NEXXT SOLUTIONS 350U1 2.4GHz High Power Wireless Outdoor Access Point User Manual AELPLDR4U1 P41 80 REV5

NEXXT SOLUTIONS 2.4GHz High Power Wireless Outdoor Access Point AELPLDR4U1 P41 80 REV5

Contents

AELPLDR4U1_User Manual(P41-80)_REV5

Nexxt Solutions - NetGate Wireless Access Point41••••Protocol - The protocol used for this application, either TCP, UDP, or All (all protocols supported by the router).Status - This field displays either Enabled or Disabled, as the current status for the device.Modify - Click the Modify button next to in the entry you want to change. If you want to erase that entry, click on Delete.Common Service Port - Some common services are already available from the pull-down list.To setup a virtual server entry, follow the steps described below:Click the Add New… button on the virtual servers page. (Figure 4-29)Select the service you want to use from the Common Service Port list. If the Common Service Port list does not have the service that you want to use, type the number of the service port or service port range in the Service Port field.Type the IP Address of the computer in the Server IP Address field.Select the protocol used for this application.Select the Enable option to activate the virtual server.Click the Save button.Click the Modify button next to the entry you want to modify. If you want to erase this entry, click on the Delete button.Proceed with the changes you want to make.Click the Save button when you are done.Click the Enable All button to activate all entries.Click the Disabled All button to cancel all entries.Click the Delete All button to erase all entries.Click the Next button to go to the following page. Click the Previous button to return to the last page.Note:If you set the virtual server of service port as 80, you must configure the Web management port on System Tools –> Remote Management page to be any value other than 80, such as 8080. Otherwise, there will be a conflict to disable the virtual server.1.2.3.4.5.6.1.2.3.Note:If your computer or server has more than one type of service available, please select a different service, and enter the same IP Address for that computer or server.To modify or delete an existing entry:Figure 4-29 Add or Modify a Virtual Server Entry
Nexxt Solutions - NetGate Wireless Access Point424.9.2 Port triggeringGo to Forwarding > Port Triggering in order to configure the Port Triggering parameters on this menu, as shown in Figure 4-30.Once configured, the operation is as follows:To add a new rule, follow the steps below:A local host makes an outgoing connection to an external host using a destination port number defined in the Trigger Port field.The router records this connection, opens the incoming port or ports associated with this entry in the Port Triggering table, and associates them with the local host.When necessary, the external host will be able to connect to the local host using one of the ports defined in the Incoming Ports field.Click the Add New… button o the Port Triggering page. (Figure 4-31)Select a common application from the Common Applications drop-down list, then the port parameters will be automatically filled in the corresponding field. If the Common Applications list does not have the application you want, enter the port parameters manually.Select the protocol used for Trigger Port and Incoming Ports from the corresponding pull-down list.Click on Enable on the Status field.Click the Save button to save the new rule.1.2.3.1.2.3.4.5.•••••Trigger Port - The port for outgoing traffic. An outgoing connection using this port will “Trigger” this rule.Trigger Protocol - The protocol used for Trigger Ports, either TCP, UDP, or All (all protocols supported by the router).Incoming Ports Range - The port or port range used by the remote system when it responds to the outgoing request. A response using one of these ports will be forwarded to the PC that triggered this rule. You can input at most 5 groups of ports (or port section). Every group of ports must be separated by commas “,”. For example, 2000-2038, 2050-2051, 2085, 3010-3030.Incoming Protocol - The protocol used for Incoming Ports Range, either TCP , UDP, or ALL (all protocols supported by the router).Status - This field displays either Enabled or Disabled, as the current status for the device.Figure 4-30 Port triggering
Nexxt Solutions - NetGate Wireless Access Point43To modify or delete an existing entry, please complete the steps below:Note:Click the Enable All button to activate all entries.Click the Disabled All button to cancel all entries.Click the Delete All button to erase all entries.Click the Modify button next to the entry you want to change. If you want to delete that entry, click the Delete in this stage.Proceed with the changes you want to make.Click the Save button when you are done.When the trigger connection is released, will cause the closing of the corresponding opened ports.Each rule can only be used by one host on the LAN at a time. The trigger connection of other hosts on the LAN will be refused.Incoming Port Range enabled cannot overlap each other at the same time.1.2.3.1.2.3.4.9.3 DMZ (Demilitarized Zone)Go to Forwarding > DMZ in order to set up an DMZ host on this page, as shown in Figure 4-32.Figure 4-31 Add or Modify a Triggering EntryFigure 4-32 DMZ
