Edimax Technology Co 9576791507 AC1750 Ceiling Mount AP User Manual
Edimax Technology Co Ltd AC1750 Ceiling Mount AP
User manual
AC1750CeilingMountAP
User’s Manual
EW‐7679WAUser
Version: 1.0
(January, 2016)
CONTENTS
I.ProductInformation ............................................................................... 2
I‐1.PackageContents ..................................................................................................................2
I‐2.SystemRequirements............................................................................................................3
I‐3.HardwareOverview...............................................................................................................3
I‐4.LEDStatus ..............................................................................................................................4
I‐5.Reset ......................................................................................................................................4
I‐6.SafetyInformation.................................................................................................................5
II.QuickSetup ............................................................................................ 6
II‐1.InitialSetup............................................................................................................................6
II‐2.APMode:BasicSettings ........................................................................................................8
II‐3.RepeaterMode....................................................................................................................12
III.HardwareInstallation........................................................................... 15
III‐1.ConnectingtheaccesspointtoarouterorPoEswitch.....................................................15
III‐2.Mountingtheaccesspointtoaceiling..............................................................................16
III‐3.T‐RailMount ......................................................................................................................19
IV.BrowserBasedConfigurationInterface................................................. 21
IV‐1.Information........................................................................................................................23
IV‐1‐1.SystemInformation ...........................................................................................................23
IV‐1‐2.WirelessClients..................................................................................................................28
IV‐1‐3.WirelessMonitor ...............................................................................................................30
IV‐1‐4.Log......................................................................................................................................32
IV‐2.NetworkSettings ...............................................................................................................34
IV‐2‐1.LAN‐SideIPAddress...........................................................................................................34
IV‐2‐2.LANPort .............................................................................................................................36
IV‐2‐3.VLAN ..................................................................................................................................37
IV‐3.WirelessSettings................................................................................................................38
IV‐3‐1.WirelessExtender..............................................................................................................38
IV‐3‐2.ProfileList ..........................................................................................................................40
IV‐3‐3.2.4GHz11bgn.....................................................................................................................41
IV‐3‐3‐1.Basic .............................................................................................................................41
IV‐3‐3‐2.Advanced .....................................................................................................................44
IV‐3‐3‐3.Security ........................................................................................................................46
IV‐3‐3‐3‐1.NoAuthentication .....................................................................................................48
IV‐3‐3‐3‐2.WEP............................................................................................................................48
IV‐3‐3‐3‐3.IEEE802.1x/EAP..........................................................................................................48
IV‐3‐3‐3‐4.WPA‐PSK ....................................................................................................................48
IV‐3‐3‐3‐5.WPA‐EAP....................................................................................................................49
IV‐3‐3‐3‐6.AdditionalAuthentication .........................................................................................49
IV‐3‐3‐4.WDS .............................................................................................................................51
IV‐3‐4.5GHz11ac11an .................................................................................................................53
IV‐3‐4‐1.Basic .............................................................................................................................53
IV‐3‐4‐2.Advanced .....................................................................................................................55
IV‐3‐4‐3.Security ........................................................................................................................57
IV‐3‐4‐4.WDS .............................................................................................................................59
IV‐3‐5.WPS......................................................................................................................................61
IV‐3‐6.RADIUS .................................................................................................................................63
IV‐3‐6‐1.RADIUSSettings ...........................................................................................................64
IV‐3‐6‐2.InternalServer .............................................................................................................66
IV‐3‐6‐3.RADIUSAccounts .........................................................................................................68
IV‐3‐7.MACFilter ..........................................................................................................................70
IV‐3‐8.WMM...................................................................................................................................72
IV‐3‐9.Schedule...............................................................................................................................74
IV‐3‐10.TrafficShaping .....................................................................................................................76
IV‐4.Management .....................................................................................................................78
IV‐4‐1.Admin.................................................................................................................................78
IV‐4‐2.DateandTime....................................................................................................................81
IV‐4‐3.SyslogServer......................................................................................................................83
IV‐4‐4.PingTest.............................................................................................................................84
IV‐4‐5.I’mHere .............................................................................................................................85
IV‐5.Advanced ...........................................................................................................................86
IV‐5‐1.LEDSettings .......................................................................................................................86
IV‐5‐2.UpdateFirmware...............................................................................................................87
IV‐5‐3.Save/RestoreSettings........................................................................................................88
IV‐5‐4.FactoryDefault ..................................................................................................................90
IV‐5‐5.Reboot................................................................................................................................91
IV‐6.OperationMode ................................................................................................................92
NMS
I.ProductInformation ............................................................................. 95
II.QuickSetup .......................................................................................... 96
III.SoftwareLayout ................................................................................. 103
IV.Features ............................................................................................. 110
IV‐1.LOGIN,LOGOUT&RESTART ..............................................................................................110
IV‐2.DASHBOARD ......................................................................................................................112
IV‐2‐1.SystemInformation ...........................................................................................................113
IV‐2‐2.DevicesInformation...........................................................................................................113
IV‐2‐3.ManagedAP.......................................................................................................................114
IV‐2‐4.ManagedAPGroup............................................................................................................115
IV‐2‐5.ActiveClients .....................................................................................................................116
IV‐2‐6.ActiveUsers .......................................................................................................................117
IV‐3.ZONEPLAN.........................................................................................................................118
IV‐4.NMSMONITOR ..................................................................................................................120
IV‐4‐1.AccessPoint .......................................................................................................................120
IV‐4‐1‐1.ManagedAP...............................................................................................................120
IV‐4‐1‐2.ManagedAPGroup....................................................................................................122
IV‐4‐2.WLAN .................................................................................................................................124
IV‐4‐2‐1.ActiveWLAN ..............................................................................................................124
IV‐4‐2‐2.ActiveWLANGroup ...................................................................................................125
IV‐4‐3.Clients ................................................................................................................................125
IV‐4‐3‐1.ActiveClients .............................................................................................................125
IV‐4‐4.RogueDevices....................................................................................................................126
IV‐4‐5.Information........................................................................................................................127
IV‐4‐5‐1.AllEvents/Activities ...................................................................................................127
IV‐4‐5‐2.Monitoring .................................................................................................................128
IV‐5.NMSSettings......................................................................................................................129
IV‐5‐1.AccessPoint .......................................................................................................................129
IV‐5‐2.WLAN .................................................................................................................................142
IV‐5‐2‐1.NoAuthentication ...................................................................................................144
IV‐5‐2‐2.WEP..........................................................................................................................144
IV‐5‐2‐3.IEEE802.1x/EAP........................................................................................................145
IV‐5‐2‐4.WPA‐PSK ..................................................................................................................145
IV‐5‐2‐5.WPA‐EAP..................................................................................................................146
IV‐5‐2‐6.AdditionalAuthentication .......................................................................................146
IV‐5‐3.RADIUS ...............................................................................................................................148
IV‐5‐4.AccessControl....................................................................................................................154
IV‐5‐5.GuestNetwork...................................................................................................................157
IV‐5‐6.ZoneEdit ............................................................................................................................161
IV‐5‐7.Schedule.............................................................................................................................163
IV‐5‐8.DeviceMonitoring ...........................................................................................................165
IV‐5‐9.FirmwareUpgrade .............................................................................................................166
IV‐5‐10.Advanced .........................................................................................................................167
IV‐5‐10‐1.SystemSecurity..........................................................................................................167
IV‐5‐10‐2.Date&Time ...............................................................................................................167
IV‐6.LocalNetwork ....................................................................................................................169
IV‐6‐1.NetworkSettings ...............................................................................................................169
IV‐6‐1‐1.LAN‐SideIPAddress...................................................................................................169
IV‐6‐1‐2.LANPortSettings .......................................................................................................172
IV‐6‐1‐3.VLAN ..........................................................................................................................173
IV‐6‐2.2.4GHz11bgn.....................................................................................................................174
IV‐6‐2‐1.Basic ...........................................................................................................................174
IV‐6‐2‐2.Advanced ...................................................................................................................176
IV‐6‐2‐3.Security ......................................................................................................................178
IV‐6‐2‐3‐1.NoAuthentication ...................................................................................................179
IV‐6‐2‐3‐2.WEP..........................................................................................................................179
IV‐6‐2‐3‐3.IEEE802.1x/EAP........................................................................................................180
IV‐6‐2‐3‐4.WPA‐PSK ..................................................................................................................180
IV‐6‐2‐3‐5.WPA‐EAP..................................................................................................................180
IV‐6‐2‐3‐6.AdditionalAuthentication .......................................................................................181
IV‐6‐2‐4.WDS ...........................................................................................................................182
IV‐6‐3.5GHz11ac11an ...............................................................................................................184
IV‐6‐3‐1.Basic ...........................................................................................................................184
IV‐6‐3‐2.Advanced .................................................................................................................186
IV‐6‐3‐3.Security ....................................................................................................................188
IV‐6‐3‐4.WDS ...........................................................................................................................190
IV‐6‐4.WPS....................................................................................................................................192
IV‐6‐5.RADIUS ...............................................................................................................................193
IV‐6‐5‐1.RADIUSSettings .........................................................................................................194
IV‐6‐5‐2.InternalServer ...........................................................................................................195
IV‐6‐5‐3.RADIUSAccounts .......................................................................................................197
IV‐6‐6.MACFilter ..........................................................................................................................199
IV‐6‐7.WMM.................................................................................................................................201
IV‐7.LocalSettings .....................................................................................................................203
IV‐7‐1.OperationMode ................................................................................................................203
IV‐7‐2.SystemSettings..................................................................................................................203
IV‐7‐2‐1.SystemInformation .................................................................................................203
IV‐7‐2‐2.WirelessClients..........................................................................................................205
IV‐7‐2‐3.WirelessMonitor .....................................................................................................206
IV‐7‐2‐4.Log............................................................................................................................207
IV‐7‐3.Management .....................................................................................................................208
IV‐7‐3‐1.Admin.......................................................................................................................208
IV‐7‐3‐2.DateandTime..........................................................................................................210
IV‐7‐3‐3.SyslogServer............................................................................................................212
IV‐7‐3‐4.I’mHere ...................................................................................................................213
IV‐7‐4.Advanced ...........................................................................................................................214
IV‐7‐4‐1.LEDSettings ...............................................................................................................214
IV‐7‐4‐2.UpdateFirmware.....................................................................................................215
IV‐7‐4‐3.Save/RestoreSettings..............................................................................................216
IV‐7‐4‐4.FactoryDefault ........................................................................................................217
IV‐7‐4‐5.Reboot......................................................................................................................217
IV‐8.Toolbox ..............................................................................................................................218
IV‐8‐1.NetworkConnectivity ......................................................................................................218
IV‐8‐1‐1.Ping ..........................................................................................................................218
IV‐8‐1‐2.TraceRoute..............................................................................................................218
V.Appendix ............................................................................................ 219
V‐1.ConfiguringyourIPaddress.............................................................................................219
V‐1‐1.WindowsXP .....................................................................................................................220
V‐1‐2.WindowsVista .................................................................................................................222
V‐1‐3.Windows7 .......................................................................................................................224
V‐1‐4.Windows8 .......................................................................................................................228
V‐1‐5.Mac ..................................................................................................................................232
VI.BestPractice....................................................................................... 234
VI‐1.HowtoCreateandLinkWLAN&AccessPointGroups...................................................235
1
OVERVIEW
Youraccesspointcanfunctioninfourdifferentmodes.
ThedefaultmodeforyouraccesspointisAPmode.
APmodeisaregularaccesspointforuseinyourwirelessnetwork.
APControllermodeactsasthedesignatedmasterofanAParray(groupof
linkedaccesspoints).InAPControllermodetheuserinterfacewillswitchto
NMS.
ManagedAPmodeactsasa“slave”APwithintheAParray(controlledbythe
APController“master”).
InRepeatermodetheaccesspointconnectswirelesslytoyourexisting
2.4GHzand/or5GHznetworkandrepeatsthewirelesssignal(s).
2
I. ProductInformation
I‐1.PackageContents
1234
1. AC1750AccessPoint
2. CeilingMountBracket
3. T‐RailMountingKit&Screws
4. CeilingMountingKit&Screws
5. QuickInstallationGuide
6. EthernetCable
7. PowerAdapter
8. CeilingMountScrewTemplate
5
3
I‐2.SystemRequirements
‐ Existingcable/DSLmodem&router
‐ Computerwithwebbrowserforaccesspointconfiguration
I‐3.HardwareOverview
EthernetPort
Power Port
MicroUSBPort
4
I‐4.LEDStatus
LEDColorLEDStatusDescription
OnTheaccesspointison.
LongFlashingUpgradingfirmware.
Blue
ShortFlashing Resettingtofactorydefaults.
OnStartingup.Amber
FlashingError.
OffOffTheaccesspointisoff.
I‐5.Reset
Ifyouexperienceproblemswithyouraccesspoint,youcanresetthedevice
backtoitsfactorysettings.Thisresetsallsettingsbacktodefault.
1. Pressandholdtheresetbuttonontheaccesspointforatleast10
seconds.
Youmayneedtouseapinorsimilarsharpobjecttopushthe
resetbutton.
2. Waitfortheaccesspointtorestart.Theaccesspointisreadyforsetup
whentheLEDisblue.
5
I‐6.SafetyInformation
Inordertoensurethesafeoperationofthedeviceanditsusers,pleaseread
andactinaccordancewiththefollowingsafetyinstructions.
1.Theaccesspointisdesignedforindooruseonly;donotplacetheaccess
pointoutdoors.
2.Donotplacetheaccesspointinornearhot/humidplaces,suchasakitchen
orbathroom.
3.Donotpullanyconnectedcablewithforce;carefullydisconnectitfromthe
accesspoint.
4.Handletheaccesspointwithcare.Accidentaldamagewillvoidthe
warrantyoftheaccesspoint.
5.Thedevicecontainssmallpartswhichareadangertosmallchildrenunder
3yearsold.Pleasekeeptheaccesspointoutofreachofchildren.
6.Donotplacetheaccesspointonpaper,cloth,orotherflammablematerials.
Theaccesspointmaybecomehotduringuse.
7.Therearenouser‐serviceablepartsinsidetheaccesspoint.Ifyou
experienceproblemswiththeaccesspoint,pleasecontactyourdealerof
purchaseandaskforhelp.
8.Theaccesspointisanelectricaldeviceandassuch,ifitbecomeswetfor
anyreason,donotattempttotouchitwithoutswitchingthepowersupply
off.Contactanexperiencedelectricaltechnicianforfurtherhelp.
9. Ifyousmellburningorseesmokecomingfromtheaccesspointorpower
adapter,thendisconnecttheaccesspointandpoweradapterimmediately,
asfarasitissafelypossibletodoso.Callyourdealerofpurchaseforhelp.
10.Thisdevicerequiresprofessionalinstallation.
6
II. QuickSetup
Youraccesspointcanbeupandrunninginjustafewminutes.Itcanfunction
asastandaloneaccesspoint(APmode),aspartofanAParray(ManagedAP
mode)orasawirelessrepeater(repeatermode).
ForuseaManagedAPinanAParray,theaccesspointwillautomatically
switchmodewhenanAPControllerisconfiguredasdescribedinNMS.
II‐1.InitialSetup
1. ConnecttheaccesspointtoacomputerviaEthernetcable.
2. Connectthepoweradaptertotheaccesspoint’s12VDCportandplugthe
poweradapterintoapowersupplyusingtheincludedcable.
3. Pleasewaitamomentfortheaccesspointtostartup.Theaccesspointis
readywhentheLEDisblue.
4. Setyourcomputer’sIPaddressto192.168.2.xwherexisanumberinthe
range3–100.Ifyouareunsurehowtodothis,pleaserefertotheuser
manualformoreinformation.
Pleaseensuretherearenootheractivenetworkconnectionson
yourcomputer(disconnectWi‐FiconnectionsandEthernet
cables).
5. Entertheaccesspoint’sdefaultIPaddress192.168.2.2intotheURLbarof
awebbrowser.
7
6. Youwillbepromptedforausernameandpassword.Enterthedefault
username“admin”andthedefaultpassword“1234”.
7. Youwillarrivethe“SystemInformation”screenshownbelow.
8
8. PleasefollowtheinstructionsbelowinII‐2.BasicSettingstoconfigurethe
accesspoint’sbasicsettingsforuseasastandaloneAPinAPmode.
ForuseaManagedAPinanAParray,theaccesspointwillautomatically
switchmodewhenanAPControllerisconfiguredasdescribedinNMS.
TousetheAPasanAPController(master)inanAParray,refertoNMS.
II‐2.APMode:BasicSettings
Theinstructionsbelowwillhelpyoutoconfigurethefollowingbasicsettings
oftheaccesspoint:
‐ LANIPAddress
‐ 2.4GHz&5GHzSSID&Security
‐ AdministratorName&Password
‐ Time&Date
Itisrecommendedyouconfigurethesesettingsbeforeusingthe
accesspoint.
1. Tochangetheaccesspoint’sLANIPaddress,goto“NetworkSettings”>
“LAN‐sideIPAddress”andyouwillseethescreenbelow.
2. EntertheIPaddresssettingsyouwishtouseforyouraccesspoint.You
canuseadynamic(DHCP)orstaticIPaddress,dependingonyournetwork
environment.Click“Apply”tosavethechangesandwaitafewmoments
fortheaccesspointtoreload.
9
Whenyouchangeyouraccesspoint’sIPaddress,youneedtouse
thenewIPaddresstoaccessthebrowserbasedconfiguration
interfaceinsteadofthedefaultIP192.168.2.2.
3. TochangetheSSIDofyouraccesspoint’s2.4GHzwirelessnetwork(s),go
to“WirelessSetting”>“2.4GHz11bgn”>“Basic”.EnterthenewSSIDfor
your2.4GHzwirelessnetworkinthe“SSID1”fieldandclick“Apply”.
Toutilizemultiple2.4GHzSSIDs,openthedropdownmenu
labelled“EnableSSIDnumber”andselecthowmanySSIDsyou
require.ThenenteranewSSIDinthecorrespondingnumbered
fieldsbelow,beforeclicking“Apply”.
4. Toconfigurethesecurityofyouraccesspoint’s2.4GHzwireless
network(s),goto“WirelessSetting”>“2.4GHz11bgn”>“Security”.Select
an“AuthenticationMethod”andentera“Pre‐sharedKey”or“Encryption
Key”dependingonyourchoice,thenclick“Apply”.
IfusingmultipleSSIDs,specifywhichSSIDtoconfigureusingthe
“SSID”dropdownmenu.
10
5. Goto“WirelessSettings”>“5GHz11ac11an”andrepeatsteps3&4for
theaccesspoint’s5GHzwirelessnetwork.
6. Tochangetheadministratornameandpasswordforthebrowserbased
configurationinterface,goto“Management”>“Admin”.
7. Completethe“AdministratorName”and“AdministratorPassword”fields
andclick“Apply”.
8. Tosetthecorrecttimeforyouraccesspoint,goto“Management”>
“DateandTime”.
11
9. Setthecorrecttimeandtimezoneforyouraccesspointusingthedrop
downmenus.TheaccesspointalsosupportsNTP(NetworkTimeProtocol)
soalternativelyyoucanenterthehostnameorIPaddressofatimeserver.
Click“Apply”whenyouarefinished.
Youcanusethe“AcquireCurrentTimefromyourPC”buttonif
youwishtosettheaccesspointtothesametimeasyourPC.
10. Thebasicsettingsofyouraccesspointarenowconfigured.Please
refertoIV.HardwareInstallationforguidanceonconnectingyouraccess
pointtoarouterorPoEswitch.
12
II‐3.RepeaterMode
Whenyousettheoperationmodetorepeatermode,theAPwillnotgetanIP
addressfromtherouter/rootAP.Youwillneedtosetyourcomputer’sIP
addressandusetheAPsdefaultIPaddresstoaccesstheUIforthefirsttime,
refertoAppendixformorehelp.
WirelessSettingsÆWirelessExtenderdisplaysdetailsabouttheAPswireless
connectioninrepeatermodeandenablesyoutoconnecttoasourceSSIDand
configurethenew(repeater)SSID.Settingsaresavedasprofiles.
1. Setyourcomputer’sIPaddressto192.168.2.xwherexisanumberinthe
range3–100.
Pleaseensuretherearenootheractivenetworkconnectionson
yourcomputer(disconnectWi‐FiconnectionsandEthernet
cables).
2. Entertheaccesspoint’sdefaultIPaddress192.168.2.2intotheURLbarof
awebbrowser.
3. Youwillbepromptedforausernameandpassword.Enterthedefault
username“admin”andthedefaultpassword“1234”.
13
4. GotoWirelessSettingsÆWirelessExtender.
5. ClickScantosearchforanddisplayavailableSSIDsandclickSelectto
connecttoanavailablesourceSSID.SSIDscanbeconfiguredindependently
foreachfrequency2.4GHz&5GHz.
14
6. EditthenewextendedSSIDaccordingtoyourpreferenceandenterthe
securitydetailsforthesourceSSID,andthenclickConnect.
