all | frequencies |
|
exhibits | applications |
---|---|---|---|---|
manual |
app s | submitted / available | |||||||
---|---|---|---|---|---|---|---|---|
1 |
|
User Manual rev | Users Manual | 1.67 MiB | June 05 2015 | |||
1 | Attestation Statements | June 05 2015 | ||||||
1 | Cover Letter(s) | June 05 2015 | ||||||
1 | Cover Letter(s) | June 05 2015 | ||||||
1 | Cover Letter(s) | June 05 2015 | ||||||
1 | Cover Letter(s) | June 05 2015 | ||||||
1 | External Photos | June 05 2015 | ||||||
1 | ID Label/Location Info | June 05 2015 | ||||||
1 | Internal Photos | June 05 2015 | ||||||
1 | Internal Photos | June 05 2015 | ||||||
1 | Internal Photos | June 05 2015 | ||||||
1 | RF Exposure Info | June 05 2015 | ||||||
1 | Test Report | June 05 2015 | ||||||
1 | Test Setup Photos | June 05 2015 |
1 | User Manual rev | Users Manual | 1.67 MiB | June 05 2015 |
Quick Start Guide Brand:IgniteNet TheAC866is5GHzOutdoor/IndoorAPaccesspoints(APs)thatarehousedina waterproofenclosureformountingoutdoors.Theunitsincludeabuiltin mountingbracketforattachingtoa1.5to6inchpoleandtheycanbepowered throughtheirEthernetcableconnectionfromapowerinjectormodulethatis installedindoors. SFAC866 5GHzOutdoor/IndoorAP TheOutdoorStandAloneAccessPointsincludethesemodels:
Note:ForSafetyandRegulatoryinformation,refertotheSafetyandRegulatory InformationdocumentincludedwiththeAP. www.ignitenet.com SectionI GettingStarted Thissectionprovidesanoverviewoftheaccesspoint,andintroducessomebasic conceptsaboutwirelessnetworking.Italsodescribesthebasicsettingsrequiredto accessthemanagementinterface. Thissectionincludesthesechapters:
Introductiononpage12 12 Introduction 1 Theaccesspoint(AP)runssoftwarethatincludesanetworkmanagementagent. Theagentoffersavarietyofmanagementoptions,includingSNMPandaweb basedinterface.TheAPcanalsobeaccessedviaTelnetorSSHforconfiguration usingacommandlineinterface(CLI). ConfigurationOptions TheaccesspointswebagentallowsyoutoconfigureAPparameters,monitor wirelessconnections,anddisplaystatisticsusingastandardwebbrowsersuchas InternetExplorer9.xorlater,MozillaFirefox5orlater,andGoogleChrome35or later.TheAPswebmanagementinterfacecanbeaccessedfromanycomputer attachedtothenetwork. TheCLIprogramcanbeaccessedremotelybyaTelnetorSecureShell(SSH) connectionoverthenetwork.TheCLIisusedprimarilyfortechnicalsupport. TheAPsmanagementagentalsosupportsSNMP(SimpleNetworkManagement Protocol).ThisSNMPagentpermitstheAPtobemanagedfromanycomputerin thenetworkusingnetworkmanagementsoftware. TheAPswebinterface,consoleinterface,andSNMPagentallowyoutoperform managementfunctionssuchas:
Setmanagementaccessusernamesandpasswords ConfigureIP settings ConfigureSNMPparameters Configure5GHzradiosettings Controlaccessthroughwirelesssecuritysettings FilterpacketsusingAccessControlLists(ACLs) Downloadsystemfirmware Downloadoruploadconfigurationfiles Displaysysteminformationandstatistics 13 Chapter 1 |Introduction Network Connections NetworkConnections PriortoaccessingtheAPsmanagementagentthroughanetworkconnection,you mustfirstconfigureitwithavalidIPaddress,subnetmask,anddefaultgateway usingthewebinterface,ortheDHCPprotocol. TheAPhasastaticdefaultmanagementaddressof192.168.2.1andasubnetmask of255.255.255.0.IftheAPsdefaultIPaddressisnotcompatiblewithyournetwork oraDHCPserverisnotavailable,theAPsIPaddressmustbeconfiguredmanually throughthewebinterface. FirstconnecttotheAPsEthernet1portandlogintothewebinterface,as describedinConnectingtotheWebInterfaceonpage13.Followthesteps describedinSetupWizardonpage15toselectyourcountryandspecifyoneof theconfigurationmethods.ThenconfiguretheAPwithanIPaddressthatis compatiblewithyournetworkasdescribedunderLANSettingsonpage33. OncetheAPsIPsettingsareconfiguredforyournetwork,youcanaccesstheAPs managementagentfromanywherewithintheattachednetwork.TheAPcanbe managedbyanycomputerusingawebbrowser,orfromanetworkcomputerusing SNMPnetworkmanagementsoftware. ConnectingtotheWebInterface TheAPoffersauserfriendlywebbasedmanagementinterfaceforthe configurationofalltheunitsfeatures.AnyPCdirectlyattachedtotheunitcan accessthemanagementinterfaceusingawebbrowser,suchasInternetExplorer 9.xorlater,MozillaFirefox5orlater,andGoogleChrome35orlater. Youmay want to make initial configuration changesby connecting a PC directly to theAPsLANport.TheAPhasadefaultmanagementIPaddressof192.168.2.1and asubnetmaskof255.255.255.0.YoumustsetyourPCIPaddresstobeonthesame subnetastheAP(thatis,thePCandAPaddressesmustbothstartwith192.168.2.x). ToaccesstheAPswebmanagementinterface,followthesesteps:
1. Useyourwebbrowsertoconnecttothemanagementinterfaceusingthe defaultIPaddressof192.168.2.1. 2. Logintotheinterfacebyenteringthedefaultusernamerootwiththe passwordadmin123,thenclickLogin. 14 Chapter1 |Introduction ConnectingtotheWebInterface Note:Itisstronglyrecommendedtochangethedefaultusernameandpassword thefirsttimeyouaccessthewebinterface.Forinformationonchanginguser namesandpasswords,seeUserAccountsonpage57. Figure1: LoginPage 15 Chapter 1 |Introduction SetupWizard SetupWizard TheSetupWizardisdesignedtohelpyouconfigurethebasicsettingsrequiredto gettheAPupandrunning. Step1 SelectYourCountrySelecttheaccesspointscountryofoperationfromthedrop downmenu.YoumustsettheAPscountrycodetobesurethattheradiosoperate accordingtopermittedlocalregulations.Thatis,settingthecountrycoderestricts operationoftheAPtotheradiochannelsandtransmitpowerlevelspermittedfor wirelessnetworksinthespecifiedcountry. Figure2:SelectYourCountry Caution:Youmustsetthecountrycodetothecountryofoperation.Settingthe countrycodeensuresthattheradiosoperatewithinthelocalregulationsspecified forwirelessnetworks. Note:ThecountrycodeselectionisfornonUSmodelsonlyandisnotavailableto allUSmodels.PerFCCregulation,allWiFiproductsmarketedintheUSmustbe fixedtoUSoperationchannelsonly. 16 Chapter1 |Introduction SetupWizard Step2 SelectSetupMethodSelectEasySetuptosetbasicwirelessnetworkaccessand guestnetworkaccessparameters,orAdvancedSetuptospecifynetworkingmodes foranAPbridge,AProuter,ormanualconfiguration. Figure3:SelectSetupMethod Step3ConfigureSettings EasySetupBasicwirelessnetworkandguestnetworkaccessparameters. Specifythenameandpasswordforthewirelessnetworkandguestnetwork. TheNetworkingModeissettoAPRouterasdescribedunderAdvancedSetup. Figure4:EasySetup WirelessNetworkSetupSetthenameandpasswordfortheprimary wirelessnetwork.Apasswordmustbespecifiedtoprotectthenetwork fromunauthorizedaccess. 17 Chapter 1 |Introduction SetupWizard GuestNetworkSetupSetthenameandpasswordfortheguestwireless network.ThiscreatesasecondSSIDforguestusers,limitingtheiraccess onlytotheInternet. AdvancedSetupNetworkingmodesforAPBridge,APRouter,ormanual configuration. Figure5:AdvancedSetup APBridgeModeConfiguresaninterfaceasattachedtotheWAN(thatis, theInternet).Inthefollowingfigure,EthernetPort0andEthernetPort1are bothattachedtotheWAN.Trafficfromtheseinterfacesisdirectlybridged intotheInternet.(ThisisalsocalledbridgetoInternet.) Figure6:BridgetoInternet APRouterModeConfiguresaninterfaceasamemberoftheLAN.Inthe followingfigure,EthernetPort1,WirelessLAN0(5GHzRadio),andWireless LAN1(2.4GHzRadio)areallincludedintheLAN.Trafficfromthese interfacesisroutedacrosstheaccesspointthroughEthernetPort0tothe Internet.(ThisisalsocalledroutetoInternet.) Note:SinglebandaccesspointsonlysupportoneWLAN. 18 Chapter1 |Introduction MainMenu Figure7:RoutetoInternet ManualModeAllowsallconfigurationparameterstobemanually configured.Anywiredmoduleorradiomodulemaybelogicallyplacedon theWANandLANsideoftheaccesspoint. MainMenu ThewebinterfaceMainMenuprovidesaccesstoalltheconfigurationsettings availablefortheAP. Toconfiguresettings,clicktherelevantMainMenuitem.EachMainMenuitemis summarizedbelowwithlinkstotherelevantsectioninthisguidewherethe configurationparametersaredescribedindetail:
DashboardThedashboardshowsbasicsettingsfortheAP,including Internetstatus,localnetworksettings,wirelessradiostatus,andtrafficgraphs. SeeStatusInformationonpage22. NetworkConfiguresInternet,Ethernet,LAN,andHotspotsettings.See NetworkSettingsonpage28. WirelessConfigures5GHzRadio,2.4GHzRadio,andVLANsettings.See WirelessSettingsonpage37 SystemConfiguresSystem(designationandlocation),Maintenance(suchas viewlog,firmwareupgrade,andreset),UserAccounts,andServices
(managementaccessmethods). 19 Chapter 1 |Introduction MainMenu Dashboard Afterloggingintothewebinterface,thedashboarddisplays.Thedashboardshows basicsettingsfortheAP,includingInternetstatus,localnetworksettings,wireless radiostatus,andtrafficgraphs. Figure8:TheDashboard CommonWebPage Buttons Thelistbelowdescribesthecommonbuttonsfoundonmostoftheweb management pages:
SaveAppliesthenewparametersandsavesthemtotemporaryRAM memory.Alsodisplaysamessageatthetopofthescreentoinformyouthatthe changeshavenotyetbeensavedtoFlashmemory.Therunningconfiguration willnotbesaveduponarebootunlessyouclicktheApplybutton. Figure9:SetConfigurationChanges ApplySavesthecurrentconfigurationsothatitisretainedafterarestart. RevertCancelsthenewlyenteredsettingsandrestorestheoriginals. Welcome>LogoutOpentheWelcomelistandclickLogouttoendtheweb management session. Welcome>ViewUsersOpentheWelcomelistandclickViewUserstoopen theUserAccountsmenu. 20 Chapter1 |Introduction MainMenu 20 SectionII Web Configuration Thissectionprovidesdetailsonconfiguringtheaccesspointusingtheweb browserinterface. Thissectionincludesthesechapters:
StatusInformationonpage22 NetworkSettingsonpage28 WirelessSettingsonpage37 SystemSettingsonpage52 21 Status Information 2 TheDashboarddisplaysinformationonthecurrentsystemconfiguration,including Internetstatus,localnetworksettings,wirelessradiostatus,andtrafficgraphs. StatusInformationincludesthefollowingsections:
SystemandProductInformationonpage22 InternetStatusonpage22 LocalNetworksonpage24 WirelessStatusonpage25 TrafficGraphsonpage27 SystemandProductInformation TheSystemandProductInfosectionshowsdescriptiveinformationabouttheAP. Figure10:SystemandProductInformation Thefollowingitemsaredisplayedinthissection:
Themodelnameoftheunit. Thesoftwareversionnumber. Theserialnumberofthephysicalaccesspoint. Lengthoftimethemanagementagenthasbeenup. Thelast1minute,5minuteand15minuteCPUloadaverage. InternetStatus TheInternetStatussectionshowsinformationabouttheInternetconnection. 22 Chapter2| StatusInformation InternetStatus Figure11:InternetStatus Thefollowingitemsaredisplayedinthissection:
InternetSourceTheEthernetportconnectedtotheInternet.Bydefault, thisisEthernetPort0. PortsbridgedtoInternetAdditionalinterfacesattacheddirectlytothe Internet.(SeeConfigureSettingsStep3onpage16foramoredetailed description.) IPAddressIPaddressoftheInternetconnection. GatewayIPaddressofthegatewayrouterusedtopasstrafficbetweenthis deviceandothernetworksegments. DNSTheIPaddressoftheDomainNameServeronthenetwork.ADNS mapsnumericalIPaddressestodomainnamesandcanbeusedtoidentify networkhostsbyfamiliarnamesinsteadoftheIPaddresses. HotspotStatusShowsifthehotspotisenabledordisabled,andtheports onwhichthisserviceisenabled. OptionsIncludesshowingtheARPcache,showingDHCPleases,or renewingDHCPleases. Figure12:Options 23 Chapter2|StatusInformation LocalNetworks Figure13:ARPTable Figure14: DHCPLeases TheLocalNetworkssectionshowsinformationaboutthelocalnetworkconnection. Figure15:LocalNetworks Thefollowingitemsaredisplayedinthissection:
NameShowsinformationonthenameofthelocalnetwork,whetherstatic ordynamicconfigurationisused,andthenetworkmask. DHCPServerShowsifDHCPserviceisenabledonthisnetwork. MembersShowstheportsandwirelessradiosattachedtothisnetwork. PortStatusShowsthestatusoftheEthernetports,includinglinkupstate, MACaddress,speed,andduplexmode. 24 LocalNetworks WirelessStatus Chapter2| StatusInformation WirelessStatus TheWirelessStatussectionshowsinformationabouttheradiosettingsand associatedclients. Figure16:WirelessStatus Thefollowingitemsaredisplayedinthissection:
Radio#Indicatesthe5GHzor2.4GHzwirelessinterface. RadioStatusShowsifthewirelessinterfaceisenabledordisabled. OpModeShowsiftheunitisconfiguredtooperateasanaccesspoint
(manuallyconfigured),anAPinbridgemode,oranAPinroutermode. ChannelTheradiochanneltheaccesspointusestocommunicatewith wirelessclients.Theavailablechannelsdependonthe802.11Mode1, ChannelBandwidth1,andCountryCodesettings2. IEEEModeThe802.11wirelessLANstandardssupportedbytheaccess point. 1. 2. SeeRadioSettingsonpage37. SeeSetupWizardonpage15. 