Nexxt Solutions - NetGate Wireless Access Point44To assign a computer or server to be a DMZ server:Note:Once you set the DMZ host, the firewall protection for that host will be disabled.Click the Enable radio button.Enter the IP address in the DMZ Host IP Address field of the local PC that you want to set as the DMZ host.Click the Save button when done.1.2.3.••••••••Current UPnP Status - UPnP can be enabled or disabled by clicking the corresponding button. As enabling UPnP may present a risk to security, this feature is disabled by default.Current UPnP Settings List - This table displays the current UPnP information.Click Enable to activate the UPnP feature.Click Disable to cancel the UPnP feature.Click Refresh to update the Current UPnP Settings List.App Description - The description provided by the application in the UPnP request.External Port - The external port that the router opened for the application. Protocol - Shows which type of protocol is opened. Internal Port – The Internal port that the router opened as a local host. IP Address - The IP address of the local host that initiates the UPnP request. Status - The port status is displayed in this field. “Enabled” means that the port is still active. Otherwise, the port will be inactive.4.9.4 UPnPGo to Forwarding > UPnP in order to configure the UPnP function on this page, as shown in Figure 4-33:Figure 4-33 UPnP Settings
Nexxt Solutions - NetGate Wireless Access Point454.10 SecurityThis menu offers an enhanced level of protection for your network. IP address Filtering allows you to control the Internet Access of specific users on your LAN based on their IP addresses. Domain Filtering allows you to control access to certain websites on the Internet by specifying their domains or key words. Like IP Address Filtering, MAC Address Filtering allows you to control access to the Internet of users on your local network based on their MAC Addresses. Advanced Security helps to protect the router from cyber attacks. Remote Management allows you to manage your Router from a remote location via the Internet.There are six submenus under the Security menu (shown in Figure 4-34): Firewall, IP Address Filtering, Domain Filtering, MAC Address Filtering, Remote Management and Advanced Security. Click any of them in order to configure the corresponding function. A detailed description of each submenu is provided below.!Figure 4-34 The Security menu
Nexxt Solutions - NetGate Wireless Access Point464.10.1 FirewallGo to Security > Firewall in order to enable the main firewall screen, as shown in Figure 4-35. The default setting for the switch is off. Turning the general firewall switch to off will disable IP Filtering, Domain Filtering and MAC Filtering even if their individual settings are enabled.Enable Firewall - Check this box to activate the Firewall.Enable IP Address Filtering - Check this box to activate IP Address Filtering on the AP. There are two default filtering rules for IP Address Filtering: Allow or Deny the packets specified to pass through the router.Enable Domain Filtering - Check this box to enable Domain Filtering.Enable MAC Filtering - Check this box to activate MAC Address Filtering on the AP. There are two default filtering rules for MAC Address Filtering: Allow or Deny the packets specified to pass through the router.••••Figure 4-35 Firewall Settings
Nexxt Solutions - NetGate Wireless Access Point47Effective Time - Enter a time range using the HHMM format. It represents the period within which the entry shall remain active. For example 0803 - 1705, means that the command will be effective from 08:03 to 17:05.LAN IP Address - Enter a LAN IP Address or a range of LAN IP addresses in this field, in dotted-decimal notation format. For example, 192.168.0.20 192.168.0.30. Leave the field blank if you want all LAN IP Addresses to be used.4.10.2 IP address filteringGo to Security > IP Address Filtering in order to configure the IP address filtering entry on the current page, as shown in Figure 4-36.Do not change the default setting if you want to keep the IP Address Filtering feature disabled. To set up an IP Address Filtering entry, you should first enable the Firewall, followed by the IP Address Filtering on the Firewall page, as shown in Figure 4-35, and then click the Add New… button, as illustrated in Figure 4-36. This will cause the page Add or Modify an IP Address Filtering entry to be displayed, just like the one shown in Figure 4-37 below.To create or modify an IP Address Filtering entry, follow these instructions below:!1.2.Figure 4-36 IP address FilteringFigure 4-37 Add or Modify an IP Address Filtering Entry
Nexxt Solutions - NetGate Wireless Access Point48LAN Port - Enter a LAN Port or a range of LAN ports in this field. For example, 1030 2000. Leave the field blank if you want all LAN ports to be used.WAN IP Address - Enter a WAN IP Address or a range of WAN IP Addresses in this field, in dotted-decimal notation format. For example, 61.145.238.6 - 61.145.238.47. Leave the field blank if you want all WAN IP Addresses to be used.WAN Port - Enter a WAN Port or a range of WAN Ports in this field. For example, 25 110. Leave the field blank if you want all WAN to be used.Protocol - Select the protocol to be used, either TCP, UDP, or All (all protocols supported by the router).Action - Select either Allow or Deny through the router.Status - Select Enabled or Disabled for this entry from the Status pull-down list.Click the Modify next the entry you want to change. If you want to erase the entry, click the Delete button.Proceed with the changes you want to make.Click the Save button.Click the Save button to confirm this entry.To add another entry, repeat steps 1-9.When finished, click the Back button.To modify or delete an existing entry:Click the Enable All button to activate all entries.Click the Disabled All button to cancel all entries.Click the Delete All button to erase all entries.You can change the entry’s order as desired. Fore entries are before hind entries. Enter the ID number in the first box you want to move and another ID number in second box you want to move to, and then click the Move button to change the entry’s order.Click the Next button to move to the following page and click the Previous button to return to the last page.For example: If you wish to block e-mail received and sent by the IP Address 192.168.0.7 on your local network, and to make the PC with IP Address 192.168.0.8 unable to visit the website of IP Address 202.96.134.12, while imposing no limitations on other PC(s), you should specify the following IP address filtering list:3.4.5.6.7.8.1.2.3.