7. TheAPinrepeatermodewillestablishaconnectiontothesourceSSIDand
repeattheextendedSSID.TherepeaterAPwillbecomeaDHCPclientof
therouter/rootAP.SwitchyourcomputerbacktoadynamicIPaddress.
15
III. HardwareInstallation
III‐1. ConnectingtheaccesspointtoarouterorPoEswitch
1. ConnectarouterorPoEswitchtotheaccesspoint’sLANportusingan
Ethernetcable.
2. Ifyouareusingarouter,then
connectthepoweradaptertothe
accesspoint’s12VDCportand
plugthepoweradapterintoa
powersupply.
Donotusethepower
adapterifyouareusinga
PoEswitch.
16
III‐2. Mountingtheaccesspointtoaceiling
Tomounttheaccesspointtoaceiling,pleasefollowtheinstructionsbelow
andrefertodiagramA&B.
ForWoodenCeilings(refertodiagramA):
1. Placetheceilingmountbrackettoaceilinginyourdesiredlocationand
usetheincludedscrewsx4tofixitintoplace(i).
2. Attachtheaccesspointtotheceilingmountbracketbyaligningthe
groovesintheaccesspointtotheceilingmount,asshowninii.
3. Securetheaccesspointfirmlyinplaceusingtheincludedscrewasshown
iniii.
ForOtherCeilings(refertodiagramB):
1. Drillfourholesinyourceilingusingtheceilingmountbracketasaguide,
andinsertthefourincludedwallplugs/screwanchors(i).
2. Aligntheceilingmountbracketwithyourwallplugs/screwanchorsanduse
theincludedscrewsx4tofixitintoplace(ii).
3. Attachtheaccesspointtotheceilingmountbracketbyaligningthe
groovesintheaccesspointtotheceilingmount,asshowniniii.
4. Securetheaccesspointfirmlyinplaceusingtheincludedscrewasshown
iniv.
17
A
i
iiiii
18
B
i
ii
iii
iv
19
III‐3. T‐RailMount
TomounttheaccesspointtoaT‐Rail,pleasefollowtheinstructionsbelow
andrefertodiagramC,D&E.
1. SelectthecorrectsizeT‐Railbracketfromthetwosizeswhichare
includedinthepackagecontents.
2. AttachtheT‐Railbrackettotheceilingmountusingtheincludedscrewsx
2asshownini.
YoucanusetheincludedbracketandlongerscrewsIfyouneed
morespacebetweentheaccesspointandtheT‐Rail.
3. Attachtheaccesspointtotheceilingmountbracketbyaligningthe
groovesintheaccesspointtotheceilingmount,asshowninii.
4. Securetheaccesspointfirmlyinplaceusingtheincludedscrewasshown
iniii.
5. CliptheaccesspointontoyourT‐RailusingthenowattachedT‐Rail
bracket.
Ci
ii
iii
20
D
E
i
i
ii
ii
iii
iii
21
IV. BrowserBasedConfigurationInterface
InManagedAPmodesomefunctionsofthebrowserbased
configurationinterfacearedisabled.PleaseuseNMSonyour
ControllerAPtoconfigureyourManagedAP(s).
Thebrowser‐basedconfigurationinterfaceenablesyoutoconfigurethe
accesspoint’sadvancedfeatures.TheAC1750featuresarangeofadvanced
functionssuchasMACfiltering,MACRADIUSauthentication,VLAN
configurations,upto32SSIDsandmanymore.Toaccessthebrowserbased
configurationinterface:
1. ConnectacomputertoyouraccesspointusinganEthernetcable.
2. Enteryouraccesspoint’sIPaddressintheURLbarofawebbrowser.The
accesspoint’sdefaultIPaddressis192.168.2.2.
3. Youwillbepromptedforausernameandpassword.Thedefault
usernameis“admin”andthedefaultpasswordis“1234”,thoughitwas
recommendedthatyouchangethepasswordduringsetup(seeIII‐2.Basic
Settings).
Ifyoucannotrememberyourpassword,resettheaccesspoint
backtoitsfactorydefaultsettings.RefertoI‐5.Reset
4. Youwillarriveatthe“SystemInformation”screenshownbelow.
22
5. Usethemenuacrossthetopanddowntheleftsidetonavigate.Click
“Apply”tosavechangesandreloadtheaccesspoint,or“Cancel”tocancel
changes.
Pleasewaitafewsecondsfortheaccesspointtoreloadafteryou
“Apply”changes,asshownbelow.
6. Pleaserefertothefollowingchaptersforfulldescriptionsofthebrowser
basedconfigurationinterfacefeatures.
23
IV‐1. Information
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV‐1‐1. SystemInformation
The“SystemInformation”pagedisplaysbasic
systeminformationabouttheaccesspoint.
24
25
System
ModelDisplaysthemodelnumberoftheaccess
point.
ProductNameDisplaystheproductnameforreference,
whichconsistsof“AP”plustheMACaddress.
UptimeDisplaysthetotaltimesincethedevicewas
turnedon.
BootFromDisplaysinformationforthebooted
hardware,bootedfromeitherUSBorinternal
memory.
FirmwareVersionDisplaysthefirmwareversion.
MACAddressDisplaystheaccesspoint’sMACaddress.
ManagementVLAN
ID
DisplaysthemanagementVLANID.
IPAddressDisplaystheIPaddressofthisdevice.Click
“Refresh”toupdatethisvalue.
Default
Gateway
DisplaystheIPaddressofthedefault
gateway.
DNSIPaddressofDNS(DomainNameServer)
DHCPServerIPaddressofDHCPServer.
WiredLANPortSettings
WiredLANPortSpecifieswhichLANport.USBistheLANport
attachedviaminiUSBadapter.
StatusDisplaysthestatusofthespecifiedLANport
(connectedordisconnected).
VLANMode/IDDisplaystheVLANmode(taggedoruntagged)
andVLANIDforthespecifiedLANport.See
IV‐2‐3.VLAN
Wireless2.4GHz(5GHz)
StatusDisplaysthestatusofthe2.4GHzor5GHz
wireless(enabledordisabled).
MACAddressDisplaystheaccesspoint’sMACaddress.
ChannelDisplaysthechannelnumberthespecified
wirelessfrequencyisusingforbroadcast.
TransmitPowerDisplaysthewirelessradiotransmitpower
levelasapercentage.
RSSIDisplaysReceivedSignalStrengthIndicator.
26
Wireless2.4GHZ(5GHz)/SSID
SSIDDisplaystheSSIDname(s)forthespecified
frequency.
Authentication
Method
Displaystheauthenticationmethodforthe
specifiedSSID.SeeIV‐3.WirelessSettings
EncryptionTypeDisplaystheencryptiontypeforthespecified
SSID.SeeIV‐3.WirelessSettings
VLANIDDisplaystheVLANIDforthespecifiedSSID.
SeeIV‐2‐3.VLAN
Additional
Authentication
Displaystheadditionalauthenticationtypefor
thespecifiedSSID.SeeIV‐3.WirelessSettings
WirelessClient
Isolation
Displayswhetherwirelessclientisolationisin
useforthespecifiedSSID.SeeIV‐2‐3.VLAN
Wireless2.4GHZ(5GHz)/WDSStatus
MACAddressDisplaysthepeeraccesspoint’sMACaddress.
EncryptionTypeDisplaystheencryptiontypeforthespecified
WDS.SeeIV‐3‐1‐4.WDS
VLANMode/IDDisplaystheVLANIDforthespecifiedWDS.
SeeIV‐3‐1‐4.WDS
RefreshClicktorefreshallinformation.
ExtenderMode:
Wireless2.4GHZ(5GHz)/SSID
ConnectionStatusCurrentstatusoftherepeater’sconnection.
SourceSSIDDisplaystheSSIDname(s)fortherepeater’s
27
source.
ExtendedSSIDDisplaystheSSIDname(s)oftherepeater.
Authentication
Method
Displaystheauthenticationmethodforthe
specifiedSSID.SeeIV‐3.WirelessSettings
EncryptionTypeDisplaystheencryptiontypeforthespecified
SSID.SeeIV‐3.WirelessSettings
MACAddressDisplaystheaccesspoint’sMACaddress.
ChannelDisplaysthechannelnumberthespecified
wirelessfrequencyisusingforbroadcast.
TransmitPowerDisplaysthewirelessradiotransmitpower
levelasapercentage.
RSSIDisplaysReceivedSignalStrengthIndicator.
28
IV‐1‐2. WirelessClients
The“WirelessClients”pagedisplays
informationaboutallwirelessclients
connectedtotheaccesspointonthe2.4GHzor5GHzfrequency.
Refreshtime
AutoRefreshTimeSelectatimeintervalfortheclienttablelistto
automaticallyrefresh.
ManualRefreshClickrefreshtomanuallyrefreshtheclient
table.
2.4GHz(5GHz)WLANClientTable
SSIDDisplaystheSSIDwhichtheclientis
connectedto.
MACAddressDisplaystheMACaddressoftheclient.
TxDisplaysthetotaldatapacketstransmittedby
thespecifiedclient.
RxDisplaysthetotaldatapacketsreceivedby
thespecifiedclient.
29
Signal(%)Displaysthewirelesssignalstrengthforthe
specifiedclient.
ConnectedTimeDisplaysthetotaltimethewirelessclienthas
beenconnectedtotheaccesspoint.
IdleTimeClientidletimeisthetimeforwhichtheclient
hasnottransmittedanydatapacketsi.e.is
idle.
VendorThevendoroftheclient’swirelessadapteris
displayedhere.
30
IV‐1‐3. WirelessMonitor
WirelessMonitorisatoolbuiltintotheaccess
pointtoscanandmonitorthesurrounding
wirelessenvironment.Selectafrequencyandclick“Scan”todisplayalistof
allSSIDswithinrangealongwithrelevantdetailsforeachSSID.
WirelessMonitor
SiteSurveySelectwhichfrequency(orboth)toscan,and
click“Scan”tobegin.
ChannelSurvey
Result
Afterascaniscomplete,click“Export”tosave
theresultstolocalstorage.
SiteSurveyResults
ChDisplaysthechannelnumberusedbythe
specifiedSSID.
SSIDDisplaystheSSIDidentifiedbythescan.
MACAddressDisplaystheMACaddressofthewireless
router/accesspointforthespecifiedSSID.
SecurityDisplaystheauthentication/encryptiontype
ofthespecifiedSSID.
31
Signal(%)Displaysthecurrentsignalstrengthofthe
SSID.
TypeDisplaysthe802.11wirelessnetworking
standard(s)ofthespecifiedSSID.
VendorDisplaysthevendorofthewireless
router/accesspointforthespecifiedSSID.
32
IV‐1‐4. Log
Thesystemlogdisplayssystemoperation
informationsuchasuptimeandconnection
processes.Thisinformationisusefulfornetworkadministrators.
Whenthelogisfull,oldentriesareoverwritten.UsetheSearch
functiontoquicklylocatelogentries.
SaveClicktosavethelogasafileonyourlocal
computer.
ClearClearalllogentries.
RefreshRefreshthecurrentlog.
33
Thefollowinginformation/eventsarerecordedbythelog:
USB
Mount&unmount
WirelessClient
Connected&disconnected
Keyexchangesuccess&fail
Authentication
Authenticationfailorsuccessful.
Association
Successorfail
WPS
M1‐M8messages
WPSsuccess
ChangeSettings
SystemBoot
Displayscurrentmodelname
NTPClient
WiredLink
LANPortlinkstatusandspeedstatus
ProxyARP
ProxyARPmodulestart&stop
Bridge
Bridgestart&stop.
SNMP
SNMPserverstart&stop.
HTTP
HTTPstart&stop.
HTTPS
HTTPSstart&stop.
SSH
SSH‐clientserverstart&stop.
Telnet
Telnet‐clientserverstartorstop.
WLAN(2.4G)
WLAN(2.4G]channelstatusandcountry/regionstatus
WLAN(5G)
WLAN(5G)channelstatusandcountry/regionstatus
34
IV‐2. NetworkSettings
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV‐2‐1. LAN‐SideIPAddress
The“LAN‐sideIPaddress”pageallowsyouto
configureyouraccesspointonyourLocalArea
Network(LAN).YoucanenabletheaccesspointtodynamicallyreceiveanIP
addressfromyourrouter’sDHCPserveroryoucanspecifyastaticIPaddress
foryouraccesspoint,aswellasconfigureDNSservers.
Theaccesspoint’sdefaultIPaddressis192.168.2.2.
LAN‐sideIPAddress
IPAddress
Assignment
Select“DHCPClient”foryouraccesspointto
beassignedadynamicIPaddressfromyour
router’sDHCPserver,orselect“StaticIP”to
manuallyspecifyastatic/fixedIPaddressfor
youraccesspoint(below).
IPAddressSpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
255.255.255.0
35
DefaultGatewayForDHCPusers,select“FromDHCP”toget
defaultgatewayfromyourDHCPserveror
“User‐Defined”toenteragatewaymanually.
ForstaticIPusers,thedefaultvalueisblank.
DHCPuserscanselecttogetDNSservers’IPaddressfromDHCPormanually
enteravalue.ForstaticIPusers,thedefaultvalueisblank.
PrimaryAddressDHCPuserscanselect“FromDHCP”toget
primaryDNSserver’sIPaddressfromDHCPor
“User‐Defined”tomanuallyenteravalue.For
staticIPusers,thedefaultvalueisblank.
SecondaryAddressUserscanmanuallyenteravaluewhenDNS
server’sprimaryaddressissetto
“User‐Defined”.
36
IV‐2‐2. LANPort
The“LANPort”pageallowsyouto
configurethesettingsforyouraccess
point’stwowiredLAN(Ethernet)ports.
WiredLANPortIdentifiesLANport.USBistheLANport
attachedviaminiUSBadapter.
EnableEnable/disablespecifiedLANport.
Speed&DuplexSelectaspeed&duplextypeforspecifiedLAN
port,orusethe“Auto”value.LANportscan
operateupto1000Mbpsandfull‐duplex
enablessimultaneousdatapackets
transfer/receive.
FlowControlEnable/disableflowcontrol.Flowcontrolcan
pausenewsessionrequestuntilcurrentdata
processingiscomplete,inordertoavoid
deviceoverloadsunderheavytraffic.
802.3azEnable/disable802.3az.802.3azisanEnergy
EfficientEthernetfeaturewhichdisables
unusedinterfacestoreducepowerusage.
37
IV‐2‐3. VLAN
The“VLAN”(VirtualLocalAreaNetwork)
enablesyoutoconfigureVLANsettings.A
VLANisalocalareanetworkwhichmaps
workstationsvirtuallyinsteadofphysicallyandallowsyoutogrouptogether
orisolateusersfromeachother.VLANIDs1–4095aresupported.
VLANIDsintherange1–4095aresupported.
VLANInterface
WiredLAN
Port/Wireless
IdentifiesLANportnumberandwirelessSSIDs.
USBistheLANportattachedviaminiUSB
adapter.
VLANModeSelect“TaggedPort”or“UntaggedPort”for
specifiedLANinterface.
VLANIDSetaVLANIDforspecifiedinterface,if
“UntaggedPort”isselected.
ManagementVLAN
VLANIDSpecifytheVLANIDofthemanagementVLAN.
OnlythehostsbelongingtothesameVLANcan
managethedevice.
38
IV‐3. WirelessSettings
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV‐3‐1. WirelessExtender
OnlyavailableinRepeaterMode
Thewirelessextenderpagedisplaysdetails
abouttheAPswirelessconnectioninrepeater
modeandenablesyoutoconnecttoasourceSSIDandconfigurethenew
(repeater)SSID.Settingsaresavedasprofiles.ClickScantosearchforand
displayavailableSSIDsandclickSelecttoconnecttoanavailableSSID.SSIDs
canbeconfiguredindependentlyforeachfrequency2.4GHz&5GHz.
39
Wireless2.4GHz/5GHz
SelectClicktoselectanSSIDanddisplayanewCreate
Profilewindowtoentersecurityinformation
(below).
ChannelDisplaysthechannelnumberoflistedSSID.
SSIDDisplaystheSSID.
MACAddressDisplaystheMACaddressofspecifiedSSID.
SecurityDisplaystheexistingsecuritytypeforlisted
SSID.
Signal(%)Displaystheavailablesignalstrengthforlisted
SSID.
TypeDisplaysthewireless802.11standardforeach
SSID.
WirelessCreateProfile
SSIDDisplaystheselectedsourceSSIDforthis
profile.
ExtendedSSIDEditthenewSSIDforthisprofile.
Authentication
Method
SelectthesourceSSIDsauthenticationmethod
andenterencryptionkey/pre‐sharedkey.
40
IV‐3‐2. ProfileList
OnlyavailableinRepeaterMode
Repeatermodesettingsaresavedasprofiles.
Profilescanbeeditedandmultipleprofiles
canbecreatedtoswitchbetweenprofiles
easilyasrequired.SelectanexistingprofileandclickEditorConnect.
WirelessCreateProfile
SSIDDisplaystheselectedsourceSSIDforthis
profile.
ExtendedSSIDEditthenewSSIDforthisprofile.
Authentication
Method
SelectthesourceSSIDsauthenticationmethod
andenterencryptionkey/pre‐sharedkey.
41
IV‐3‐3. 2.4GHz11bgn
The“2.4GHz11bgn”menuallowsyoutoview
andconfigureinformationforyouraccess
point’s2.4GHzwirelessnetworkacrossfive
categories:Basic,Advanced,Security,WDS&Schedule.
IV‐3‐3‐1.Basic
The“Basic”screendisplaysbasicsettingsfor
youraccesspoint’s2.4GHzWi‐Finetwork(s).
42
WirelessEnableordisabletheaccesspoint’s2.4GHz
wirelessradio.Whendisabled,no2.4GHz
SSIDswillbeactive.
BandSelectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11b,
802.11g&802.11ncanbeselected.
EnableSSIDNumberSelecthowmanySSIDstoenableforthe
2.4GHzfrequencyfromthedropdownmenu.
Amaximumof16canbeenabled.
SSID#EntertheSSIDnameforthespecifiedSSID(up
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s2.4GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannel
Interval
Specifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
43
Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel Selectawirelesschannelfrom1–11.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
44
IV‐3‐3‐2.Advanced
Thesesettingsareforexperiencedusersonly.
Pleasedonotchangeanyofthevaluesonthis
pageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
ContentionSlotSelect“Short”or“Long”–thisvalueisusedfor
contentionwindowsinWMM(seeIV‐3‐6.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
45
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
46
IV‐3‐3‐3.Security
Theaccesspointprovidesvarioussecurityoptions
(wirelessdataencryption).Whendatais
encrypted,informationtransmittedwirelesslycannotbereadbyanyonewho
doesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthard‐to‐guesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
47
2.4GHzWirelessSecuritySettings
SSIDSelectionSelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWi‐Finetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWi‐Fi
networktoclients–clientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication
Method
Selectanauthenticationmethodfromthedrop
downmenuandrefertotheinformation
belowappropriateforyourmethod.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenuandrefertothe
informationbelow(IV‐3‐1‐3‐6.)appropriatefor
yourmethod.
2.4GHzWirelessAdvancedSettings
SmartHandoverEnableordisablesmarthandover.
RSSIThresholdSettheReceivedSignalStrengthIndicator
(RSSI)thresholdtomaintainqualityconnection
speeds(minimumreceiversensitivityrequired
foraconnection).
48
IV‐3‐3‐3‐1. NoAuthentication
Authenticationisdisabledandnopassword/keyisrequiredtoconnecttothe
accesspoint.
Disablingwirelessauthenticationisnotrecommended.When
disabled,anybodywithinrangecanconnecttoyourdevice’sSSID.
IV‐3‐3‐3‐2. WEP
WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Forahigher
levelofsecurityconsiderusingWPAencryption.
KeyLengthSelect64‐bitor128‐bit.128‐bitismoresecure
than64‐bitandisrecommended.
KeyTypeChoosefrom“ASCII”(anyalphanumerical
character0‐9,a‐zandA‐Z)or“Hex”(any
charactersfrom0‐9,a‐fandA‐F).
DefaultKeySelectwhichencryptionkey(1–4below)isthe
defaultkey.Forsecuritypurposes,youcanset
uptofourkeys(below)andchangewhichis
thedefaultkey.
EncryptionKey1–
4
Enteryourencryptionkey/passwordaccording
totheformatyouselectedabove.
IV‐3‐3‐3‐3. IEEE802.1x/EAP
KeyLengthSelect64‐bitor128‐bit.128‐bitismoresecure
than64‐bitandisrecommended.
IV‐3‐3‐3‐4. WPA‐PSK
WPA‐PSKisasecurewirelessencryptiontypewithstrongdata
protectionanduserauthentication,utilizing128‐bitencryptionkeys.
WPATypeSelectfromWPA/WPA2MixedMode‐PSK,
WPA2orWPAonly.WPA2issaferthanWPA
only,butnotsupportedbyallwirelessclients.
