauthenticationmethodscanalsobeused:
WPSmustbedisabledtouseadditionalauthentication.SeeIV33.
forWPSsettings.
MACAddressFilter
RestrictwirelessclientsaccessbasedonMACaddressspecifiedintheMAC
filtertable.
SeeIV35.MACFiltertoconfigureMACfiltering.
MACFilter&MACRADIUSAuthentication
RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering&
RADIUSauthenticationmethods.
50
MACRADIUSAuthentication
RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,or
passwordauthenticationviaaRADIUSserver.
SeeIV34.RADIUStoconfigureRADIUSservers.
WPSmustbedisabledtouseMACRADIUSauthentication.See
IV33.forWPSsettings.
MACRADIUS
Password
SelectwhethertouseMACaddressor
passwordauthenticationviaRADIUSserver.If
youselect“Usethefollowingpassword”,enter
thepasswordinthefieldbelow.Thepassword
shouldmatchthe“SharedSecret”usedin
IV34.RADIUS.
51
IV334.WDS
WirelessDistributionSystem(WDS)can
bridge/repeataccesspointstogetherinan
extendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspointto
beinthesamesubnetandensurethereisonlyoneactiveDHCP
serveramongconnectedaccesspoints,preferablyontheWAN
side.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
52
2.4GHz
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
WDS#EntertheMACaddressforuptofourother
WDSdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryptionmethod
EncryptionSelectwhethertouse“None”or“AES”
encryptionandenterapresharedkeyforAES
consistingof863alphanumericcharacters.
53
IV34. 5GHz11ac11an
The“5GHz11ac11an”menuallowsyoutoview
andconfigureinformationforyouraccesspoint’s
5GHzwirelessnetworkacrossfivecategories:Basic,Advanced,Security,WDS
&Schedule.
IV341.Basic
The“Basic”screendisplaysbasicsettingsfor
youraccesspoint’s5GHzWiFinetwork(s).
WirelessEnableordisabletheaccesspoint’s5GHz
wirelessradio.Whendisabled,no5GHzSSIDs
willbeactive.
BandSelectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11a,
54
802.11n&802.11accanbeselected.
EnableSSIDNumberSelecthowmanySSIDstoenableforthe5GHz
frequencyfromthedropdownmenu.A
maximumof16canbeenabled.
SSID#EntertheSSIDnameforthespecifiedSSID(up
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s5GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannel
Interval
Specifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel Selectawirelesschannel.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
55
framesforwirelessclients.
IV342.Advanced
Thesesettingsareforexperiencedusersonly.
Pleasedonotchangeanyofthevaluesonthis
pageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
56
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
57
IV343.Security
Theaccesspointprovidesvarioussecurityoptions
(wirelessdataencryption).Whendatais
encrypted,informationtransmittedwirelessly
cannotbereadbyanyonewhodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthardtoguesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
SSIDSelectionSelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWiFinetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWiFi
networktoclientsclientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
58
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication
Method
Selectanauthenticationmethodfromthedrop
downmenuandrefertotheinformation
belowappropriateforyourmethod.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenuandrefertothe
informationbelowappropriateforyour
method.
PleasereferbacktoIV313.Securityformoreinformationonauthentication
andadditionalauthenticationtypes.
59
IV344.WDS
WirelessDistributionSystem(WDS)can
bridge/repeataccesspointstogetherinan
extendednetwork.WDSsettingscanbe
configuredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspointto
beinthesamesubnetandensurethereisonlyoneactiveDHCP
serveramongconnectedaccesspoints,preferablyontheWAN
side.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
60
5GHzWDSMode
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
WDS#EntertheMACaddressforuptofourother
WDAdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryption
EncryptionSelectwhethertouse“None”or“AES”
encryptionandenterapresharedkeyforAES
with863alphanumericcharacters.
61
IV35.WPS
WiFiProtectedSetupisasimplewayto
establishconnectionsbetweenWPS
compatibledevices.WPScanbeactivatedoncompatibledevicesbypushinga
WPSbuttononthedeviceorfromwithinthedevice’sfirmware/configuration
interface(knownasPBCor“PushButtonConfiguration”).WhenWPSis
activatedinthecorrectmannerandatthecorrecttimefortwocompatible
devices,theywillautomaticallyconnect.“PINcodeWPS”isavariationofPBC
whichincludestheadditionaluseofaPINcodebetweenthetwodevicesfor
verification.
Pleaserefertomanufacturer’sinstructionsforyourotherWPS
device.
62
 
WPSCheck/uncheckthisboxtoenable/disableWPS
functionality.WPSmustbedisabledwhen
usingMACRADIUSauthentication(see
IV3136&IV34).
WPS
ProductPINDisplaystheWPSPINcodeofthedevice,used
forPINcodeWPS.Youwillberequiredtoenter
thisPINcodeintoanotherWPSdeviceforPIN
codeWPS.Click“GeneratePIN”togeneratea
newWPSPINcode.
PushButtonWPSClick“Start”toactivateWPSontheaccess
pointforapproximately2minutes.Thishasthe
sameeffectasphysicallypushingtheaccess
point’sWPSbutton.
WPSbyPINEnterthePINcodeofanotherWPSdeviceand
click“Start”toattempttoestablishaWPS
connectionforapproximately2minutes.
WPSSecurity
WPSStatusWPSsecuritystatusisdisplayedhere.Click
“Release”tocleartheexistingstatus.
Wireless2.4GHz/5GHz
SSIDDisplaystheSSIDname(s)forthespecified
frequency.
SecurityDisplaysthesecurityforthespecifiedSSID.
EncryptionDisplaystheencryptiontypeforthespecified
SSID.SeeIV3.WirelessSettings
63
IV36.RADIUS
TheRADIUSmenuallowsyoutoconfigurethe
accesspoint’sexternalRADIUSserversettings.
ARADIUSserverprovidesuserbasedauthenticationtoimprovesecurityand
offerwirelessclientcontroluserscanbeauthenticatedbeforegaining
accesstoanetwork.
Theaccesspointcanutilizebothaprimaryandsecondary(backup)external
RADIUSserverforeachofitswirelessfrequencies(2.4GHz&5GHz)..
TouseRADIUSservers,goto“WirelessSettings”
Æ
“Security”and
select“MACRADIUSAuthentication”
Æ
“Additional
Authentication”andselect“MACRADIUSAuthentication”(see
IV313.&IV323).
64
IV361.RADIUSSettings
ConfiguretheRADIUSserversettingsfor
2.4GHz.Eachfrequencycanuseaninternalor
externalRADIUSserver.
65
RADIUSTypeSelect“Internal”tousetheaccesspoint’s
builtinRADIUSserveror“external”tousean
externalRADIUSserver.
RADIUSServerEntertheRADIUSserverhostIPaddress.
Authentication
Port
SettheUDPportusedintheauthentication
protocoloftheRADIUSserver.Valuemustbe
between165535.
SharedSecretEnterasharedsecret/passwordbetween1
99charactersinlength.Thisshouldmatchthe
“MACRADIUS”passwordusedinIV3136or
IV323.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between086400.
AccountingEnableordisableRADIUSaccounting.
AccountingPortWhenaccountingisenabled(above),setthe
UDPportusedintheaccountingprotocolof
theRADIUSserver.Valuemustbebetween1
65535.
66
IV362.InternalServer
TheaccesspointfeaturesabuiltinRADIUS
serverwhichcanbeconfiguredasshown
belowusedwhen“Internal”isselectedfor“RADIUSType”inthe“Wireless
Settings”Æ“RADIUS”Æ“RADIUSSettings”menu.
TouseRADIUSservers,goto“WirelessSettings”
Æ
“Security”and
select“MACRADIUSAuthentication”
Æ
“Additional
Authentication”andselect“MACRADIUSAuthentication”(see
IV313.&IV323).
InternalServerCheck/unchecktoenable/disabletheaccess
point’sinternalRADIUSserver.
EAPInternal
Authentication
SelectEAPinternalauthenticationtypefrom
thedropdownmenu.
EAPCertificateFile
Format
DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaselfmade
certificate.
SharedSecretEnterasharedsecret/passwordforuse
betweentheinternalRADIUSserverand
RADIUSclient.Thesharedsecretshouldbe1
67
99charactersinlength.Thisshouldmatchthe
“MACRADIUS”passwordusedinIV3136or
IV323.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between086400.
TerminationActionSelectaterminationactionattribute:
“Reauthentication”sendsaRADIUSrequestto
theaccesspoint,“NotReathentication”sends
adefaultterminationactionattributetothe
accesspoint,“NotSend”no
terminationactionattributeissenttothe
accesspoint.
68
IV363.RADIUSAccounts
TheinternalRADIUSservercanauthenticate
upto256useraccounts.The“RADIUS
Accounts”pageallowsyoutoconfigureandmanageusers.
69
UserNameEntertheusernameshere,separatedby
commas.
AddClick“Add”toaddtheusertotheuser
registrationlist.
ResetCleartextfromtheusernamebox.
SelectChecktheboxtoselectauser.
UserNameDisplaystheusername.
PasswordDisplaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured).
CustomizeClick“Edit”toopenanewfieldtoset/edita
passwordforthespecifiedusername(below).
DeleteSelectedDeleteselecteduserfromtheuserregistration
list.
DeleteAllDeleteallusersfromtheuserregistrationlist.
EditUserRegistrationList
UserNameExistingusernameisdisplayedhereandcan
beeditedaccordingtoyourpreference.
PasswordEnteroreditapasswordforthespecifieduser.
70
IV37. MACFilter
Macfilteringisasecurityfeaturethatcan
helptopreventunauthorizedusersfrom
connectingtoyouraccesspoint.
Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto
connecttotheaccesspoint.DevicesareeachidentifiedbytheiruniqueMAC
address.IfadevicewhichisnotonthelistofpermittedMACaddresses
attemptstoconnecttotheaccesspoint,itwillbedenied.
ToenableMACfiltering,goto“WirelessSettings”
Æ
“2.4G
Hz11bgn”
Æ
“Security”
Æ
“AdditionalAuthentication”andselect
“MACFilter”(seeIV313).
TheMACaddressfilteringtableisdisplayedbelow:
AddMACAddressEnteraMACaddressofcomputerornetwork
devicemanuallye.g.‘aabbccddeeff’or
entermultipleMACaddressesseparatedwith
71
commas,e.g.
‘aabbccddeeff,aabbccddeegg’
AddClick“Add”toaddtheMACaddresstothe
MACaddressfilteringtable.
ResetClearallfields.
MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.Select
anentryusingthe“Select”checkbox.
SelectDeleteselectedorallentriesfromthetable.
MACAddressTheMACaddressislistedhere.
DeleteSelectedDeletetheselectedMACaddressfromthe
list.
DeleteAllDeleteallentriesfromtheMACaddress
filteringtable.
ExportClick“Export”tosaveacopyoftheMAC
filteringtable.Anewwindowwillpopupfor
youtoselectalocationtosavethefile.
72
IV38.WMM
WiFiMultimedia(WMM)isaWiFiAlliance
interoperabilitycertificationbasedonthe
IEEE802.11estandard,whichprovides
QualityofService(QoS)featurestoIEE802.11networks.WMMprioritizes
trafficaccordingtofourcategories:background,besteffort,videoandvoice.
ConfiguringWMMconsistsofadjustingparametersonqueuesfordifferent
categoriesofwirelesstraffic.Trafficissenttothefollowingqueues:
BackgroundLow
Priority
Highthroughput,nontimesensitivebulk
datae.g.FTP
BestEffortMedium
Priority
TraditionalIPdata,mediumthroughputand
delay.
VideoHigh
Priority
Timesensitivevideodatawithminimum
timedelay.
VoiceHigh
Priority
TimesensitivedatasuchasVoIPand
streamingmediawithminimumtimedelay.
Queuesautomaticallyprovideminimumtransmissiondelaysforvideo,voice,
multimediaandcriticalapplications.Thevaluescanfurtherbeadjusted
manually:
73
CWMinMinimumContentionWindow(milliseconds):
Thisvalueisinputtotheinitialrandom
backoffwaittimealgorithmforretryofadata
frametransmission.Thebackoffwaittimewill
begeneratedbetween0andthisvalue.Ifthe
frameisnotsent,therandombackoffvalueis
doubleduntilthevaluereachesthenumber
definedbyCWMax(below).TheCWMinvalue
mustbelowerthantheCWMaxvalue.The
contentionwindowschemehelpstoavoid
framecollisionsanddeterminepriorityof
frametransmission.Ashorterwindowhasa
higherprobability(priority)oftransmission.
CWMaxMaximumContentionWindow(milliseconds):
Thisvalueistheupperlimittorandom
backoffvaluedoubling(seeabove).
AIFSNArbitrationInterFrameSpace(milliseconds):
Specifiesadditionaltimebetweenwhena
channelgoesidleandtheAP/clientsends
dataframes.TrafficwithalowerAIFSNvalue
hasahigherpriority.
TxOPTransmissionOpportunity(milliseconds):The
maximumintervaloftimeanAP/clientcan
transmit.Thismakeschannelaccessmore
efficientlyprioritized.Avalueof0meansonly
oneframepertransmission.Agreatervalue
effectshigherpriority.
74
IV39.Schedule
Theschedulefeatureallowsyoutoautomate
thewirelessnetworkforspecifiedtimes.
Check/uncheckthebox“EnableWirelessSchedule”toenable/disablethe
wirelessschedulingfunction.
Theaccesspoint’stimeanddatesettingsmustbesetinorderto
usethisfunction.
Wirelessschedulingcansaveenergyandincreasethesecurityof
yournetwork.
1. CheckEnableandusetheSelect,Add,EditorDeletecheckboxestoselect
andmodifyschedule(s).
2. WhenyouclickAdd,specifyday(s),starttimeandendtimeforthe
scheduleusingthedropdownmenusandclickApply.
75
3. RemembertoApplyyourchangesandmakesureEnableischecked.
76
IV310.TrafficShaping
Thetrafficshapingfunctionallowsyouto
regulatenetworkdatatransfertoensureor
prioritizeperformancebylimitinguplinkanddownlinkspeedsaccordingto
SSID.
EnableUnlimited:0
Mbps
Check/unchecktoenableordisableunlimited
transferspeed.
Downlink/UplinkSpecifythemaximumdown/uplinkcapacityin
77
MaximumMbps.
DownlinkEnteradownlinklimitinMBforthelisted
SSID.
UplinkEnteranuplinklimitinMBforthelistedSSID.