25 Chapter2|StatusInformation WirelessStatus TxPowerThepoweroftheradiosignalstransmittedfromtheaccess point. TotalClientsThetotalnumberofclientsattachedtothisinterface. SSID#Servicesetidentifier.Clientsthatwanttoconnecttothewireless networkthroughanaccesspointmustsettheirSSIDstothesameasthatofthe accesspoint. NetworkNameAuniqueidentifierforthelocalwirelessnetwork. SecurityShowswhetherornotsecurityhasbeenenabled. AssociatedclientsShowsdetailedinformationaboutclients. NameClientname. MACAddressTheMACaddressofthewirelessclient. IPAddressTheIPaddressassignedtothewirelessclient. SignalSignalstrength(TX/RX)indBm. DurationThetimethewirelessclienthasbeenassociated. TxRateThedatatransmitratetothewirelessclient. RxRateThedatareceiveratefromthewirelessclient. TxBytesThenumberoftransmittedbytestothisclient. RxBytesThenumberofreceivedbytesfromthisclient TxPacketsThenumberoftransmittedpacketstothisclient. RxPacketsThenumberofreceivedpacketsfromthisclient. 26 Chapter2| StatusInformation TrafficGraphs TrafficGraphs TheTrafficGraphssectionshowsthedataratefortheEthernetportsandwireless interfaces. Figure17:TrafficGraphs 27 3 Network Settings Thischapterdescribesbasicnetworksettingsontheaccesspoint.Itincludesthe following sections:
InternetSettingsonpage28 EthernetSettingsonpage31 LANSettingsonpage33 HotspotSettingsonpage34 TheInternetSettingspageconfiguresthebasicInternetsettingsfortheAP,suchas thesourceport,IPaliases,aswellasthehostnameandmaximumMTUsize. Figure18: InternetSettings Thefollowingitemsaredisplayedonthispage:
InternetSourceTheEthernetportusedtoaccesstheInternet.
(Default:EthernetPort0;Options:EthernetPort01) IPAddressModeThemethodusedtoprovideanIPaddressfortheInternet accessport.(Default:DHCP;Options:DHCP,staticIP,PPPoE) DHCPConfigurationoptionsdisplayedforDHCPareshowninFigure18, InternetSettings",onpage28. 28 InternetSettings Chapter3 |NetworkSettings InternetSettings StaticIPToconfigureastaticIPaddressfortheselectedEthernet interface,thefollowingitemsmustbespecified. Figure19:IPAddressModeStaticIP IPAddressSpecifiesanIPaddressfortheaccesspoint.ValidIP addressesconsistoffourdecimalnumbers,0to255,separatedby periods.(Default:192.168.1) SubnetMaskIndicatesthelocalsubnetmask.
(Default:255.255.255.0) DefaultGatewayTheIPaddressofthedefaultgateway,whichis usediftherequesteddestinationaddressisnotonthelocalsubnet. Ifyouhavemanagementstations,DNS,RADIUS,orothernetwork serverslocatedonanothersubnet,typetheIPaddressofthedefault gatewayrouterinthetextfieldprovided. AddlDNSServerTheIPaddressofDomainNameServersonthe network.ADNSmapsnumericalIPaddressestodomainnamesand canbeusedtoidentifynetworkhostsbyfamiliarnamesinsteadofthe IPaddresses. IfyouhaveaDNSserverslocatedonthelocalnetwork,typetheIP addressinthetextfieldsprovided. 29 Chapter3 |NetworkSettings InternetSettings PPPoEToobtainanIPaddressfortheselectedEthernetinterfaceusing PPPoE,thefollowingitemsmustbespecified. Figure20:IPAddressModePPPoE UserNameTheusernamespecifiedbytheserviceprovider.
(Range:132characters) PasswordThepasswordspecifiedbytheserviceprovider.
(Range:132characters) ServiceNameTheservicenameassignedforthePPPoEconnection. Theservicenameisnormallyoptional,butmayberequiredbysome serviceproviders.(Range:132alphanumericcharacters) IPAliasesAddsastaticIPv4addressunderwhichtheaccesspointcanalso bereached. Figure21: IPAlias MTUSizeSetsthesizeofthemaximumtransmissionunit(MTU)forpackets sentonthisinterface.(Range:14001500bytes;Default1500bytes) 30 EthernetSettings Chapter3 |NetworkSettings Ethernet Settings TheEthernetSettingspageconfiguresthenetworkbehavioroftheEthernetports, indicatingthataportprovidesanInternetconnectionforwirelessclientsattached tothelocalnetwork(routedtotheInternet),isbridgeddirectlytotheInternet, connectedtotheguestnetwork,orprovideshotspotservice. ThefollowingitemsarecommonforallpagesunderEthernetSettings:
StatusEnablesordisablesthisport.(Default:ON) Autonegotiation Enables or disables autonegotiation for a given interface.(Default:ON) 1000BASETdoesnotsupportforcedmode.Autonegotiationshouldalwaysbe usedtoestablishaconnectionoverany1000BASETport. Whenautonegotiationisenabled,theaccesspointwillnegotiatethebest settingsforalinkbasedonadvertisedcapabilities. Figure22:EthernetSettingsInternetSource Thefollowingstatusmessageisdisplayedifaninterfaceisconnectedtothe Internet:
Thisportistheinternetsourceforthisproduct.ConfigureInternetSettings IfmorethanoneinterfaceisconnectedtotheInternet,onlythelastconfigured interfaceisused. 31 Chapter3 |NetworkSettings Ethernet Settings Figure23:EthernetSettingsNetworkBehavior Thefollowingitemsaredisplayedonthispage:
NetworkBehaviorFortheEthernetportwhichisnotprovidingInternet access,oneofthefollowingconnectionmethodsmustbespecified.