Pleasemakesureyourwirelessclientsupports
49
yourselection.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
Pre‐SharedKey
Type
Choosefrom“Passphrase”(8–63
alphanumericcharacters)or“Hex”(upto64
charactersfrom0‐9,a‐fandA‐F).
Pre‐SharedKeyPleaseenterasecuritykey/passwordaccording
totheformatyouselectedabove.
IV‐3‐3‐3‐5. WPA‐EAP
WPATypeSelectfromWPA/WPA2MixedMode‐EAP,
WPA2‐EAPorWPA‐EAP.
EncryptionType
Select“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
WPA‐EAPmustbedisabledtouseMAC‐RADIUSauthentication.
IV‐3‐3‐3‐6. AdditionalAuthentication
Additionalwirelessauthenticationmethodscanalsobeused:
WPSmustbedisabledtouseadditionalauthentication.SeeIV‐3‐3.
forWPSsettings.
MACAddressFilter
RestrictwirelessclientsaccessbasedonMACaddressspecifiedintheMAC
filtertable.
SeeIV‐3‐5.MACFiltertoconfigureMACfiltering.
MACFilter&MAC‐RADIUSAuthentication
RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering&
RADIUSauthenticationmethods.
50
MAC‐RADIUSAuthentication
RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,or
passwordauthenticationviaaRADIUSserver.
SeeIV‐3‐4.RADIUStoconfigureRADIUSservers.
WPSmustbedisabledtouseMAC‐RADIUSauthentication.See
IV‐3‐3.forWPSsettings.
MACRADIUS
Password
SelectwhethertouseMACaddressor
passwordauthenticationviaRADIUSserver.If
youselect“Usethefollowingpassword”,enter
thepasswordinthefieldbelow.Thepassword
shouldmatchthe“SharedSecret”usedin
IV‐3‐4.RADIUS.
51
IV‐3‐3‐4.WDS
WirelessDistributionSystem(WDS)can
bridge/repeataccesspointstogetherinan
extendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspointto
beinthesamesubnetandensurethereisonlyoneactiveDHCP
serveramongconnectedaccesspoints,preferablyontheWAN
side.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
52
2.4GHz
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
WDS#EntertheMACaddressforuptofourother
WDSdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryptionmethod
EncryptionSelectwhethertouse“None”or“AES”
encryptionandenterapre‐sharedkeyforAES
consistingof8‐63alphanumericcharacters.
53
IV‐3‐4. 5GHz11ac11an
The“5GHz11ac11an”menuallowsyoutoview
andconfigureinformationforyouraccesspoint’s
5GHzwirelessnetworkacrossfivecategories:Basic,Advanced,Security,WDS
&Schedule.
IV‐3‐4‐1.Basic
The“Basic”screendisplaysbasicsettingsfor
youraccesspoint’s5GHzWi‐Finetwork(s).
WirelessEnableordisabletheaccesspoint’s5GHz
wirelessradio.Whendisabled,no5GHzSSIDs
willbeactive.
BandSelectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11a,
54
802.11n&802.11accanbeselected.
EnableSSIDNumberSelecthowmanySSIDstoenableforthe5GHz
frequencyfromthedropdownmenu.A
maximumof16canbeenabled.
SSID#EntertheSSIDnameforthespecifiedSSID(up
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s5GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannel
Interval
Specifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel Selectawirelesschannel.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
55
framesforwirelessclients.
IV‐3‐4‐2.Advanced
Thesesettingsareforexperiencedusersonly.
Pleasedonotchangeanyofthevaluesonthis
pageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
56
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
57
IV‐3‐4‐3.Security
Theaccesspointprovidesvarioussecurityoptions
(wirelessdataencryption).Whendatais
encrypted,informationtransmittedwirelessly
cannotbereadbyanyonewhodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthard‐to‐guesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
SSIDSelectionSelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWi‐Finetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWi‐Fi
networktoclients–clientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
58
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication
Method
Selectanauthenticationmethodfromthedrop
downmenuandrefertotheinformation
belowappropriateforyourmethod.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenuandrefertothe
informationbelowappropriateforyour
method.
PleasereferbacktoIV‐3‐1‐3.Securityformoreinformationonauthentication
andadditionalauthenticationtypes.
59
IV‐3‐4‐4.WDS
WirelessDistributionSystem(WDS)can
bridge/repeataccesspointstogetherinan
extendednetwork.WDSsettingscanbe
configuredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspointto
beinthesamesubnetandensurethereisonlyoneactiveDHCP
serveramongconnectedaccesspoints,preferablyontheWAN
side.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
60
5GHzWDSMode
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
WDS#EntertheMACaddressforuptofourother
WDAdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryption
EncryptionSelectwhethertouse“None”or“AES”
encryptionandenterapre‐sharedkeyforAES
with8‐63alphanumericcharacters.
61
IV‐3‐5.WPS
Wi‐FiProtectedSetupisasimplewayto
establishconnectionsbetweenWPS
compatibledevices.WPScanbeactivatedoncompatibledevicesbypushinga
WPSbuttononthedeviceorfromwithinthedevice’sfirmware/configuration
interface(knownasPBCor“PushButtonConfiguration”).WhenWPSis
activatedinthecorrectmannerandatthecorrecttimefortwocompatible
devices,theywillautomaticallyconnect.“PINcodeWPS”isavariationofPBC
whichincludestheadditionaluseofaPINcodebetweenthetwodevicesfor
verification.
Pleaserefertomanufacturer’sinstructionsforyourotherWPS
device.
62
WPSCheck/uncheckthisboxtoenable/disableWPS
functionality.WPSmustbedisabledwhen
usingMAC‐RADIUSauthentication(see
IV‐3‐1‐3‐6&IV‐3‐4).
WPS
ProductPINDisplaystheWPSPINcodeofthedevice,used
forPINcodeWPS.Youwillberequiredtoenter
thisPINcodeintoanotherWPSdeviceforPIN
codeWPS.Click“GeneratePIN”togeneratea
newWPSPINcode.
Push‐ButtonWPSClick“Start”toactivateWPSontheaccess
pointforapproximately2minutes.Thishasthe
sameeffectasphysicallypushingtheaccess
point’sWPSbutton.
WPSbyPINEnterthePINcodeofanotherWPSdeviceand
click“Start”toattempttoestablishaWPS
connectionforapproximately2minutes.
WPSSecurity
WPSStatusWPSsecuritystatusisdisplayedhere.Click
“Release”tocleartheexistingstatus.
Wireless2.4GHz/5GHz
SSIDDisplaystheSSIDname(s)forthespecified
frequency.
SecurityDisplaysthesecurityforthespecifiedSSID.
EncryptionDisplaystheencryptiontypeforthespecified
SSID.SeeIV‐3.WirelessSettings
63
IV‐3‐6.RADIUS
TheRADIUSmenuallowsyoutoconfigurethe
accesspoint’sexternalRADIUSserversettings.
ARADIUSserverprovidesuser‐basedauthenticationtoimprovesecurityand
offerwirelessclientcontrol–userscanbeauthenticatedbeforegaining
accesstoanetwork.
Theaccesspointcanutilizebothaprimaryandsecondary(backup)external
RADIUSserverforeachofitswirelessfrequencies(2.4GHz&5GHz)..
TouseRADIUSservers,goto“WirelessSettings”
Æ
“Security”and
select“MACRADIUSAuthentication”
Æ
“Additional
Authentication”andselect“MACRADIUSAuthentication”(see
IV‐3‐1‐3.&IV‐3‐2‐3).
64
IV‐3‐6‐1.RADIUSSettings
ConfiguretheRADIUSserversettingsfor
2.4GHz.Eachfrequencycanuseaninternalor
externalRADIUSserver.
65
RADIUSTypeSelect“Internal”tousetheaccesspoint’s
built‐inRADIUSserveror“external”tousean
externalRADIUSserver.
RADIUSServerEntertheRADIUSserverhostIPaddress.
Authentication
Port
SettheUDPportusedintheauthentication
protocoloftheRADIUSserver.Valuemustbe
between1–65535.
SharedSecretEnterasharedsecret/passwordbetween1–
99charactersinlength.Thisshouldmatchthe
“MAC‐RADIUS”passwordusedinIV‐3‐1‐3‐6or
IV‐3‐2‐3.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between0–86400.
AccountingEnableordisableRADIUSaccounting.
AccountingPortWhenaccountingisenabled(above),setthe
UDPportusedintheaccountingprotocolof
theRADIUSserver.Valuemustbebetween1–
65535.
66
IV‐3‐6‐2.InternalServer
Theaccesspointfeaturesabuilt‐inRADIUS
serverwhichcanbeconfiguredasshown
belowusedwhen“Internal”isselectedfor“RADIUSType”inthe“Wireless
Settings”Æ“RADIUS”Æ“RADIUSSettings”menu.
TouseRADIUSservers,goto“WirelessSettings”
Æ
“Security”and
select“MACRADIUSAuthentication”
Æ
“Additional
Authentication”andselect“MACRADIUSAuthentication”(see
IV‐3‐1‐3.&IV‐3‐2‐3).
InternalServerCheck/unchecktoenable/disabletheaccess
point’sinternalRADIUSserver.
EAPInternal
Authentication
SelectEAPinternalauthenticationtypefrom
thedropdownmenu.
EAPCertificateFile
Format
DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaself‐made
certificate.
SharedSecretEnterasharedsecret/passwordforuse
betweentheinternalRADIUSserverand
RADIUSclient.Thesharedsecretshouldbe1–
67
99charactersinlength.Thisshouldmatchthe
“MAC‐RADIUS”passwordusedinIV‐3‐1‐3‐6or
IV‐3‐2‐3.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between0–86400.
TerminationActionSelectatermination‐actionattribute:
“Reauthentication”sendsaRADIUSrequestto
theaccesspoint,“Not‐Reathentication”sends
adefaulttermination‐actionattributetothe
accesspoint,“Not‐Send”no
termination‐actionattributeissenttothe
accesspoint.
68
IV‐3‐6‐3.RADIUSAccounts
TheinternalRADIUSservercanauthenticate
upto256useraccounts.The“RADIUS
Accounts”pageallowsyoutoconfigureandmanageusers.
69
UserNameEntertheusernameshere,separatedby
commas.
AddClick“Add”toaddtheusertotheuser
registrationlist.
ResetCleartextfromtheusernamebox.
SelectChecktheboxtoselectauser.
UserNameDisplaystheusername.
PasswordDisplaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured).
CustomizeClick“Edit”toopenanewfieldtoset/edita
passwordforthespecifiedusername(below).
DeleteSelectedDeleteselecteduserfromtheuserregistration
list.
DeleteAllDeleteallusersfromtheuserregistrationlist.
EditUserRegistrationList
UserNameExistingusernameisdisplayedhereandcan
beeditedaccordingtoyourpreference.
PasswordEnteroreditapasswordforthespecifieduser.
70
IV‐3‐7. MACFilter
Macfilteringisasecurityfeaturethatcan
helptopreventunauthorizedusersfrom
connectingtoyouraccesspoint.
Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto
connecttotheaccesspoint.DevicesareeachidentifiedbytheiruniqueMAC
address.IfadevicewhichisnotonthelistofpermittedMACaddresses
attemptstoconnecttotheaccesspoint,itwillbedenied.
ToenableMACfiltering,goto“WirelessSettings”
Æ
“2.4G
Hz11bgn”
Æ
“Security”
Æ
“AdditionalAuthentication”andselect
“MACFilter”(seeIV‐3‐1‐3).
TheMACaddressfilteringtableisdisplayedbelow:
AddMACAddressEnteraMACaddressofcomputerornetwork
devicemanuallye.g.‘aa‐bb‐cc‐dd‐ee‐ff’or
entermultipleMACaddressesseparatedwith
71
commas,e.g.
‘aa‐bb‐cc‐dd‐ee‐ff,aa‐bb‐cc‐dd‐ee‐gg’
AddClick“Add”toaddtheMACaddresstothe
MACaddressfilteringtable.
ResetClearallfields.
MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.Select
anentryusingthe“Select”checkbox.
SelectDeleteselectedorallentriesfromthetable.
MACAddressTheMACaddressislistedhere.
DeleteSelectedDeletetheselectedMACaddressfromthe
list.
DeleteAllDeleteallentriesfromtheMACaddress
filteringtable.
ExportClick“Export”tosaveacopyoftheMAC
filteringtable.Anewwindowwillpopupfor
youtoselectalocationtosavethefile.
72
IV‐3‐8.WMM
Wi‐FiMultimedia(WMM)isaWi‐FiAlliance
interoperabilitycertificationbasedonthe
IEEE802.11estandard,whichprovides
QualityofService(QoS)featurestoIEE802.11networks.WMMprioritizes
trafficaccordingtofourcategories:background,besteffort,videoandvoice.
ConfiguringWMMconsistsofadjustingparametersonqueuesfordifferent
categoriesofwirelesstraffic.Trafficissenttothefollowingqueues:
BackgroundLow
Priority
Highthroughput,nontimesensitivebulk
datae.g.FTP
BestEffortMedium
Priority
TraditionalIPdata,mediumthroughputand
delay.
VideoHigh
Priority
Timesensitivevideodatawithminimum
timedelay.
VoiceHigh
Priority
TimesensitivedatasuchasVoIPand
streamingmediawithminimumtimedelay.
Queuesautomaticallyprovideminimumtransmissiondelaysforvideo,voice,
multimediaandcriticalapplications.Thevaluescanfurtherbeadjusted
manually:
73
CWMinMinimumContentionWindow(milliseconds):
Thisvalueisinputtotheinitialrandom
backoffwaittimealgorithmforretryofadata
frametransmission.Thebackoffwaittimewill
begeneratedbetween0andthisvalue.Ifthe
frameisnotsent,therandombackoffvalueis
doubleduntilthevaluereachesthenumber
definedbyCWMax(below).TheCWMinvalue
mustbelowerthantheCWMaxvalue.The
contentionwindowschemehelpstoavoid
framecollisionsanddeterminepriorityof
frametransmission.Ashorterwindowhasa
higherprobability(priority)oftransmission.
CWMaxMaximumContentionWindow(milliseconds):
Thisvalueistheupperlimittorandom
backoffvaluedoubling(seeabove).
AIFSNArbitrationInter‐FrameSpace(milliseconds):
Specifiesadditionaltimebetweenwhena
channelgoesidleandtheAP/clientsends
dataframes.TrafficwithalowerAIFSNvalue
hasahigherpriority.
TxOPTransmissionOpportunity(milliseconds):The
maximumintervaloftimeanAP/clientcan
transmit.Thismakeschannelaccessmore
efficientlyprioritized.Avalueof0meansonly
oneframepertransmission.Agreatervalue
effectshigherpriority.
74
IV‐3‐9.Schedule
Theschedulefeatureallowsyoutoautomate
thewirelessnetworkforspecifiedtimes.
Check/uncheckthebox“EnableWirelessSchedule”toenable/disablethe
wirelessschedulingfunction.
Theaccesspoint’stimeanddatesettingsmustbesetinorderto
usethisfunction.
Wirelessschedulingcansaveenergyandincreasethesecurityof
yournetwork.
1. CheckEnableandusetheSelect,Add,EditorDeletecheckboxestoselect
andmodifyschedule(s).
2. WhenyouclickAdd,specifyday(s),starttimeandendtimeforthe
scheduleusingthedrop‐downmenusandclickApply.
75
3. RemembertoApplyyourchangesandmakesureEnableischecked.
76
IV‐3‐10.TrafficShaping
Thetrafficshapingfunctionallowsyouto
regulatenetworkdatatransfertoensureor
prioritizeperformancebylimitinguplinkanddownlinkspeedsaccordingto
SSID.
EnableUnlimited:0
Mbps
Check/unchecktoenableordisableunlimited
transferspeed.
Downlink/UplinkSpecifythemaximumdown/uplinkcapacityin
77
MaximumMbps.
DownlinkEnteradownlinklimitinMBforthelisted
SSID.
UplinkEnteranuplinklimitinMBforthelistedSSID.
78
IV‐4. Management
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV‐4‐1. Admin
Youcanchangethepasswordusedtologinto
thebrowser‐basedconfigurationinterfacehere.
Itisadvisedtodosoforsecuritypurposes.
Ifyouchangetheadministratorpassword,pleasemakeanote
ofthenewpassword.Intheeventthatyouforgetthis
passwordandareunabletologintothebrowserbased
configurationinterface,seeI‐5.Resetforhowtoresetthe
accesspoint.
79
AccounttoManageThisDevice
Administrator
Name
Settheaccesspoint’sadministratorname.
Thisisusedtologintothebrowserbased
configurationinterfaceandmustbebetween
4‐16alphanumericcharacters(casesensitive).
Administrator
Password
Settheaccesspoint’sadministratorpassword.
Thisisusedtologintothebrowserbased
configurationinterfaceandmustbebetween
4‐32alphanumericcharacters(casesensitive).
AdvancedSettings
ProductNameEdittheproductnameaccordingtoyour
80
preferenceconsistingof1‐32alphanumeric
characters.Thisnameisusedforreference
purposes.
HTTPPortSpecifyHTTPportnumber.
HTTPSPortSpecifyHTTPSportnumber.
Management
Protocol
Check/unchecktheboxestoenable/disable
specifiedmanagementinterfaces(seebelow).
WhenSNMPisenabled,completetheSNMP
fieldsbelow.
SNMPVersionSelectSNMPversionappropriateforyour
SNMPmanager.
SNMPGet
Community
EnteranSNMPGetCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMP‐GETrequests.
SNMPSet
Community
EnteranSNMPSetCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMP‐SETrequests.
SNMPTrapEnableordisableSNMPTraptonotifySNMP
managerofnetworkerrors.
SNMPTrap
Community
EnteranSNMPTrapCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMP‐TRAPrequests.
SNMPTrap
Manager
SpecifytheIPaddressorsevername(2‐128
alphanumericcharacters)oftheSNMP
manager.
HTTP
InternetbrowserHTTPprotocolmanagementinterface
TELNET
Clientterminalwithtelnetprotocolmanagementinterface
SNMP
SimpleNetworkManagementProtocol.SNMPv1,v2&v3protocolsupported.
SNMPv2canbeusedwithcommunitybasedauthentication.SNMPv3uses
user‐basedsecuritymodel(USM)architecture.
81
IV‐4‐2. DateandTime
Youcanconfigurethetimezonesettingsofyour
accesspointhere.Thedateandtimeofthe
devicecanbeconfiguredmanuallyorcanbesynchronizedwithatimeserver.
DateandTimeSettings
LocalTimeSettheaccesspoint’sdateandtimemanually
usingthedropdownmenus.
AcquireCurrent
TimefromyourPC
Click“AcquireCurrentTimefromYourPC”to
entertherequiredvaluesautomatically
accordingtoyourcomputer’scurrenttimeand
date.
NTPTimeServer
UseNTPTheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddate
setup.
82
ServerNameEnterthehostnameorIPaddressofthetime
serverifyouwish.
UpdateIntervalSpecifyafrequency(inhours)fortheaccess
pointtoupdate/synchronizewiththeNTP
server.
TimeZone
TimeZoneSelectthetimezoneofyourcountry/region.If
yourcountry/regionisnotlisted,pleaseselect
anothercountry/regionwhosetimezoneisthe
sameasyours.
83
IV‐4‐3. SyslogServer
Thesystemlogcanbesenttoaserveror
toattachedUSBstorage.
SyslogServerSettings
TransferLogsCheck/unchecktheboxtoenable/disablethe
useofasyslogserver,andenterahost
name,domainorIPaddressfortheserver,
consistingofupto128alphanumeric
characters.
CopyLogsto
AttachedUSBDevice
Check/unchecktheboxtoenable/disable
copyinglogstoattachedUSBstorage.
SyslogE‐mailSettings
E‐mailLogsChecktheboxtoenable/disablee‐maillogs.
E‐mailSubjectSpecifythesubjectlineoflogemails.
SMTPServer
Address
SpecifytheSMTPserveraddressusedtosend
logemails.
SMTPServerPortSpecifytheSMTPserverportusedtosendlog
emails.
SenderE‐mailSpecifythesenderemailaddress.
ReceiverE‐mailSpecifytheemailtoreceivelogemails.
84
AuthenticationDisableorselectauthenticationtype:SSLorTLS.
WhenusingSSLorTLS,entertheusernameand
password.
IV‐4‐4. PingTest
Theaccesspointincludesabuilt‐inpingtest
function.Pingisacomputer
networkadministrationutilityusedtotestwhetheraparticularhostis
reachableacrossanIPnetworkandtomeasuretheround‐triptimeforsent
messages.
DestinationAddressEntertheaddressofthehost.
ExecuteClickexecutetopingthehost.
85
IV‐4‐5. I’mHere
Theaccesspointfeaturesabuilt‐inbuzzer
whichcansoundoncommandusingthe“I’m
Here”page.Thisisusefulfornetworkadministratorsandengineersworking
incomplexnetworkenvironmentstolocatetheaccesspoint.