78
IV4. Management
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV41. Admin
Youcanchangethepasswordusedtologinto
thebrowserbasedconfigurationinterfacehere.
Itisadvisedtodosoforsecuritypurposes.
Ifyouchangetheadministratorpassword,pleasemakeanote
ofthenewpassword.Intheeventthatyouforgetthis
passwordandareunabletologintothebrowserbased
configurationinterface,seeI5.Resetforhowtoresetthe
accesspoint.
79
AccounttoManageThisDevice
Administrator
Name
Settheaccesspoint’sadministratorname.
Thisisusedtologintothebrowserbased
configurationinterfaceandmustbebetween
416alphanumericcharacters(casesensitive).
Administrator
Password
Settheaccesspoint’sadministratorpassword.
Thisisusedtologintothebrowserbased
configurationinterfaceandmustbebetween
432alphanumericcharacters(casesensitive).
AdvancedSettings
ProductNameEdittheproductnameaccordingtoyour
80
preferenceconsistingof132alphanumeric
characters.Thisnameisusedforreference
purposes.
HTTPPortSpecifyHTTPportnumber.
HTTPSPortSpecifyHTTPSportnumber.
Management
Protocol
Check/unchecktheboxestoenable/disable
specifiedmanagementinterfaces(seebelow).
WhenSNMPisenabled,completetheSNMP
fieldsbelow.
SNMPVersionSelectSNMPversionappropriateforyour
SNMPmanager.
SNMPGet
Community
EnteranSNMPGetCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMPGETrequests.
SNMPSet
Community
EnteranSNMPSetCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMPSETrequests.
SNMPTrapEnableordisableSNMPTraptonotifySNMP
managerofnetworkerrors.
SNMPTrap
Community
EnteranSNMPTrapCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMPTRAPrequests.
SNMPTrap
Manager
SpecifytheIPaddressorsevername(2128
alphanumericcharacters)oftheSNMP
manager.
HTTP
InternetbrowserHTTPprotocolmanagementinterface
TELNET
Clientterminalwithtelnetprotocolmanagementinterface
SNMP
SimpleNetworkManagementProtocol.SNMPv1,v2&v3protocolsupported.
SNMPv2canbeusedwithcommunitybasedauthentication.SNMPv3uses
userbasedsecuritymodel(USM)architecture.
81
IV42. DateandTime
Youcanconfigurethetimezonesettingsofyour
accesspointhere.Thedateandtimeofthe
devicecanbeconfiguredmanuallyorcanbesynchronizedwithatimeserver.
DateandTimeSettings
LocalTimeSettheaccesspoint’sdateandtimemanually
usingthedropdownmenus.
AcquireCurrent
TimefromyourPC
Click“AcquireCurrentTimefromYourPC”to
entertherequiredvaluesautomatically
accordingtoyourcomputer’scurrenttimeand
date.
NTPTimeServer
UseNTPTheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddate
setup.
82
ServerNameEnterthehostnameorIPaddressofthetime
serverifyouwish.
UpdateIntervalSpecifyafrequency(inhours)fortheaccess
pointtoupdate/synchronizewiththeNTP
server.
TimeZone
TimeZoneSelectthetimezoneofyourcountry/region.If
yourcountry/regionisnotlisted,pleaseselect
anothercountry/regionwhosetimezoneisthe
sameasyours.
83
IV43. SyslogServer
Thesystemlogcanbesenttoaserveror
toattachedUSBstorage.
SyslogServerSettings
TransferLogsCheck/unchecktheboxtoenable/disablethe
useofasyslogserver,andenterahost
name,domainorIPaddressfortheserver,
consistingofupto128alphanumeric
characters.
CopyLogsto
AttachedUSBDevice
Check/unchecktheboxtoenable/disable
copyinglogstoattachedUSBstorage.
SyslogEmailSettings
EmailLogsChecktheboxtoenable/disableemaillogs.
EmailSubjectSpecifythesubjectlineoflogemails.
SMTPServer
Address
SpecifytheSMTPserveraddressusedtosend
logemails.
SMTPServerPortSpecifytheSMTPserverportusedtosendlog
emails.
SenderEmailSpecifythesenderemailaddress.
ReceiverEmailSpecifytheemailtoreceivelogemails.
84
AuthenticationDisableorselectauthenticationtype:SSLorTLS.
WhenusingSSLorTLS,entertheusernameand
password.
IV44. PingTest
Theaccesspointincludesabuiltinpingtest
function.Pingisacomputer
networkadministrationutilityusedtotestwhetheraparticularhostis
reachableacrossanIPnetworkandtomeasuretheroundtriptimeforsent
messages.
DestinationAddressEntertheaddressofthehost.
ExecuteClickexecutetopingthehost.
85
IV45. I’mHere
Theaccesspointfeaturesabuiltinbuzzer
whichcansoundoncommandusingthe“I’m
Here”page.Thisisusefulfornetworkadministratorsandengineersworking
incomplexnetworkenvironmentstolocatetheaccesspoint.
Thebuzzerisloud!
DurationofSoundSetthedurationforwhichthebuzzerwill
soundwhenthe“SoundBuzzer”buttonis
clicked.
SoundBuzzerActivatethebuzzersoundfortheabove
specifieddurationoftime.
86
IV5. Advanced
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV51. LEDSettings
Theaccesspoint’sLEDscanbemanually
enabledordisabledaccordingtoyour
preference.
Power/DiagLEDSelectonoroff.
87
IV52. UpdateFirmware
The“Firmware”pageallowsyoutoupdate
thesystemfirmwaretoamorerecent
version.Updatedfirmwareversionsoften
offerincreasedperformanceandsecurity,aswellasbugfixes.Youcan
downloadthelatestfirmwarefromthewebsite.
Donotswitchoffordisconnecttheaccesspointduringafirmware
upgrade,asthiscoulddamagethedevice.
UpdateFirmware
From
Select“afileonyourPC”touploadfirmware
fromyourlocalcomputerorfroman
attachedUSBdevice.
FirmwareUpdateFileClick“ChooseFile”toopenanewwindowto
locateandselectthefirmwarefileinyour
computer.
UpdateClick“Update”touploadthespecified
firmwarefiletoyouraccesspoint.
88
IV53. Save/RestoreSettings
Theaccesspoint’s“Save/RestoreSettings”
pageenablesyoutosave/backuptheaccess
point’scurrentsettingsasafiletoyourlocalcomputeroraUSBdevice
attachedtotheaccesspoint,andrestoretheaccesspointtopreviouslysaved
settings.
Save/RestoreSettings
UsingDeviceSelect“UsingyourPC”tosavetheaccess
point’ssettingstoyourlocalcomputerorto
anattachedUSBdevice.
SaveSettingstoPC
SaveSettingsClick“Save”tosavesettingsandanew
windowwillopentospecifyalocationto
savethesettingsfile.Youcanalsocheckthe
“Encrypttheconfigurationfilewitha
password”boxandenterapasswordto
protectthefileinthefieldunderneath,ifyou
wish.
RestoreSettingsfromPC
RestoreSettingsClickthebrowsebuttontofindapreviously
savedsettingsfileonyourcomputer,then
click“Restore”toreplaceyourcurrent
settings.Ifyoursettingsfileisencryptedwith
89
apassword,checkthe“Openfilewith
password”boxandenterthepasswordin
thefieldunderneath.
90
IV54. FactoryDefault
Iftheaccesspointmalfunctionsorisnot
responding,thenitisrecommendedthatyou
rebootthedevice(seeIV5.5)orresetthedevicebacktoitsfactorydefault
settings.Youcanresettheaccesspointbacktoitsdefaultsettingsusingthis
featureifthelocationoftheaccesspointisnotconvenienttoaccessthereset
button.
FactoryDefaultClick“FactoryDefault”torestoresettingsto
thefactorydefault.Apopupwindowwill
appearandaskyoutoconfirm.
Afterresettingtofactorydefaults,pleasewaitfortheaccess
pointtoresetandrestart.
91
IV55. Reboot
Iftheaccesspointmalfunctionsorisnot
responding,thenitisrecommendedthat
yourebootthedeviceorresettheaccesspointbacktoitsfactorydefault
settings(seeIV54).Youcanreboottheaccesspointremotelyusingthis
feature.
RebootClick“Reboot”torebootthedevice.A
countdownwillindicatetheprogressofthe
reboot.
92
IV6. OperationMode
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
Theaccesspointcanfunctioninthreedifferentmodes.Settheoperation
modeoftheaccesspointhere.
Youraccesspointcanfunctioninthreedifferentmodes.
ThedefaultmodeforyouraccesspointisAPmode.
APmodeisaregularaccesspointforuseinyourwirelessnetwork.
APControllermodeactsasthedesignatedmasterofanAParray(groupof
linkedaccesspoints).InAPControllermodetheuserinterfacewillswitchto
NMS.
ManagedAPmodeactsasa“slave”APwithintheAParray(controlledbythe
APController“master”).
InRepeatermodetheaccesspointconnectswirelesslytoyourexisting
2.4GHzand/or5GHznetworkandrepeatsthewirelesssignal(s).
InManagedAPmodesomefunctionsoftheaccesspointwillbe
disabledinthisuserinterfaceandmustbesetusingNMSonthe
APController.
93
OperationModeAPModeisastandardaccesspointina
wirelessnetwork.
APControllerModeisthemasterofanAP
arrayandcontrolsallothermanagedAPs
(below)usingNMS.
ManagedAPmodeisanAPwhichispartof
theAParrayandismanagedbythe
ControllerAP.
Whenyousettheoperationmodetorepeatermode,theAPwill
notgetanIPaddressfromtherouter/rootAP.Youwillneedto
setyourcomputer’sIPaddressandusetheAPsdefaultIPaddress
toaccesstheUIforthefirsttime,refertoAppendixformorehelp.
NMS
94
NMS
NMS
95
I. ProductInformation

NetworkManagementSuite(NMS)supportsthecentralmanagementofa
groupofaccesspoints,otherwiseknownasanAPArray.AC1750NMS
supportsupto7accesspointswithnoadditionalwirelesscontrollerrequired,
reducingcostsandfacilitatingefficientremoteAPmanagement.
Accesspointscanbedeployedandconfiguredaccordingtorequirements,
creatingapowerfulnetworkarchitecturewhichcanbeeasilymanagedand
expandedinthefuture,withaneasytouseinterfaceandafullrangeof
functionalityidealforsmallandmidsizedofficeenvironments.Asecure
WLANcanbedeployedandadministeredfromasinglepoint,minimizingcost
andcomplexity.
NMS
96
II. QuickSetup
NMSissimpletosetup.Anoverviewofthesystemisshownbelow:
OneAP(accesspoint)isdesignatedastheAPController(master)andother
connectedAPsareautomaticallydesignatedasManagedAPs(slaves).Using
NMSyoucanmonitor,configureandmanageallManagedAPs(upto32)from
thesingleAPController.
WhenusinganNMSAPcontroller,otherconnectedAPsare
automaticallysettoManagedAPs.
NMS
97
Ensureyouhavethelatestfirmwarefromthewebsiteforyour
products.
1. ConnectallAPstoanEthernetorPoEswitchwhichisconnectedtoa
gateway/router.
YoucanuseyourrouterasaDHCPserveroryoucanlater
configureyourAPControllerasaDHCPserver.
2. EnsureallAPsarepoweredonandcheckLEDs.
NMS
98
3. DesignateoneAPastheAPControllerwhichwillmanageallother
connectedAPs(upto8).
4. ConnectacomputertothedesignatedAPControllerusinganEthernet
cable.
NMS
99
5. OpenawebbrowserandentertheAPController’sIPaddressinthe
addressfield.ThedefaultIPaddressis192.168.2.2
Yourcomputer’sIPaddressmustbeinthesamesubnetastheAP
Controller.Refertotheusermanualformorehelp.
IfyouchangedtheAPController’sIPaddress,orifyour
gateway/routerusesaDHCPserver,ensureyouenterthecorrect
IPaddress.Refertoyourgateway/router’ssettings.
6. Entertheusername&passwordtologin.Thedefaultusername&
passwordareadmin&1234.
7. YouwillarriveattheNMSDashboard.Goto“OperationMode”andselect
“APControllerMode”fromthedropdownmenu.
NMS
100
8. Click“Apply”tosavethesettings.
9. NMSincludesawizardtoquicklysetuptheSSID&securityforManaged
APs.Click“Wizard”inthetoprightcornertobegin.
10. FollowtheinstructionscompleteSteps1‐6andclick“Finish”tosave
thesettings.ThewizardwillhelpyousetupLANIPaddress,2.4GHz&
5GHzSSIDandsecurity,administratorname&password,time&date
settingsandManagedAPs.
NMS
101
NMS
102
IfanyofyourManagedAPsarenotfoundduringStep5Select
FreeAPs,resettheManagedAPtoitsfactorydefaultsettings.
RefertotheAP’susermanualforhelp.
11. YourControllerAP&ManagedAPsshouldbefullyfunctional.Usethe
topmenutonavigatearoundNMS.
UseDashboard,ZonePlan,NMSMonitor&NMSSettingstoconfigure
ManagedAPs.
UseLocalNetwork&LocalSettingstoconfigureyourControllerAP.
NMS
103
III. SoftwareLayout

Thetopmenufeatures7panels:Dashboard,ZonePlan,NMSMonitor,NMS
Settings,LocalNetwork,LocalSettings&Toolbox.
Dashboard
TheDashboardpaneldisplaysanoverviewofyournetworkandkeysystem
information,withquicklinkstoaccessconfigurationoptionsforManagedAPs
andManagedAPgroups.Eachpanelcanberefreshed,collapsedormoved
accordingtoyourpreference.
NMS
104
ZonePlan
ZonePlandisplaysacustomizablelivemapofManagedAPsforavisual
representationofyournetworkcoverage.EachAPiconcanbemovedaround
themap,andabackgroundimagecanbeuploadedforuserdefinedlocation
profilesusingNMSSettingsÆZoneEdit.Optionscanbeconfiguredusingthe
menuontherightsideandsignalstrengthisdisplayedforeachAP.
NMS
105
NMSMonitor
TheNMSMonitorpanelprovidesmoredetailedmonitoringinformation
abouttheAPArraythanfoundontheDashboard,groupedaccordingto
categoriesinthemenudowntheleftside.