(Default:RoutetoInternet) BridgetoInternetConfiguresaninterfacetobeattachedtotheWAN. TrafficfromthisinterfaceisdirectlybridgedintotheInternet.(SeeFigure6, BridgetoInternet",onpage17.)IfanEthernetportisbridgedtothe Internet,managementaccesscannotbemadebyadirectconnectionto thisport.However,ifanotherEthernetportorradiointerfaceiswithinthe LAN(routedtotheInternet)theaccesspointcanbemanagedthroughthis interfacebyaPCwhichisconfiguredwithIPaddressinthesamesubnet. RoutetoInternetConfiguresaninterfacetobeamemberoftheLAN. Trafficfromthisinterfaceisroutedacrosstheaccesspointandoutthrough aninterfacewhichisbridgedtotheInternet.(SeeFigure7,Routeto Internet",onpage18.)Bydefault,EthernetPort1isroutedtoInternet, allowingmanagementaccessviaadirectconnectiontoaPCconfigured withanaddressinthesamesubnet. NetworkNameThenetworktoberouted.ThedefaultisDefault localnetworkasdisplayedunderLANSettingsLocalNetworks. AddtoGuestNetworkThisportcanonlyaccesstheguestnetwork. HotspotControlledThisportcanonlyaccesshotspotservices. ConfigureHotspotOpenstheHotspotSettingspage. 32 LANSettings Chapter3 |NetworkSettings LANSettings TheLANSettingspageconfigurestheLANsettingsforthelocalnetworkandguest network,includingIPinterfacesetting,DHCPserversettings,STPadministrative status,andUPnPadministrativestatus. Figure24:NetworkLANSettings Thefollowingitemsaredisplayedonthispage:
MembersTheinterfacesattachedtothelocalareanetwork. IPAddressSpecifiestheIPaddressforthelocalnetworkorguestnetwork. ValidIPaddressesconsistoffourdecimalnumbers,0to255,separatedby periods.(Default:192.168.2.1) SubnetMaskIndicatesthelocalsubnetmask.(Default:255.255.255.0) MTUSizeSetsthesizeofthemaximumtransmissionunit(MTU)forpackets sentonthisnetwork. DHCPServerEnables/disablesDHCPonthisnetwork.(Default:Enabled) DHCPStartFirstaddressintheaddresspool.(Range:1256;
Default:x.x.x.100) DHCPMaxMaximumnumberofaddressesintheaddresspool.
(Range:1255;Default:150) 33 Chapter3 |NetworkSettings HotspotSettings HotspotSettings STPEnablesordisablesprocessingofSpanningTreeProtocolmessages.
(Default:Disabled) UPnPEnablesordisablesUniversalPlugandPlaybroadcastmessages.
(Default:Disabled) TheHotspotSettingspagecanconfigureInternetaccesstothegeneralpublicin placessuchascoffeehouses,librariesandhospitals.Specificaccessrightsmayalso bedefinedthroughaRADIUSserver. Figure25:HotspotSettings(NetworkSettings) Thefollowingitemsaredisplayedonthispage:
NetworkIPSpecifiestheIPaddressforthehotspot.ValidIPaddresses consistoffourdecimalnumbers,0to255,separatedbyperiods.(Default:
192.168.182.1) NetworkMaskNetworkmaskfortheassociatedIPsubnet.Thismask identifiesthehostaddressbitsusedforroutingtospecificsubnets. DHCPStartStartingnumberof(lastnumericfield)inaddresspool.
(Range:1254;Default:10) DHCPEndEndingnumberof(lastnumericfield)inaddresspool.