Thebuzzerisloud!
DurationofSoundSetthedurationforwhichthebuzzerwill
soundwhenthe“SoundBuzzer”buttonis
clicked.
SoundBuzzerActivatethebuzzersoundfortheabove
specifieddurationoftime.
86
IV‐5. Advanced
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV‐5‐1. LEDSettings
Theaccesspoint’sLEDscanbemanually
enabledordisabledaccordingtoyour
preference.
Power/DiagLEDSelectonoroff.
87
IV‐5‐2. UpdateFirmware
The“Firmware”pageallowsyoutoupdate
thesystemfirmwaretoamorerecent
version.Updatedfirmwareversionsoften
offerincreasedperformanceandsecurity,aswellasbugfixes.Youcan
downloadthelatestfirmwarefromthewebsite.
Donotswitchoffordisconnecttheaccesspointduringafirmware
upgrade,asthiscoulddamagethedevice.
UpdateFirmware
From
Select“afileonyourPC”touploadfirmware
fromyourlocalcomputerorfroman
attachedUSBdevice.
FirmwareUpdateFileClick“ChooseFile”toopenanewwindowto
locateandselectthefirmwarefileinyour
computer.
UpdateClick“Update”touploadthespecified
firmwarefiletoyouraccesspoint.
88
IV‐5‐3. Save/RestoreSettings
Theaccesspoint’s“Save/RestoreSettings”
pageenablesyoutosave/backuptheaccess
point’scurrentsettingsasafiletoyourlocalcomputeroraUSBdevice
attachedtotheaccesspoint,andrestoretheaccesspointtopreviouslysaved
settings.
Save/RestoreSettings
UsingDeviceSelect“UsingyourPC”tosavetheaccess
point’ssettingstoyourlocalcomputerorto
anattachedUSBdevice.
SaveSettingstoPC
SaveSettingsClick“Save”tosavesettingsandanew
windowwillopentospecifyalocationto
savethesettingsfile.Youcanalsocheckthe
“Encrypttheconfigurationfilewitha
password”boxandenterapasswordto
protectthefileinthefieldunderneath,ifyou
wish.
RestoreSettingsfromPC
RestoreSettingsClickthebrowsebuttontofindapreviously
savedsettingsfileonyourcomputer,then
click“Restore”toreplaceyourcurrent
settings.Ifyoursettingsfileisencryptedwith
89
apassword,checkthe“Openfilewith
password”boxandenterthepasswordin
thefieldunderneath.
90
IV‐5‐4. FactoryDefault
Iftheaccesspointmalfunctionsorisnot
responding,thenitisrecommendedthatyou
rebootthedevice(seeIV‐5.5)orresetthedevicebacktoitsfactorydefault
settings.Youcanresettheaccesspointbacktoitsdefaultsettingsusingthis
featureifthelocationoftheaccesspointisnotconvenienttoaccessthereset
button.
FactoryDefaultClick“FactoryDefault”torestoresettingsto
thefactorydefault.Apop‐upwindowwill
appearandaskyoutoconfirm.
Afterresettingtofactorydefaults,pleasewaitfortheaccess
pointtoresetandrestart.
91
IV‐5‐5. Reboot
Iftheaccesspointmalfunctionsorisnot
responding,thenitisrecommendedthat
yourebootthedeviceorresettheaccesspointbacktoitsfactorydefault
settings(seeIV‐5‐4).Youcanreboottheaccesspointremotelyusingthis
feature.
RebootClick“Reboot”torebootthedevice.A
countdownwillindicatetheprogressofthe
reboot.
92
IV‐6. OperationMode
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
Theaccesspointcanfunctioninthreedifferentmodes.Settheoperation
modeoftheaccesspointhere.
Youraccesspointcanfunctioninthreedifferentmodes.
ThedefaultmodeforyouraccesspointisAPmode.
APmodeisaregularaccesspointforuseinyourwirelessnetwork.
APControllermodeactsasthedesignatedmasterofanAParray(groupof
linkedaccesspoints).InAPControllermodetheuserinterfacewillswitchto
NMS.
ManagedAPmodeactsasa“slave”APwithintheAParray(controlledbythe
APController“master”).
InRepeatermodetheaccesspointconnectswirelesslytoyourexisting
2.4GHzand/or5GHznetworkandrepeatsthewirelesssignal(s).
InManagedAPmodesomefunctionsoftheaccesspointwillbe
disabledinthisuserinterfaceandmustbesetusingNMSonthe
APController.
93
OperationModeAPModeisastandardaccesspointina
wirelessnetwork.
APControllerModeisthemasterofanAP
arrayandcontrolsallothermanagedAPs
(below)usingNMS.
ManagedAPmodeisanAPwhichispartof
theAParrayandismanagedbythe
ControllerAP.
Whenyousettheoperationmodetorepeatermode,theAPwill
notgetanIPaddressfromtherouter/rootAP.Youwillneedto
setyourcomputer’sIPaddressandusetheAPsdefaultIPaddress
toaccesstheUIforthefirsttime,refertoAppendixformorehelp.
NMS
94
NMS
NMS
95
I. ProductInformation
NetworkManagementSuite(NMS)supportsthecentralmanagementofa
groupofaccesspoints,otherwiseknownasanAPArray.AC1750NMS
supportsupto7accesspointswithnoadditionalwirelesscontrollerrequired,
reducingcostsandfacilitatingefficientremoteAPmanagement.
Accesspointscanbedeployedandconfiguredaccordingtorequirements,
creatingapowerfulnetworkarchitecturewhichcanbeeasilymanagedand
expandedinthefuture,withaneasytouseinterfaceandafullrangeof
functionality–idealforsmallandmid‐sizedofficeenvironments.Asecure
WLANcanbedeployedandadministeredfromasinglepoint,minimizingcost
andcomplexity.
NMS
96
II. QuickSetup
NMSissimpletosetup.Anoverviewofthesystemisshownbelow:
OneAP(accesspoint)isdesignatedastheAPController(master)andother
connectedAPsareautomaticallydesignatedasManagedAPs(slaves).Using
NMSyoucanmonitor,configureandmanageallManagedAPs(upto32)from
thesingleAPController.
WhenusinganNMSAPcontroller,otherconnectedAPsare
automaticallysettoManagedAPs.
NMS
97
Ensureyouhavethelatestfirmwarefromthewebsiteforyour
products.
1. ConnectallAPstoanEthernetorPoEswitchwhichisconnectedtoa
gateway/router.
YoucanuseyourrouterasaDHCPserveroryoucanlater
configureyourAPControllerasaDHCPserver.
2. EnsureallAPsarepoweredonandcheckLEDs.
NMS
98
3. DesignateoneAPastheAPControllerwhichwillmanageallother
connectedAPs(upto8).
4. ConnectacomputertothedesignatedAPControllerusinganEthernet
cable.
NMS
99
5. OpenawebbrowserandentertheAPController’sIPaddressinthe
addressfield.ThedefaultIPaddressis192.168.2.2
Yourcomputer’sIPaddressmustbeinthesamesubnetastheAP
Controller.Refertotheusermanualformorehelp.
IfyouchangedtheAPController’sIPaddress,orifyour
gateway/routerusesaDHCPserver,ensureyouenterthecorrect
IPaddress.Refertoyourgateway/router’ssettings.
6. Entertheusername&passwordtologin.Thedefaultusername&
passwordareadmin&1234.
7. YouwillarriveattheNMSDashboard.Goto“OperationMode”andselect
“APControllerMode”fromthedropdownmenu.
NMS
100
8. Click“Apply”tosavethesettings.
9. NMSincludesawizardtoquicklysetuptheSSID&securityforManaged
APs.Click“Wizard”inthetoprightcornertobegin.
10. FollowtheinstructionscompleteSteps1‐6andclick“Finish”tosave
thesettings.ThewizardwillhelpyousetupLANIPaddress,2.4GHz&
5GHzSSIDandsecurity,administratorname&password,time&date
settingsandManagedAPs.
NMS
101
NMS
102
IfanyofyourManagedAPsarenotfoundduringStep5Select
FreeAPs,resettheManagedAPtoitsfactorydefaultsettings.
RefertotheAP’susermanualforhelp.
11. YourControllerAP&ManagedAPsshouldbefullyfunctional.Usethe
topmenutonavigatearoundNMS.
UseDashboard,ZonePlan,NMSMonitor&NMSSettingstoconfigure
ManagedAPs.
UseLocalNetwork&LocalSettingstoconfigureyourControllerAP.
NMS
103
III. SoftwareLayout
Thetopmenufeatures7panels:Dashboard,ZonePlan,NMSMonitor,NMS
Settings,LocalNetwork,LocalSettings&Toolbox.
Dashboard
TheDashboardpaneldisplaysanoverviewofyournetworkandkeysystem
information,withquicklinkstoaccessconfigurationoptionsforManagedAPs
andManagedAPgroups.Eachpanelcanberefreshed,collapsedormoved
accordingtoyourpreference.
NMS
104
ZonePlan
ZonePlandisplaysacustomizablelivemapofManagedAPsforavisual
representationofyournetworkcoverage.EachAPiconcanbemovedaround
themap,andabackgroundimagecanbeuploadedforuser‐definedlocation
profilesusingNMSSettingsÆZoneEdit.Optionscanbeconfiguredusingthe
menuontherightsideandsignalstrengthisdisplayedforeachAP.
NMS
105
NMSMonitor
TheNMSMonitorpanelprovidesmoredetailedmonitoringinformation
abouttheAPArraythanfoundontheDashboard,groupedaccordingto
categoriesinthemenudowntheleftside.
NMS
106
NMSSettings
NMSSettingsprovidesextensiveconfigurationoptionsfortheAPArray.You
canmanageeachaccesspoint,assignaccesspointsintogroups,manage
WLAN,RADIUS,guestnetwork,guestnetwork,usersandschedulingsettings
aswellasupgradefirmwareacrossmultipleaccesspoints.TheZonePlancan
alsobeconfiguredusing“ZoneEdit”.
NMS
107
LocalNetwork
LocalNetworksettingsareforyourAPController.YoucanconfiguretheIP
addressandDHCPserveroftheAPControllerinadditiontoLANPortand
VLANsettings.
NMS
108
LocalSettings
LocalSettingsareforyourAPController.Youcanviewbasicsystemsettings
andlogsspecificallyfortheAPController,aswellasothermanagement
settingssuchasdate/time,adminaccounts,firmwareandreset.
NMS
109
Toolbox
TheToolboxpanelprovidesanetworkdiagnostictools:pingandtraceroute.
NMS
110
IV. Features
DescriptionsofthefunctionsofeachmainpanelDashboard,ZonePlan,NMS
Monitor,NMSSettings,LocalNetwork,LocalSettings&Toolboxcanbefound
below.WhenusingNMS,click“Apply”tosavechanges:
Screenshotsdisplayedareexamples.Theinformationshownon
yourscreenwillvarydependingonyourconfiguration.
IV‐1.LOGIN,LOGOUT&RESTART
ItisrecommendedthatyoulogintotheAPControllertomake
configurationstoManagedAPs.
LOGIN
1. ConnectacomputertothedesignatedAPControllerusinganEthernet
cable:
2. OpenawebbrowserandentertheAPController’sIPaddressinthe
addressfield.ThedefaultIPaddressis192.168.2.1
NMS
111
Yourcomputer’sIPaddressmustbeinthesamesubnetastheAP
Controller.RefertoVI‐1.ConfiguringyourIPAddressformore
help.
IfyouchangedtheAPController’sIPaddress,orifyour
gateway/routerusesaDHCPserver,ensureyouenterthecorrect
IPaddress.Refertoyourgateway/router’ssettings.
IfusingaDHCPserveronthenetwork,itisadvisedtouseyour
DHCPserver’ssettingstoassigntheAPControllerastaticIP
address.
3. Entertheusername&passwordtologin.Thedefaultusername&
passwordareadmin&1234.
LOGOUT
TologoutfromNMS,click“Logout”inthetoprightcorner:
RESTART
YoucanrestartyourAPControlleroranyManagedAPusingNMS.Torestart
yourAPControllergotoLocalSettingsÆAdvancedÆRebootandclick
“Reboot”.
TorestartManagedAPsclicktheRestarticonforthespecifiedAPonthe
Dashboard:
NMS
112
IV‐2.DASHBOARD
ThedashboarddisplaysanoverviewofyourAParray:
Usetheblueiconsabovetorefreshorcollapseeachpanelinthedashboard.
Clickanddragtomoveapaneltosuityourpreference.Youcansetthe
dashboardtoauto‐refreshevery1minute,30secondsordisableauto‐refresh:
NMS
113
IV‐2‐1.SystemInformation
SystemInformationdisplaysinformationabouttheAPController:Product
Name(model),HostName,MACAddress,IPAddress,FirmwareVersion,
SystemTimeandUptime(timetheaccesspointhasbeenon),CPUUsage&
MemoryUsage.
IV‐2‐2.DevicesInformation
DevicesInformationisasummaryofthenumberofalldevicesinthelocal
network:AccessPoints,ClientsConnected,andRogue(unidentified)Devices.
NMS
114
IV‐2‐3.ManagedAP
ManagedAPdisplaysinformationabouteachManagedAPinthelocal
network:Index(referencenumber),MACAddress,DeviceName,Model,IP
Address,2.4GHz&5GHzWirelessChannelNumber,No.ofClientsconnected
toeachaccesspoint,andStatus(connected,connectingordisconnected).
ThesearchfunctioncanbeusedtolocateaspecificManagedAP.Typeinthe
searchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),yellow(connecting)orgreen
(connected)foreachManagedAP.
EachManagedAPhas“Action”iconswiththefollowingfunctions:
1. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
2. Edit
EditvarioussettingsfortheManagedAP(refertoIV‐5‐1.AccessPoint).
3. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&locate
accesspoints.
NMS
115
4. Buzzer
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&locate
accesspoints.
5. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
6. Restart
RestartstheManagedAP.
IV‐2‐4.ManagedAPGroup
ManagedAPscanbegroupedaccordingtoyourrequirements.ManagedAP
GroupdisplaysinformationabouteachManagedAPgroupinthelocal
network:GroupName,MACAddress,DeviceName,Model,IPAddress,No.of
Clientsconnectedtoeachaccesspoint,andStatus(connectedor
disconnected).
ToeditManagedAPGroupsgotoNMSSettingsÆAccessPoint(referto
IV‐5‐1.AccessPoint).
ThesearchfunctioncanbeusedtolocateaspecificManagedAPGroup.Type
inthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),yellow(connecting)orgreen
(connected)foreachindividualManagedAP.
EachManagedAPhas“Action”iconswiththefollowingfunctions:
NMS
116
1. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
2. Edit
EditvarioussettingsfortheManagedAP(refertoIV‐5‐1.AccessPoint)
3. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&locate
accesspoints.
4. Buzzer
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&locate
accesspoints.
5. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
6. Restart
RestartstheManagedAP.
IV‐2‐5.ActiveClients
ActiveClientsdisplaysinformationabouteachclientinthelocalnetwork:
Index(referencenumber),ClientMACAddress,APMACAddress,WLAN,User
Name,Radio(frequency),SignalStrength,ConnectedTime,IdleTime,Tx&Rx
(datatransmittedandreceived)andVendoroftheclientdevice.
Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthesearch
boxandthelistwillupdate:
NMS
117
IV‐2‐6.ActiveUsers
ActiveUsersdisplaysinformationabouteachuserinthelocalnetworkvia
guestportals:Index(referencenumber),UserName,MACAddress,IPAddress,
SSID,Creator,CreateTime,ExpireTime,UsagePercentage,Vendor&Platform
oftheuserdevice.
Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthesearch
boxandthelistwillupdate:
NMS
118
IV‐3.ZONEPLAN
TheZonePlancanbefullycustomizedtomatchyournetworkenvironment.
YoucanmovetheAPiconsandselectdifferentlocationimages(upload
locationimagesinNMSSettingsÆZoneEdit)tocreateavisualmapofyour
AParray.
Usethemenuontherightsidetomakeadjustmentsandmouse‐overanAP
iconinthezonemaptoseemoreinformation.ClickanAPiconinthezone
maptoselectitanddisplayactionicons:
NMS
119
ClickanddraganAPicontomovetheiconaroundthezonemap.Thesignal
strengthforeachAPisdisplayedaccordingtothe“Signal”keyinthemenuon
therightside:
LocationSelectapre‐definedlocationfromthedrop
downmenu.Whenyouuploadalocation
imageinNMSSettingsÆZoneEdit,itwillbe
availableforselectionhere.
APGroupYoucanselectanAPGrouptodisplayinthe
zonemap.EditAPGroupsinNMSSettingsÆ
AccessPoint.
SearchUsethesearchboxtoquicklylocateanAP.
RadioUsethecheckboxestodisplayAPsaccording
to2.4GHzor5GHzwirelessradiofrequency.
SignalSignalstrengthkeyforthesignalstrength
displayaroundeachAPinthezonemap.
ZoomUsetheslidertoadjustthezoomlevelofthe
map.
TransparencyUsetheslidertoadjustthetransparencyof
locationimages.
ScaleZonemapscale.
Device/NumberDisplaysnumberandtypeofdevicesinthe
zonemap.
NMS
120
IV‐4.NMSMONITOR
IV‐4‐1.AccessPoint
IV‐4‐1‐1.ManagedAP
DisplaysinformationabouteachManagedAPinthelocalnetwork:Index
(referencenumber),MACAddress,DeviceName,Model,IPAddress,2.4GHz&
5GHzWirelessChannelNumber,No.ofClientsconnectedtoeachaccesspoint,
andStatus(connected,connectingordisconnected).
ThesearchfunctioncanbeusedtolocateaspecificManagedAP.Typeinthe
searchboxandthelistwillupdate:
TheStatusicondisplaysthestatusofeachManagedAP.
StatusIcons
IconColorStatusDefinition
GreyDisconnected
ManagedAPisdisconnected.Please
checkthenetworkconnectionandensure
theManagedAPisinthesameIPsubnet
astheAPController.
Red
Authentication
Failed
Systemsecuritymustbethesameforall
accesspointsintheAParray.Please
checksecuritysettings(refertoIV‐5‐8‐1.
NMS
121
Or
Incompatible
NMSVersion
SystemSecurity).
Accesspointsmustusethesameversion
ofNMS:themanagedAPwillnotbe
abletomakeconfigurations.Pleaseuse
theAPController’sfirmwareupgrade
function(refertoIV‐5‐7.Firmware
Upgrade).
OrangeConfiguringor
Upgrading
PleasewaitwhiletheManagedAPmakes
configurationsorwhilethefirmwareis
upgrading.
YellowConnecting
PleasewaitwhileManagedAPis
connecting.
GreenConnected
ManagedAPisconnected.
BlueWaitingfor
Approval
ManagedAPiswaitingforapproval.
RefertoIV‐5‐1.AccessPoint:Auto
Approval.Note:32ManagedAPsare
supported.AdditionalAPswilldisplaythis
statusuntilanexistingManagedAPis
removed.
EachManagedAPhas“Action”iconswiththefollowingfunctions:
1. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
1. Edit
EditvarioussettingsfortheManagedAP(refertoIV‐5‐1.AccessPoint).
2. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&locate
accesspoints.
3. Buzzer
NMS
122
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&locate
accesspoints.
4. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
5. Restart
RestartstheManagedAP.
IV‐4‐1‐2.ManagedAPGroup
ManagedAPscanbegroupedaccordingtoyourrequirements.ManagedAP
displaysinformationabouteachManagedAPinthelocalnetwork:Index
(referencenumber),MACAddress,DeviceName,Model,IPAddress,2.4GHz&
5GHzWirelessChannelNumber,No.ofClientsconnectedtoeachaccesspoint,
andStatus(connected,connectingordisconnected).
ToeditManagedAPGroupsgotoNMSSettingsÆAccessPoint(referto
IV‐5‐1.AccessPoint).
ThesearchfunctioncanbeusedtolocateaspecificManagedAPGroup.Type
inthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),red(authentication
failed/incompatibleNMSversion),orange(upgradingfirmware),yellow
(connecting),green(connected)orblue(waitingforapproval)foreach
NMS
123
individualManagedAP.RefertoIV‐4‐1‐1.ManagedAP:StatusIconsforfull
descriptions.
EachManagedAPhas“Action”iconswiththefollowingfunctions:
2. Disallow
RemovetheManagedAPfromtheAParrayanddisableconnectivity.
3. Edit
EditvarioussettingsfortheManagedAP(refertoIV‐5‐1.AccessPoint).
4. BlinkLED
TheManagedAP’sLEDwillflashtemporarilytohelpidentify&locate
accesspoints.
5. Buzzer
TheManagedAP’sbuzzerwillsoundtemporarilytohelpidentify&locate
accesspoints.
6. NetworkConnectivity
Gotothe“NetworkConnectivity”paneltoperformapingortraceroute.
7. Restart
RestartstheManagedAP.