NMS
106
NMSSettings
NMSSettingsprovidesextensiveconfigurationoptionsfortheAPArray.You
canmanageeachaccesspoint,assignaccesspointsintogroups,manage
WLAN,RADIUS,guestnetwork,guestnetwork,usersandschedulingsettings
aswellasupgradefirmwareacrossmultipleaccesspoints.TheZonePlancan
alsobeconfiguredusing“ZoneEdit”.
NMS
107
LocalNetwork
LocalNetworksettingsareforyourAPController.YoucanconfiguretheIP
addressandDHCPserveroftheAPControllerinadditiontoLANPortand
VLANsettings.
NMS
108
LocalSettings
LocalSettingsareforyourAPController.Youcanviewbasicsystemsettings
andlogsspecificallyfortheAPController,aswellasothermanagement
settingssuchasdate/time,adminaccounts,firmwareandreset.
NMS
109
Toolbox
TheToolboxpanelprovidesanetworkdiagnostictools:pingandtraceroute.
NMS
110
IV. Features

DescriptionsofthefunctionsofeachmainpanelDashboard,ZonePlan,NMS
Monitor,NMSSettings,LocalNetwork,LocalSettings&Toolboxcanbefound
below.WhenusingNMS,click“Apply”tosavechanges:
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV1.LOGIN,LOGOUT&RESTART
ItisrecommendedthatyoulogintotheAPControllertomake
configurationstoManagedAPs.
LOGIN
1. ConnectacomputertothedesignatedAPControllerusinganEthernet
cable:
2. OpenawebbrowserandentertheAPController’sIPaddressinthe
addressfield.ThedefaultIPaddressis192.168.2.1
NMS
111
Yourcomputer’sIPaddressmustbeinthesamesubnetastheAP
Controller.RefertoVI1.ConfiguringyourIPAddressformore
help.
IfyouchangedtheAPController’sIPaddress,orifyour
gateway/routerusesaDHCPserver,ensureyouenterthecorrect
IPaddress.Refertoyourgateway/router’ssettings.
IfusingaDHCPserveronthenetwork,itisadvisedtouseyour
DHCPserver’ssettingstoassigntheAPControllerastaticIP
address.
3. Entertheusername&passwordtologin.Thedefaultusername&
passwordareadmin&1234.
LOGOUT
TologoutfromNMS,click“Logout”inthetoprightcorner:
RESTART
YoucanrestartyourAPControlleroranyManagedAPusingNMS.Torestart
yourAPControllergotoLocalSettingsÆAdvancedÆRebootandclick
“Reboot”.
TorestartManagedAPsclicktheRestarticonforthespecifiedAPonthe
Dashboard:
NMS
112
IV2.DASHBOARD
ThedashboarddisplaysanoverviewofyourAParray:
Usetheblueiconsabovetorefreshorcollapseeachpanelinthedashboard.
Clickanddragtomoveapaneltosuityourpreference.Youcansetthe
dashboardtoautorefreshevery1minute,30secondsordisableautorefresh:
NMS
113
IV21.SystemInformation
SystemInformationdisplaysinformationabouttheAPController:Product
Name(model),HostName,MACAddress,IPAddress,FirmwareVersion,
SystemTimeandUptime(timetheaccesspointhasbeenon),CPUUsage&
MemoryUsage.
IV22.DevicesInformation
DevicesInformationisasummaryofthenumberofalldevicesinthelocal
network:AccessPoints,ClientsConnected,andRogue(unidentified)Devices.
NMS
114
IV23.ManagedAP
ManagedAPdisplaysinformationabouteachManagedAPinthelocal
network:Index(referencenumber),MACAddress,DeviceName,Model,IP
Address,2.4GHz&5GHzWirelessChannelNumber,No.ofClientsconnected
toeachaccesspoint,andStatus(connected,connectingordisconnected).
ThesearchfunctioncanbeusedtolocateaspecificManagedAP.Typeinthe
searchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),yellow(connecting)orgreen
(connected)foreachManagedAP.
EachManagedAPhasActioniconswiththefollowingfunctions:
1. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
2. Edit
EditvarioussettingsfortheManagedAP(refertoIV51.AccessPoint).
3. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&locate
accesspoints.
NMS
115
4. Buzzer
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&locate
accesspoints.
5. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
6. Restart
RestartstheManagedAP.
IV24.ManagedAPGroup
ManagedAPscanbegroupedaccordingtoyourrequirements.ManagedAP
GroupdisplaysinformationabouteachManagedAPgroupinthelocal
network:GroupName,MACAddress,DeviceName,Model,IPAddress,No.of
Clientsconnectedtoeachaccesspoint,andStatus(connectedor
disconnected).
ToeditManagedAPGroupsgotoNMSSettingsÆAccessPoint(referto
IV51.AccessPoint).
ThesearchfunctioncanbeusedtolocateaspecificManagedAPGroup.Type
inthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),yellow(connecting)orgreen
(connected)foreachindividualManagedAP.
EachManagedAPhasActioniconswiththefollowingfunctions:
NMS
116
1. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
2. Edit
EditvarioussettingsfortheManagedAP(refertoIV51.AccessPoint)
3. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&locate
accesspoints.
4. Buzzer
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&locate
accesspoints.
5. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
6. Restart
RestartstheManagedAP.
IV25.ActiveClients
ActiveClientsdisplaysinformationabouteachclientinthelocalnetwork:
Index(referencenumber),ClientMACAddress,APMACAddress,WLAN,User
Name,Radio(frequency),SignalStrength,ConnectedTime,IdleTime,Tx&Rx
(datatransmittedandreceived)andVendoroftheclientdevice.
Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthesearch
boxandthelistwillupdate:
NMS
117
IV26.ActiveUsers
ActiveUsersdisplaysinformationabouteachuserinthelocalnetworkvia
guestportals:Index(referencenumber),UserName,MACAddress,IPAddress,
SSID,Creator,CreateTime,ExpireTime,UsagePercentage,Vendor&Platform
oftheuserdevice.
Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthesearch
boxandthelistwillupdate:
NMS
118
IV3.ZONEPLAN
TheZonePlancanbefullycustomizedtomatchyournetworkenvironment.
YoucanmovetheAPiconsandselectdifferentlocationimages(upload
locationimagesinNMSSettingsÆZoneEdit)tocreateavisualmapofyour
AParray.
UsethemenuontherightsidetomakeadjustmentsandmouseoveranAP
iconinthezonemaptoseemoreinformation.ClickanAPiconinthezone
maptoselectitanddisplayactionicons:
NMS
119
ClickanddraganAPicontomovetheiconaroundthezonemap.Thesignal
strengthforeachAPisdisplayedaccordingtothe“Signal”keyinthemenuon
therightside:
LocationSelectapredefinedlocationfromthedrop
downmenu.Whenyouuploadalocation
imageinNMSSettingsÆZoneEdit,itwillbe
availableforselectionhere.
APGroupYoucanselectanAPGrouptodisplayinthe
zonemap.EditAPGroupsinNMSSettingsÆ
AccessPoint.
SearchUsethesearchboxtoquicklylocateanAP.
RadioUsethecheckboxestodisplayAPsaccording
to2.4GHzor5GHzwirelessradiofrequency.
SignalSignalstrengthkeyforthesignalstrength
displayaroundeachAPinthezonemap.
ZoomUsetheslidertoadjustthezoomlevelofthe
map.
TransparencyUsetheslidertoadjustthetransparencyof
locationimages.
ScaleZonemapscale.
Device/NumberDisplaysnumberandtypeofdevicesinthe
zonemap.
NMS
120
IV4.NMSMONITOR
IV41.AccessPoint
IV411.ManagedAP
DisplaysinformationabouteachManagedAPinthelocalnetwork:Index
(referencenumber),MACAddress,DeviceName,Model,IPAddress,2.4GHz&
5GHzWirelessChannelNumber,No.ofClientsconnectedtoeachaccesspoint,
andStatus(connected,connectingordisconnected).
ThesearchfunctioncanbeusedtolocateaspecificManagedAP.Typeinthe
searchboxandthelistwillupdate:
TheStatusicondisplaysthestatusofeachManagedAP.
StatusIcons
IconColorStatusDefinition
GreyDisconnected
ManagedAPisdisconnected.Please
checkthenetworkconnectionandensure
theManagedAPisinthesameIPsubnet
astheAPController.
Red
Authentication
Failed
Systemsecuritymustbethesameforall
accesspointsintheAParray.Please
checksecuritysettings(refertoIV581.
NMS
121
Or
Incompatible
NMSVersion
SystemSecurity).
Accesspointsmustusethesameversion
ofNMS:themanagedAPwillnotbe
abletomakeconfigurations.Pleaseuse
theAPController’sfirmwareupgrade
function(refertoIV57.Firmware
Upgrade).
OrangeConfiguringor
Upgrading
PleasewaitwhiletheManagedAPmakes
configurationsorwhilethefirmwareis
upgrading.
YellowConnecting
PleasewaitwhileManagedAPis
connecting.
GreenConnected
ManagedAPisconnected.
BlueWaitingfor
Approval
ManagedAPiswaitingforapproval.
RefertoIV51.AccessPoint:Auto
Approval.Note:32ManagedAPsare
supported.AdditionalAPswilldisplaythis
statusuntilanexistingManagedAPis
removed.
EachManagedAPhasActioniconswiththefollowingfunctions:
1. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
1. Edit
EditvarioussettingsfortheManagedAP(refertoIV51.AccessPoint).
2. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&locate
accesspoints.
3. Buzzer
NMS
122
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&locate
accesspoints.
4. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
5. Restart
RestartstheManagedAP.
IV412.ManagedAPGroup
ManagedAPscanbegroupedaccordingtoyourrequirements.ManagedAP
displaysinformationabouteachManagedAPinthelocalnetwork:Index
(referencenumber),MACAddress,DeviceName,Model,IPAddress,2.4GHz&
5GHzWirelessChannelNumber,No.ofClientsconnectedtoeachaccesspoint,
andStatus(connected,connectingordisconnected).
ToeditManagedAPGroupsgotoNMSSettingsÆAccessPoint(referto
IV51.AccessPoint).
ThesearchfunctioncanbeusedtolocateaspecificManagedAPGroup.Type
inthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),red(authentication
failed/incompatibleNMSversion),orange(upgradingfirmware),yellow
(connecting),green(connected)orblue(waitingforapproval)foreach
NMS
123
individualManagedAP.RefertoIV411.ManagedAP:StatusIconsforfull
descriptions.
EachManagedAPhasActioniconswiththefollowingfunctions:
2. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
3. Edit
EditvarioussettingsfortheManagedAP(refertoIV51.AccessPoint).
4. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&locate
accesspoints.
5. Buzzer
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&locate
accesspoints.
6. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
7. Restart
RestartstheManagedAP.
NMS
124
IV42.WLAN
IV421.ActiveWLAN
DisplaysinformationabouteachSSIDintheAPArray:Index(reference
number),Name/SSID,VLANID,Authentication,Encryption,IPAddressand
AdditionalAuthentication.
ToconfigureencryptionandVLANsforManagedAPsgotoNMSSettingsÆ
WLAN.
ThesearchfunctioncanbeusedtolocateaspecificSSID.Typeinthesearch
boxandthelistwillupdate:
NMS
125
IV422.ActiveWLANGroup
WLANgroupscanbecreatedaccordingtoyourpreference.ActiveWLAN
GroupdisplaysinformationaboutWLANgroup:GroupName,Name/SSID,
VLANID,Authentication,Encryption,IPAddressandAdditional
Authentication.
ThesearchfunctioncanbeusedtolocateaspecificActiveWLANGroup.Type
inthesearchboxandthelistwillupdate:
IV43.Clients
IV431.ActiveClients
DisplaysinformationaboutclientscurrentlyconnectedtotheAPArray:Index
(referencenumber),ClientMACAddress,APMACAddress,WLAN(SSID),User
Name,Radio(2.4GHzor5GHz),SignalStrengthreceivedbyClient,Connected
Time,IdleTime,Tx&Rx(DatatransmittedandreceivedbyClientinKB)..
Youcansetordisabletheautorefreshtimefortheclientlistorclick
“Refreshtomanuallyrefresh.
Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthesearch
boxandthelistwillupdate:
NMS
126
IV44.RogueDevices
Rogueaccesspointdetectioncanidentifyanyunauthorizedaccesspoints
whichmayhavebeeninstalledinthenetwork.
Click“Start”toscanforroguedevices:
UnknownRogueDevicesdisplaysinformationaboutroguedevicesdiscovered
duringthescan:Index(referencenumber),Channel,SSID,MACAddress,
Security,SignalStrength,Type,VendorandAction.
Thesearchfunctioncanbeusedtolocateaknownroguedevice.Typeinthe
searchboxandthelistwillupdate:
NMS
127
IV45.Information
IV451.AllEvents/Activities
DisplaysalogoftimestampedeventsforeachaccesspointintheArrayuse
thedropdownmenutoselectanaccesspointandviewthelog.
NMS
128
IV452.Monitoring
DisplaysgraphicalmonitoringinformationaboutaccesspointsintheArrayfor
2.4GHz&5GHz:TrafficTx(datatransmittedinMB),TrafficRx(datareceived
inMB),No.ofClients,WirelessChannel,TxPower(wirelessradiopower),CPU
UsageandMemoryUsage.
Usethedropdownmenustoselectanaccesspointanddate.
Youcansetordisabletheautorefreshtimeforthedata:
NMS
129
IV5.NMSSettings
IV51.AccessPoint
Displaysinformationabouteachaccesspointandaccesspointgroupinthe
localnetworkandallowsyoutoeditaccesspointsandeditoraddaccess
pointgroups.
Thesearchfunctioncanbeusedtolocateanaccesspointoraccesspoint
group.Typeinthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),red(authentication
failed/incompatibleNMSversion),orange(upgradingfirmware),yellow
(connecting),green(connected)orblue(waitingforapproval)foreach
individualManagedAP.RefertoIV411.ManagedAP:StatusIconsforfull
descriptions.
NMS
130
The“Action”iconsenableyoutoallowordisallowanaccesspoint:
Selectanaccesspointoraccesspointgroupusingthe
checkboxesandclickEdittomakeconfigurations,orclick
Addtoaddanewaccesspointgroup:
TheAccessPointSettingspanelcanenableordisableAuto
ApproveforallManagedAPs.Whenenabled,ManagedAPswillautomatically
jointheAPArraywiththeControllerAP.Whendisabled,ManagedAPsmust
bemanuallyapprovedtojointheAPArraywiththeControllerAP.