(Range:1254;Default:254) DHCPLeaseTimeThedurationthatanIPaddressisassignedtoaDHCP client.(Range:60043200seconds;Default:600seconds) 34 Chapter3 |NetworkSettings HotspotSettings DNS1TheIPaddressoftheprimaryDomainNameServeronthenetwork.A DNSmapsnumericalIPaddressestodomainnamesandcanbeusedtoidentify networkhostsbyfamiliarnamesinsteadoftheIPaddresses. DNS2ThesecondaryDNSserveravailabletoDHCPclients. DNSDomainNameThedomainnameusedtoresolveincompletehost namesviatheDomainNameSystem.(Range:132characters) Figure26:HotspotSettings(RADIUSSettings) Thefollowingitemsaredisplayedonthispage:
RadiusServer1IPaddressorhostnameoftheprimaryRADIUSserver. RadiusServer2IPaddressorhostnameofthesecondaryRADIUSserver. RadiusSharedSecretAsharedtextstringusedtoencryptmessages betweentheaccesspointandtheRADIUSserver.Besurethatthesametext stringisspecifiedontheRADIUSserver.Donotuseblankspacesinthestring.
(Range:1255characters). RadiusAuthPortRADIUSserverUDPportusedforauthentication messages.(Range:165535,Default:1812) RadiusAcctPortRADIUSserverUDPportusedforaccountingmessages.
(Range:165535,Default:1813) LocalIDLocalRADIUSserveridentifier. LocalNameLocalRADIUSservername OperationIDLocalRADIUSserveroperationidentifier. 35 Chapter3 |NetworkSettings HotspotSettings Figure27:HotspotSettings(CaptivePortalSettings) Thefollowingitemsaredisplayedonthispage:
CaptivePortalURLHostnameofInternetserviceportalforthehotspot. Thecaptiveportalforcesahotspotclienttoaccessawelcomewebpage (normally usedforauthentication)beforegainingfurtheraccesstotheInternet. The welcomepagemayrequireauthenticationand/orpayment. CaptivePortalSecretThepasswordusedforloggingintothehotspot. WalledGardenAlistofwebsitestowhichunauthenticatedusersare allowedtonavigate. AuthWhiteListAlistofMACaddressesthatareallowedtobypassthe captiveportaltoaccesstheinternet. 36 Wireless Settings 4 Thischapterdescribeswirelesssettingsontheaccesspoint.Itincludesthe following sections:
RadioSettingsonpage37 VLANSettingsonpage50 RadioSettings TheIEEE802.11wirelessinterfacesincludeconfigurationoptionsforradiosignal characteristicsandwirelesssecurityfeatures. Theaccesspointcanoperateinseveralradiomodes,802.11a/a+n/AC(5GHz)or 802.11b+g/b+g+n(2.4GHz).Supportedmodesdependontheaccesspointmodel. Notethatthedualbandaccesspointscanoperateat2.4GHzand5GHzatthe sametime.Thewebinterfaceidentifiestheradioconfigurationpagesas:
Radio0the5GHz802.11a/n/ACradiointerface Radio1the2.4GHz802.11b/g/nradiointerface Eachradiosupports8virtualaccesspoint(VAP)interfacesbasedontheSSIDs, referredtoasVAP0~VAP7.EachVAPfunctionsasaseparateaccesspoint,andcan beconfiguredwithitsownServiceSetIdentification(SSID)andsecuritysettings. However,mostradiosignalparametersapplytoallVAPinterfaces.Traffictospecific VAPscanbesegregatedbasedonusergroupsorapplicationtraffic.Theclients associatewitheachVAPinthesamewayastheywouldwithseparatephysical accesspoints.TheAPsupportsuptoatotalof127wirelessclientsacrossallVAP interfacesperradio. 37 Chapter4 |WirelessSettings RadioSettings Figure28:RadioSettings(PhysicalRadioSettings) Thefollowingitemsaredisplayedonthispage:
StatusEnablesordisablesthewirelessserviceonthisinterface. ModeSelectsthemodeinwhichtheAPwillfunction. AccessPoint(AutoWDS)TheVAPoperatesasanaccesspointinWDS mode,whichacceptsconnectionsfromAPsinClientWDSmode.(Thisis thedefaultsetting.) Inthismode,theAPprovidesservicestoclientsasanormalaccesspoint. WDSisusedtoautomaticallysearchforandconnecttootherAPnodes usingthesameSSIDandsecuritysettings. ClientTheAPcanprovideawirelessconnectiontoanotherAP.Inthis mode,itcanpassinformationfromortolocallywiredhosts,butdoesnot provideservicestoanywirelessclients. ClientWDSTheAPprovidesservicestoclientsasanormalaccesspoint, andoperatesasaclientstationinWDSmode,whichcanconnecttoother accesspointsinAutoWDSmode.ConnectiontoanotherAPcanbemade automaticallybyotheraccesspointsoperatinginAutoWDSmode. DFSDynamicFrequencySelectioncanbeusedtodetectandavoid interferencewithRadarsystemsoperatinginthe5GHzrange(UNIIchannels 5264and100140).Ifradarisdetected,theAPwillalterthechannelitis operatingonandtellassociatedstationsthechanneltowhichitismoving.This allowsstationstoreassociatewithminimuminterruption.