NMS
124
IV‐4‐2.WLAN
IV‐4‐2‐1.ActiveWLAN
DisplaysinformationabouteachSSIDintheAPArray:Index(reference
number),Name/SSID,VLANID,Authentication,Encryption,IPAddressand
AdditionalAuthentication.
ToconfigureencryptionandVLANsforManagedAPsgotoNMSSettingsÆ
WLAN.
ThesearchfunctioncanbeusedtolocateaspecificSSID.Typeinthesearch
boxandthelistwillupdate:
NMS
125
IV‐4‐2‐2.ActiveWLANGroup
WLANgroupscanbecreatedaccordingtoyourpreference.ActiveWLAN
GroupdisplaysinformationaboutWLANgroup:GroupName,Name/SSID,
VLANID,Authentication,Encryption,IPAddressandAdditional
Authentication.
ThesearchfunctioncanbeusedtolocateaspecificActiveWLANGroup.Type
inthesearchboxandthelistwillupdate:
IV‐4‐3.Clients
IV‐4‐3‐1.ActiveClients
DisplaysinformationaboutclientscurrentlyconnectedtotheAPArray:Index
(referencenumber),ClientMACAddress,APMACAddress,WLAN(SSID),User
Name,Radio(2.4GHzor5GHz),SignalStrengthreceivedbyClient,Connected
Time,IdleTime,Tx&Rx(DatatransmittedandreceivedbyClientinKB)..
Youcansetordisabletheauto‐refreshtimefortheclientlistorclick
“Refresh”tomanuallyrefresh.
Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthesearch
boxandthelistwillupdate:
NMS
126
IV‐4‐4.RogueDevices
Rogueaccesspointdetectioncanidentifyanyunauthorizedaccesspoints
whichmayhavebeeninstalledinthenetwork.
Click“Start”toscanforroguedevices:
UnknownRogueDevicesdisplaysinformationaboutroguedevicesdiscovered
duringthescan:Index(referencenumber),Channel,SSID,MACAddress,
Security,SignalStrength,Type,VendorandAction.
Thesearchfunctioncanbeusedtolocateaknownroguedevice.Typeinthe
searchboxandthelistwillupdate:
NMS
127
IV‐4‐5.Information
IV‐4‐5‐1.AllEvents/Activities
Displaysalogoftime‐stampedeventsforeachaccesspointintheArray–use
thedropdownmenutoselectanaccesspointandviewthelog.
NMS
128
IV‐4‐5‐2.Monitoring
DisplaysgraphicalmonitoringinformationaboutaccesspointsintheArrayfor
2.4GHz&5GHz:TrafficTx(datatransmittedinMB),TrafficRx(datareceived
inMB),No.ofClients,WirelessChannel,TxPower(wirelessradiopower),CPU
UsageandMemoryUsage.
Usethedropdownmenustoselectanaccesspointanddate.
Youcansetordisabletheauto‐refreshtimeforthedata:
NMS
129
IV‐5.NMSSettings
IV‐5‐1.AccessPoint
Displaysinformationabouteachaccesspointandaccesspointgroupinthe
localnetworkandallowsyoutoeditaccesspointsandeditoraddaccess
pointgroups.
Thesearchfunctioncanbeusedtolocateanaccesspointoraccesspoint
group.Typeinthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),red(authentication
failed/incompatibleNMSversion),orange(upgradingfirmware),yellow
(connecting),green(connected)orblue(waitingforapproval)foreach
individualManagedAP.RefertoIV‐4‐1‐1.ManagedAP:StatusIconsforfull
descriptions.
NMS
130
The“Action”iconsenableyoutoallowordisallowanaccesspoint:
Selectanaccesspointoraccesspointgroupusingthe
check‐boxesandclick“Edit”tomakeconfigurations,orclick
“Add”toaddanewaccesspointgroup:
TheAccessPointSettingspanelcanenableordisableAuto
ApproveforallManagedAPs.Whenenabled,ManagedAPswillautomatically
jointheAPArraywiththeControllerAP.Whendisabled,ManagedAPsmust
bemanuallyapprovedtojointheAPArraywiththeControllerAP.
AccessPointSettings
AutoApproveEnableordisableAutoApproveforall
ManagedAPs.
TomanuallyapproveaManagedAP,usetheallow“Action”iconforthe
specifiedaccesspoint:
EditAccessPoint
ConfigureyourselectedaccesspointonyourLAN.Youcansettheaccess
pointasaDHCPclientorspecifyastaticIPaddressforyouraccesspoint,and
assigntheaccesspointtoanAPgroup,aswellasedit2.4GHz&5GHzwireless
radiosettings.Aneventslogisdisplayedatthebottomofthepage.
YoucanalsouseProfileSettingstoassigntheaccesspointtoWLAN,Guest
Network,RADIUSandAccessControlgroupsindependentlyfromAccessPoint
Groupsettings.
Checkthe“OverrideGroupSettings”boxtousedifferentindividualsettings
foraccesspointsassignedtoAPGroups:
NMS
131
BasicSettings
NameEdittheaccesspointname.Thedefaultname
isAP+MACaddress.
DescriptionEnteradescriptionoftheaccesspointfor
referencee.g.2ndFloorOffice.
MACAddressDisplaysMACaddress.
APGroupUsethedropdownmenutoassigntheAPto
anAPGroup.YoucaneditAPGroupsfrom
theNMSSettingsÆAccessPointpage.
IPAddress
Assignment
Select“DHCPClient”foryouraccesspointto
beassignedadynamicIPaddressfromyour
router’sDHCPserver,orselect“StaticIP”to
manuallyspecifyastatic/fixedIPaddressfor
youraccesspoint(below).Checkthebox
“OverrideGroupSetting”iftheAPisa
memberofanAPGroupandyouwishtouse
adifferentsettingthantheAPGroupsetting.
IPAddressSpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
NMS
132
255.255.255.0
DefaultGatewayForDHCPusers,select“FromDHCP”toget
defaultgatewayfromyourDHCPserveror
“User‐Defined”toenteragatewaymanually.
ForstaticIPusers,thedefaultvalueisblank.
PrimaryDNSDHCPuserscanselect“FromDHCP”toget
primaryDNSserver’sIPaddressfromDHCPor
“User‐Defined”tomanuallyenteravalue.For
staticIPusers,thedefaultvalueisblank.
SecondaryDNSDHCPuserscanselect“FromDHCP”toget
secondaryDNSserver’sIPaddressfromDHCP
or“User‐Defined”tomanuallyenteravalue.
ForstaticIPusers,thedefaultvalueisblank.
VLANSettings
WiredLANPortIdentifiesLANport1or2.
VLANModeSelect“TaggedPort”or“UntaggedPort”for
specifiedLANinterface.
VLANIDSetaVLANIDforspecifiedinterface,if
“UntaggedPort”isselected.
ManagementVLAN
VLANIDCheck‘OverrideDefaultSetting’tospecifythe
VLANIDofthemanagementVLAN.Onlythe
hostsbelongingtothesameVLANcanmanage
thedevice.
NMS
133
RadioSettings
DomainSettheregulatorydomainfortheaccess
point’swirelesschannelsforeachfrequency.
WirelessEnableordisabletheaccesspoint’s2.4GHzor
5GHzwirelessradio.Whendisabled,noSSIDs
onthatfrequencywillbeactive.
BandSelectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11b,
802.11g,802.11n&802.11accanbeselected.
AutoPilotEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s2.4GHz
or5GHzfrequencybasedonavailabilityand
potentialinterference.Whendisabled,select
achannelmanually.
AutoPilotRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
NMS
134
AutoPilotIntervalSpecifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidthoruseAuto
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe
valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
AdvancedSettings
ContentionSlotSelect“Short”or“Long”–thisvalueisusedfor
contentionwindowsinWMM(seeIV‐6‐7.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
NMS
135
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
ProfileSettings
WLANGroupAssigntheaccesspoint’s2.4GHzor5GHz
SSID(s)toaWLANGroup.YoucaneditWLAN
groupsinNMSSettingsÆWLAN.
GuestNetwork
Group
Assigntheaccesspoint’s2.4GHzor5GHz
SSID(s)toaGuestNetworkGroup.Youcan
editGuestNetworkgroupsinNMSSettings
NMS
136
ÆGuestNetwork.
RADIUSGroupAssigntheaccesspoint’s2.4GHzSSID(s)toa
RADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettingsÆRADIUS.
AccessControl
Group
Assigntheaccesspoint’s2.4GHzSSID(s)toa
RADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettingsÆAccessControl
NMS
137
Add/EditAccessPointGroup
Configureyourselectedaccesspointgroup.Accesspointgroupsettingsapply
toallaccesspointsinthegroup,unlessindividuallysettooverridegroup
settings.
YoucanuseProfileGroupSettingstoassigntheaccesspointgrouptoWLAN,
GuestNetwork,RADIUSandAccessControlgroups.
TheGroupSettingspanelcanbeusedtoquicklymoveaccesspointsbetween
existinggroups:selectanaccesspointandusethedropdownmenuorsearch
toselectaccesspointgroupsanduse<<and>>arrowstomoveAPsbetween
groups.
BasicGroupSettings
NameEdittheaccesspointgroupname.
DescriptionEnteradescriptionoftheaccesspointgroup
forreferencee.g.2ndFloorOfficeGroup.
VLANGroupSettings
WiredLANPortIdentifiesLANport1or2.
VLANModeSelect“TaggedPort”or“UntaggedPort”for
specifiedLANinterface.
VLANIDSetaVLANIDforspecifiedinterface,if
“UntaggedPort”isselected.
ManagementVLAN
VLANIDCheck‘OverrideDefaultSetting’tospecifythe
VLANIDofthemanagementVLAN.Onlythe
hostsbelongingtothesame VLANcanmanage
NMS
138
thedevice.
RadioGroupSettings
DomainSettheregulatorydomainfortheaccess
point’swirelesschannelsforeachfrequency.
WirelessEnableordisabletheaccesspointgroup’s
2.4GHzor5GHzwirelessradio.When
disabled,noSSIDsonthatfrequencywillbe
active.
BandSelectthewirelessstandardusedforthe
accesspointgroup.Combinationsof802.11b,
802.11g,802.11n&802.11accanbeselected.
AutoPilotEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspointgroup’s
2.4GHzor5GHzfrequencybasedon
availabilityandpotentialinterference.When
disabled,selectachannelmanually.
AutoPilotRangeSelectarangefromwhichtheautochannel
NMS
139
setting(above)willchooseachannel.
AutoPilotIntervalSpecifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidthoruseAuto
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe
valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoints.
AdvancedSettings
ContentionSlotSelect“Short”or“Long”–thisvalueisusedfor
contentionwindowsinWMM(seeIV‐6‐7.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
NMS
140
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
NMS
141
ProfileGroupSettings
WLANGroupAssigntheaccesspointgroup’s2.4GHzor
5GHzSSIDstoaWLANGroup.Youcanedit
WLANgroupsinNMSSettingsÆWLAN.
GuestNetwork
Group
Assigntheaccesspointgroup’s2.4GHzor
5GHzSSIDstoaGuestNetworkGroup.You
caneditGuestNetworkgroupsinNMS
SettingsÆGuestNetwork.
RADIUSGroupAssigntheaccesspointgroup’s2.4GHzSSIDs
toaRADIUSgroup.YoucaneditRADIUS
groupsinNMSSettingsÆRADIUS.
AccessControl
Group
Assigntheaccesspoint’s2.4GHzSSIDstoa
RADIUSgroup.YoucaneditRADIUSgroupsin
NMSSettingsÆAccessControl.
NMS
142
IV‐5‐2.WLAN
DisplaysinformationabouteachWLANandWLANgroupinthelocalnetwork
andallowsyoutoaddoreditWLANs&WLANGroups.WhenyouaddaWLAN
Group,itwillbeavailableforselectioninNMSSettingsÆAccessPointaccess
pointProfileSettings&accesspointgroupProfileGroupSettings(IV‐5‐1.)
ThesearchfunctioncanbeusedtolocateaWLANorWLANGroup.Typein
thesearchboxandthelistwillupdate:
SelectaWLANorWLANGroupusingthecheck‐boxesand
click“Edit”orclick“Add”toaddanewWLANorWLAN
Group:
NMS
143
Add/EditWLAN
WLANSettings
Name/ESSIDEdittheWLANname(SSID).
DescriptionEnteradescriptionoftheSSIDforreference
e.g.2ndFloorOfficeHR.
SSIDSelectwhichSSIDtoconfiguresecurity
settingsfor.
VLANIDSpecifytheVLANID.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsas
anavailableWi‐Finetwork.Whendisabled,
theSSIDwillnotbevisibleasanavailable
Wi‐Finetworktoclients–clientsmust
manuallyentertheSSIDinordertoconnect.
Ahidden(disabled)SSIDistypicallymore
securethanavisible(enabled)SSID.
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattackson
clients’usernamesandpasswords.
NMS
144
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication
Method
Selectanauthenticationmethodfromthe
dropdownmenu.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenu.
Varioussecurityoptions(wirelessdataencryption)areavailable.Whendatais
encrypted,informationtransmittedwirelesslycannotbereadbyanyonewho
doesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthard‐to‐guesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
PleaserefertoIV‐5‐2‐1.NoAuthenticationandonwardsbelowformore
informationonauthenticationandadditionalauthenticationtypes.
WLANAdvancedSettings
SmartHandoverEnableordisableSmartHandover.
RSSIThresholdSetaRSSIThresholdlevel.
ScheduleGroupAssigntoaspecifiedschedule(schedulemust
bepre‐configuredinNMSSettingsÆ
Schedule.)
IV‐5‐2‐1. NoAuthentication
Authenticationisdisabledandnopassword/keyisrequiredtoconnecttothe
accesspoint.
Disablingwirelessauthenticationisnotrecommended.When
disabled,anybodywithinrangecanconnecttoyourdevice’sSSID.
IV‐5‐2‐2. WEP
NMS
145
WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Forahigher
levelofsecurityconsiderusingWPAencryption.
KeyLengthSelect64‐bitor128‐bit.128‐bitismoresecure
than64‐bitandisrecommended.
KeyTypeChoosefrom“ASCII”(anyalphanumerical
character0‐9,a‐zandA‐Z)or“Hex”(any
charactersfrom0‐9,a‐fandA‐F).
DefaultKeySelectwhichencryptionkey(1–4below)isthe
defaultkey.Forsecuritypurposes,youcanset
uptofourkeys(below)andchangewhichis
thedefaultkey.
EncryptionKey1–
4
Enteryourencryptionkey/passwordaccording
totheformatyouselectedabove.
IV‐5‐2‐3. IEEE802.1x/EAP
KeyLengthSelect64‐bitor128‐bit.128‐bitismoresecure
than64‐bitandisrecommended.
IV‐5‐2‐4. WPA‐PSK
WPA‐PSKisasecurewirelessencryptiontypewithstrongdata
protectionanduserauthentication,utilizing128‐bitencryptionkeys.
WPATypeSelectfromWPA/WPA2MixedMode‐PSK,
WPA2orWPAonly.WPA2issaferthanWPA
only,butnotsupportedbyallwirelessclients.
Pleasemakesureyourwirelessclientsupports
yourselection.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
Pre‐SharedKey
Type
Choosefrom“Passphrase”(8–63
alphanumericcharacters)or“Hex”(upto64
charactersfrom0‐9,a‐fandA‐F).
Pre‐SharedKeyPleaseenterasecuritykey/passwordaccording
NMS
146
totheformatyouselectedabove.
IV‐5‐2‐5. WPA‐EAP
WPATypeSelectfromWPA/WPA2MixedMode‐EAP,
WPA2‐EAPorWPA‐EAP.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
WPA‐EAPmustbedisabledtouseMAC‐RADIUSauthentication.
IV‐5‐2‐6. AdditionalAuthentication
Additionalwirelessauthenticationmethodscanalsobeused:
MACAddressFilter
RestrictwirelessclientsaccessbasedonMACaddressspecifiedintheMAC
filtertable.
SeeIV‐5‐4.MACFiltertoconfigureMACfiltering.
MACFilter&MAC‐RADIUSAuthentication
RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering&
RADIUSauthenticationmethods.
MAC‐RADIUSAuthentication
RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,or
passwordauthenticationviaaRADIUSserver.
SeeIV‐5‐3.RADIUStoconfigureRADIUSservers.
MACRADIUS
Password
SelectwhethertouseMACaddressor
passwordauthenticationviaRADIUSserver.If
youselect“Usethefollowingpassword”,enter
NMS
147
thepasswordinthefieldbelow.Thepassword
shouldmatchthe“SharedSecret”usedin
IV‐5‐3.RADIUS.
Add/EditWLANGroup
WhenyouaddaWLANGroup,itwillbeavailableforselectioninNMS
SettingsÆAccessPointaccesspointProfileSettings&accesspointgroup
ProfileGroupSettings(IV‐5‐1.)
WLANGroupSettings
NameEdittheWLANGroupname.
DescriptionEnteradescriptionoftheWLANGroupfor
referencee.g.2ndFloorOfficeHRGroup.
MembersSelectSSIDstoincludeinthegroupusingthe
checkboxesandassignVLANIDs.Youcan
overrideindividualschedulesettingsand
assignadifferentschedule.
NMS
148
IV‐5‐3.RADIUS
DisplaysinformationaboutExternal&InternalRADIUSServers,Accountsand
GroupsandallowsyoutoaddoreditRADIUSServers,Accounts&Groups.
WhenyouaddaRADIUSGroup,itwillbeavailableforselectioninNMS
SettingsÆAccessPointaccesspointProfileSettings&accesspointgroup
ProfileGroupSettings(IV‐5‐1.)
ThesearchfunctioncanbeusedtolocateaRADIUSServer,AccountorGroup.
Typeinthesearchboxandthelistwillupdate:
Makeaselectionusingthecheck‐boxesandclick“Edit”or
click“Add”toaddanewWLANorWLANGroup:
NMS
149
Add/EditExternalRADIUSServer
NameEnteranamefortheRADIUSServer.
DescriptionEnteradescriptionoftheRADIUSServerfor
reference.
RADIUSServerEntertheRADIUSserverhostIPaddress.
Authentication
Port
SettheUDPportusedintheauthentication
protocoloftheRADIUSserver.Valuemustbe
between1–65535.
SharedSecretEnterasharedsecret/passwordbetween1–
99charactersinlength.Thisshouldmatchthe
“MAC‐RADIUS”passwordusedinIV‐3‐1‐3‐6or
IV‐3‐2‐3.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between0–86400.
AccountingEnableordisableRADIUSaccounting.
AccountingPortWhenaccountingisenabled(above),setthe
UDPportusedintheaccountingprotocolof
theRADIUSserver.Valuemustbebetween1–
65535.
NMS
150
Add/EditInternalRADIUSServer
UploadEAPCertificateFile
EAPCertificateFile
Format
DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaself‐made
certificate.
InternalRADIUSServer
NameEnteranamefortheInternalRADIUSServer.
DescriptionEnteradescriptionoftheInternalRADIUS
Serverforreference.
EAPCertificateFile
Format
DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaself‐made
certificate.
NMS
151
EAPInternal
Authentication
SelectEAPinternalauthenticationtypefrom
thedropdownmenu.
SharedSecretEnterasharedsecret/passwordforuse
betweentheinternalRADIUSserverand
RADIUSclient.Thesharedsecretshouldbe1–
99charactersinlength.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between0–86400.
TerminationActionSelectatermination‐actionattribute:
“Reauthentication”sendsaRADIUSrequestto
theaccesspoint,“Not‐Reathentication”sends
adefaulttermination‐actionattributetothe
accesspoint,“Not‐Send”no
termination‐actionattributeissenttothe
accesspoint.
Add/EditRADIUSAccounts
TheinternalRADIUSservercanauthenticateupto256useraccounts.The
“RADIUSAccounts”pageallowsyoutoconfigureandmanageusers.
NMS
152
RADIUSAccounts
UserNameEntertheusernameshere,separatedby
commas.
AddClick“Add”toaddtheusertotheuser
registrationlist.
ResetCleartextfromtheusernamebox.
UserRegistrationList
SelectChecktheboxtoselectauser.
UserNameDisplaystheusername.
PasswordDisplaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured).
CustomizeClick“Edit”toopenanewfieldtoset/edita
passwordforthespecifiedusername(below).
DeleteSelectedDeleteselecteduserfromtheuserregistration
list.
DeleteAllDeleteallusersfromtheuserregistrationlist.
EditUserRegistrationList
UserNameExistingusernameisdisplayedhereandcan
beeditedaccordingtoyourpreference.
PasswordEnteroreditapasswordforthespecifieduser.
NMS
153
Add/EditRADIUSGroup
WhenyouaddaRADIUSGroup,itwillbeavailableforselectioninNMS
SettingsÆAccessPointaccesspointProfileSettings&accesspointgroup
ProfileGroupSettings(IV‐5‐1.)
RADIUSGroupSettings
GroupNameEdittheRADIUSGroupname.
DescriptionEnteradescriptionoftheRADIUSGroupfor
reference.