AccessPointSettings
AutoApproveEnableordisableAutoApproveforall
ManagedAPs.
TomanuallyapproveaManagedAP,usetheallow“Action”iconforthe
specifiedaccesspoint:
EditAccessPoint
ConfigureyourselectedaccesspointonyourLAN.Youcansettheaccess
pointasaDHCPclientorspecifyastaticIPaddressforyouraccesspoint,and
assigntheaccesspointtoanAPgroup,aswellasedit2.4GHz&5GHzwireless
radiosettings.Aneventslogisdisplayedatthebottomofthepage.
YoucanalsouseProfileSettingstoassigntheaccesspointtoWLAN,Guest
Network,RADIUSandAccessControlgroupsindependentlyfromAccessPoint
Groupsettings.
ChecktheOverrideGroupSettingsboxtousedifferentindividualsettings
foraccesspointsassignedtoAPGroups:
NMS
131
BasicSettings
NameEdittheaccesspointname.Thedefaultname
isAP+MACaddress.
DescriptionEnteradescriptionoftheaccesspointfor
referencee.g.2ndFloorOffice.
MACAddressDisplaysMACaddress.
APGroupUsethedropdownmenutoassigntheAPto
anAPGroup.YoucaneditAPGroupsfrom
theNMSSettingsÆAccessPointpage.
IPAddress
Assignment
Select“DHCPClient”foryouraccesspointto
beassignedadynamicIPaddressfromyour
router’sDHCPserver,orselect“StaticIP”to
manuallyspecifyastatic/fixedIPaddressfor
youraccesspoint(below).Checkthebox
“OverrideGroupSetting”iftheAPisa
memberofanAPGroupandyouwishtouse
adifferentsettingthantheAPGroupsetting.
IPAddressSpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
NMS
132
255.255.255.0
DefaultGatewayForDHCPusers,select“FromDHCP”toget
defaultgatewayfromyourDHCPserveror
“UserDefined”toenteragatewaymanually.
ForstaticIPusers,thedefaultvalueisblank.
PrimaryDNSDHCPuserscanselect“FromDHCP”toget
primaryDNSserver’sIPaddressfromDHCPor
“UserDefined”tomanuallyenteravalue.For
staticIPusers,thedefaultvalueisblank.
SecondaryDNSDHCPuserscanselect“FromDHCP”toget
secondaryDNSserver’sIPaddressfromDHCP
or“UserDefined”tomanuallyenteravalue.
ForstaticIPusers,thedefaultvalueisblank.
VLANSettings
WiredLANPortIdentifiesLANport1or2.
VLANModeSelect“TaggedPort”or“UntaggedPort”for
specifiedLANinterface.
VLANIDSetaVLANIDforspecifiedinterface,if
“UntaggedPort”isselected.
ManagementVLAN
VLANIDCheck‘OverrideDefaultSetting’tospecifythe
VLANIDofthemanagementVLAN.Onlythe
hostsbelongingtothesameVLANcanmanage
thedevice.
NMS
133
RadioSettings
DomainSettheregulatorydomainfortheaccess
point’swirelesschannelsforeachfrequency.
WirelessEnableordisabletheaccesspoint’s2.4GHzor
5GHzwirelessradio.Whendisabled,noSSIDs
onthatfrequencywillbeactive.
BandSelectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11b,
802.11g,802.11n&802.11accanbeselected.
AutoPilotEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s2.4GHz
or5GHzfrequencybasedonavailabilityand
potentialinterference.Whendisabled,select
achannelmanually.
AutoPilotRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
NMS
134
AutoPilotIntervalSpecifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidthoruseAuto
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe
valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
AdvancedSettings
ContentionSlotSelect“Short”or“Long”thisvalueisusedfor
contentionwindowsinWMM(seeIV67.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
NMS
135
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
ProfileSettings
WLANGroupAssigntheaccesspoint’s2.4GHzor5GHz
SSID(s)toaWLANGroup.YoucaneditWLAN
groupsinNMSSettingsÆWLAN.
GuestNetwork
Group
Assigntheaccesspoint’s2.4GHzor5GHz
SSID(s)toaGuestNetworkGroup.Youcan
editGuestNetworkgroupsinNMSSettings
NMS
136
ÆGuestNetwork.
RADIUSGroupAssigntheaccesspoint’s2.4GHzSSID(s)toa
RADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettingsÆRADIUS.
AccessControl
Group
Assigntheaccesspoint’s2.4GHzSSID(s)toa
RADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettingsÆAccessControl
NMS
137
Add/EditAccessPointGroup
Configureyourselectedaccesspointgroup.Accesspointgroupsettingsapply
toallaccesspointsinthegroup,unlessindividuallysettooverridegroup
settings.
YoucanuseProfileGroupSettingstoassigntheaccesspointgrouptoWLAN,
GuestNetwork,RADIUSandAccessControlgroups.
TheGroupSettingspanelcanbeusedtoquicklymoveaccesspointsbetween
existinggroups:selectanaccesspointandusethedropdownmenuorsearch
toselectaccesspointgroupsanduse<<and>>arrowstomoveAPsbetween
groups.
BasicGroupSettings
NameEdittheaccesspointgroupname.
DescriptionEnteradescriptionoftheaccesspointgroup
forreferencee.g.2ndFloorOfficeGroup.
VLANGroupSettings
WiredLANPortIdentifiesLANport1or2.
VLANModeSelect“TaggedPort”or“UntaggedPort”for
specifiedLANinterface.
VLANIDSetaVLANIDforspecifiedinterface,if
“UntaggedPort”isselected.
ManagementVLAN
VLANIDCheck‘OverrideDefaultSetting’tospecifythe
VLANIDofthemanagementVLAN.Onlythe
hostsbelongingtothesame VLANcanmanage
NMS
138
thedevice.
RadioGroupSettings
DomainSettheregulatorydomainfortheaccess
point’swirelesschannelsforeachfrequency.
WirelessEnableordisabletheaccesspointgroup’s
2.4GHzor5GHzwirelessradio.When
disabled,noSSIDsonthatfrequencywillbe
active.
BandSelectthewirelessstandardusedforthe
accesspointgroup.Combinationsof802.11b,
802.11g,802.11n&802.11accanbeselected.
AutoPilotEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspointgroup’s
2.4GHzor5GHzfrequencybasedon
availabilityandpotentialinterference.When
disabled,selectachannelmanually.
AutoPilotRangeSelectarangefromwhichtheautochannel
NMS
139
setting(above)willchooseachannel.
AutoPilotIntervalSpecifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidthoruseAuto
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe
valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoints.
AdvancedSettings
ContentionSlotSelect“Short”or“Long”thisvalueisusedfor
contentionwindowsinWMM(seeIV67.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
NMS
140
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
NMS
141
ProfileGroupSettings
WLANGroupAssigntheaccesspointgroup’s2.4GHzor
5GHzSSIDstoaWLANGroup.Youcanedit
WLANgroupsinNMSSettingsÆWLAN.
GuestNetwork
Group
Assigntheaccesspointgroup’s2.4GHzor
5GHzSSIDstoaGuestNetworkGroup.You
caneditGuestNetworkgroupsinNMS
SettingsÆGuestNetwork.
RADIUSGroupAssigntheaccesspointgroup’s2.4GHzSSIDs
toaRADIUSgroup.YoucaneditRADIUS
groupsinNMSSettingsÆRADIUS.
AccessControl
Group
Assigntheaccesspoint’s2.4GHzSSIDstoa
RADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettingsÆAccessControl.
NMS
142
IV52.WLAN
DisplaysinformationabouteachWLANandWLANgroupinthelocalnetwork
andallowsyoutoaddoreditWLANs&WLANGroups.WhenyouaddaWLAN
Group,itwillbeavailableforselectioninNMSSettingsÆAccessPointaccess
pointProfileSettings&accesspointgroupProfileGroupSettings(IV51.)
ThesearchfunctioncanbeusedtolocateaWLANorWLANGroup.Typein
thesearchboxandthelistwillupdate:
SelectaWLANorWLANGroupusingthecheckboxesand
clickEditorclickAddtoaddanewWLANorWLAN
Group:
NMS
143
Add/EditWLAN
WLANSettings
Name/ESSIDEdittheWLANname(SSID).
DescriptionEnteradescriptionoftheSSIDforreference
e.g.2ndFloorOfficeHR.
SSIDSelectwhichSSIDtoconfiguresecurity
settingsfor.
VLANIDSpecifytheVLANID.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsas
anavailableWiFinetwork.Whendisabled,
theSSIDwillnotbevisibleasanavailable
WiFinetworktoclientsclientsmust
manuallyentertheSSIDinordertoconnect.
Ahidden(disabled)SSIDistypicallymore
securethanavisible(enabled)SSID.
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattackson
clients’usernamesandpasswords.
NMS
144
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication
Method
Selectanauthenticationmethodfromthe
dropdownmenu.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenu.
Varioussecurityoptions(wirelessdataencryption)areavailable.Whendatais
encrypted,informationtransmittedwirelesslycannotbereadbyanyonewho
doesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthardtoguesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
PleaserefertoIV521.NoAuthenticationandonwardsbelowformore
informationonauthenticationandadditionalauthenticationtypes.
WLANAdvancedSettings
SmartHandoverEnableordisableSmartHandover.
RSSIThresholdSetaRSSIThresholdlevel.
ScheduleGroupAssigntoaspecifiedschedule(schedulemust
bepreconfiguredinNMSSettingsÆ
Schedule.)
IV521. NoAuthentication
Authenticationisdisabledandnopassword/keyisrequiredtoconnecttothe
accesspoint.
Disablingwirelessauthenticationisnotrecommended.When
disabled,anybodywithinrangecanconnecttoyourdevice’sSSID.
IV522. WEP
NMS
145
WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Forahigher
levelofsecurityconsiderusingWPAencryption.
KeyLengthSelect64bitor128bit.128bitismoresecure
than64bitandisrecommended.
KeyTypeChoosefrom“ASCII”(anyalphanumerical
character09,azandAZ)or“Hex”(any
charactersfrom09,afandAF).
DefaultKeySelectwhichencryptionkey(14below)isthe
defaultkey.Forsecuritypurposes,youcanset
uptofourkeys(below)andchangewhichis
thedefaultkey.
EncryptionKey1
4
Enteryourencryptionkey/passwordaccording
totheformatyouselectedabove.
IV523. IEEE802.1x/EAP
KeyLengthSelect64bitor128bit.128bitismoresecure
than64bitandisrecommended.
IV524. WPAPSK
WPAPSKisasecurewirelessencryptiontypewithstrongdata
protectionanduserauthentication,utilizing128bitencryptionkeys.
WPATypeSelectfromWPA/WPA2MixedModePSK,
WPA2orWPAonly.WPA2issaferthanWPA
only,butnotsupportedbyallwirelessclients.
Pleasemakesureyourwirelessclientsupports
yourselection.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
PreSharedKey
Type
Choosefrom“Passphrase”(863
alphanumericcharacters)or“Hex”(upto64
charactersfrom09,afandAF).
PreSharedKeyPleaseenterasecuritykey/passwordaccording
NMS
146
totheformatyouselectedabove.
IV525. WPAEAP
WPATypeSelectfromWPA/WPA2MixedModeEAP,
WPA2EAPorWPAEAP.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
WPAEAPmustbedisabledtouseMACRADIUSauthentication.
IV526. AdditionalAuthentication
Additionalwirelessauthenticationmethodscanalsobeused:
MACAddressFilter
RestrictwirelessclientsaccessbasedonMACaddressspecifiedintheMAC
filtertable.
SeeIV54.MACFiltertoconfigureMACfiltering.
MACFilter&MACRADIUSAuthentication
RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering&
RADIUSauthenticationmethods.
MACRADIUSAuthentication
RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,or
passwordauthenticationviaaRADIUSserver.
SeeIV53.RADIUStoconfigureRADIUSservers.
MACRADIUS
Password
SelectwhethertouseMACaddressor
passwordauthenticationviaRADIUSserver.If
youselect“Usethefollowingpassword”,enter
NMS
147
thepasswordinthefieldbelow.Thepassword
shouldmatchthe“SharedSecret”usedin
IV53.RADIUS.
Add/EditWLANGroup
WhenyouaddaWLANGroup,itwillbeavailableforselectioninNMS
SettingsÆAccessPointaccesspointProfileSettings&accesspointgroup
ProfileGroupSettings(IV51.)
WLANGroupSettings
NameEdittheWLANGroupname.
DescriptionEnteradescriptionoftheWLANGroupfor
referencee.g.2ndFloorOfficeHRGroup.
MembersSelectSSIDstoincludeinthegroupusingthe
checkboxesandassignVLANIDs.Youcan
overrideindividualschedulesettingsand
assignadifferentschedule.
NMS
148
IV53.RADIUS
DisplaysinformationaboutExternal&InternalRADIUSServers,Accountsand
GroupsandallowsyoutoaddoreditRADIUSServers,Accounts&Groups.
WhenyouaddaRADIUSGroup,itwillbeavailableforselectioninNMS
SettingsÆAccessPointaccesspointProfileSettings&accesspointgroup
ProfileGroupSettings(IV51.)
ThesearchfunctioncanbeusedtolocateaRADIUSServer,AccountorGroup.
Typeinthesearchboxandthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEditor
clickAddtoaddanewWLANorWLANGroup:
NMS
149
Add/EditExternalRADIUSServer
NameEnteranamefortheRADIUSServer.
DescriptionEnteradescriptionoftheRADIUSServerfor
reference.
RADIUSServerEntertheRADIUSserverhostIPaddress.
Authentication
Port
SettheUDPportusedintheauthentication
protocoloftheRADIUSserver.Valuemustbe
between165535.
SharedSecretEnterasharedsecret/passwordbetween1
99charactersinlength.Thisshouldmatchthe
“MACRADIUS”passwordusedinIV3136or
IV323.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between086400.
AccountingEnableordisableRADIUSaccounting.
AccountingPortWhenaccountingisenabled(above),setthe
UDPportusedintheaccountingprotocolof
theRADIUSserver.Valuemustbebetween1
65535.
NMS
150
Add/EditInternalRADIUSServer
UploadEAPCertificateFile
EAPCertificateFile
Format
DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaselfmade
certificate.
InternalRADIUSServer
NameEnteranamefortheInternalRADIUSServer.
DescriptionEnteradescriptionoftheInternalRADIUS
Serverforreference.