(Thisparameteris onlyapplicabletothe5GHzradio,andisenabledbydefault.) 802.11ModeDefinestheradiooperationmode. Radio0(5GHzRadio)Default:11a+n;Options:11a,11a+n,11AC Radio1(2.4GHzRadio)Default:11b+g;Options:11b+g,11b+g+n 38 Chapter4 |WirelessSettings RadioSettings ChannelBandwidthTheAPoptionsforchannelbandwidthinclude5,10, 20,40and80MHz.Using20MHzgivesan802.11gconnectionaspeedof 54Mbpsandan802.11nconnectionaspeedofupto108Mbps,andensures backwardcomplianceforslower802.11bdevices.Settingthechannel bandwidth to40MHzprovidesaconnectionspeedfor802.11nofupto300Mbps.Usinga channelbandwidthof80MHzprovidesaconnectionspeedupto 866.7Mbps.(Default:20MHz;Range:5MHz,10MHz,20MHz,40MHz,80MHz) ChannelTheradiochannelthattheaccesspointusestocommunicatewith wirelessclients.Whenmultipleaccesspointsaredeployedinthesamearea,set thechannelonneighboringaccesspointsatleastfivechannelsaparttoavoid interferencewitheachother.Forexample,for11g/n20MHzmodeyoucan deployuptothreeaccesspointsinthesameareausingchannels1,6,11.Note thatwirelessclientsautomaticallysetthechanneltothesameasthatusedby theaccesspointtowhichitislinked.(Theavailablechannelsaredependenton the802.11Mode,ChannelBandwidth,andCountryCodesettings.) SelectingAutoenablestheaccesspointtoautomaticallyselectanunoccupied radiochannel.(Default:Auto) Table1:RadioChannels Radio 0 (5 GHz) Radio 1 (2.4GHz) RadioChannelsa Frequency(GHz) RadioChannels Frequency(GHz) Auto Autoscan Auto Autoscan 36 40 44 48 149 153 157 161 165 5.180 5.200 5.220 5.240 5.745 5.765 5.785 5.805 5.825 1 2 3 4 5 6 7 8 9 10 11 2.412 2.417 2.422 2.427 2.432 2.437 2.422 2.447 2.452 2.457 2.462 a.Supportedchannelsdependonthe802.11modeandchannelbandwidth. 39 Chapter4 |WirelessSettings RadioSettings Figure29:RadioSettings(WirelessNetworkConfiguration) Thefollowingitemsaredisplayedonthispage:
General Settings StatusEnablesordisablesthewirelessserviceonthisVAP. SSIDThenameofthebasicservicesetprovidedbyaVirtualAccessPoint
(VAP)interface.Clientsthatwanttoconnecttothenetworkthroughtheaccess pointmustsettheirSSIDtothesameasthatoftheaccesspointsVAPinterface.
(Default:ACN0.#(where#is07)for5GHz,ACN1.#(where#is07)for2.4GHz;
Range:132characters) BroadcastTheSSIDcanbebroadcastatregularintervalssothatwireless stationssearchingforanetworkconnectioncandiscoverit.Thisallowswireless clientstodynamicallydiscoverandroambetweenWLANs.Thisfeaturealso makesiteasierforhackerstobreakintoyourhomenetwork.BecauseSSIDsare notencrypted,itiseasytograbonebysnoopingtheWLANlookingforSSID broadcastmessagescomingfromtheAP.(Default:Enabled) ClientIsolationIfenabled,wirelessclientscantalktotheLAN,andreach theInternetifsuchconnectionisavailable,buttheycannotcommunicatewith oneanother.(DefaultDisabled) 40 Chapter4 |WirelessSettings RadioSettings WMMSetstheWMMoperationalmodeontheaccesspoint.Whenenabled, theparametersforeachAccessCategory(AC)queuewillbeemployedonthe accesspointandQoScapabilitiesadvertisedtoWMMenabledclients. (Default:
Enabled) Whenenabled,WMMmustbesupportedonanydevicetryingtoassociated with theaccesspoint.Devicesthatdonotsupportthisfeaturewillnotbe allowedto associatewiththeaccesspoint. Wirelessnetworksofferanequalopportunityforalldevicestotransmitdata fromanytypeofapplication.Althoughthisisacceptableformostapplications, multimediaapplications(withaudioandvideodata)areparticularlysensitive tothedelayandthroughputvariationsthatresultfromthisequalopportunity wirelessaccessmethod.Formultimediaapplicationstorunwelloverawireless network,aQualityofService(QoS)mechanismisrequiredtoprioritizetraffic typesandprovideanenhancedopportunitywirelessaccessmethod. TheaccesspointimplementsQoSusingtheWiFiMultimedia(WMM)standard. UsingWMM,theaccesspointisabletoprioritizetrafficandoptimize performancewhenmultipleapplicationscompeteforwirelessnetwork bandwidthatthesametime.WMMemploystechniquesthatareasubsetofthe IEEE802.11eQoSstandardanditenablestheaccesspointtointeroperatewith bothWMMenabledclientsandotherdevicesthatmaylackanyWMM functionality. AccessCategoriesWMMdefinesfouraccesscategories(ACs):voice,video, besteffort,andbackground.Thesecategoriescorrespondtotrafficpriority