2.4GHzRADIUSEnable/Disableprimary&secondaryRADIUS
serversfor2.4GHz.
5GHzRADIUSEnable/Disableprimary&secondaryRADIUS
serversfor5GHz.
MembersAddRADIUSuseraccountstotheRADIUS
group.
NMS
154
IV‐5‐4.AccessControl
MACAccessControlisasecurityfeaturethatcanhelptoprevent
unauthorizedusersfromconnectingtoyouraccesspoint.
Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto
connecttotheaccesspoint.DevicesareeachidentifiedbytheiruniqueMAC
address.IfadevicewhichisnotonthelistofpermittedMACaddresses
attemptstoconnecttotheaccesspoint,itwillbedenied.
TheAccessControlpaneldisplaysinformationaboutMACAccessControl&
MACAccessControlGroupsandGroupsandallowsyoutoaddoreditMAC
AccessControl&MACAccessControlGroupsettings.Whenyouaddan
AccessControlGroup,itwillbeavailableforselectioninNMSSettingsÆ
AccessPointaccesspointProfileSettings&accesspointgroupProfileGroup
Settings(IV‐5‐1.)
ThesearchfunctioncanbeusedtolocateaMACaddressorMACAccess
ControlGroup.Typeinthesearchboxandthelistwillupdate:
Makeaselectionusingthecheck‐boxesandclick“Edit”or
click“Add”toaddanewMACAddressorMACAccessControl
Group:
NMS
155
Add/EditMACAccessControl
AddMACAddressEnteraMACaddressofcomputerornetwork
devicemanuallye.g.‘aa‐bb‐cc‐dd‐ee‐ff’or
entermultipleMACaddressesseparatedwith
commas,e.g.
‘aa‐bb‐cc‐dd‐ee‐ff,aa‐bb‐cc‐dd‐ee‐gg’
AddClick“Add”toaddtheMACaddresstothe
MACaddressfilteringtable.
ResetClearallfields.
MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.Select
anentryusingthe“Select”checkbox.
SelectDeleteselectedorallentriesfromthetable.
MACAddressTheMACaddressislistedhere.
DeleteSelectedDeletetheselectedMACaddressfromthe
list.
DeleteAllDeleteallentriesfromtheMACaddress
filteringtable.
ExportClick“Export”tosaveacopyoftheMAC
filteringtable.Anewwindowwillpopupfor
youtoselectalocationtosavethefile.
NMS
156
Add/EditMACAccessControlGroup
WhenyouaddanAccessControlGroup,itwillbeavailableforselectionin
NMSSettingsÆAccessPointaccesspointProfileSettings&accesspoint
groupProfileGroupSettings(IV‐5‐1.)
MACFilterGroupSettings
GroupNameEdittheMACAccessControlGroupname.
DescriptionEnteradescriptionoftheMACAccessControl
Groupforreference.
ActionSelect“Blacklist”todenyaccesstospecified
MACaddressesinthegroup,andselect
“Whitelist”topermitaccesstospecifiedMAC
addressinthegroup.
MembersAddMACaddressestothegroup.
NMS
157
IV‐5‐5.GuestNetwork
Youcansetupanadditional“Guest”Wi‐Finetworksoguestuserscanenjoy
Wi‐Ficonnectivitywithoutaccessingyourprimarynetworks.The“Guest”
screendisplayssettingsforyourguestWi‐Finetwork.
TheGuestNetworkpaneldisplaysinformationaboutGuestNetworksand
GuestNetworkGroupsandallowsyoutoaddoreditGuestNetworkand
GuestNetworkGroupsettings.WhenyouaddaGuestNetworkGroup,itwill
beavailableforselectioninNMSSettingsÆAccessPointaccesspointProfile
Settings&accesspointgroupProfileGroupSettings(IV‐5‐1.)
ThesearchfunctioncanbeusedtolocateaGuestNetworkorGuestNetwork
Group.Typeinthesearchboxandthelistwillupdate:
Makeaselectionusingthecheck‐boxesandclick“Edit”or
click“Add”toaddanewGuestNetworkorGuestNetwork
Group.
NMS
158
Add/EditGuestNetwork
GuestNetworkSettings
Name/ESSIDEdittheGuestNetworkname(SSID).
DescriptionEnteradescriptionoftheGuestNetworkfor
referencee.g.2ndFloorOfficeHR.
VLANIDSpecifytheVLANID.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsas
anavailableWi‐Finetwork.Whendisabled,
theSSIDwillnotbevisibleasanavailable
Wi‐Finetworktoclients–clientsmust
manuallyentertheSSIDinordertoconnect.
Ahidden(disabled)SSIDistypicallymore
securethanavisible(enabled)SSID.
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
NMS
159
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattackson
clients’usernamesandpasswords.
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
WMMEnableordisableWMM(Wi‐FiMultimedia)
trafficprioritizing.
Authentication
Method
Selectanauthenticationmethodfromthe
dropdownmenu.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenu.
Varioussecurityoptions(wirelessdataencryption)areavailable.Whendatais
encrypted,informationtransmittedwirelesslycannotbereadbyanyonewho
doesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthard‐to‐guesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
PleaserefertoIV‐6‐2‐3.Securityformoreinformationonauthenticationand
additionalauthenticationtypes.
GuestAccessPolicy
GuestPortalSelectaguestportaltouseforthisguest
SSID.GuestportalscanbeconfiguredinNMS
SettingsÆGuestPortal.
TrafficShapingEnableordisabletrafficshapingfortheguest
network.
DownlinkEnteradownlinklimitinMB.
UplinkEnteranuplinklimitinMB.
IPFilteringSelect“Deny”or“Allow”todenyorallow
specifiedIPaddressestoaccesstheguest
network.Select“Disable”todisableIP
NMS
160
filtering.
RulesEnterIPaddressestobefilteredaccordingto
theDenyorAllowrulespecifiedaboveand
checktheboxforeachIPaddresstobe
filtered.
GuestNetworkAdvancedSettings
ScheduleGroupAssignguestSSIDtoaspecifiedschedule
(schedulemustbepre‐configuredinNMS
SettingsÆSchedule.)
Add/EditGuestNetworkGroup
WhenyouaddaGuestNetworkGroup,itwillbeavailableforselectionin
NMSSettingsÆAccessPointaccesspointProfileSettings&accesspoint
groupProfileGroupSettings(IV‐5‐1.)
GuestNetworkGroupSettings
GroupNameEdittheGuestNetworkGroupname.
DescriptionEnteradescriptionoftheGuestNetworkfor
reference.
MembersAddSSIDstotheGuestNetworkgroup.You
canoverrideindividualVLANID&schedule
settingsandassignadifferentVLANIDor
schedule.
NMS
161
IV‐5‐6.ZoneEdit
ZoneEditdisplaysinformationaboutzonesforusewiththeZonePlanfeature
andallowsyoutoaddoreditzones.
Thesearchfunctioncanbeusedtofindexistingzones.Typeinthesearchbox
andthelistwillupdate:
Makeaselectionusingthecheck‐boxesandclick“Edit”or
click“Add”toaddanewzone.
NMS
162
Add/EditZone
UploadZoneImage
ChooseFileClicktolocateanimagefiletobedisplayedas
amapintheZonePlanfeature.Typicallya
floorplanimageisuseful.
ZoneSetting
Name/LocationEnteranameofthezone/location.
DescriptionEnteradescriptionofthezone/locationfor
reference.
MembersAssignaccesspointstothespecified
zone/locationforusewiththeZonePlan
feature.
NMS
163
IV‐5‐7.Schedule
Youcandefineschedulesaccordingtoday,starttimeandendtime‐and
groupmultipleschedulestogetherintoschedulegroups.
SchedulegroupscanbeassignedtoWLANs,WLANGroups&GuestNetwork
atNMSSettingsÆWLANandNMSSettingsÆGuestNetwork.
Add/EditSchedule
Usethecheckboxesanddrop‐downmenustosetupyourschedule.
NMS
164
Add/EditScheduleGroup
WLANGroupSettings
NameEdittheschedulegroupname.
DescriptionEnteradescriptionoftheschedulegroupfor
reference.
MembersSelectindividualschedulestoincludeinthe
schedulegroupusingthecheckboxes.
NMS
165
IV‐5‐8.DeviceMonitoring
DevicemonitoringenablesyoutospecifyandmonitorthestatusanyIP
devicesonthenetworksuchasIPcameras.Thedescriptionandstatusofeach
deviceisdisplayedinthetable.
AddorEditIPdevicesbyenteringtheIPaddress.
NMS
166
IV‐5‐9.FirmwareUpgrade
FirmwareUpgradeallowsyoutoupgradefirmwaretoAccessPointGroups.
First,uploadthefirmwarefilefromalocaldiskorexternalFTPserver:locate
thefileandclick“Upload”–youcansetatimeoutlimitfortheuploadas
desired.ThetablebelowwilldisplaytheFirmwareName,FirmwareVersion,
NMSVersion,ModelandSize.
Thenclick“UpgradeAll”toupgradeallaccesspointsintheArrayorselect
AccessPointgroupsfromthelistusingcheck‐boxesandclick“Upgrade
Selected”toupgradeonlyselectedaccesspoints.
NMS
167
IV‐5‐10. Advanced
IV‐5‐10‐1.SystemSecurity
ConfiguretheNMSsystemloginnameandpassword.
IV‐5‐10‐2.Date&Time
Configurethedate×ettingsoftheAPArray.Thedateandtimeofthe
accesspointscanbeconfiguredmanuallyorcanbesynchronizedwithatime
server.
DateandTimeSettings
LocalTimeSettheaccesspoint’sdateandtimemanually
usingthedropdownmenus.
AcquireCurrent
TimefromyourPC
Click“AcquireCurrentTimefromYourPC”to
entertherequiredvaluesautomatically
accordingtoyourcomputer’scurrenttimeand
date.
NTPTimeServer
NMS
168
UseNTPTheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddate
setup.
ServerNameEnterthehostnameorIPaddressofthetime
serverifyouwish.
UpdateIntervalSpecifyafrequency(inhours)fortheaccess
pointtoupdate/synchronizewiththeNTP
server.
TimeZone
TimeZoneSelectthetimezoneofyourcountry/region.If
yourcountry/regionisnotlisted,pleaseselect
anothercountry/regionwhosetimezoneisthe
sameasyours.
NMS
169
IV‐6.LocalNetwork
IV‐6‐1.NetworkSettings
IV‐6‐1‐1.LAN‐SideIPAddress
The“LAN‐sideIPaddress”pageallowsyoutoconfigureyourAPControlleron
yourLocalAreaNetwork(LAN).Youcanenabletheaccesspointto
dynamicallyreceiveanIPaddressfromyourrouter’sDHCPserveroryoucan
specifyastaticIPaddressforyouraccesspoint,aswellasconfigureDNS
servers.YoucanalsosetyourAPControllerasaDHCPservertoassignIP
addressestootherdevicesonyourLAN.
Theaccesspoint’sdefaultIPaddressis192.168.2.2
DisableotherDHCPserversontheLANifusingAPControllers
DHCPServer.
LAN‐sideIPAddress
IPAddress
Assignment
Select“StaticIP”tomanuallyspecifya
static/fixedIPaddressforyouraccesspoint.
Select“DHCPClient”foryouraccesspointto
beassignedadynamicIPaddressfromyour
router’sDHCPserver,orselect“DHCPServer”
foryouraccesspointtoactasaDHCPserver
andassignIPaddressesonyourLAN.
StaticIPAddress
IPAddressSpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
NMS
170
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
255.255.255.0
DefaultGatewayForDHCPusers,select“FromDHCP”toget
defaultgatewayfromyourDHCPserveror
“User‐Defined”toenteragatewaymanually.
ForstaticIPusers,thedefaultvalueisblank.
PrimaryDNS
Address
ForstaticIPusers,thedefaultvalueisblank.
SecondaryDNS
Address
ForstaticIPusers,thedefaultvalueisblank.
DHCPClient
IPAddressWhen“DHCPClient”isselectedthisvalue
cannotbemodified.
SubnetMaskWhen“DHCPClient”isselectedthisvalue
cannotbemodified.
DefaultGatewaySelect“FromDHCP”orselect“User‐Defined”
andenteradefaultgateway.
PrimaryDNS
Address
Select“FromDHCP”orselect“User‐Defined”
andenteraprimaryDNSaddress.
SecondaryDNS
Address
Select“FromDHCP”orselect“User‐Defined”
andenterasecondaryDNSaddress.
NMS
171
DHCPServer
IPAddressSpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwill
replacethedefaultIPaddress.
SubnetMaskSpecifyasubnetmask.Thedefaultvalueis
255.255.255.0
IPAddressRangeEnterthestartandendIPaddressoftheIP
addressrangewhichyouraccesspoint’sDHCP
serverwillassigntodevicesonthenetwork.
DomainNameEnteradomainname.
LeaseTimeSelectaleasetimefromthedropdown
menu.IPaddresseswillbeassignedforthis
periodoftime.
DefaultGatewayEnteradefaultgateway.
PrimaryDNS
Address
EnteraprimaryDNSaddress.
SecondaryDNS
Address
EnterasecondaryDNSaddress.
Youraccesspoint’sDHCPservercanbeconfiguredtoassignstatic(fixed)IP
addressestospecifiednetworkdevices,identifiedbytheiruniqueMACaddress:
DHCPServerStaticIPAddress
MACAddressEntertheMACaddressofthenetworkdevice
NMS
172
tobeassignedastaticIPaddress.
IPAddressSpecifytheIPaddresstoassignthedevice.
AddClicktoassigntheIPaddresstothedevice.
IV‐6‐1‐2.LANPortSettings
The“LANPort”pageallowsyoutoconfigurethesettingsforyourAP
ControllerswiredLAN(Ethernet)ports.
WiredLANPortIdentifiesLANport.USBistheLANport
attachedviaminiUSBadapter.
Speed&DuplexSelectaspeed&duplextypeforspecifiedLAN
port,orusethe“Auto”value.LANportscan
operateupto1000Mbpsandfull‐duplex
enablessimultaneousdatapackets
transfer/receive.
FlowControlEnable/disableflowcontrol.Flowcontrolcan
pausenewsessionrequestuntilcurrentdata
processingiscomplete,inordertoavoid
deviceoverloadsunderheavytraffic.
802.3azEnable/disable802.3az.802.3azisanEnergy
EfficientEthernetfeaturewhichdisables
unusedinterfacestoreducepowerusage.
NMS
173
IV‐6‐1‐3.VLAN
The“VLAN”(VirtualLocalAreaNetwork)pageenablesyoutoconfigureVLAN
settings.AVLANisalocalareanetworkwhichmapsworkstationsvirtually
insteadofphysicallyandallowsyoutogrouptogetherorisolateusersfrom
eachother.VLANIDs1–4095aresupported.
VLANIDsintherange1–4095aresupported.
VLANInterface
WiredLANPortIdentifiesLANport.USBistheLANport
attachedviaminiUSBadapter.
VLANModeSelect“TaggedPort”or“UntaggedPort”for
specifiedLANinterface.
VLANIDSetaVLANIDforspecifiedinterface,if
“UntaggedPort”isselected.
ManagementVLAN
VLANIDSpecifytheVLANIDofthemanagementVLAN.
OnlythehostsbelongingtothesameVLANcan
managethedevice.
NMS
174
IV‐6‐2.2.4GHz11bgn
The“2.4GHz11bgn”menuallowsyoutoviewandconfigureinformationfor
youraccesspoint’s2.4GHzwirelessnetworkacrossfourcategories:Basic,
Advanced,SecurityandWDS.
IV‐6‐2‐1.Basic
The“Basic”screendisplaysbasicsettingsforyouraccesspoint’s2.4GHzWi‐Fi
network(s).
WirelessEnableordisabletheaccesspoint’s2.4GHz
wirelessradio.Whendisabled,no2.4GHz
SSIDswillbeactive.
BandSelectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11b,
802.11g&802.11ncanbeselected.
EnableSSIDNumberSelecthowmanySSIDstoenableforthe
2.4GHzfrequencyfromthedropdownmenu.
Amaximumof16canbeenabled.
SSID#EntertheSSIDnameforthespecifiedSSID(up
NMS
175
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s2.4GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannel
Interval
Specifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel Selectawirelesschannelfrom1–11.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher
interference)orAuto(automaticallyselect
basedoninterferencelevel).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
NMS
176
IV‐6‐2‐2.Advanced
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe
valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
ContentionSlotSelect“Short”or“Long”–thisvalueisusedfor
contentionwindowsinWMM(seeIV‐6‐7.
WMM).
PreambleTypeSetthewirelessradiopreambletype.The
preambletypein802.11basedwireless
communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor
communicationbetweentheaccesspointand
roamingwirelessadapters.Thedefaultvalueis
“ShortPreamble”.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11gProtectionEnable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
NMS
177
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
NMS
178
IV‐6‐2‐3.Security
Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption).
Whendataisencrypted,informationtransmittedwirelesslycannotbereadby
anyonewhodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthard‐to‐guesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
SSIDSelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWi‐Finetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWi‐Fi
networktoclients–clientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
NMS
179
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication
Method
Selectanauthenticationmethodfromthedrop
downmenuandrefertotheinformation
belowappropriateforyourmethod.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenuandrefertothe
informationbelow(IV‐6‐2‐3‐6.)appropriatefor
yourmethod.
IV‐6‐2‐3‐1.NoAuthentication
Authenticationisdisabledandnopassword/keyisrequiredtoconnecttothe
accesspoint.
Disablingwirelessauthenticationisnotrecommended.When
disabled,anybodywithinrangecanconnecttoyourdevice’sSSID.
IV‐6‐2‐3‐2.WEP
WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Forahigher
levelofsecurityconsiderusingWPAencryption.
KeyLengthSelect64‐bitor128‐bit.128‐bitismoresecure
than64‐bitandisrecommended.
KeyTypeChoosefrom“ASCII”(anyalphanumerical
character0‐9,a‐zandA‐Z)or“Hex”(any
charactersfrom0‐9,a‐fandA‐F).
DefaultKeySelectwhichencryptionkey(1–4below)isthe
defaultkey.Forsecuritypurposes,youcanset
uptofourkeys(below)andchangewhichis
thedefaultkey.
EncryptionKey1–
4
Enteryourencryptionkey/passwordaccording
totheformatyouselectedabove.
NMS
180
IV‐6‐2‐3‐3.IEEE802.1x/EAP
KeyLengthSelect64‐bitor128‐bit.128‐bitismoresecure
than64‐bitandisrecommended.
IV‐6‐2‐3‐4.WPA‐PSK
WPA‐PSKisasecurewirelessencryptiontypewithstrongdata
protectionanduserauthentication,utilizing128‐bitencryptionkeys.
WPATypeSelectfromWPA/WPA2MixedMode‐PSK,
WPA2orWPAonly.WPA2issaferthanWPA
only,butnotsupportedbyallwirelessclients.
Pleasemakesureyourwirelessclientsupports
yourselection.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
Pre‐SharedKey
Type
Choosefrom“Passphrase”(8–63
alphanumericcharacters)or“Hex”(upto64
charactersfrom0‐9,a‐fandA‐F).
Pre‐SharedKeyPleaseenterasecuritykey/passwordaccording
totheformatyouselectedabove.
IV‐6‐2‐3‐5.WPA‐EAP
WPATypeSelectfromWPA/WPA2MixedMode‐EAP,
WPA2‐EAPorWPA‐EAP.
EncryptionSelect“TKIP/AESMixedMode”or“AES”
encryptiontype.
KeyRenewal
Interval
Specifyafrequencyforkeyrenewalin
minutes.
WPA‐EAPmustbedisabledtouseMAC‐RADIUSauthentication.
NMS
181
IV‐6‐2‐3‐6.AdditionalAuthentication
Additionalwirelessauthenticationmethodscanalsobeused:
MACAddressFilter
RestrictwirelessclientsaccessbasedonMACaddressspecifiedintheMAC
filtertable.
SeeIV‐6‐6.MACFiltertoconfigureMACfiltering.
MACFilter&MAC‐RADIUSAuthentication
RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering&
RADIUSauthenticationmethods.
MAC‐RADIUSAuthentication
RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,or
passwordauthenticationviaaRADIUSserver.
SeeIV‐6‐5.RADIUStoconfigureRADIUSservers.
WPSmustbedisabledtouseMAC‐RADIUSauthentication.See
IV‐6‐4.forWPSsettings.
MACRADIUS
Password
SelectwhethertouseMACaddressor
passwordauthenticationviaRADIUSserver.If
youselect“Usethefollowingpassword”,enter
thepasswordinthefieldbelow.Thepassword
shouldmatchthe“SharedSecret”usedin
IV‐6‐5.RADIUS.
NMS
182
IV‐6‐2‐4.WDS
WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogether
inanextendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspointto
beinthesamesubnetandensurethereisonlyoneactiveDHCP
serveramongconnectedaccesspoints,preferablyontheWAN
side.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
NMS
183
2.4GHz
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
WDS#EntertheMACaddressforuptofourother
WDSdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryptionmethod
EncryptionSelectwhethertouse“None”or“AES”
encryptionandenterapre‐sharedkeyforAES
consistingof8‐63alphanumericcharacters.