EAPCertificateFile
Format
DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaselfmade
certificate.
NMS
151
EAPInternal
Authentication
SelectEAPinternalauthenticationtypefrom
thedropdownmenu.
SharedSecretEnterasharedsecret/passwordforuse
betweentheinternalRADIUSserverand
RADIUSclient.Thesharedsecretshouldbe1
99charactersinlength.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between086400.
TerminationActionSelectaterminationactionattribute:
“Reauthentication”sendsaRADIUSrequestto
theaccesspoint,“NotReathentication”sends
adefaultterminationactionattributetothe
accesspoint,“NotSend”no
terminationactionattributeissenttothe
accesspoint.
Add/EditRADIUSAccounts
TheinternalRADIUSservercanauthenticateupto256useraccounts.The
“RADIUSAccounts”pageallowsyoutoconfigureandmanageusers.
NMS
152
RADIUSAccounts
UserNameEntertheusernameshere,separatedby
commas.
AddClick“Add”toaddtheusertotheuser
registrationlist.
ResetCleartextfromtheusernamebox.
UserRegistrationList
SelectChecktheboxtoselectauser.
UserNameDisplaystheusername.
PasswordDisplaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured).
CustomizeClick“Edit”toopenanewfieldtoset/edita
passwordforthespecifiedusername(below).
DeleteSelectedDeleteselecteduserfromtheuserregistration
list.
DeleteAllDeleteallusersfromtheuserregistrationlist.
EditUserRegistrationList
UserNameExistingusernameisdisplayedhereandcan
beeditedaccordingtoyourpreference.
PasswordEnteroreditapasswordforthespecifieduser.
NMS
153
Add/EditRADIUSGroup
WhenyouaddaRADIUSGroup,itwillbeavailableforselectioninNMS
SettingsÆAccessPointaccesspointProfileSettings&accesspointgroup
ProfileGroupSettings(IV51.)
RADIUSGroupSettings
GroupNameEdittheRADIUSGroupname.
DescriptionEnteradescriptionoftheRADIUSGroupfor
reference.
2.4GHzRADIUSEnable/Disableprimary&secondaryRADIUS
serversfor2.4GHz.
5GHzRADIUSEnable/Disableprimary&secondaryRADIUS
serversfor5GHz.
MembersAddRADIUSuseraccountstotheRADIUS
group.
NMS
154
IV54.AccessControl
MACAccessControlisasecurityfeaturethatcanhelptoprevent
unauthorizedusersfromconnectingtoyouraccesspoint.
Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto
connecttotheaccesspoint.DevicesareeachidentifiedbytheiruniqueMAC
address.IfadevicewhichisnotonthelistofpermittedMACaddresses
attemptstoconnecttotheaccesspoint,itwillbedenied.
TheAccessControlpaneldisplaysinformationaboutMACAccessControl&
MACAccessControlGroupsandGroupsandallowsyoutoaddoreditMAC
AccessControl&MACAccessControlGroupsettings.Whenyouaddan
AccessControlGroup,itwillbeavailableforselectioninNMSSettingsÆ
AccessPointaccesspointProfileSettings&accesspointgroupProfileGroup
Settings(IV51.)
ThesearchfunctioncanbeusedtolocateaMACaddressorMACAccess
ControlGroup.Typeinthesearchboxandthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEditor
clickAddtoaddanewMACAddressorMACAccessControl
Group:
NMS
155
Add/EditMACAccessControl
AddMACAddressEnteraMACaddressofcomputerornetwork
devicemanuallye.g.‘aabbccddeeff’or
entermultipleMACaddressesseparatedwith
commas,e.g.
‘aabbccddeeff,aabbccddeegg’
AddClick“Add”toaddtheMACaddresstothe
MACaddressfilteringtable.
ResetClearallfields.
MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.Select
anentryusingthe“Select”checkbox.
SelectDeleteselectedorallentriesfromthetable.
MACAddressTheMACaddressislistedhere.
DeleteSelectedDeletetheselectedMACaddressfromthe
list.
DeleteAllDeleteallentriesfromtheMACaddress
filteringtable.
ExportClick“Export”tosaveacopyoftheMAC
filteringtable.Anewwindowwillpopupfor
youtoselectalocationtosavethefile.
NMS
156
Add/EditMACAccessControlGroup
WhenyouaddanAccessControlGroup,itwillbeavailableforselectionin
NMSSettingsÆAccessPointaccesspointProfileSettings&accesspoint
groupProfileGroupSettings(IV51.)
MACFilterGroupSettings
GroupNameEdittheMACAccessControlGroupname.
DescriptionEnteradescriptionoftheMACAccessControl
Groupforreference.
ActionSelect“Blacklist”todenyaccesstospecified
MACaddressesinthegroup,andselect
“Whitelist”topermitaccesstospecifiedMAC
addressinthegroup.
MembersAddMACaddressestothegroup.
NMS
157
IV55.GuestNetwork
Youcansetupanadditional“Guest”WiFinetworksoguestuserscanenjoy
WiFiconnectivitywithoutaccessingyourprimarynetworks.The“Guest”
screendisplayssettingsforyourguestWiFinetwork.
TheGuestNetworkpaneldisplaysinformationaboutGuestNetworksand
GuestNetworkGroupsandallowsyoutoaddoreditGuestNetworkand
GuestNetworkGroupsettings.WhenyouaddaGuestNetworkGroup,itwill
beavailableforselectioninNMSSettingsÆAccessPointaccesspointProfile
Settings&accesspointgroupProfileGroupSettings(IV51.)
ThesearchfunctioncanbeusedtolocateaGuestNetworkorGuestNetwork
Group.Typeinthesearchboxandthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEditor
clickAddtoaddanewGuestNetworkorGuestNetwork
Group.
NMS
158
Add/EditGuestNetwork
GuestNetworkSettings
Name/ESSIDEdittheGuestNetworkname(SSID).
DescriptionEnteradescriptionoftheGuestNetworkfor
referencee.g.2ndFloorOfficeHR.
VLANIDSpecifytheVLANID.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsas
anavailableWiFinetwork.Whendisabled,
theSSIDwillnotbevisibleasanavailable
WiFinetworktoclientsclientsmust
manuallyentertheSSIDinordertoconnect.
Ahidden(disabled)SSIDistypicallymore
securethanavisible(enabled)SSID.
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
NMS
159
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattackson
clients’usernamesandpasswords.
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
WMMEnableordisableWMM(WiFiMultimedia)
trafficprioritizing.
Authentication
Method
Selectanauthenticationmethodfromthe
dropdownmenu.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenu.
Varioussecurityoptions(wirelessdataencryption)areavailable.Whendatais
encrypted,informationtransmittedwirelesslycannotbereadbyanyonewho
doesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthardtoguesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
PleaserefertoIV623.Securityformoreinformationonauthenticationand
additionalauthenticationtypes.
GuestAccessPolicy
GuestPortalSelectaguestportaltouseforthisguest
SSID.GuestportalscanbeconfiguredinNMS
SettingsÆGuestPortal.
TrafficShapingEnableordisabletrafficshapingfortheguest
network.
DownlinkEnteradownlinklimitinMB.
UplinkEnteranuplinklimitinMB.
IPFilteringSelect“Deny”or“Allow”todenyorallow
specifiedIPaddressestoaccesstheguest
network.Select“Disable”todisableIP
NMS
160
filtering.
RulesEnterIPaddressestobefilteredaccordingto
theDenyorAllowrulespecifiedaboveand
checktheboxforeachIPaddresstobe
filtered.
GuestNetworkAdvancedSettings
ScheduleGroupAssignguestSSIDtoaspecifiedschedule
(schedulemustbepreconfiguredinNMS
SettingsÆSchedule.)
Add/EditGuestNetworkGroup
WhenyouaddaGuestNetworkGroup,itwillbeavailableforselectionin
NMSSettingsÆAccessPointaccesspointProfileSettings&accesspoint
groupProfileGroupSettings(IV51.)
GuestNetworkGroupSettings
GroupNameEdittheGuestNetworkGroupname.
DescriptionEnteradescriptionoftheGuestNetworkfor
reference.
MembersAddSSIDstotheGuestNetworkgroup.You
canoverrideindividualVLANID&schedule
settingsandassignadifferentVLANIDor
schedule.

NMS
161
IV56.ZoneEdit
ZoneEditdisplaysinformationaboutzonesforusewiththeZonePlanfeature
andallowsyoutoaddoreditzones.
Thesearchfunctioncanbeusedtofindexistingzones.Typeinthesearchbox
andthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEditor
clickAddtoaddanewzone.
NMS
162
Add/EditZone
UploadZoneImage
ChooseFileClicktolocateanimagefiletobedisplayedas
amapintheZonePlanfeature.Typicallya
floorplanimageisuseful.
ZoneSetting
Name/LocationEnteranameofthezone/location.
DescriptionEnteradescriptionofthezone/locationfor
reference.
MembersAssignaccesspointstothespecified
zone/locationforusewiththeZonePlan
feature.
NMS
163
IV57.Schedule
Youcandefineschedulesaccordingtoday,starttimeandendtime‐and
groupmultipleschedulestogetherintoschedulegroups.
SchedulegroupscanbeassignedtoWLANs,WLANGroups&GuestNetwork
atNMSSettingsÆWLANandNMSSettingsÆGuestNetwork.
Add/EditSchedule
Usethecheckboxesanddropdownmenustosetupyourschedule.
NMS
164
Add/EditScheduleGroup
WLANGroupSettings
NameEdittheschedulegroupname.
DescriptionEnteradescriptionoftheschedulegroupfor
reference.
MembersSelectindividualschedulestoincludeinthe
schedulegroupusingthecheckboxes.
NMS
165
IV58.DeviceMonitoring
DevicemonitoringenablesyoutospecifyandmonitorthestatusanyIP
devicesonthenetworksuchasIPcameras.Thedescriptionandstatusofeach
deviceisdisplayedinthetable.
AddorEditIPdevicesbyenteringtheIPaddress.
NMS
166
IV59.FirmwareUpgrade
FirmwareUpgradeallowsyoutoupgradefirmwaretoAccessPointGroups.
First,uploadthefirmwarefilefromalocaldiskorexternalFTPserver:locate
thefileandclick“Upload”youcansetatimeoutlimitfortheuploadas
desired.ThetablebelowwilldisplaytheFirmwareName,FirmwareVersion,
NMSVersion,ModelandSize.
Thenclick“UpgradeAll”toupgradeallaccesspointsintheArrayorselect
AccessPointgroupsfromthelistusingcheckboxesandclick“Upgrade
Selectedtoupgradeonlyselectedaccesspoints.
NMS
167
IV510. Advanced
IV5101.SystemSecurity
ConfiguretheNMSsystemloginnameandpassword.
IV5102.Date&Time
Configurethedate&timesettingsoftheAPArray.Thedateandtimeofthe
accesspointscanbeconfiguredmanuallyorcanbesynchronizedwithatime
server.
DateandTimeSettings
LocalTimeSettheaccesspoint’sdateandtimemanually
usingthedropdownmenus.
AcquireCurrent
TimefromyourPC
Click“AcquireCurrentTimefromYourPC”to
entertherequiredvaluesautomatically
accordingtoyourcomputer’scurrenttimeand
date.
NTPTimeServer
NMS
168
UseNTPTheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddate
setup.
ServerNameEnterthehostnameorIPaddressofthetime
serverifyouwish.
UpdateIntervalSpecifyafrequency(inhours)fortheaccess
pointtoupdate/synchronizewiththeNTP
server.
TimeZone
TimeZoneSelectthetimezoneofyourcountry/region.If
yourcountry/regionisnotlisted,pleaseselect
anothercountry/regionwhosetimezoneisthe
sameasyours.
NMS
169
IV6.LocalNetwork
IV61.NetworkSettings
IV611.LANSideIPAddress
The“LANsideIPaddress”pageallowsyoutoconfigureyourAPControlleron
yourLocalAreaNetwork(LAN).Youcanenabletheaccesspointto
dynamicallyreceiveanIPaddressfromyourrouter’sDHCPserveroryoucan
specifyastaticIPaddressforyouraccesspoint,aswellasconfigureDNS
servers.YoucanalsosetyourAPControllerasaDHCPservertoassignIP
addressestootherdevicesonyourLAN.
Theaccesspoint’sdefaultIPaddressis192.168.2.2
DisableotherDHCPserversontheLANifusingAPControllers
DHCPServer.
LANsideIPAddress
IPAddress
Assignment
Select“StaticIP”tomanuallyspecifya
static/fixedIPaddressforyouraccesspoint.
Select“DHCPClient”foryouraccesspointto
beassignedadynamicIPaddressfromyour
router’sDHCPserver,orselect“DHCPServer”
foryouraccesspointtoactasaDHCPserver
andassignIPaddressesonyourLAN.
StaticIPAddress
IPAddressSpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
NMS
170
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
255.255.255.0
DefaultGatewayForDHCPusers,select“FromDHCP”toget
defaultgatewayfromyourDHCPserveror
“UserDefined”toenteragatewaymanually.
ForstaticIPusers,thedefaultvalueisblank.
PrimaryDNS
Address
ForstaticIPusers,thedefaultvalueisblank.
SecondaryDNS
Address
ForstaticIPusers,thedefaultvalueisblank.
DHCPClient
IPAddressWhen“DHCPClient”isselectedthisvalue
cannotbemodified.
SubnetMaskWhen“DHCPClient”isselectedthisvalue
cannotbemodified.
DefaultGatewaySelect“FromDHCP”orselect“UserDefined”
andenteradefaultgateway.
PrimaryDNS
Address
Select“FromDHCP”orselect“UserDefined”
andenteraprimaryDNSaddress.
SecondaryDNS
Address
Select“FromDHCP”orselect“UserDefined”
andenterasecondaryDNSaddress.
NMS
171
DHCPServer
IPAddressSpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
255.255.255.0
IPAddressRangeEnterthestartandendIPaddressoftheIP
addressrangewhichyouraccesspoint’sDHCP
serverwillassigntodevicesonthenetwork.
DomainNameEnteradomainname.
LeaseTimeSelectaleasetimefromthedropdown
menu.IPaddresseswillbeassignedforthis
periodoftime.
DefaultGatewayEnteradefaultgateway.
PrimaryDNS
Address
EnteraprimaryDNSaddress.
SecondaryDNS
Address
EnterasecondaryDNSaddress.