Nexxt Solutions - NetGate Wireless Access Point49Effective Time - Enter a time range using the HHMM format. It represents the period within which the entry shall remain active. For example 0803 - 1705, means that the command will be effective from 08:03 to 17:05.Domain Name - Type the domain or key word as desired in the field. Leave the field blank if you want all websites on the Internet to be used. For example: www.xxyy.com.cn, .net.Status - Select Enabled or Disabled for this entry on the Status pull-down list.Click the Save button to confirm this entry.1.2.3.4.4.10.3 Domain FilteringGo to Security > Domain Filtering in order to configure the domain filtering feature, as shown in Figure 4-38.Before adding a Domain Filtering entry, you must ensure that Enable Firewall and Enable Domain Filtering have been selected on the Firewall page, as shown in Figure 4-35. To Add a Domain filtering entry, click the Add New… button, as it appears in Figure 4-38. This will open the Add or Modify a Domain Filtering entry page, as in Figure 4-39.To add or modify a Domain Filtering entry, follow these instructions:To add or modify a Domain Filtering entry, follow these instructions:Figure 4-38 Domain FilteringFigure 4-39 Add or Modify a Domain Filtering entry
Nexxt Solutions - NetGate Wireless Access Point50Click the Modify button next the entry you want to change. If you want to erase the entry, click the Delete button.Proceed with the changes you want to make.Click the Save button when done.Click the Enabled All button to activate all entries .Click the Disabled All button to cancel all entries.Click the Delete All button to erase all entriesClick the Next button to go to the following page and the Previous button to return to the last page.For example, if you want to block the PC(s) on your LAN to access websites www.xxyy.com.cn, www.aabbcc.com and websites ending in .net on the Internet, while imposing no limitations on other websites, you should specify the following Domain filtering list.1.2.3.4.10.4 MAC address filteringGo to Security > Domain Filtering in order to configure the MAC address filtering feature on the current page, as shown in Figure 4-40.Before setting up MAC Filtering entries, you must first ensure that Enable Firewall and Enable MAC Filtering have been selected on the Firewall page, as shown in Figure 4-35. To Add a MAC Address filtering entry, click the Add New… button in Figure 4-40. Then the Add or Modify a MAC Address Filtering entry page will be displayed, as shown in Figure 4-41:Figure 4-40 MAC address Filtering
Nexxt Solutions - NetGate Wireless Access Point51Enter the appropriate MAC Address into the MAC Address field. The format of the MAC Address is XX-XX-XX-XX-XX-XX (X represents any hexadecimal digit). For example: 00-0E-AE-B0-00-0B.Enter a short description of the PC in the Description field. Fox example: John’s PC.Status - Select Enabled or Disabled for this entry, from the Status pull-down list.Click the Save button to confirm this entry.Click the Modify button next to the entry you want to change. If you want to erase the entry, click the Delete button.Proceed with the changes you want to make.Click the Save button once you are done.1.2.3.4.1.2.3.To add or modify a MAC Address Filtering entry, follow these instructions:To add additional entries, repeat steps 1-4.When finished, click the Return button to go back to the MAC Address Filtering page.To modify or delete an existing entry:Click the Enabled All button to activate all entries .Click the Disabled All button to cancel all entries.Click the Delete All button to erase all entriesClick the Next button to go to the following page and click the Previous button to return to the last page.Fox example: If you want to block the PC with MAC addresses 00-0A-EB-00-07-BE and 00-0A-EB-00-07-5F from accessing the Internet, first, enable the Firewall and MAC Address Filtering on the Firewall page. Then, you should specify the Default MAC Address Filtering Rule Deny these PC(s) with effective rules to access the Internet on the Firewall page, and include the following MAC address filtering list on this page:Figure 4-41 Add or Modify a MAC Address Filtering entry
Nexxt Solutions - NetGate Wireless Access Point524.10.5 Remote managementGo to Security > Remote Management in order to configure the Remote Management function on this screen, as shown in Figure 4-42. This feature allows you to manage your Router from a remote location via the Internet.Web Management Port – The web browser normally uses the standard HTTP service port 80 for access.. This Router’s default remote management web port number is 80. For greater security, you can change the remote management web port to a custom port by entering that number in the box provided. Choose a number between 1 and 65534 but do not use the number of any common service port.Remote Management IP Address - This is the current address you will use when accessingyour Router from the Internet. This function is disabled when the IP address is set to the default value of 0.0.0.0. To enable this function, change 0.0.0.0 to a valid IP address. If set to 255.255.255.255, then all the hosts will be able to access the Router from the internet.Note:••To access the Router, you should type your Router’s WAN IP address into your browser’s address (in IE) or Location (in Navigator) box, followed by a colon and the custom port number. For example, if your Router’s WAN address is 202.96.12.8, and the port number used is 8080, please enter http://202.96.12.8:8080 in your browser. Later, you may be asked for the Router’s password. After successfully entering the username and password, you will be able to access the Router’s web-based utility.Be sure to change the Router’s default password to a more secure password.1.2.Figure 4-42 Remote Management
Nexxt Solutions - NetGate Wireless Access Point534.10.6 Advanced securityGo to Security > Advanced Security in the menu in order to prevent the router from being attacked by TCP-SYN Flood, UDP Flood and ICMP-Flood from LAN, as shown in Figure 4-43.Packets Statistic interval (5 ~ 60) - The default value is 10. Select a value between 5 and 60 seconds from the pull-down list. The Packets Statistic interval value indicates the time section of the packets statistic. The result of the statistic is used for analysis by SYN Flood, UDP Flood and ICMP-Flood.DoS protection - Enable or Disable the DoS protection function. Only when enabled, flood filters will be effective.Enable ICMP-FLOOD Attack Filtering – Check this box to Enable or Disable the ICMP-FLOOD Attack Filtering.•••!Figure 4-43 Advanced Security settings