NMS
184
IV‐6‐3. 5GHz11ac11an
The“5GHz11ac11an”menuallowsyoutoviewandconfigureinformationfor
youraccesspoint’s5GHzwirelessnetworkacrossfourcategories:Basic,
Advanced,SecurityandWDS.
IV‐6‐3‐1.Basic
The“Basic”screendisplaysbasicsettingsforyouraccesspoint’s5GHzWi‐Fi
network(s).
WirelessEnableordisabletheaccesspoint’s5GHz
wirelessradio.Whendisabled,no5GHzSSIDs
willbeactive.
BandSelectthewirelessstandardusedforthe
accesspoint.Combinationsof802.11a,
802.11n&802.11accanbeselected.
EnableSSIDNumberSelecthowmanySSIDstoenableforthe5GHz
frequencyfromthedropdownmenu.A
maximumof16canbeenabled.
NMS
185
SSID#EntertheSSIDnameforthespecifiedSSID(up
to16).TheSSIDcanconsistofany
combinationofupto32alphanumeric
characters.
VLANIDSpecifyaVLANIDforeachSSID.
AutoChannelEnable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthe
wirelesschannelfortheaccesspoint’s5GHz
frequencybasedonavailabilityandpotential
interference.Whendisabled,selectachannel
manuallyasshowninthenexttable.
AutoChannelRangeSelectarangefromwhichtheautochannel
setting(above)willchooseachannel.
AutoChannel
Interval
Specifyafrequencyforhowoftentheauto
channelsettingwillcheck/reassignthe
wirelesschannel.Check/uncheckthe“Change
channelevenifclientsareconnected”box
accordingtoyourpreference.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel Selectawirelesschannel.
ChannelBandwidthSetthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto
40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference
level).
BSSBasicRateSetSetaBasicServiceSet(BSS)rate:thisisa
seriesofratestocontrolcommunication
framesforwirelessclients.
NMS
186
IV‐6‐3‐2. Advanced
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe
valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceof
youraccesspoint.
GuardIntervalSettheguardinterval.Ashorterintervalcan
improveperformance.
802.11nProtectionEnable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to
accesspoint,andaccesspointwillbroadcast
CleartoSend(CTS),beforeapacketissent
fromclient.)
DTIMPeriodSettheDTIM(deliverytrafficindication
message)periodvalueofthewirelessradio.
Thedefaultvalueis1.
RTSThresholdSettheRTSthresholdofthewirelessradio.The
defaultvalueis2347.
Fragment
Threshold
Setthefragmentthresholdofthewireless
radio.Thedefaultvalueis2346.
MulticastRateSetthetransferrateformulticastpacketsor
usethe“Auto”setting.
TxPowerSetthepoweroutputofthewirelessradio.You
maynotrequire100%outputpower.Settinga
lowerpoweroutputcanenhancesecuritysince
potentiallymalicious/unknownusersindistant
areaswillnotbeabletoaccessyoursignal.
NMS
187
BeaconIntervalSetthebeaconintervalofthewirelessradio.
Thedefaultvalueis100.
Stationidle
timeout
Settheintervalforkeepalivemessagesfrom
theaccesspointtoawirelessclienttoverifyif
thestationisstillalive/active.
NMS
188
IV‐6‐3‐3. Security
Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption).
Whendataisencrypted,informationtransmittedwirelesslycannotbereadby
anyonewhodoesnotknowthecorrectencryptionkey.
It’sessentialtoconfigurewirelesssecurityinordertoprevent
unauthorisedaccesstoyournetwork.
Selecthard‐to‐guesspasswordswhichincludecombinationsof
numbers,lettersandsymbols,andchangeyourpassword
regularly.
SSIDSelectwhichSSIDtoconfiguresecuritysettings
for.
BroadcastSSIDEnableordisableSSIDbroadcast.When
enabled,theSSIDwillbevisibletoclientsasan
availableWi‐Finetwork.Whendisabled,the
SSIDwillnotbevisibleasanavailableWi‐Fi
networktoclients–clientsmustmanually
entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana
visible(enabled)SSID.
WirelessClient
Isolation
Enableordisablewirelessclientisolation.
Wirelessclientisolationpreventsclients
connectedtotheaccesspointfrom
communicatingwitheachotherandimproves
security.Typically,thisfunctionisusefulfor
corporateenvironmentsorpublichotspots
andcanpreventbruteforceattacksonclients’
usernamesandpasswords.
NMS
189
LoadBalancingLoadbalancinglimitsthenumberofwireless
clientsconnectedtoanSSID.Setaload
balancingvalue(maximum50).
Authentication
Method
Selectanauthenticationmethodfromthedrop
downmenuandrefertotheinformation
belowappropriateforyourmethod.
Additional
Authentication
Selectanadditionalauthenticationmethod
fromthedropdownmenuandrefertothe
informationbelowappropriateforyour
method.
PleasereferbacktoIV‐6‐2‐3.Securityformoreinformationonauthentication
andadditionalauthenticationtypes.
NMS
190
IV‐6‐3‐4.WDS
WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogether
inanextendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspointto
beinthesamesubnetandensurethereisonlyoneactiveDHCP
serveramongconnectedaccesspoints,preferablyontheWAN
side.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.
Allaccesspointsshouldusethesamewirelesschannelandencryption
method.
5GHzWDSMode
WDSFunctionalitySelect“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDS
andalsoblockcommunicationwithregular
wirelessclients.WhenWDSisused,each
accesspointshouldbeconfiguredwith
correspondingMACaddresses,wireless
channelandwirelessencryptionmethod.
LocalMACAddressDisplaystheMACaddressofyouraccesspoint.
WDSPeerSettings
NMS
191
WDS#EntertheMACaddressforuptofourother
WDAdevicesyouwishtoconnect.
WDSVLAN
VLANModeSpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.
VLANIDSpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryption
EncryptionSelectwhethertouse“None”or“AES”
encryptionandenterapre‐sharedkeyforAES
with8‐63alphanumericcharacters.
NMS
192
IV‐6‐4.WPS
Wi‐FiProtectedSetupisasimplewaytoestablishconnectionsbetweenWPS
compatibledevices.WPScanbeactivatedoncompatibledevicesbypushinga
WPSbuttononthedeviceorfromwithinthedevice’sfirmware/configuration
interface(knownasPBCor“PushButtonConfiguration”).WhenWPSis
activatedinthecorrectmannerandatthecorrecttimefortwocompatible
devices,theywillautomaticallyconnect.“PINcodeWPS”isavariationofPBC
whichincludestheadditionaluseofaPINcodebetweenthetwodevicesfor
verification.
Pleaserefertomanufacturer’sinstructionsforyourotherWPS
device.
WPSCheck/uncheckthisboxtoenable/disableWPS
functionality.WPSmustbedisabledwhen
usingMAC‐RADIUSauthentication(see
IV‐6‐2‐3‐6.&IV‐6‐5).
ProductPINDisplaystheWPSPINcodeofthedevice,used
forPINcodeWPS.Youwillberequiredtoenter
thisPINcodeintoanotherWPSdeviceforPIN
codeWPS.Click“GeneratePIN”togeneratea
newWPSPINcode.
Push‐ButtonWPSClick“Start”toactivateWPSontheaccess
pointforapproximately2minutes.Thishasthe
sameeffectasphysicallypushingtheaccess
point’sWPSbutton.
WPSbyPINEnterthePINcodeofanotherWPSdeviceand
click“Start”toattempttoestablishaWPS
connectionforapproximately2minutes.
NMS
193
WPSStatusWPSsecuritystatusisdisplayedhere.Click
“Release”tocleartheexistingstatus.
IV‐6‐5.RADIUS
TheRADIUSsubmenuallowsyoutoconfiguretheaccesspoint’sRADIUS
serversettings,categorizedintothreesubmenus:RADIUSsettings,Internal
ServerandRADIUSaccounts.
ARADIUSserverprovidesuser‐basedauthenticationtoimprovesecurityand
offerwirelessclientcontrol–userscanbeauthenticatedbeforegaining
accesstoanetwork.
Theaccesspointcanutilizebothaprimaryandsecondary(backup)RADIUS
serverforeachofitswirelessfrequencies(2.4GHz&5GHz).ExternalRADIUS
serverscanbeusedortheaccesspoint’sinternalRADIUSservercanbeused.
TouseRADIUSservers,goto“LocalNetwork”
Æ
“Security”
Æ
“AdditionalAuthentication”andselect“MACRADIUS
Authentication”(seeIV‐6‐2‐3.&IV‐6‐3‐3).
NMS
194
IV‐6‐5‐1.RADIUSSettings
ConfiguretheRADIUSserversettingsfor2.4GHz&5GHz.Eachfrequencycan
useaninternalorexternalRADIUSserver.
NMS
195
RADIUSTypeSelect“Internal”tousetheaccesspoint’s
built‐inRADIUSserveror“external”tousean
externalRADIUSserver.
RADIUSServerEntertheRADIUSserverhostIPaddress.
Authentication
Port
SettheUDPportusedintheauthentication
protocoloftheRADIUSserver.Valuemustbe
between1–65535.
SharedSecretEnterasharedsecret/passwordbetween1–
99charactersinlength.Thisshouldmatchthe
“MAC‐RADIUS”passwordusedinIV‐3‐1‐3‐6or
IV‐3‐2‐3.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between0–86400.
AccountingEnableordisableRADIUSaccounting.
AccountingPortWhenaccountingisenabled(above),setthe
UDPportusedintheaccountingprotocolof
theRADIUSserver.Valuemustbebetween1–
65535.
IV‐6‐5‐2.InternalServer
Theaccesspointfeaturesabuilt‐inRADIUSserverwhichcanbeconfiguredas
shownbelowusedwhen“Internal”isselectedfor“RADIUSType”inthe“Local
Network”Æ“RADIUSSettings”menu.
TouseRADIUSservers,goto“WirelessSettings”
Æ
“Security”
“AdditionalAuthentication”andselect“MACRADIUS
Authentication”(seeIV‐6‐2‐3.&IV‐6‐3‐3).
NMS
196
InternalServerCheck/unchecktoenable/disabletheaccess
point’sinternalRADIUSserver.
EAPInternal
Authentication
SelectEAPinternalauthenticationtypefrom
thedropdownmenu.
EAPCertificateFile
Format
DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12)
EAPCertificateFileClick“Upload”toopenanewwindowand
selectthelocationofanEAPcertificatefileto
use.Ifnocertificatefileisuploaded,the
internalRADIUSserverwilluseaself‐made
certificate.
SharedSecretEnterasharedsecret/passwordforuse
betweentheinternalRADIUSserverand
RADIUSclient.Thesharedsecretshouldbe1–
99charactersinlength.Thisshouldmatchthe
“MAC‐RADIUS”passwordusedinIV‐6‐2‐3‐6or
IV‐6‐3‐3.
SessionTimeoutSetadurationofsessiontimeoutinseconds
between0–86400.
TerminationActionSelectatermination‐actionattribute:
“Reauthentication”sendsaRADIUSrequestto
theaccesspoint,“Not‐Reathentication”sends
adefaulttermination‐actionattributetothe
accesspoint,“Not‐Send”no
termination‐actionattributeissenttothe
accesspoint.
NMS
197
IV‐6‐5‐3.RADIUSAccounts
TheinternalRADIUSservercanauthenticateupto256useraccounts.The
“RADIUSAccounts”pageallowsyoutoconfigureandmanageusers.
UserNameEntertheusernameshere,separatedby
commas.
AddClick“Add”toaddtheusertotheuser
registrationlist.
ResetCleartextfromtheusernamebox.
SelectChecktheboxtoselectauser.
UserNameDisplaystheusername.
PasswordDisplaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured).
CustomizeClick“Edit”toopenanewfieldtoset/edita
passwordforthespecifiedusername(below).
NMS
198
DeleteSelectedDeleteselecteduserfromtheuserregistration
list.
DeleteAllDeleteallusersfromtheuserregistrationlist.
EditUserRegistrationList
UserNameExistingusernameisdisplayedhereandcan
beeditedaccordingtoyourpreference.
PasswordEnteroreditapasswordforthespecifieduser.
NMS
199
IV‐6‐6.MACFilter
Macfilteringisasecurityfeaturethatcanhelptopreventunauthorizedusers
fromconnectingtoyouraccesspoint.
Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto
connecttotheaccesspoint.DevicesareeachidentifiedbytheiruniqueMAC
address.IfadevicewhichisnotonthelistofpermittedMACaddresses
attemptstoconnecttotheaccesspoint,itwillbedenied.
ToenableMACfiltering,goto“LocalSettings”
Æ
“Security”
Æ
“AdditionalAuthentication”andselect“MACFilter”(seeIV‐6‐2‐3.
&IV‐6‐3‐3).
TheMACaddressfilteringtableisdisplayedbelow:
AddMACAddressEnteraMACaddressofcomputerornetwork
devicemanuallye.g.‘aa‐bb‐cc‐dd‐ee‐ff’or
entermultipleMACaddressesseparatedwith
NMS
200
commas,e.g.
‘aa‐bb‐cc‐dd‐ee‐ff,aa‐bb‐cc‐dd‐ee‐gg’
AddClick“Add”toaddtheMACaddresstothe
MACaddressfilteringtable.
ResetClearallfields.
MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.Select
anentryusingthe“Select”checkbox.
SelectDeleteselectedorallentriesfromthetable.
MACAddressTheMACaddressislistedhere.
DeleteSelectedDeletetheselectedMACaddressfromthe
list.
DeleteAllDeleteallentriesfromtheMACaddress
filteringtable.
ExportClick“Export”tosaveacopyoftheMAC
filteringtable.Anewwindowwillpopupfor
youtoselectalocationtosavethefile.
NMS
201
IV‐6‐7.WMM
Wi‐FiMultimedia(WMM)isaWi‐FiAllianceinteroperabilitycertification
basedontheIEEE802.11estandard,whichprovidesQualityofService(QoS)
featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofour
categories:background,besteffort,videoandvoice.
ConfiguringWMMconsistsofadjustingparametersonqueuesfordifferent
categoriesofwirelesstraffic.Trafficissenttothefollowingqueues:
BackgroundLow
Priority
Highthroughput,nontimesensitivebulk
datae.g.FTP
BestEffortMedium
Priority
TraditionalIPdata,mediumthroughputand
delay.
VideoHigh
Priority
Timesensitivevideodatawithminimum
timedelay.
VoiceHigh
Priority
TimesensitivedatasuchasVoIPand
streamingmediawithminimumtimedelay.
Queuesautomaticallyprovideminimumtransmissiondelaysforvideo,voice,
multimediaandcriticalapplications.Thevaluescanfurtherbeadjusted
manually:
CWMinMinimumContentionWindow(milliseconds):
Thisvalueisinputtotheinitialrandom
backoffwaittimealgorithmforretryofadata
frametransmission.Thebackoffwaittimewill
begeneratedbetween0andthisvalue.Ifthe
NMS
202
frameisnotsent,therandombackoffvalueis
doubleduntilthevaluereachesthenumber
definedbyCWMax(below).TheCWMinvalue
mustbelowerthantheCWMaxvalue.The
contentionwindowschemehelpstoavoid
framecollisionsanddeterminepriorityof
frametransmission.Ashorterwindowhasa
higherprobability(priority)oftransmission.
CWMaxMaximumContentionWindow(milliseconds):
Thisvalueistheupperlimittorandom
backoffvaluedoubling(seeabove).
AIFSNArbitrationInter‐FrameSpace(milliseconds):
Specifiesadditionaltimebetweenwhena
channelgoesidleandtheAP/clientsends
dataframes.TrafficwithalowerAIFSNvalue
hasahigherpriority.
TxOPTransmissionOpportunity(milliseconds):The
maximumintervaloftimeanAP/clientcan
transmit.Thismakeschannelaccessmore
efficientlyprioritized.Avalueof0meansonly
oneframepertransmission.Agreatervalue
effectshigherpriority.
NMS
203
IV‐7.LocalSettings
IV‐7‐1.OperationMode
Settheoperationmodeoftheaccesspoint.APmodeisastandaloneaccess
point,APcontrollermodeactsasthedesignatedmasteroftheAParray,and
ManagedAPmodeactsasaslaveAPwithintheAParray.Repeatermodeacts
asawirelessrepeater.
IV‐7‐2.SystemSettings
IV‐7‐2‐1. SystemInformation
The“SystemInformation”pagedisplaysbasicsysteminformationaboutthe
accesspoint.
System
ModelDisplaysthemodelnumberoftheaccess
point.
ProductNameDisplaystheproductnameforreference,
whichconsistsof“AP”plustheMACaddress.
UptimeDisplaysthetotaltimesincethedevicewas
turnedon.
NMS
204
BootFromDisplaysinformationforthebooted
hardware,bootedfromeitherUSBorinternal
memory.
VersionDisplaysthefirmwareversion.
MACAddressDisplaystheaccesspoint’sMACaddress.
ManagementVLAN
ID
DisplaysthemanagementVLANID.
IPAddressDisplaystheIPaddressofthisdevice.Click
“Refresh”toupdatethisvalue.
Default
Gateway
DisplaystheIPaddressofthedefault
gateway.
DNSIPaddressofDNS(DomainNameServer)
DHCPServerIPaddressofDHCPServer.
WiredLANPortSettings
WiredLANPortSpecifieswhichLANport(1or2).
StatusDisplaysthestatusofthespecifiedLANport
(connectedordisconnected).
VLANMode/IDDisplaystheVLANmode(taggedoruntagged)
andVLANIDforthespecifiedLANport.See
IV‐6‐1‐3.VLAN
RefreshClicktorefreshallinformation.
NMS
205
IV‐7‐2‐2.WirelessClients
The“WirelessClients”pagedisplaysinformationaboutallwirelessclients
connectedtotheaccesspointonthe2.4GHzor5GHzfrequency.
Refreshtime
AutoRefreshTimeSelectatimeintervalfortheclienttablelistto
automaticallyrefresh.
ManualRefreshClickrefreshtomanuallyrefreshtheclient
table.
2.4GHz(5GHz)WLANClientTable
SSIDDisplaystheSSIDwhichtheclientis
connectedto.
MACAddressDisplaystheMACaddressoftheclient.
TxDisplaysthetotaldatapacketstransmittedby
thespecifiedclient.
RxDisplaysthetotaldatapacketsreceivedby
thespecifiedclient.
Signal(%)Displaysthewirelesssignalstrengthforthe
specifiedclient.
ConnectedTimeDisplaysthetotaltimethewirelessclienthas
beenconnectedtotheaccesspoint.
IdleTimeClientidletimeisthetimeforwhichtheclient
hasnottransmittedanydatapacketsi.e.is
idle.
VendorThevendoroftheclient’swirelessadapteris
displayedhere.
NMS
206
IV‐7‐2‐3. WirelessMonitor
WirelessMonitorisatoolbuiltintotheaccesspointtoscanandmonitorthe
surroundingwirelessenvironment.Selectafrequencyandclick“Scan”to
displayalistofallSSIDswithinrangealongwithrelevantdetailsforeachSSID.
WirelessMonitor
SiteSurveySelectwhichfrequency(orboth)toscan,and
click“Scan”tobegin.
ChannelSurvey
Result
Afterascaniscomplete,click“Export”tosave
theresultstolocalstorage.
SiteSurveyResults
ChDisplaysthechannelnumberusedbythe
specifiedSSID.
SSIDDisplaystheSSIDidentifiedbythescan.
MACAddressDisplaystheMACaddressofthewireless
router/accesspointforthespecifiedSSID.
SecurityDisplaystheauthentication/encryptiontype
ofthespecifiedSSID.
Signal(%)Displaysthecurrentsignalstrengthofthe
SSID.
TypeDisplaysthe802.11wirelessnetworking
standard(s)ofthespecifiedSSID.
VendorDisplaysthevendorofthewireless
router/accesspointforthespecifiedSSID.
NMS
207
IV‐7‐2‐4. Log
Thisinformationisusefulfornetworkadministrators.Displaysadetailed
informationlogofusersandactivityonthenetwork:ID,DateandTimeof
entry,Categoryofentry,Severity,Users,Event/Activitiesdetails.
Whenthelogisfull,oldentriesareoverwritten.
SaveClicktosavethelogasafileonyourlocal
computer.
ClearClearalllogentries.
RefreshRefreshthecurrentlog.
NMS
208
IV‐7‐3.Management
IV‐7‐3‐1. Admin
Youcanchangethepasswordusedtologintothebrowser‐based
configurationinterfacehere.Itisadvisedtodosoforsecuritypurposes.
Ifyouchangetheadministratorpassword,pleasemakeanote
ofthenewpassword.Intheeventthatyouforgetthis
passwordandareunabletologintothebrowserbased
configurationinterface,seeIV‐7‐4‐4.FactoryDefaultforhowto
resettheaccesspoint.