Youraccesspoint’sDHCPservercanbeconfiguredtoassignstatic(fixed)IP
addressestospecifiednetworkdevices,identifiedbytheiruniqueMACaddress:
DHCPServerStaticIPAddress
MACAddressEntertheMACaddressofthenetworkdevice
NMS
172
tobeassignedastaticIPaddress.
IPAddressSpecifytheIPaddresstoassignthedevice.
AddClicktoassigntheIPaddresstothedevice.
IV612.LANPortSettings
The“LANPort”pageallowsyoutoconfigurethesettingsforyourAP
ControllerswiredLAN(Ethernet)ports.
WiredLANPortIdentifiesLANport.USBistheLANport
attachedviaminiUSBadapter.
Speed&DuplexSelectaspeed&duplextypeforspecifiedLAN
port,orusethe“Auto”value.LANportscan
operateupto1000Mbpsandfullduplex
enablessimultaneousdatapackets
transfer/receive.
FlowControlEnable/disableflowcontrol.Flowcontrolcan
pausenewsessionrequestuntilcurrentdata
processingiscomplete,inordertoavoid
deviceoverloadsunderheavytraffic.
802.3azEnable/disable802.3az.802.3azisanEnergy
EfficientEthernetfeaturewhichdisables
unusedinterfacestoreducepowerusage.
NMS
173
IV613.VLAN
The“VLAN”(VirtualLocalAreaNetwork)pageenablesyoutoconfigureVLAN
settings.AVLANisalocalareanetworkwhichmapsworkstationsvirtually
insteadofphysicallyandallowsyoutogrouptogetherorisolateusersfrom
eachother.VLANIDs14095aresupported.
VLANIDsintherange14095aresupported.
VLANInterface
WiredLANPortIdentifiesLANport.USBistheLANport
attachedviaminiUSBadapter.
VLANModeSelect“TaggedPort”or“UntaggedPort”for
specifiedLANinterface.
VLANIDSetaVLANIDforspecifiedinterface,if
“UntaggedPort”isselected.
ManagementVLAN
VLANIDSpecifytheVLANIDofthemanagementVLAN.
OnlythehostsbelongingtothesameVLANcan
managethedevice.
NMS
174
IV62.2.4GHz11bgn
The“2.4GHz11bgn”menuallowsyoutoviewandconfigureinformationfor
youraccesspoint’s2.4GHzwirelessnetworkacrossfourcategories:Basic,
Advanced,SecurityandWDS.
IV621.Basic
The“Basic”screendisplaysbasicsettingsforyouraccesspoint’s2.4GHzWiFi
network(s).
WirelessEnableordisabletheaccesspoint’s2.4GHz
wirelessradio.Whendisabled,no2.4GHz
SSIDswillbeactive.
BandSelectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11b,
802.11g&802.11ncanbeselected.
EnableSSIDNumberSelecthowmanySSIDstoenableforthe
2.4GHzfrequencyfromthedropdownmenu.
Amaximumof16canbeenabled.
SSID#EntertheSSIDnameforthespecifiedSSID(up
NMS
175
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s2.4GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannel
Interval
Specifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel Selectawirelesschannelfrom111.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
NMS
176
IV622.Advanced
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe
valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
ContentionSlotSelect“Short”or“Long”thisvalueisusedfor
contentionwindowsinWMM(seeIV67.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
NMS
177
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
NMS
178
IV623.Security
Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption).
Whendataisencrypted,informationtransmittedwirelesslycannotbereadby
anyonewhodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthardtoguesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
SSIDSelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWiFinetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWiFi
networktoclientsclientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
NMS
179
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication
Method
Selectanauthenticationmethodfromthedrop
downmenuandrefertotheinformation
belowappropriateforyourmethod.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenuandrefertothe
informationbelow(IV6236.)appropriatefor
yourmethod.
IV6231.NoAuthentication
Authenticationisdisabledandnopassword/keyisrequiredtoconnecttothe
accesspoint.
Disablingwirelessauthenticationisnotrecommended.When
disabled,anybodywithinrangecanconnecttoyourdevice’sSSID.
IV6232.WEP
WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Forahigher
levelofsecurityconsiderusingWPAencryption.
KeyLengthSelect64bitor128bit.128bitismoresecure
than64bitandisrecommended.
KeyTypeChoosefrom“ASCII”(anyalphanumerical
character09,azandAZ)or“Hex”(any
charactersfrom09,afandAF).
DefaultKeySelectwhichencryptionkey(14below)isthe
defaultkey.Forsecuritypurposes,youcanset
uptofourkeys(below)andchangewhichis
thedefaultkey.
EncryptionKey1
4
Enteryourencryptionkey/passwordaccording
totheformatyouselectedabove.
NMS
180
IV6233.IEEE802.1x/EAP
KeyLengthSelect64bitor128bit.128bitismoresecure
than64bitandisrecommended.
IV6234.WPAPSK
WPAPSKisasecurewirelessencryptiontypewithstrongdata
protectionanduserauthentication,utilizing128bitencryptionkeys.
WPATypeSelectfromWPA/WPA2MixedModePSK,
WPA2orWPAonly.WPA2issaferthanWPA
only,butnotsupportedbyallwirelessclients.
Pleasemakesureyourwirelessclientsupports
yourselection.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
PreSharedKey
Type
Choosefrom“Passphrase”(863
alphanumericcharacters)or“Hex”(upto64
charactersfrom09,afandAF).
PreSharedKeyPleaseenterasecuritykey/passwordaccording
totheformatyouselectedabove.
IV6235.WPAEAP
WPATypeSelectfromWPA/WPA2MixedModeEAP,
WPA2EAPorWPAEAP.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
WPAEAPmustbedisabledtouseMACRADIUSauthentication.
NMS
181
IV6236.AdditionalAuthentication
Additionalwirelessauthenticationmethodscanalsobeused:
MACAddressFilter
RestrictwirelessclientsaccessbasedonMACaddressspecifiedintheMAC
filtertable.
SeeIV66.MACFiltertoconfigureMACfiltering.
MACFilter&MACRADIUSAuthentication
RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering&
RADIUSauthenticationmethods.
MACRADIUSAuthentication
RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,or
passwordauthenticationviaaRADIUSserver.
SeeIV65.RADIUStoconfigureRADIUSservers.
WPSmustbedisabledtouseMACRADIUSauthentication.See
IV64.forWPSsettings.
MACRADIUS
Password
SelectwhethertouseMACaddressor
passwordauthenticationviaRADIUSserver.If
youselect“Usethefollowingpassword”,enter
thepasswordinthefieldbelow.Thepassword
shouldmatchthe“SharedSecret”usedin
IV65.RADIUS.
NMS
182
IV624.WDS
WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogether
inanextendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspointto
beinthesamesubnetandensurethereisonlyoneactiveDHCP
serveramongconnectedaccesspoints,preferablyontheWAN
side.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
NMS
183
2.4GHz
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
WDS#EntertheMACaddressforuptofourother
WDSdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryptionmethod
EncryptionSelectwhethertouse“None”or“AES”
encryptionandenterapresharedkeyforAES
consistingof863alphanumericcharacters.
NMS
184
IV63. 5GHz11ac11an
The“5GHz11ac11an”menuallowsyoutoviewandconfigureinformationfor
youraccesspoint’s5GHzwirelessnetworkacrossfourcategories:Basic,
Advanced,SecurityandWDS.
IV631.Basic
The“Basic”screendisplaysbasicsettingsforyouraccesspoint’s5GHzWiFi
network(s).
WirelessEnableordisabletheaccesspoint’s5GHz
wirelessradio.Whendisabled,no5GHzSSIDs
willbeactive.
BandSelectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11a,
802.11n&802.11accanbeselected.
EnableSSIDNumberSelecthowmanySSIDstoenableforthe5GHz
frequencyfromthedropdownmenu.A
maximumof16canbeenabled.
NMS
185
SSID#EntertheSSIDnameforthespecifiedSSID(up
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s5GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannel
Interval
Specifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel Selectawirelesschannel.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
NMS
186
IV632. Advanced
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe
valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
NMS
187
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
NMS
188
IV633. Security
Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption).
Whendataisencrypted,informationtransmittedwirelesslycannotbereadby
anyonewhodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthardtoguesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
SSIDSelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWiFinetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWiFi
networktoclientsclientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
NMS
189
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication
Method
Selectanauthenticationmethodfromthedrop
downmenuandrefertotheinformation
belowappropriateforyourmethod.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenuandrefertothe
informationbelowappropriateforyour
method.
PleasereferbacktoIV623.Securityformoreinformationonauthentication
andadditionalauthenticationtypes.
NMS
190
IV634.WDS
WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogether
inanextendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspointto
beinthesamesubnetandensurethereisonlyoneactiveDHCP
serveramongconnectedaccesspoints,preferablyontheWAN
side.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
5GHzWDSMode
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
NMS
191
WDS#EntertheMACaddressforuptofourother
WDAdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryption
EncryptionSelectwhethertouse“None”or“AES”
encryptionandenterapresharedkeyforAES
with863alphanumericcharacters.
NMS
192
IV64.WPS
WiFiProtectedSetupisasimplewaytoestablishconnectionsbetweenWPS
compatibledevices.WPScanbeactivatedoncompatibledevicesbypushinga
WPSbuttononthedeviceorfromwithinthedevice’sfirmware/configuration
interface(knownasPBCor“PushButtonConfiguration”).WhenWPSis
activatedinthecorrectmannerandatthecorrecttimefortwocompatible
devices,theywillautomaticallyconnect.“PINcodeWPS”isavariationofPBC
whichincludestheadditionaluseofaPINcodebetweenthetwodevicesfor
verification.
Pleaserefertomanufacturer’sinstructionsforyourotherWPS
device.
WPSCheck/uncheckthisboxtoenable/disableWPS
functionality.WPSmustbedisabledwhen
usingMACRADIUSauthentication(see
IV6236.&IV65).
ProductPINDisplaystheWPSPINcodeofthedevice,used
forPINcodeWPS.Youwillberequiredtoenter
thisPINcodeintoanotherWPSdeviceforPIN
codeWPS.Click“GeneratePIN”togeneratea
newWPSPINcode.
PushButtonWPSClick“Start”toactivateWPSontheaccess
pointforapproximately2minutes.Thishasthe
sameeffectasphysicallypushingtheaccess
point’sWPSbutton.
WPSbyPINEnterthePINcodeofanotherWPSdeviceand
click“Start”toattempttoestablishaWPS
connectionforapproximately2minutes.
NMS
193
WPSStatusWPSsecuritystatusisdisplayedhere.Click
“Release”tocleartheexistingstatus.
IV65.RADIUS
TheRADIUSsubmenuallowsyoutoconfiguretheaccesspoint’sRADIUS
serversettings,categorizedintothreesubmenus:RADIUSsettings,Internal
ServerandRADIUSaccounts.
ARADIUSserverprovidesuserbasedauthenticationtoimprovesecurityand
offerwirelessclientcontroluserscanbeauthenticatedbeforegaining
accesstoanetwork.
Theaccesspointcanutilizebothaprimaryandsecondary(backup)RADIUS
serverforeachofitswirelessfrequencies(2.4GHz&5GHz).ExternalRADIUS
serverscanbeusedortheaccesspoint’sinternalRADIUSservercanbeused.
TouseRADIUSservers,goto“LocalNetwork”
Æ
“Security”
Æ
“AdditionalAuthentication”andselect“MACRADIUS
Authentication”(seeIV623.&IV633).
NMS
194
IV651.RADIUSSettings
ConfiguretheRADIUSserversettingsfor2.4GHz&5GHz.Eachfrequencycan
useaninternalorexternalRADIUSserver.
NMS
195
RADIUSTypeSelect“Internal”tousetheaccesspoint’s
builtinRADIUSserveror“external”tousean
externalRADIUSserver.
RADIUSServerEntertheRADIUSserverhostIPaddress.
Authentication
Port
SettheUDPportusedintheauthentication
protocoloftheRADIUSserver.Valuemustbe
between165535.
SharedSecretEnterasharedsecret/passwordbetween1
99charactersinlength.Thisshouldmatchthe
“MACRADIUS”passwordusedinIV3136or
IV323.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between086400.
AccountingEnableordisableRADIUSaccounting.
AccountingPortWhenaccountingisenabled(above),setthe
UDPportusedintheaccountingprotocolof
theRADIUSserver.Valuemustbebetween1
65535.
IV652.InternalServer
TheaccesspointfeaturesabuiltinRADIUSserverwhichcanbeconfiguredas
shownbelowusedwhen“Internal”isselectedfor“RADIUSType”inthe“Local
Network”Æ“RADIUSSettings”menu.
TouseRADIUSservers,goto“WirelessSettings”
Æ
“Security”
“AdditionalAuthentication”andselect“MACRADIUS
Authentication”(seeIV623.&IV633).
NMS
196
InternalServerCheck/unchecktoenable/disabletheaccess
point’sinternalRADIUSserver.
EAPInternal
Authentication
SelectEAPinternalauthenticationtypefrom
thedropdownmenu.
EAPCertificateFile
Format
DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaselfmade
certificate.
SharedSecretEnterasharedsecret/passwordforuse
betweentheinternalRADIUSserverand
RADIUSclient.Thesharedsecretshouldbe1
99charactersinlength.Thisshouldmatchthe
“MACRADIUS”passwordusedinIV6236or
IV633.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between086400.
TerminationActionSelectaterminationactionattribute:
“Reauthentication”sendsaRADIUSrequestto
theaccesspoint,“NotReathentication”sends
adefaultterminationactionattributetothe
accesspoint,“NotSend”no
terminationactionattributeissenttothe
accesspoint.
NMS
197
IV653.RADIUSAccounts
TheinternalRADIUSservercanauthenticateupto256useraccounts.The
“RADIUSAccounts”pageallowsyoutoconfigureandmanageusers.
UserNameEntertheusernameshere,separatedby
commas.
AddClick“Add”toaddtheusertotheuser
registrationlist.
ResetCleartextfromtheusernamebox.
SelectChecktheboxtoselectauser.
UserNameDisplaystheusername.
PasswordDisplaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured).
CustomizeClick“Edit”toopenanewfieldtoset/edita
passwordforthespecifiedusername(below).
NMS
198
DeleteSelectedDeleteselecteduserfromtheuserregistration
list.
DeleteAllDeleteallusersfromtheuserregistrationlist.
EditUserRegistrationList
UserNameExistingusernameisdisplayedhereandcan
beeditedaccordingtoyourpreference.