Nexxt Solutions - NetGate Wireless Access Point54ICMP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current ICMP-FLOOD Packets number is beyond the set value, the router will start up the blocking function immediately.Enable UDP-FLOOD Filtering - Enable or Disable the UDP-FLOOD Filtering.UDP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Select the desired setting between 5 ~ 3600 packets. When the current UPD-FLOOD Packets numbers exceeds the set value, the router will immediately start up the blocking feature.Enable TCP-SYN-FLOOD Attack Filtering - Check this box to Enable or Disable the TCP-SYN- FLOOD Attack Filtering.TCP-SYN-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Select the desired setting between 5 ~ 3600 packets. When the current TCP-SYN-FLOOD Packets numbers exceeds the set value, the router will immediately start up the blocking feature.Ignore Ping Packet from WAN Port - Check this box to Enable or Disable this option. The default setting is disabled. If enabled, the ping packet from the Internet will be denied access to the router.Forbid Ping Packet from LAN Port - Check this box to Enable or Disable Ping Packet access to the router from the LAN port. The default value is disabled. If enabled, the ping packet from the LAN port will be denied access to the router. (This can be used to defend the network against some viruses)Destination IP Address - The Destination IP Address is the address of the network or host that you want to assign a static route to.Subnet Mask - The Subnet Mask determines which portion of an IP Address is the network portion, and which portion is the host portion.Default Gateway - This is the IP Address of the gateway device that allows for contact between the router and the network or host.••••••••••Click the Save button to store the settings.Click the Blocked DoS Host Table button to display the DoS host list with the items excluded.4.11 Static routingA static route is a pre-determined path that network information must travel to reach a specific host or network. To add or delete a route, use the parameters under the Static Routing page, as shown in Figure 4-44.To add static routing entries:!Click the Add New button. The screen, as shown in Figure 4-45 will open.Enter the following parameters.1.2.Figure 4-44 Static Routing
Nexxt Solutions - NetGate Wireless Access Point55Click the Enabled All button to activate all entries.Click the Disabled All button to cancel all entries.Click the Delete All button to erase all entries.To modify or delete an existing entry:4.12 IP & MAC bindingARP Binding is useful for controlling access of specific computers in the LAN. This page displays the IP & MAC Binding Setting table; which you can configure based on your particular needs.There are two submenus under the IP & MAC Binding menu (shown in Figure 4-46): Binding Setting and ARP List. Click any of them in order to configure the corresponding function. Detailed descriptions for each submenu are provided below.Select Enabled or Disabled for this entry from the Status pull-down list.Click the Save button to keep your settings.Click the Modify button next to the entry you want to change. If you want to erase the entry, click the Delete button.Proceed with the changes you want to make.Click the Save button when done.3.4.1.2.3.!Figure 4-45 Add or Modify a Static Route EntryFigure 4-46 the IP & MAC Binding menu
Nexxt Solutions - NetGate Wireless Access Point564.12.1 Binding settingGo to IP & MAC Binding > Binding Setting in order to configure the binding parameters, as shown in Figure 4-47.When you want to add or modify an IP & MAC Binding entry, you can click the Add New button or Modify button, and then you will be directed to the next page. This page is used for adding or modifying an IP & MAC Binding entry (shown in Figure 4-48).To add IP & MAC Binding entries, follow the steps below.To modify or delete an existing entry, follow the steps below.MAC Address - The MAC address of the monitored computer in the LAN.IP Address - The assigned IP address of the monitored computer in the LAN.Bind - Check this option to enable ARP binding for a specific device.Modify - Use this link to edit or delete an existing entry.••••Click the Add New... button, as shown in Figure 4-48.Enter the MAC Address and IP Address.Select the Bind checkbox.Click the Save button to accept your changes.Find the desired entry in the table.Click Modify or Delete as desired, on the Modify column.1.2.3.4.1.2.Figure 4-47 Binding SettingFigure 4-48 IP & MAC Binding Setting (Add & Modify)
Nexxt Solutions - NetGate Wireless Access Point574.12.2 ARP listTo find an existing entry, follow the steps below.Go to IP & MAC Binding > ARP List in order to see the IP addresses on the LAN and their associated MAC addresses included in the ARP list. You can also use the list to configure the corresponding parameters from there. (Figure 4-50).Click the Bind All button to bind all the current items. This option is only available when the ARP binding is enabled.Click the Load All button to include all items in the IP & MAC Binding list.Click the Refresh button to update all items.MAC Address - The MAC address of the monitored computer in the LAN.IP Address - The assigned IP address of the controlled computer in the LAN.Status - Indicates whether or not the MAC and IP addresses are bound.Configure – To load or delete an item.Load - To load the item into the IP & MAC Binding list.Delete - To erase the item.••••••Click the Find button, to open the window.Enter the MAC Address or IP Address.Click the Bind button on the page, as shown in Figure 4-49.Click the Enabled All button to activate all entries .Click the Delete All button to erase all entries.1.2.3.Figure 4-49 Find IP & MAC Binding EntryFigure 4-50 ARP List
Nexxt Solutions - NetGate Wireless Access Point584.13 Dynamic DNS4.13.1 Dyndns.org DDNSThe router offers a Dynamic Domain Name System (DDNS) feature. DDNS lets you assign a fixed host and domain name to a dynamic Internet IP Address. It is useful when you are hosting your own website, FTP server, or other server behind the router. Before using this feature, you need to sign up for DDNS service providers such as www.dyndns.org, www.oray.net or www.comexe.cn. The Dynamic DNS client service provider will give you a password or key.If your selected dynamic DNS Service Provider is www.dyndns.org, the page will appear as shown in Figure 4-51.To set up DDNS, follow these instructions:Click Logout to exit the DDNS service.Enter the User Name for your DDNS account.Enter the Password for your DDNS account.Enter the Domain Name you received from the dynamic DNS service providerClick the Login button to log into the DDNS service.Connection Status - The status of the DDNS service connection is displayed in this field.1.2.3.4.Note:An item cannot be entered into the IP & MAC Binding list if the IP address of the item has been loaded before. An error warning will be displayed as well. Likewise, The Load All command will only load the items without interfering with the IP & MAC Binding list.•Figure 4-51 Dyndns.org DDNS Settings