AccounttoManageThisDevice
Administrator
Name
Settheaccesspoint’sadministratorname.
Thisisusedtologintothebrowserbased
configurationinterfaceandmustbebetween
4‐16alphanumericcharacters(casesensitive).
Administrator
Password
Settheaccesspoint’sadministratorpassword.
Thisisusedtologintothebrowserbased
NMS
209
configurationinterfaceandmustbebetween
4‐32alphanumericcharacters(casesensitive).
AdvancedSettings
ProductNameEdittheproductnameaccordingtoyour
preferenceconsistingof1‐32alphanumeric
characters.Thisnameisusedforreference
purposes.
HTTPPortSpecifyaHTTPportformanagement.
HTTPSPortSpecifyaHTTPSportformanagement.
Management
Protocol
Check/unchecktheboxestoenable/disable
specifiedmanagementinterfaces(seebelow).
WhenSNMPisenabled,completetheSNMP
fieldsbelow.
SNMPVersionSelectSNMPversionappropriateforyour
SNMPmanager.
SNMPGet
Community
EnteranSNMPGetCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMP‐GETrequests.
SNMPSet
Community
EnteranSNMPSetCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMP‐SETrequests.
SNMPTrapEnableordisableSNMPTraptonotifySNMP
managerofnetworkerrors.
SNMPTrap
Community
EnteranSNMPTrapCommunitynamefor
verificationwiththeSNMPmanagerfor
SNMP‐TRAPrequests.
SNMPTrap
Manager
SpecifytheIPaddressorsevername(2‐128
alphanumericcharacters)oftheSNMP
manager.
HTTP
InternetbrowserHTTPprotocolmanagementinterface
HTTPS
InternetbrowserHTTPSprotocolmanagementinterface
TELNET
Clientterminalwithtelnetprotocolmanagementinterface
SSH
ClientterminalwithSSHprotocolversion1or2managementinterface
SNMP
NMS
210
SimpleNetworkManagementProtocol.SNMPv1,v2&v3protocolsupported.
SNMPv2canbeusedwithcommunitybasedauthentication.SNMPv3uses
user‐basedsecuritymodel(USM)architecture.
IV‐7‐3‐2. DateandTime
Youcanconfigurethetimezonesettingsofyouraccesspointhere.Thedate
andtimeofthedevicecanbeconfiguredmanuallyorcanbesynchronized
withatimeserver.
DateandTimeSettings
LocalTimeSettheaccesspoint’sdateandtimemanually
usingthedropdownmenus.
AcquireCurrent
TimefromyourPC
Click“AcquireCurrentTimefromYourPC”to
entertherequiredvaluesautomatically
accordingtoyourcomputer’scurrenttimeand
date.
NTPTimeServer
UseNTPTheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddate
setup.
ServerNameEnterthehostnameorIPaddressofthetime
serverifyouwish.
UpdateIntervalSpecifyafrequency(inhours)fortheaccess
pointtoupdate/synchronizewiththeNTP
server.
NMS
211
TimeZone
TimeZoneSelectthetimezoneofyourcountry/region.If
yourcountry/regionisnotlisted,pleaseselect
anothercountry/regionwhosetimezoneisthe
sameasyours.
NMS
212
IV‐7‐3‐3. SyslogServer
Thesystemlogcanbesenttoaserver,attachedtoUSBstorageorsentvia
email.
SyslogServerSettings
TransferLogsCheck/unchecktheboxtoenable/disablethe
useofasyslogserver,andenterahost
name,domainorIPaddressfortheserver,
consistingofupto128alphanumeric
characters.
CopyLogsto
AttachedUSBDevice
Check/unchecktheboxtoenable/disable
copyinglogstoattachedUSBstorage.
SyslogEmailSettings
EmailLogsCheck/unchecktheboxtoenable/disableemail
logs.Whenenabled,thelogwillbeemailed
accordingtothesettingsbelow.
EmailSubjectEnterthesubjectlineoftheemailwhichwillbe
sentcontainingthelog.
SMTPServer
Address
SpecifytheSMTPserveraddressforthesender
emailaccount.
SMTPServerPortSpecifytheSMTPserverportforthesender
emailaccount.
SenderEmailEnterthesender’semailaddress.
ReceiverEmailSpecifytheemailrecipientofthelog.
AuthenticationSelect“Disable”,“SSL”or“TLS”accordingto
NMS
213
youremailauthentication.
AccountWhenauthenticationisusedabove,enterthe
accountname.
PasswordWhenauthenticationisusedabove,enterthe
password.
IV‐7‐3‐4. I’mHere
Theaccesspointfeaturesabuilt‐inbuzzerwhichcansoundoncommand
usingthe“I’mHere”page.Thisisusefulfornetworkadministratorsand
engineersworkingincomplexnetworkenvironmentstolocatetheaccess
point.
Thebuzzerisloud!
DurationofSoundSetthedurationforwhichthebuzzerwill
soundwhenthe“SoundBuzzer”buttonis
clicked.
SoundBuzzerActivatethebuzzersoundfortheabove
specifieddurationoftime.
NMS
214
IV‐7‐4.Advanced
Wi‐FiMultimedia(WMM)isaWi‐FiAllianceinteroperabilitycertification
basedontheIEEE802.11estandard,whichprovidesQualityofService(QoS)
featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofour
categories:background,besteffort,videoandvoice.
IV‐7‐4‐1.LEDSettings
Theaccesspoint’sLEDscanbemanuallyenabledordisabledaccordingto
yourpreference.
LEDSelectonoroff.
NMS
215
IV‐7‐4‐2. UpdateFirmware
The“Firmware”pageallowsyoutoupdatethesystemfirmwaretoamore
recentversion.Updatedfirmwareversionsoftenofferincreasedperformance
andsecurity,aswellasbugfixes.Youcandownloadthelatestfirmwarefrom
thewebsite.
Thisfirmwareupdateisforanindividualaccesspoint.To
updatefirmwareformultipleaccesspointsintheAParray,go
toNMSSettings
Æ
FirmwareUpgrade.
Donotswitchoffordisconnecttheaccesspointduringafirmware
upgrade,asthiscoulddamagethedevice.
UpdateFirmware
From
Select“afileonyourPC”touploadfirmware
fromyourlocalcomputerorfroman
attachedUSBdevice.
FirmwareUpdateFileClick“Browse”toopenanewwindowto
locateandselectthefirmwarefileinyour
computer.
UpdateClick“Update”touploadthespecified
firmwarefiletoyouraccesspoint.
NMS
216
IV‐7‐4‐3. Save/RestoreSettings
Theaccesspoint’s“Save/RestoreSettings”pageenablesyoutosave/backup
theaccesspoint’scurrentsettingsasafiletoyourlocalcomputeroraUSB
deviceattachedtotheaccesspoint,andrestoretheaccesspointtopreviously
savedsettings.
Save/RestoreSettings
UsingDeviceSelect“UsingyourPC”tosavetheaccess
point’ssettingstoyourlocalcomputerorto
anattachedUSBdevice.
SaveSettingstoPC
SaveSettingsClick“Save”tosavesettingsandanew
windowwillopentospecifyalocationto
savethesettingsfile.Youcanalsocheckthe
“Encrypttheconfigurationfilewitha
password”boxandenterapasswordto
protectthefileinthefieldunderneath,ifyou
wish.
RestoreSettingsfromPC
RestoreSettingsClickthebrowsebuttontofindapreviously
savedsettingsfileonyourcomputer,then
click“Restore”toreplaceyourcurrent
settings.Ifyoursettingsfileisencryptedwith
apassword,checkthe“Openfilewith
NMS
217
password”boxandenterthepasswordin
thefieldunderneath.
IV‐7‐4‐4. FactoryDefault
Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommended
thatyourebootthedevice(seeIV‐7‐4‐5.)orresetthedevicebacktoits
factorydefaultsettings.Youcanresettheaccesspointbacktoitsdefault
settingsusingthisfeatureifthelocationoftheaccesspointisnotconvenient
toaccesstheresetbutton.
FactoryDefaultClick“FactoryDefault”torestoresettingsto
thefactorydefault.Apop‐upwindowwill
appearandaskyoutoconfirm.
Afterresettingtofactorydefaults,pleasewaitfortheaccess
pointtoresetandrestart.
IV‐7‐4‐5. Reboot
Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommended
thatyourebootthedeviceorresettheaccesspointbacktoitsfactorydefault
settings(seeIV‐7‐4‐4).Youcanreboottheaccesspointremotelyusingthis
feature.
RebootClick“Reboot”torebootthedevice.A
countdownwillindicatetheprogressofthe
reboot.
NMS
218
IV‐8.Toolbox
IV‐8‐1. NetworkConnectivity
IV‐8‐1‐1. Ping
Pingisacomputernetworkadministrationutilityusedtotestwhethera
particularhostisreachableacrossanIPnetworkandtomeasure
theround‐triptimeforsentmessages.
DestinationAddressEntertheaddressofthehost.
ExecuteClickexecutetopingthehost.
IV‐8‐1‐2. TraceRoute
Tracerouteisadiagnostictoolfordisplayingtheroute(path)andmeasuring
transitdelaysofpacketsacrossanIPnetwork.
DestinationAddressEntertheaddressofthehost.
ExecuteClickexecutetoexecutethetraceroute
command.
NMS
219
V. Appendix
V‐1.ConfiguringyourIPaddress
TheaccesspointusesthedefaultIPaddress192.168.2.2.Inordertoaccess
thebrowserbasedconfigurationinterface,youneedtomodifytheIPaddress
ofyourcomputertobeinthesameIPaddresssubnete.g.192.168.2.x(x=3–
254).
TheprocedureformodifyingyourIPaddressvariesacrossdifferentoperating
systems;pleasefollowtheguideappropriateforyouroperatingsystem.
InthefollowingexamplesweusetheIPaddress192.168.2.10thoughyoucan
useanyIPaddressintherange192.168.2.x(x=3–254).
IfyouchangedtheAP’sIPaddress,orifyourgateway/routeruses
aDHCPserver,ensureyouenterthecorrectIPaddress.Referto
yourgateway/router’ssettings.Yourcomputer’sIPaddressmust
beinthesamesubnetastheAPController.
IfusingaDHCPserveronthenetwork,itisadvisedtouseyour
DHCPserver’ssettingstoassigntheAPastaticIPaddress.
NMS
220
V‐1‐1.WindowsXP
1. Clickthe“Start”button(itshouldbelocatedinthelower‐leftcornerof
yourcomputer),thenclick“ControlPanel”.Double‐clickthe“Networkand
InternetConnections”icon,click“NetworkConnections”,andthen
double‐click“LocalAreaConnection”.The“LocalAreaConnectionStatus”
windowwillthenappear,click“Properties”.
NMS
221
2. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
NMS
222
V‐1‐2.WindowsVista
1. Clickthe“Start”button(itshouldbelocatedinthelower‐leftcornerof
yourcomputer),thenclick“ControlPanel”.Click“ViewNetworkStatusand
Tasks”,thenclick“ManageNetworkConnections”.Right‐click“LocalArea
Network”,thenselect“Properties”.The“LocalAreaConnectionProperties”
windowwillthenappear,select“InternetProtocolVersion4(TCP/IPv4)”,
andthenclick“Properties”.
NMS
223
2. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
NMS
224
V‐1‐3.Windows7
1. Clickthe“Start”button(itshouldbelocatedinthelower‐leftcornerof
yourcomputer),thenclick“ControlPanel”.
2. Under“NetworkandInternet”click“Viewnetworkstatusandtasks”.
NMS
225
3. Click“LocalAreaConnection”.
4. Click“Properties”.
NMS
226
5. Select“InternetProtocolVersion4(TCP/IPv4)andthenclick“Properties”.
NMS
227
6. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
NMS
228
V‐1‐4.Windows8
1. FromtheWindows8Startscreen,youneedtoswitchtodesktopmode.
Moveyourcursertothebottomleftofthescreenandclick.
2. Indesktopmode,clicktheFileExplorericoninthebottomleftofthe
screen,asshownbelow.
NMS
229
3. Rightclick“Network”andthenselect“Properties”.
4. Inthewindowthatopens,select“Changeadaptersettings”fromtheleft
side.
NMS
230
5. Chooseyourconnectionandrightclick,thenselect“Properties”.
6. Select“InternetProtocolVersion4(TCP/IPv4)andthenclick“Properties”.
NMS
231
7. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10
SubnetMask:255.255.255.0
Click‘OK’whenfinished.
NMS
232
V‐1‐5.Mac
1. HaveyourMacintoshcomputeroperateasusual,andclickon“System
Preferences”
2. InSystemPreferences,clickon“Network”.
3. Clickon“Ethernet”intheleftpanel.
4. Openthedrop‐downmenulabeled“ConfigureIPv4”andselect
“Manually”.
NMS
233
5. EntertheIPaddress192.168.2.10andsubnetmask255.255.255.0.Click
on“Apply”tosavethechanges.
NMS
234
V‐2.HardwareSpecification
MCU/RF QualcommAtherosQCA9558(2.4GHz)+QCA9880(5GHz)
PHYQualcommAtherosAR8035
Memory DDR2128MB
Flash 16MB
Physical
Interface
‐LAN:1x10/100/1000GigabitEthernetwith802.3atPoEsupport
‐ResetButton
‐USB2.0interface
‐DCPowerJack
Power
Requirement
PoweroverEthernet,IEEE802.3at
DC:12V/2A
AntennaInternalPIFAAntenna(2.4GHzx3,5GHzx3)
OthersInternalBuzzer(Findme)
V‐3.ENVIRONMENT&PHYSICAL
Temperature
Range
UsePoESwitch:
Operation:0to50℃(32℉to122℉)
Storage:‐20to60℃(‐4℉to140℉)
UsePowerAdapter:
Operation:0to40℃(32℉to104℉)
Storage:‐20to60℃(‐4℉to140℉)
Humidity 90%orless–Operating,90%orless‐Storage
CertificationsFCC,CE
Dimensions 208(D)x32.1(H)mm
Weight 590g
NMS
235
VI. BestPractice
VI‐1.HowtoCreateandLinkWLAN&AccessPointGroups
YoucanuseNMStocreateindividualSSIDsandgroupmultipleSSIDstogether
intoWLANgroups.Youcanthenassignindividualaccesspointstousethose
WLANgroupsettingsand/orgroupmultipleaccesspointstogetherintoaccess
pointgroups,whichyoucanalsoassigntouseWLANgroupsettings.
Followtheexamplebelowto:
A.CreateaWLANgroup.
B.Createanaccesspointgroup.
C.AssigntheaccesspointgrouptousetheSSIDgroupsettings.
A.
1. GotoNMSSettingsÆWLANandclick“Add”intheWLANpanel:
NMS
236
2. EnteranSSIDnameandsetauthentication/encryptionandclick
“Apply”:
3. ThenewSSIDwillbedisplayedintheWLANpanel.Repeattoadd
additionalSSIDsaccordingtoyourpreference,andthenclick“Add”in
theWLANGrouppanel:
NMS
237
4. EnteranamefortheSSIDgroupandchecktheboxestoselectwhich
SSIDstoincludewithinthegroup.Click“Apply”whendone.
5. ThenewWLANgroupwillbedisplayedintheWLANGrouppanel.
RepeattoaddadditionalWLANgroupsaccordingtoyourpreference:
NMS
238
B.
1. GotoNMSSettingsÆAccessPointandclick“Add”intheAccessPoint
GroupPanel:
2. EnteraNameandthenscrolldowntotheGroupSettingspanelanduse
the<<buttontoaddselectedaccesspointsintoyourgroupfromthe
boxontherightside.Click“Apply”whendone.
NMS
239
3. ThenewaccesspointgroupwillbedisplayedintheAccessPointGroup
panel.Repeattoaddadditionalaccesspointgroupsaccordingtoyour
preference:
NMS
240
C.
1. GotoNMSSettingsÆAccessPointandselectanaccesspointgroup
usingthecheckboxesintheAccessPointGrouppanel.Click“Edit”:
2. ScrolldowntotheProfileGroupSettingspanelandcheckthe“Override
GroupSettings”boxforWLANGroup(2.4GHzand/or5GHz).Select
yourWLANgroupfromthedrop‐downmenuandclick“Apply”:
3. Repeatforotheraccesspointgroupsaccordingtoyourpreference.
4.
241
COPYRIGHT
Copyright©2016bythiscompany.Allrightsreserved.Nopartofthispublicationmaybereproduced,
transmitted,transcribed,storedinaretrievalsystem,ortranslatedintoanylanguageorcomputer
language,inanyformorbyanymeans,electronic,mechanical,magnetic,optical,chemical,manualor
otherwise,withoutthepriorwrittenpermissionofthiscompany
Thiscompanymakesnorepresentationsorwarranties,eitherexpressedorimplied,withrespecttothe
contentshereofandspecificallydisclaimsanywarranties,merchantabilityorfitnessforanyparticular
purpose.Anysoftwaredescribedinthismanualissoldorlicensed"asis".Shouldtheprogramsprove
defectivefollowingtheirpurchase,thebuyer(andnotthiscompany,itsdistributor,oritsdealer)
assumestheentirecostofallnecessaryservicing,repair,andanyincidentalorconsequentialdamages
resultingfromanydefectinthesoftware.Further,thiscompanyreservestherighttorevisethis
publicationandtomakechangesfromtimetotimeinthecontentsthereofwithoutobligationtonotify
anypersonofsuchrevisionorchanges.
242
FederalCommunicationCommissionInterferenceStatement
ThisequipmenthasbeentestedandfoundtocomplywiththelimitsforaClassBdigitaldevice,pursuanttoPart
15ofFCCRules.Theselimitsaredesignedtoprovidereasonableprotectionagainstharmfulinterferenceina
residentialinstallation.Thisequipmentgenerates,uses,andcanradiateradiofrequencyenergyand,ifnot
installedandusedinaccordancewiththeinstructions,maycauseharmfulinterferencetoradiocommunications.
However,thereisnoguaranteethatinterferencewillnotoccurinaparticularinstallation.Ifthisequipmentdoes
causeharmfulinterferencetoradioortelevisionreception,whichcanbedeterminedbyturningtheequipment
offandon,theuserisencouragedtotrytocorrecttheinterferencebyoneormoreofthefollowingmeasures:
1.Reorientorrelocatethereceivingantenna.
2.Increasetheseparationbetweentheequipmentandreceiver.
3.Connecttheequipmentintoanoutletonacircuitdifferentfromthattowhichthereceiverisconnected.
4.Consultthedealeroranexperiencedradiotechnicianforhelp.
FCCCaution
Thisdeviceanditsantennamustnotbeco‐locatedoroperatinginconjunctionwithanyotherantennaor
transmitter.ThisdevicecomplieswithPart15oftheFCCRules.Operationissubjecttothefollowingtwo
conditions:(1)thisdevicemaynotcauseharmfulinterference,and(2)thisdevicemustacceptanyinterference
received,includinginterferencethatmaycauseundesiredoperation.Anychangesormodificationsnotexpressly
approvedbythepartyresponsibleforcompliancecouldvoidtheauthoritytooperateequipment.
FederalCommunicationsCommission(FCC)RadiationExposureStatement
ThisequipmentcomplieswithFCCradiationexposurelimitssetforthforanuncontrolledenvironment.
Thisequipmentshouldbeinstalledandoperatedwithminimumdistance20cmbetweentheradiator&
yourbody.
R&TTEComplianceStatement
ThisequipmentcomplieswithalltherequirementsofDIRECTIVE1999/5/ECOFTHEEUROPEANPARLIAMENTAND
THECOUNCILofMarch9,1999onradioequipmentandtelecommunicationterminalequipmentandthemutual
recognitionoftheirconformity(R&TTE).TheR&TTEDirectiverepealsandreplacesinthedirective98/13/EEC
(TelecommunicationsTerminalEquipmentandSatelliteEarthStationEquipment)AsofApril8,2000.
Safety
Thisequipmentisdesignedwiththeutmostcareforthesafetyofthosewhoinstallanduseit.However,special
attentionmustbepaidtothedangersofelectricshockandstaticelectricitywhenworkingwithelectrical
equipment.Allguidelinesofthisandofthecomputermanufacturemustthereforebeallowedatalltimesto
ensurethesafeuseoftheequipment.
EUCountriesIntendedforUse
TheETSIversionofthisdeviceisintendedforhomeandofficeuseinAustria,Belgium,Bulgaria,Cyprus,Czech,
Denmark,Estonia,Finland,France,Germany,Greece,Hungary,Ireland,Italy,Latvia,Lithuania,Luxembourg,Malta,
Netherlands,Poland,Portugal,Romania,Slovakia,Slovenia,Spain,Sweden,Turkey,andUnitedKingdom.TheETSI
versionofthisdeviceisalsoauthorizedforuseinEFTAmemberstates:Iceland,Liechtenstein,Norway,and
Switzerland.
EUCountriesNotIntendedforUse
None