PasswordEnteroreditapasswordforthespecifieduser.
NMS
199
IV66.MACFilter
Macfilteringisasecurityfeaturethatcanhelptopreventunauthorizedusers
fromconnectingtoyouraccesspoint.
Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto
connecttotheaccesspoint.DevicesareeachidentifiedbytheiruniqueMAC
address.IfadevicewhichisnotonthelistofpermittedMACaddresses
attemptstoconnecttotheaccesspoint,itwillbedenied.
ToenableMACfiltering,goto“LocalSettings”
Æ
“Security”
Æ
“AdditionalAuthentication”andselect“MACFilter”(seeIV623.
&IV633).
TheMACaddressfilteringtableisdisplayedbelow:
AddMACAddressEnteraMACaddressofcomputerornetwork
devicemanuallye.g.‘aabbccddeeff’or
entermultipleMACaddressesseparatedwith
NMS
200
commas,e.g.
‘aabbccddeeff,aabbccddeegg’
AddClick“Add”toaddtheMACaddresstothe
MACaddressfilteringtable.
ResetClearallfields.
MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.Select
anentryusingthe“Select”checkbox.
SelectDeleteselectedorallentriesfromthetable.
MACAddressTheMACaddressislistedhere.
DeleteSelectedDeletetheselectedMACaddressfromthe
list.
DeleteAllDeleteallentriesfromtheMACaddress
filteringtable.
ExportClick“Export”tosaveacopyoftheMAC
filteringtable.Anewwindowwillpopupfor
youtoselectalocationtosavethefile.
NMS
201
IV67.WMM
WiFiMultimedia(WMM)isaWiFiAllianceinteroperabilitycertification
basedontheIEEE802.11estandard,whichprovidesQualityofService(QoS)
featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofour
categories:background,besteffort,videoandvoice.
ConfiguringWMMconsistsofadjustingparametersonqueuesfordifferent
categoriesofwirelesstraffic.Trafficissenttothefollowingqueues:
BackgroundLow
Priority
Highthroughput,nontimesensitivebulk
datae.g.FTP
BestEffortMedium
Priority
TraditionalIPdata,mediumthroughputand
delay.
VideoHigh
Priority
Timesensitivevideodatawithminimum
timedelay.
VoiceHigh
Priority
TimesensitivedatasuchasVoIPand
streamingmediawithminimumtimedelay.
Queuesautomaticallyprovideminimumtransmissiondelaysforvideo,voice,
multimediaandcriticalapplications.Thevaluescanfurtherbeadjusted
manually:
CWMinMinimumContentionWindow(milliseconds):
Thisvalueisinputtotheinitialrandom
backoffwaittimealgorithmforretryofadata
frametransmission.Thebackoffwaittimewill
begeneratedbetween0andthisvalue.Ifthe
NMS
202
frameisnotsent,therandombackoffvalueis
doubleduntilthevaluereachesthenumber
definedbyCWMax(below).TheCWMinvalue
mustbelowerthantheCWMaxvalue.The
contentionwindowschemehelpstoavoid
framecollisionsanddeterminepriorityof
frametransmission.Ashorterwindowhasa
higherprobability(priority)oftransmission.
CWMaxMaximumContentionWindow(milliseconds):
Thisvalueistheupperlimittorandom
backoffvaluedoubling(seeabove).
AIFSNArbitrationInterFrameSpace(milliseconds):
Specifiesadditionaltimebetweenwhena
channelgoesidleandtheAP/clientsends
dataframes.TrafficwithalowerAIFSNvalue
hasahigherpriority.
TxOPTransmissionOpportunity(milliseconds):The
maximumintervaloftimeanAP/clientcan
transmit.Thismakeschannelaccessmore
efficientlyprioritized.Avalueof0meansonly
oneframepertransmission.Agreatervalue
effectshigherpriority.
NMS
203
IV7.LocalSettings
IV71.OperationMode
Settheoperationmodeoftheaccesspoint.APmodeisastandaloneaccess
point,APcontrollermodeactsasthedesignatedmasteroftheAParray,and
ManagedAPmodeactsasaslaveAPwithintheAParray.Repeatermodeacts
asawirelessrepeater.
IV72.SystemSettings
IV721. SystemInformation
The“SystemInformation”pagedisplaysbasicsysteminformationaboutthe
accesspoint.
System
ModelDisplaysthemodelnumberoftheaccess
point.
ProductNameDisplaystheproductnameforreference,
whichconsistsof“AP”plustheMACaddress.
UptimeDisplaysthetotaltimesincethedevicewas
turnedon.
NMS
204
BootFromDisplaysinformationforthebooted
hardware,bootedfromeitherUSBorinternal
memory.
VersionDisplaysthefirmwareversion.
MACAddressDisplaystheaccesspoint’sMACaddress.
ManagementVLAN
ID
DisplaysthemanagementVLANID.
IPAddressDisplaystheIPaddressofthisdevice.Click
“Refresh”toupdatethisvalue.
Default
Gateway
DisplaystheIPaddressofthedefault
gateway.
DNSIPaddressofDNS(DomainNameServer)
DHCPServerIPaddressofDHCPServer.
WiredLANPortSettings
WiredLANPortSpecifieswhichLANport(1or2).
StatusDisplaysthestatusofthespecifiedLANport
(connectedordisconnected).
VLANMode/IDDisplaystheVLANmode(taggedoruntagged)
andVLANIDforthespecifiedLANport.See
IV613.VLAN
RefreshClicktorefreshallinformation.
NMS
205
IV722.WirelessClients
The“WirelessClients”pagedisplaysinformationaboutallwirelessclients
connectedtotheaccesspointonthe2.4GHzor5GHzfrequency.
Refreshtime
AutoRefreshTimeSelectatimeintervalfortheclienttablelistto
automaticallyrefresh.
ManualRefreshClickrefreshtomanuallyrefreshtheclient
table.
2.4GHz(5GHz)WLANClientTable
SSIDDisplaystheSSIDwhichtheclientis
connectedto.
MACAddressDisplaystheMACaddressoftheclient.
TxDisplaysthetotaldatapacketstransmittedby
thespecifiedclient.
RxDisplaysthetotaldatapacketsreceivedby
thespecifiedclient.
Signal(%)Displaysthewirelesssignalstrengthforthe
specifiedclient.
ConnectedTimeDisplaysthetotaltimethewirelessclienthas
beenconnectedtotheaccesspoint.
IdleTimeClientidletimeisthetimeforwhichtheclient
hasnottransmittedanydatapacketsi.e.is
idle.
VendorThevendoroftheclient’swirelessadapteris
displayedhere.
NMS
206
IV723. WirelessMonitor
WirelessMonitorisatoolbuiltintotheaccesspointtoscanandmonitorthe
surroundingwirelessenvironment.Selectafrequencyandclick“Scan”to
displayalistofallSSIDswithinrangealongwithrelevantdetailsforeachSSID.
WirelessMonitor
SiteSurveySelectwhichfrequency(orboth)toscan,and
click“Scan”tobegin.
ChannelSurvey
Result
Afterascaniscomplete,click“Export”tosave
theresultstolocalstorage.
SiteSurveyResults
ChDisplaysthechannelnumberusedbythe
specifiedSSID.
SSIDDisplaystheSSIDidentifiedbythescan.
MACAddressDisplaystheMACaddressofthewireless
router/accesspointforthespecifiedSSID.
SecurityDisplaystheauthentication/encryptiontype
ofthespecifiedSSID.
Signal(%)Displaysthecurrentsignalstrengthofthe
SSID.
TypeDisplaysthe802.11wirelessnetworking
standard(s)ofthespecifiedSSID.
VendorDisplaysthevendorofthewireless
router/accesspointforthespecifiedSSID.

NMS
207
IV724. Log
Thisinformationisusefulfornetworkadministrators.Displaysadetailed
informationlogofusersandactivityonthenetwork:ID,DateandTimeof
entry,Categoryofentry,Severity,Users,Event/Activitiesdetails.
Whenthelogisfull,oldentriesareoverwritten.
SaveClicktosavethelogasafileonyourlocal
computer.
ClearClearalllogentries.
RefreshRefreshthecurrentlog.
NMS
208
IV73.Management
IV731. Admin
Youcanchangethepasswordusedtologintothebrowserbased
configurationinterfacehere.Itisadvisedtodosoforsecuritypurposes.
Ifyouchangetheadministratorpassword,pleasemakeanote
ofthenewpassword.Intheeventthatyouforgetthis
passwordandareunabletologintothebrowserbased
configurationinterface,seeIV744.FactoryDefaultforhowto
resettheaccesspoint.
AccounttoManageThisDevice
Administrator
Name
Settheaccesspoint’sadministratorname.
Thisisusedtologintothebrowserbased
configurationinterfaceandmustbebetween
416alphanumericcharacters(casesensitive).
Administrator
Password
Settheaccesspoint’sadministratorpassword.
Thisisusedtologintothebrowserbased
NMS
209
configurationinterfaceandmustbebetween
432alphanumericcharacters(casesensitive).
AdvancedSettings
ProductNameEdittheproductnameaccordingtoyour
preferenceconsistingof132alphanumeric
characters.Thisnameisusedforreference
purposes.
HTTPPortSpecifyaHTTPportformanagement.
HTTPSPortSpecifyaHTTPSportformanagement.
Management
Protocol
Check/unchecktheboxestoenable/disable
specifiedmanagementinterfaces(seebelow).
WhenSNMPisenabled,completetheSNMP
fieldsbelow.
SNMPVersionSelectSNMPversionappropriateforyour
SNMPmanager.
SNMPGet
Community
EnteranSNMPGetCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMPGETrequests.
SNMPSet
Community
EnteranSNMPSetCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMPSETrequests.
SNMPTrapEnableordisableSNMPTraptonotifySNMP
managerofnetworkerrors.
SNMPTrap
Community
EnteranSNMPTrapCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMPTRAPrequests.
SNMPTrap
Manager
SpecifytheIPaddressorsevername(2128
alphanumericcharacters)oftheSNMP
manager.
HTTP
InternetbrowserHTTPprotocolmanagementinterface
HTTPS
InternetbrowserHTTPSprotocolmanagementinterface
TELNET
Clientterminalwithtelnetprotocolmanagementinterface
SSH
ClientterminalwithSSHprotocolversion1or2managementinterface
SNMP
NMS
210
SimpleNetworkManagementProtocol.SNMPv1,v2&v3protocolsupported.
SNMPv2canbeusedwithcommunitybasedauthentication.SNMPv3uses
userbasedsecuritymodel(USM)architecture.
IV732. DateandTime
Youcanconfigurethetimezonesettingsofyouraccesspointhere.Thedate
andtimeofthedevicecanbeconfiguredmanuallyorcanbesynchronized
withatimeserver.
DateandTimeSettings
LocalTimeSettheaccesspoint’sdateandtimemanually
usingthedropdownmenus.
AcquireCurrent
TimefromyourPC
Click“AcquireCurrentTimefromYourPC”to
entertherequiredvaluesautomatically
accordingtoyourcomputer’scurrenttimeand
date.
NTPTimeServer
UseNTPTheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddate
setup.
ServerNameEnterthehostnameorIPaddressofthetime
serverifyouwish.
UpdateIntervalSpecifyafrequency(inhours)fortheaccess
pointtoupdate/synchronizewiththeNTP
server.
NMS
211
TimeZone
TimeZoneSelectthetimezoneofyourcountry/region.If
yourcountry/regionisnotlisted,pleaseselect
anothercountry/regionwhosetimezoneisthe
sameasyours.
NMS
212
IV733. SyslogServer
Thesystemlogcanbesenttoaserver,attachedtoUSBstorageorsentvia
email.
SyslogServerSettings
TransferLogsCheck/unchecktheboxtoenable/disablethe
useofasyslogserver,andenterahost
name,domainorIPaddressfortheserver,
consistingofupto128alphanumeric
characters.
CopyLogsto
AttachedUSBDevice
Check/unchecktheboxtoenable/disable
copyinglogstoattachedUSBstorage.
SyslogEmailSettings
EmailLogsCheck/unchecktheboxtoenable/disableemail
logs.Whenenabled,thelogwillbeemailed
accordingtothesettingsbelow.
EmailSubjectEnterthesubjectlineoftheemailwhichwillbe
sentcontainingthelog.
SMTPServer
Address
SpecifytheSMTPserveraddressforthesender
emailaccount.
SMTPServerPortSpecifytheSMTPserverportforthesender
emailaccount.
SenderEmailEnterthesender’semailaddress.
ReceiverEmailSpecifytheemailrecipientofthelog.
AuthenticationSelect“Disable”,“SSL”or“TLS”accordingto
NMS
213
youremailauthentication.
AccountWhenauthenticationisusedabove,enterthe
accountname.
PasswordWhenauthenticationisusedabove,enterthe
password.
IV734. I’mHere
Theaccesspointfeaturesabuiltinbuzzerwhichcansoundoncommand
usingthe“I’mHere”page.Thisisusefulfornetworkadministratorsand
engineersworkingincomplexnetworkenvironmentstolocatetheaccess
point.
Thebuzzerisloud!
DurationofSoundSetthedurationforwhichthebuzzerwill
soundwhenthe“SoundBuzzer”buttonis
clicked.
SoundBuzzerActivatethebuzzersoundfortheabove
specifieddurationoftime.
NMS
214
IV74.Advanced
WiFiMultimedia(WMM)isaWiFiAllianceinteroperabilitycertification
basedontheIEEE802.11estandard,whichprovidesQualityofService(QoS)
featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofour
categories:background,besteffort,videoandvoice.
IV741.LEDSettings
Theaccesspoint’sLEDscanbemanuallyenabledordisabledaccordingto
yourpreference.
LEDSelectonoroff.
NMS
215
IV742. UpdateFirmware
The“Firmware”pageallowsyoutoupdatethesystemfirmwaretoamore
recentversion.Updatedfirmwareversionsoftenofferincreasedperformance
andsecurity,aswellasbugfixes.Youcandownloadthelatestfirmwarefrom
thewebsite.
Thisfirmwareupdateisforanindividualaccesspoint.To
updatefirmwareformultipleaccesspointsintheAParray,go
toNMSSettings
Æ
FirmwareUpgrade.
Donotswitchoffordisconnecttheaccesspointduringafirmware
upgrade,asthiscoulddamagethedevice.
UpdateFirmware
From
Select“afileonyourPC”touploadfirmware
fromyourlocalcomputerorfroman
attachedUSBdevice.