Nexxt Solutions - NetGate Wireless Access Point59To set up DDNS, follow these instructions:Click Logout to log out the DDNS service.Enter the User Name for your DDNS account.Enter the Password for your DDNS account.Click the Login button to log in to the DDNS service.Connection Status - The status of the DDNS service connection is displayed here.Domain Name - The domain names are displayed in this field.1.2.3.••4.13.2 Oray.net DDNSIf your selected dynamic DNS Service Provider is www.oray.net, the following page will appear, as shown in Figure 4-52.Figure 4-52 Oray.net DDNS Settings
Nexxt Solutions - NetGate Wireless Access Point604.13.3 Comexe.cn DDNSIf your selected dynamic DNS Service Provider is www.comexe.cn, the page will appear as shown in Figure 4-53.Click Logout to log out the DDNS service.To set up for DDNS, follow these instructions:Enter the domain names your dynamic DNS service provider gave.Enter the User Name for your DDNS account.Enter the Password for your DDNS account.Click the Login button to log in to the DDNS service.Connection Status -The status of the DDNS service connection is displayed here.1.2.3.4.•Figure 4-53 Comexe.cn DDNS Settings
Nexxt Solutions - NetGate Wireless Access Point614.14 SNMP4.14.1 Community settingSNMP will allow the network management station to retrieve statistics and status from the SNMP agent in this device. Simple Network Management Protocol (SNMP) is a popular network monitoring and management tool, which encompasses a collection of specifications for network management that include the protocol itself. To use this function, select Enable and enter the following parameters in Figure 4-54.Go to SNMP > Community Setting in order to configure SNMP (Simple Network Management Protocol) communities, which are helpful for managing client access authority levels.To modify a community setting entry:Find the desired entry in the table.Click the Modify button in front of the community you wish to changeModify the community access to the SNMP entity.From the Access Mode pull-down list, select the Read Only or Read&Write option.Select the Enabled option from the Status pull-down list.Click the Save button to save your changes.Num - It displays the number for which the SNMP community is defined. Community String - Enter the password used to authenticate the management station to the device. Access Mode - This field allows you to specify the access privileges of the community.Read Only indicates that the community is only permitted to visualize the device configuration.Read & Write indicates that the community has been granted permission to read and change the device configuration. Status - This field allows you to enable/disable the corresponding entry. Modify - This field allows you to modify an entry.Click the Enabled All button to activate all entries.Click the Disable All button cancel all entries.1.2.3.4.5.6.•••••!!Figure 4-54 SNMP SettingsFigure 4-55 Community Setting
Nexxt Solutions - NetGate Wireless Access Point624.14.2 SNMP System Setting4.15 System toolsGo to SNMP > SNMP Setting in order to configure several system-related parameters (iso.org.dod.internet.mgmt.mib-2.system), as shown in Figure 4-56.System Tools option helps you to optimize the configuration of your device. You can upgrade the AP to the latest version of firmware, as well as backup or restore the AP’s configuration files. Ping Watch Dog is designed to constantly monitor a particular connection to a remote host using the Ping tool. Speed Test helps to test the connection speed to and from any reachableIP address on current network, especially when we are building wireless network between devices which are far away from each other. It’s suggested that you change the default password to a more secure one because it controls access to the device’s web-based management page. Besides, you can find out what happened to the system in System Log.There are ten submenus under the System Tools menu (shown as Figure 4-57): Time, Firmware, Factory Defaults, Backup & Restore, Ping Watch Dog, Reboot, Password, Syslog and Statistics. Clicking any of them will enable you to configure the corresponding function. The detailed explanations for each submenu are provided below.Click the Save button to keep the configuration of the current page.!System Contact - The textual identification of the contact person for this managed node, together with information on how to contact this person.System Name - An administratively-assigned name for this managed node. By convention, this is the node’s fully-qualified domain name.System Location - The physical location of this node.•••Figure 4-56 SNMP System SettingFigure 4-57 System Tools menu
Nexxt Solutions - NetGate Wireless Access Point634.15.1 TimeGo to System Tools > Time in order to set the time manually or get the GMT from the Internet for the router on the page as shown in Figure 4-58.To configure Time settings, please follow the steps below:The router will obtain GMT automatically when it connects to Internet.Note:Select your local time zone.Enter date and time in the corresponding blank fields.Click Save.This setting will be used for some time-based functions such as firewall. You must specify your time zone once you log in to the router successfully, otherwise, none of these functions will work.The time will be lost if the router is turned off.1. Select Using Daylight Saving Time.2. Enter daylight saving start time and end time in the blanks.Time Zone - Select your local time zone from this drop-down list.Date - Enter your local date in MM/DD/YY into the blank fields.Time - Enter your local time in HH/MM/SS into the blank fields.Click the Get GMT button to get GMT time from the Internet if you have an active internet connection.If you’re using Daylight saving time, please follow the steps below.1.2.3.1.2.•••Figure 4-58 Time settings
Nexxt Solutions - NetGate Wireless Access Point644.15.2 FirmwareGo to System Tools > Firmware in order to upgrade the latest version of firmware for the device, as seen on the screen shown in Figure 4-59.New firmware versions are posted at http://www.tp-link.com and can be downloaded for free. There is no need to upgrade the firmware unless the new firmware has a new feature you want to use. However, when experiencing problems caused by the AP itself, you can try to upgrade the firmware.Note:Before upgrading the AP’s firmware, you should write down some of your customized settings to avoid losing important configuration settings of AP.To upgrade the AP’s firmware, please take the following steps:Note:Do not turn off the AP or press the Reset button while the firmware is being upgraded. The AP will reboot after the Upgrading is complete.Download a more recent firmware upgrade file from our website (http://www.nexxtsolutions.com).Click Choose File to view the folders and select the downloaded file.Click Upgrade.Firmware Version - Displays the current firmware version.Hardware Version - Displays the current hardware version. The upgrade file must match the current hardware version.1.2.3.••Figure 4-59 Firmware Upgrade
Nexxt Solutions - NetGate Wireless Access Point65Note:Any settings you have saved will be lost after the default settings are restored.Note:4.15.3 Factory defaults4.15.4 Backup & restoreGo to System Tools > Factory Default in order to restore the router configuration to its factory default values, as seen on the following screen (Figure 4-60).Click the Backup button to save all configuration settings as a backup file in your local computer.To restore the AP’s configuration, please take the following steps:Go to System Tools > Backup & Restore button to save all the configuration settings as a backup file in your local computer, as shown in Figure 4-61.Click Restore to reset all configuration settings to their default values.The current configuration will be overwritten by the uploaded configuration file.If the process is not done correctly, it could render the device unmanageable.The upgrade process lasts around 20 seconds, after which the router will restart automatically. Keep the router on during the entire upgrading process to prevent any potential damage to the unit.The default User Name: admin Default Password: adminDefault IP Address: 192.168.0.1 Default Subnet Mask: 255.255.255.0Click Choose File to find the location of configuration file which you want to restore. Click Restore to update the configuration with the file using the path you have entered or selected in the blank field.1.2.3.••••••!Figure 4-60 Restore Factory DefaultFigure 4-61 Save or Restore the Configuration
Nexxt Solutions - NetGate Wireless Access Point664.15.5 Ping Watch Dog4.15.6 Speed testGo to System Tools > Ping Watch Dog in order to constantly monitor a particular connection to a remote host using the Ping tool. It makes this device continuously ping a user defined IP address (it can be the internet gateway, for example). If it is unable to ping under the user-defined constraints, this device will automatically reboot.Go to Wireless > Speed in order to test the connection speed to and from any reachable IP address of the existing network, especially when establishing a wireless link between devices which are far away from each other. It should be used for the preliminary throughput reading between two network devices. This reading is a rough estimate. You can input the remote device’s administrator Username and Password to get a precise reading, provided the remote device do support the Speed Test Utility of our AP.Make sure to click the Save button to make your settings changes effective.!Enable - Check this box to Enable or Disable the Ping Watch Dog..IP Address - The IP address of the target host where the Ping Watch Dog Utility is sending ping packets.Interval - Sets the time interval between two consecutive ping packets being sent..Delay - Sets the time delay before first ping packet is sent out when the device is restarted.Fail Count - Upper limit of the ping packet the device can drop continuously. If this value is overrun, the device will restart automatically.•••••Figure 4-62 Ping Watch Dog Utility
Nexxt Solutions - NetGate Wireless Access Point67Note:If either User or Password is incorrect, only a basic test will be performed. In other words, none of the advanced options you set will take effect.Note:If both Duration and Data amount are specified, the test will stop after any of them is met.Be sure to click the Run Test button to start a new test after you filled enough information. You can also stop a running test by clicking the Stop Test button at any time.Destination IP - The Remote device’s IP address.User - Administrator password of the remote device. It should be filled correctly if you want to get a precise reading. Otherwise, leave this field blank.Advanced options - This command is used to display the advanced test options, when the precise reading is being selected.Duration - Use this box to specify how long the test should last.Data amount - The maximum data amount to be sent out during the whole test.transmit - Estimates the outgoing throughput (TX).receive - Estimates the ingoing throughput (RX).both - Estimates the incoming throughput (Rx) first, followed by the outgoing (Tx) throughput.Direction - There are 3 options available for the traffic direction while estimating the throughput•••••••••Figure 4-63 Speed Test
Nexxt Solutions - NetGate Wireless Access Point684.15.7 Reboot4.15.8 PasswordGo to System Tools > Reboot in order to reset the device, as shown in the screen below.Go to System Tools > Password in order to change the router’s factory default user name and password, using the screen shown in Figure 4-65.Click Reboot to initialize the AP.Some device settings take effect only after the device is rebooted., which include:It is strongly recommended that you change the factory default user name and password of the AP to more secure ones because they control access to the AP’s web-based utility. All users who try to access the AP’s web-based utility or Quick Setup will be prompted to type the AP’s user name and password.Note:The new user name and password must not exceed 14 characters in length and must not include any space. Enter the new Password twice to confirm it.Click Save when finished.Click Clear All to delete all existing entries.Change LAN IP Address. (system will reboot automatically) Upgrade the firmware of the AP (system will reboot automatically). Restore the AP’s settings to factory default (system will reboot automatically). DHCP service function. Static address assignment of DHCP server.•••••Figure 4-64 Reboot the APFigure 4-65 Password
Nexxt Solutions - NetGate Wireless Access Point694.15.9 Syslog4.15.10 StatisticsGo to System Tools > System Log to query the logs in order to visualize the activity of the device, as shown in Figure 4-66.The Statistics page (shown in Figure 4-67) displays the network traffic of each PC on the LAN, including total traffic and the traffic of the last Packets Statistic interval in seconds.The AP can keep logs of all traffic. You can query the logs to see the activity in the AP.Click Refresh to show the latest log listsClick Clear All to delete all the log entries.Current Statistics Status - Enabled or Disabled. The default value is disabled. To enable,click the Enable button. If disabled, the function of DoS protection in Security settings will be ineffective.Packets Statistics Interval - The default value is 10. Select a value between 5 and 60 seconds from the pull-down list. This statistics interval defines the time between each transmission of data packets.Sorted Rules - Select a rule from the pull-down list to display the corresponding statistics.•••Figure 4-66 System LogFigure 4-67 Statistics