FirmwareUpdateFileClick“Browse”toopenanewwindowto
locateandselectthefirmwarefileinyour
computer.
UpdateClick“Update”touploadthespecified
firmwarefiletoyouraccesspoint.
NMS
216
IV743. Save/RestoreSettings
Theaccesspoint’s“Save/RestoreSettings”pageenablesyoutosave/backup
theaccesspoint’scurrentsettingsasafiletoyourlocalcomputeroraUSB
deviceattachedtotheaccesspoint,andrestoretheaccesspointtopreviously
savedsettings.
Save/RestoreSettings
UsingDeviceSelect“UsingyourPC”tosavetheaccess
point’ssettingstoyourlocalcomputerorto
anattachedUSBdevice.
SaveSettingstoPC
SaveSettingsClick“Save”tosavesettingsandanew
windowwillopentospecifyalocationto
savethesettingsfile.Youcanalsocheckthe
“Encrypttheconfigurationfilewitha
password”boxandenterapasswordto
protectthefileinthefieldunderneath,ifyou
wish.
RestoreSettingsfromPC
RestoreSettingsClickthebrowsebuttontofindapreviously
savedsettingsfileonyourcomputer,then
click“Restore”toreplaceyourcurrent
settings.Ifyoursettingsfileisencryptedwith
apassword,checkthe“Openfilewith
NMS
217
password”boxandenterthepasswordin
thefieldunderneath.
IV744. FactoryDefault
Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommended
thatyourebootthedevice(seeIV745.)orresetthedevicebacktoits
factorydefaultsettings.Youcanresettheaccesspointbacktoitsdefault
settingsusingthisfeatureifthelocationoftheaccesspointisnotconvenient
toaccesstheresetbutton.
FactoryDefaultClick“FactoryDefault”torestoresettingsto
thefactorydefault.Apopupwindowwill
appearandaskyoutoconfirm.
Afterresettingtofactorydefaults,pleasewaitfortheaccess
pointtoresetandrestart.
IV745. Reboot
Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommended
thatyourebootthedeviceorresettheaccesspointbacktoitsfactorydefault
settings(seeIV744).Youcanreboottheaccesspointremotelyusingthis
feature.
RebootClick“Reboot”torebootthedevice.A
countdownwillindicatetheprogressofthe
reboot.
NMS
218
IV8.Toolbox
IV81. NetworkConnectivity
IV811. Ping
Pingisacomputernetworkadministrationutilityusedtotestwhethera
particularhostisreachableacrossanIPnetworkandtomeasure
theroundtriptimeforsentmessages.
DestinationAddressEntertheaddressofthehost.
ExecuteClickexecutetopingthehost.
IV812. TraceRoute
Tracerouteisadiagnostictoolfordisplayingtheroute(path)andmeasuring
transitdelaysofpacketsacrossanIPnetwork.
DestinationAddressEntertheaddressofthehost.
ExecuteClickexecutetoexecutethetraceroute
command.
NMS
219
V. Appendix
V1.ConfiguringyourIPaddress
TheaccesspointusesthedefaultIPaddress192.168.2.2.Inordertoaccess
thebrowserbasedconfigurationinterface,youneedtomodifytheIPaddress
ofyourcomputertobeinthesameIPaddresssubnete.g.192.168.2.x(x=3
254).
TheprocedureformodifyingyourIPaddressvariesacrossdifferentoperating
systems;pleasefollowtheguideappropriateforyouroperatingsystem.
InthefollowingexamplesweusetheIPaddress192.168.2.10thoughyoucan
useanyIPaddressintherange192.168.2.x(x=3254).
IfyouchangedtheAP’sIPaddress,orifyourgateway/routeruses
aDHCPserver,ensureyouenterthecorrectIPaddress.Referto
yourgateway/router’ssettings.Yourcomputer’sIPaddressmust
beinthesamesubnetastheAPController.
IfusingaDHCPserveronthenetwork,itisadvisedtouseyour
DHCPserver’ssettingstoassigntheAPastaticIPaddress.
NMS
220
V11.WindowsXP
1. Clickthe“Start”button(itshouldbelocatedinthelowerleftcornerof
yourcomputer),thenclick“ControlPanel”.Doubleclickthe“Networkand
InternetConnections”icon,click“NetworkConnections”,andthen
doubleclick“LocalAreaConnection”.The“LocalAreaConnectionStatus”
windowwillthenappear,click“Properties”.
NMS
221
2. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
NMS
222
V12.WindowsVista
1. Clickthe“Start”button(itshouldbelocatedinthelowerleftcornerof
yourcomputer),thenclick“ControlPanel”.Click“ViewNetworkStatusand
Tasks”,thenclick“ManageNetworkConnections”.Rightclick“LocalArea
Network”,thenselect“Properties”.The“LocalAreaConnectionProperties”
windowwillthenappear,select“InternetProtocolVersion4(TCP/IPv4)”,
andthenclick“Properties”.
NMS
223
2. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
NMS
224
V13.Windows7
1. Clickthe“Start”button(itshouldbelocatedinthelowerleftcornerof
yourcomputer),thenclick“ControlPanel”.
2. Under“NetworkandInternet”click“Viewnetworkstatusandtasks”.
NMS
225
3. Click“LocalAreaConnection”.
4. Click“Properties”.
NMS
226
5. Select“InternetProtocolVersion4(TCP/IPv4)andthenclick“Properties”.
NMS
227
6. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
NMS
228
V14.Windows8
1. FromtheWindows8Startscreen,youneedtoswitchtodesktopmode.
Moveyourcursertothebottomleftofthescreenandclick.
2. Indesktopmode,clicktheFileExplorericoninthebottomleftofthe
screen,asshownbelow.
NMS
229
3. Rightclick“Network”andthenselect“Properties”.
4. Inthewindowthatopens,select“Changeadaptersettings”fromtheleft
side.
NMS
230
5. Chooseyourconnectionandrightclick,thenselect“Properties”.
6. Select“InternetProtocolVersion4(TCP/IPv4)andthenclick“Properties”.
NMS
231
7. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
NMS
232
V15.Mac
1. HaveyourMacintoshcomputeroperateasusual,andclickon“System
Preferences”
2. InSystemPreferences,clickon“Network”.
3. Clickon“Ethernet”intheleftpanel.
4. Openthedropdownmenulabeled“ConfigureIPv4”andselect
“Manually”.
NMS
233
 
5. EntertheIPaddress192.168.2.10andsubnetmask255.255.255.0.Click
on“Apply”tosavethechanges.
NMS
234
V2.HardwareSpecification
MCU/RF QualcommAtherosQCA9558(2.4GHz)+QCA9880(5GHz)
PHYQualcommAtherosAR8035
Memory DDR2128MB
Flash 16MB
Physical
Interface
LAN:1x10/100/1000GigabitEthernetwith802.3atPoEsupport
‐ResetButton
USB2.0interface
DCPowerJack
Power
Requirement
PoweroverEthernet,IEEE802.3at
DC:12V/2A
AntennaInternalPIFAAntenna(2.4GHzx3,5GHzx3)
OthersInternalBuzzer(Findme)
V3.ENVIRONMENT&PHYSICAL
Temperature
Range
UsePoESwitch:
Operation:0to50(32to122)
Storage:‐20to60(4to140)
UsePowerAdapter:
Operation:0to40(32to104)
Storage:‐20to60(4to140)
Humidity 90%orlessOperating,90%orless‐Storage
CertificationsFCC,CE
Dimensions 208(D)x32.1(H)mm
Weight 590g
NMS
235
VI. BestPractice
VI1.HowtoCreateandLinkWLAN&AccessPointGroups
YoucanuseNMStocreateindividualSSIDsandgroupmultipleSSIDstogether
intoWLANgroups.Youcanthenassignindividualaccesspointstousethose
WLANgroupsettingsand/orgroupmultipleaccesspointstogetherintoaccess
pointgroups,whichyoucanalsoassigntouseWLANgroupsettings.
Followtheexamplebelowto:
A.CreateaWLANgroup.
B.Createanaccesspointgroup.
C.AssigntheaccesspointgrouptousetheSSIDgroupsettings.
A.
1. GotoNMSSettingsÆWLANandclick“Add”intheWLANpanel:
NMS
236
2. EnteranSSIDnameandsetauthentication/encryptionandclick
“Apply”:
3. ThenewSSIDwillbedisplayedintheWLANpanel.Repeattoadd
additionalSSIDsaccordingtoyourpreference,andthenclick“Add”in
theWLANGrouppanel:
NMS
237
4. EnteranamefortheSSIDgroupandchecktheboxestoselectwhich
SSIDstoincludewithinthegroup.ClickApplywhendone.
5. ThenewWLANgroupwillbedisplayedintheWLANGrouppanel.
RepeattoaddadditionalWLANgroupsaccordingtoyourpreference:
NMS
238
B.
1. GotoNMSSettingsÆAccessPointandclick“Add”intheAccessPoint
GroupPanel:
2. EnteraNameandthenscrolldowntotheGroupSettingspanelanduse
the<<buttontoaddselectedaccesspointsintoyourgroupfromthe
boxontherightside.Click“Apply”whendone.
NMS
239
3. ThenewaccesspointgroupwillbedisplayedintheAccessPointGroup
panel.Repeattoaddadditionalaccesspointgroupsaccordingtoyour
preference:
NMS
240
C.
1. GotoNMSSettingsÆAccessPointandselectanaccesspointgroup
usingthecheckboxesintheAccessPointGrouppanel.ClickEdit”:
2. ScrolldowntotheProfileGroupSettingspanelandchecktheOverride
GroupSettingsboxforWLANGroup(2.4GHzand/or5GHz).Select
yourWLANgroupfromthedropdownmenuandclickApply”:
3. Repeatforotheraccesspointgroupsaccordingtoyourpreference.
4.
241
COPYRIGHT
Copyright©2016bythiscompany.Allrightsreserved.Nopartofthispublicationmaybereproduced,
transmitted,transcribed,storedinaretrievalsystem,ortranslatedintoanylanguageorcomputer
language,inanyformorbyanymeans,electronic,mechanical,magnetic,optical,chemical,manualor
otherwise,withoutthepriorwrittenpermissionofthiscompany
Thiscompanymakesnorepresentationsorwarranties,eitherexpressedorimplied,withrespecttothe
contentshereofandspecificallydisclaimsanywarranties,merchantabilityorfitnessforanyparticular
purpose.Anysoftwaredescribedinthismanualissoldorlicensed"asis".Shouldtheprogramsprove
defectivefollowingtheirpurchase,thebuyer(andnotthiscompany,itsdistributor,oritsdealer)
assumestheentirecostofallnecessaryservicing,repair,andanyincidentalorconsequentialdamages
resultingfromanydefectinthesoftware.Further,thiscompanyreservestherighttorevisethis
publicationandtomakechangesfromtimetotimeinthecontentsthereofwithoutobligationtonotify
anypersonofsuchrevisionorchanges.
242
FederalCommunicationCommissionInterferenceStatement
ThisequipmenthasbeentestedandfoundtocomplywiththelimitsforaClassBdigitaldevice,pursuanttoPart
15ofFCCRules.Theselimitsaredesignedtoprovidereasonableprotectionagainstharmfulinterferenceina
residentialinstallation.Thisequipmentgenerates,uses,andcanradiateradiofrequencyenergyand,ifnot
installedandusedinaccordancewiththeinstructions,maycauseharmfulinterferencetoradiocommunications.
However,thereisnoguaranteethatinterferencewillnotoccurinaparticularinstallation.Ifthisequipmentdoes
causeharmfulinterferencetoradioortelevisionreception,whichcanbedeterminedbyturningtheequipment
offandon,theuserisencouragedtotrytocorrecttheinterferencebyoneormoreofthefollowingmeasures:
1.Reorientorrelocatethereceivingantenna.
2.Increasetheseparationbetweentheequipmentandreceiver.
3.Connecttheequipmentintoanoutletonacircuitdifferentfromthattowhichthereceiverisconnected.
4.Consultthedealeroranexperiencedradiotechnicianforhelp.
FCCCaution
Thisdeviceanditsantennamustnotbecolocatedoroperatinginconjunctionwithanyotherantennaor
transmitter.ThisdevicecomplieswithPart15oftheFCCRules.Operationissubjecttothefollowingtwo
conditions:(1)thisdevicemaynotcauseharmfulinterference,and(2)thisdevicemustacceptanyinterference
received,includinginterferencethatmaycauseundesiredoperation.Anychangesormodificationsnotexpressly
approvedbythepartyresponsibleforcompliancecouldvoidtheauthoritytooperateequipment.
FederalCommunicationsCommission(FCC)RadiationExposureStatement
ThisequipmentcomplieswithFCCradiationexposurelimitssetforthforanuncontrolledenvironment.
Thisequipmentshouldbeinstalledandoperatedwithminimumdistance20cmbetweentheradiator&
yourbody.
R&TTEComplianceStatement
ThisequipmentcomplieswithalltherequirementsofDIRECTIVE1999/5/ECOFTHEEUROPEANPARLIAMENTAND
THECOUNCILofMarch9,1999onradioequipmentandtelecommunicationterminalequipmentandthemutual
recognitionoftheirconformity(R&TTE).TheR&TTEDirectiverepealsandreplacesinthedirective98/13/EEC
(TelecommunicationsTerminalEquipmentandSatelliteEarthStationEquipment)AsofApril8,2000.
Safety
Thisequipmentisdesignedwiththeutmostcareforthesafetyofthosewhoinstallanduseit.However,special
attentionmustbepaidtothedangersofelectricshockandstaticelectricitywhenworkingwithelectrical
equipment.Allguidelinesofthisandofthecomputermanufacturemustthereforebeallowedatalltimesto
ensurethesafeuseoftheequipment.
EUCountriesIntendedforUse
TheETSIversionofthisdeviceisintendedforhomeandofficeuseinAustria,Belgium,Bulgaria,Cyprus,Czech,
Denmark,Estonia,Finland,France,Germany,Greece,Hungary,Ireland,Italy,Latvia,Lithuania,Luxembourg,Malta,
Netherlands,Poland,Portugal,Romania,Slovakia,Slovenia,Spain,Sweden,Turkey,andUnitedKingdom.TheETSI
versionofthisdeviceisalsoauthorizedforuseinEFTAmemberstates:Iceland,Liechtenstein,Norway,and
Switzerland.
EUCountriesNotIntendedforUse
None

Navigation menu