Nexxt Solutions - NetGate Wireless Access Point70Statistics Table:Click the Save button to store the Packets Statistic interval value.Click the Auto-refresh checkbox to update the page automatically.Click the Refresh button to refresh the page immediately.IP AddressTotalPacketsThe IP Address displayed with statisticsThe total amount of packets received and transmitted by the router.The total amount of bytes received and transmitted by the router.The total amount of packets received and transmitted in the last Packets Statistic interval seconds.PacketsICMP TxCurrentBytesThe total amount of bytes received and transmitted in the last Packets Statistic interval seconds.The total amount of the ICMP packets transmitted to WANin the last Packets Statistic interval seconds.UDP Tx The total amount of the UDP packets transmitted to WANin the last Packets Statistic interval seconds.TCP SYN Tx The total amount of the TCP SYN packets transmitted to WANin the last Packets Statistic interval seconds.Bytes
Nexxt Solutions - NetGate Wireless Access Point71Appendix A: FAQGo to System Tools > System Log to query the logs in order to visualize the activity of the device, as shown in Figure 4-66.1. How do I configure the router for ADSL users to access the Internet?First, configure the ADSL Modem configured in RFC1483 bridge mode.Connect the Ethernet cable from your ADSL Modem to the WAN port on the router. The telephone cord plugs into the Line port of the ADSL modem.Login to the router, click the “Network” menu on the left of your browser, and click “WAN” submenu. On the WAN page, select “PPPoE” for WAN Connection Type. Type user name in the “User Name” field and password in the “Password” field, finish by clicking on the “Connect” button.If your ADSL lease is in “pay-according-time” mode, select “Connect on Demand” or “Connect Manually” as your Internet connection mode. Type an appropriate value for “Max Idle Time” to avoid wasting paid time. Otherwise, you can select “Auto-connecting”as your Internet connection mode.Sometimes the connection cannot be terminated despite your setting of the ”Max Idle Time” interval. This is due to some applications are continually linked to the internet in the background.If you are a Cable user, please configure the router following the above steps.Note:1.2.3.4.1.2.!Figure A-1 PPPoE Connection TypeFigure A-2 PPPoE Connection Mode
Nexxt Solutions - NetGate Wireless Access Point722. How do I configure the router for Ethernet users to access the Internet?3. I want to use Netmeeting, what do I need to do?Login to the router. Go to the “Network” in the menu located on the left of your browser, and select “WAN” in the submenu. Once the WAN page opens, select “Dynamic IP” as the WAN Connection Type, and finish by clicking on the “Save” button.Some ISPs require that you register the MAC Address of your adapter, which is connected to your cable/DSL Modem during installation. If your ISP requires MAC register, login to the router and click the “Network” menu link on the left of your browser, and then click “MAC Clone” submenu link. On the “MAC Clone” page, if your PC’s MAC address is proper MAC address, click the “Clone MAC Address” button and your PC’s MAC address will copied into the “WAN MAC Address” field. Or you may type the MAC Address directly into the “WAN MAC Address” field. The format for the MAC Address is XX-XX-XX-XX-XX-XX. Then click the “Save” button. It will take effect after rebooting.If you start Netmeeting as a host, you don’t need to do anything with the router.If you start as a response, you need to configure Virtual Server or DMZ Host.How to configure Virtual Server: Login to the router, click the “Forwarding” menu on the left of your browser, and click “Virtual Servers” submenu. On the “Virtual Server” page, click Add New, then on the “Add or Modify a Virtual Server” page, enter “1720 in the “Service Port” blank field, and your IP address in the corresponding field, using 192.168.0.169 as an example. Remember to Enable and Save your settings at the end.1.2.1.2.3.Figure A-3 MAC CloneFigure A-4 Virtual Servers
Nexxt Solutions - NetGate Wireless Access Point734. I want to build a Web Server on the LAN, what should I do?Note:The caller on the other end should call your WAN IP, which is displayed on the “Status” page.Because the Web Server port 80 will interfere with the Web management port 80 on the router, you must change the Web management port number to avoid it.To change the Web management port number: Login to the router, click the “Security” menu on the left of your browser, and select “Remote Management” submenu. On the “Remote Manage-ment” page, type any port number other than 80, such as 88, into the “Web Management Port” field. Click “Save” and reboot the router.How to enable DMZ Host: Login to the router, click the “Forwarding” menu on the left of your browser, and click “DMZ” submenu. On the “DMZ” page, click the “Enable” radio button and type your IP address into the “DMZ Host IP Address” field, using 192.168.0.169 as an example. Remember to click the Save button when you are done.1.2.4.Figure A-5 Add or Modify a Virtual server EntryFigure A-6 DMZ
Nexxt Solutions - NetGate Wireless Access Point745. The wireless stations cannot connect to the router.Login to the router, click the “Forwarding” menu on the left of your browser, and click the “Virtual Servers” submenu. On the “Virtual Server” page, click Add New, then on the “Add or Modify a Virtual Server” page, enter “80” into the blank field next to “Service Port”, and your IP address next to the corresponding blank field, taking 192.068.0.188 as an example. Remember to Enable and Save your settings at the end.Make sure the “Wireless Router Radio” is enabled.Make sure that the wireless stations’ SSID matches the router’s SSID.Make sure the wireless stations have chosen the right KEY for encryption when the router is encrypted.If the wireless connection is ready, but you can’t access the router, check the IP Address of your wireless stations.Note:If the above configuration takes effect, type http://192.168.0.1:88/ to access the router in the address field of the Web browser (the router’s LAN IP address: Web Management Port).3.1.2.3.4.Figure A-7 Remote ManagementFigure A-8 Virtual ServersA-9 Add or Modify a Virtual server Entry
Nexxt Solutions - NetGate Wireless Access Point75Appendix B: Configuring the PCIn this section, we will explain how to install and configure the TCP/IP correctly in Windows XP. First, make sure your Ethernet Adapter is working. Refer to the adapter’s manual for further information, if needed.1. Configure TCP/IP componentOn the Windows taskbar, click the Start button, and then click Control Panel.After clicking the Network and Internet Connections icon, select the Network Connections tab in the new window.Right click the icon displayed below, and select Properties on the popup menu.In the page displayed below, double click on Internet Protocol (TCP/IP).1.2.3.4.Figure B-1
Nexxt Solutions - NetGate Wireless Access Point76The following TCP/IP Properties window will be displayed, with the IP Address tab open by default.Now you have two ways to configure the TCP/IP protocol below: Setting IP address automaticallySelect Obtain an IP address automatically, and then choose Obtain DNS server automatically, as shown in the Figure below:5.•Figure B-2
Nexxt Solutions - NetGate Wireless Access Point77Select Use the following IP address radio button. The following items will be available.If the Router’s LAN IP address is 192.168.0.1, type IP address 192.168. 0.x (whereby x is any value from 1 to 253), and Subnet mask is 255.255.255.0.Type the router’s LAN IP address (the default IP is 192.168.0.1) into the Default gateway field.Select Use the following DNS server addresses. In the Preferred DNS Server field you can enter the same value as the Default gateway or type the local DNS server IP address.1.2.3.4.•Note: For Windows 98 OS or before, the PC and router may need to be restarted. Setting IP address manuallyFigure B-3
Nexxt Solutions - NetGate Wireless Access Point785. Click OK when done to save your settings.Figure B-4
Nexxt Solutions - NetGate Wireless Access Point79Appendix C: Specications9dBi Derectional Outdoor AntennaGeneralWirelessPhysical and EnvironmentIEEE 802.3, 802.3u, 802.11b and 802.11g, TCP/IP, DHCPStandards and protocolsFrequency range12dBi Dual-Polarized Aluminum AntennaAntennaHorizontal: 60° Vertical: 30°BeamwidthOne 10/100M Auto-Negotiation LAN RJ45 port,supporting passive PoEPorts10BASE-T: UTP category 3, 4, 5 cable (maximum 100m) EIA/TIA-568 100 Ω STP (maximum 100m)100BASE-TX: UTP category 5, 5e cable (maximum 100m) EIA/TIA-568 100 Ω STP (maximum 100m)Cabling TypeIEEE 802.11b: DQPSK, DBPSK, DSSS, and CCKIEEE 802.11g: BPSK, QPSK, 16QAM, 64QAM, OFDMModulation type802.11g54M: -76dBm 48M: -78dBm 36M: -82dBm 12M: -91dBm 9M:-92dBm802.11b11M:-90dBm 5.5M:-92dBm 1M:-98dBmReceiver sensitivityOutdoor weatherproof ABSEnclosureGrounding TerminalLighting protectionOutput: 12VDC / 1A switching PSUPower supplyFCCCertifications54/48/36/24/18/12/9/6Mbps or 11/5.5/3/2/1MbpsWireless Data RatesDimensionsWorking TemperatureWorking HumidityStorage TemperatureStorage Humidity10.4 × 4.7 × 3.2 in. (265x120x83mm)-30 ºC~70 ºC10% ~ 90% RH, Non-condensing-40 ºC~70 ºC(-40ºF~158 ºF)5% ~ 90% RH, Non-condensing64/128/152-bit WEP, WPA/WPA2, WPA-PSK/WPA2-PSKWireless EncryptionsInterface One 10/100M Auto-Sensing RJ45 Port(Auto MDI/MDIX),supporting Passive PoE2.412-2.462GHz
Nexxt Solutions - NetGate Wireless Access Point80Appendix D: Glossary2x to 3x eXtended Range™ WLAN Transmission Technology - The WLAN device with 2x to 3x eXtended Range™ WLAN transmission technology is able to increase its sensitivity up to 105 dB, providing a robust, longer-range wireless connection in the coverage area. With this range-enhancing technology, a 2x to 3x eXtended Range™ based-client and access point can maintain up to three times the transmission distance of traditional 802.11b and 802.11g solutions. While the typical transmission distance of 802.11b and 802.11g devices is about 300m, a 2x to 3x eXtended Range™ based client and access point is able to maintain a much higher transmission range of nearly 830m.802.11b - The 802.11b standard specifies a wireless networking at 11 Mbps using direct-sequence spread-spectrum (DSSS) technology and operating in the unlicensed radio spectrum at 2.4GHz, and WEP encryption for security. 802.11b networks are also referred to as Wi-Fi networks.802.11g - specification for wireless networking at 54 Mbps using direct-sequence spread-spectrum (DSSS) technology, using OFDM modulation and operating in the unlicensed radio spectrum at 2.4GHz, and backward compatibility with IEEE 802.11b devices, and WEP encryption for security.DDNS (Dynamic Domain Name System) - The capability of assigning a fixed host and domain name to a dynamic Internet IP Address.DHCP (Dynamic Host Configuration Protocol) - A protocol that automatically configure the TCP/IP parameters for the all the PC(s) that are connected to a DHCP server.DMZ (Demilitarized Zone) - A Demilitarized Zone allows one local host to be exposed to the Internet for a special-purpose service such as Internet gaming or videoconferencing.DNS (Domain Name System) – An Internet Service that translates the names of websites intoIP addresses.Domain Name - A descriptive name for an address or group of addresses on the Internet.DoS (Denial of Service) - A hacker attack designed to prevent your computer or network from operating or communicating.DSL (Digital Subscriber Line) - A technology that allows data to be sent or received over existing traditional phone lines.ISP (Internet Service Provider) - A company that provides access to the Internet.MTU (Maximum Transmission Unit) - The size in bytes of the largest packet that can betransmitted.NAT (Network Address Translation) - NAT technology translates IP addresses of a local area network to a different IP address for the Internet.PPPoE (Point to Point Protocol over Ethernet) - PPPoE is a protocol for connecting remote hosts to the Internet over an always-on connection by simulating a dial-up connection.SSID - A Service Set Identification is a thirty-two character (maximum) alphanumeric key identifying a wireless local area network. For the wireless devices in a network to communicate with each other, all devices must be configured with the same SSID. This is typically the configuration parameter for a wireless PC card. It corresponds to the ESSID in the wireless Access Point and to the wireless network name.WEP (Wired Equivalent Privacy) - A data privacy mechanism based on a 64-bit or 128-bit or 152-bit shared key algorithm, as described in the IEEE 802.11 standard.Wi-Fi - is a trademark of the Wi-Fi Alliance, founded in 1999 as Wireless Internet Compatibility Alliance (WICA), comprising more than 300 companies, whose products are certified by the Wi-Fi Alliance, based on the IEEE 802.11 standards (also called Wireless LAN (WLAN) and Wi-Fi). This certification warrants interoperability between different wireless devices.WISP - Wireless Internet Service Providers (WISPs) are Internet service providers with networks built around wireless networking. The technology used ranges from commonplace Wi-Fi mesh networking or proprietary equipment designed to operate over open 900MHz, 2.4GHz, 4.9, 5.2, 5.4, and 5.8GHz bands or licensed frequencies in the UHF or MMDS bands.WLAN (Wireless Local Area Network) - A group of computers and associated devices communicate with each other wirelessly, which network serving users are limited in a local area.

Navigation menu