levelsandaremappedtoIEEE802.1Dprioritytags(seeFigure2,WMMAccess Categories",onpage41).ThedirectmappingofthefourACsto802.1D prioritiesisspecificallyintendedtofacilitateinteroperabilitywithotherwired networkQoSpolicies.WhilethefourACsarespecifiedforspecifictypesof traffic,WMMallowstheprioritylevelstobeconfiguredtomatchanynetwork wideQoSpolicy.WMMalsospecifiesaprotocolthataccesspointscanuseto communicatetheconfiguredtrafficprioritylevelstoQoSenabledwireless clients. Table2:WMMAccessCategories Access Category WMM Designation Description 802.1D Tags AC_VO (AC3) Voice AC_VI(AC2) Video AC_BE(AC0) BestEffort Highestpriority,minimumdelay.Timesensitive datasuchasVoIP(VoiceoverIP)calls. Highpriority,minimumdelay.Timesensitivedata suchasstreamingvideo. Normalpriority,mediumdelayandthroughput. Dataonlyaffectedbylongdelays.Datafrom applicationsordevicesthatlackQoScapabilities. 7,6 5,4 0,3 AC_BK(AC1) Background Lowestpriority.Datawithnodelayorthroughput requirements,suchasbulkdatatransfers. 2,1 41 Chapter4 |WirelessSettings RadioSettings WMMOperationWMMusestrafficprioritybasedonthefourACs;Voice,Video, BestEffort,andBackground.ThehighertheACpriority,thehigherthe probability thatdataistransmitted. Whentheaccesspointforwardstraffic,WMMaddsdatapacketstofour independenttransmitqueues,oneforeachAC,dependingonthe802.1D priority tagofthepacket.Datapacketswithoutaprioritytagarealwaysadded totheBest EffortACqueue.Fromthefourqueues,aninternalvirtualcollision resolution mechanismfirstselectsdatawiththehighestprioritytobegranteda transmit opportunity.Thenthesamecollisionresolutionmechanismisused externallyto determinewhichdevicehasaccesstothewirelessmedium. ForeachACqueue,thecollisionresolutionmechanismisdependentontwo timingparameters:
AIFSN(ArbitrationInterFrameSpaceNumber),anumberusedto calculate theminimumtimebetweendataframes CW(ContentionWindow),anumberusedtocalculatearandombackofftime Afteracollisiondetection,abackoffwaittimeiscalculated.Thetotalwaittime is thesumofaminimumwaittime(ArbitrationInterFrameSpace,orAIFS) determinedfromtheAIFSN,andarandombackofftimecalculatedfromavalue selectedfromzerototheCW.TheCWvaluevarieswithinaconfigurablerange. It startsatCWMinanddoublesaftereverycollisionuptoamaximumvalue, CWMax. Afterasuccessfultransmission,theCWvalueisresettoitsCWMin value. Figure30: WMMBackoffWaitTimes High Priority Low Priority CWMin CWMax AIFS Random Backoff Minimum Wait Time Random Wait Time CWMin AIFS Minimum Wait Time Random Backoff Random Wait Time Time CWMax Forhighprioritytraffic,theAIFSNandCWvaluesaresmaller.Thesmallervalues equatetolessbackoffandwaittime,andthereforemoretransmit opportunities. 42 Chapter4 |WirelessSettings RadioSettings Security Settings MethodSetsthewirelesssecuritymethodforeachVAP,including associationmode,encryption,andauthentication.(Default:NoSecurity) NoSecurityTheVAPbroadcastsabeaconsignalincludingthe configuredSSID.WirelessclientswithanSSIDsettingofanycanreadthe SSIDfromthebeaconandautomaticallysettheirSSIDtoallowimmediate connection. WEPOpenSystemTheVAPbroadcastsabeaconsignalincludingthe configuredSSID.WirelessclientswithanSSIDsettingofanycanreadthe SSIDfromthebeaconandautomaticallysettheirSSIDtoallowimmediate connection. KeyWEPisusedtoencryptdatatransmittedbetweenwireless clientsandtheVAP.WEPusesstaticsharedkeys(fixedlength hexadecimaloralphanumericstrings)thataremanuallydistributedto allclientsthatwanttousethenetwork. WEPisthesecurityprotocolinitiallyspecifiedintheIEEE802.11 standardforwirelesscommunications.Unfortunately,WEPhasbeen foundtobeseriouslyflawedandcannotberecommendedforahigh levelofnetworksecurity.Formorerobustwirelesssecurity,theaccess pointprovidesWiFiProtectedAccess(WPA)andWPA2forimproved dataencryptionanduserauthentication. BesurethattheWEPsharedkeysarethesameforeachclientinthe wirelessnetwork.Allclientssharethesamekeys,whichareusedfor dataencryption. For64bitWEP,stringlengthmustbe5ASCIIcharacters(lettersand numbers)or10hexadecimaldigits.For128bitWEP,stringlengthmust be13ASCIIcharacters(lettersandnumbers)or26hexadecimaldigits. WPAPSKForenterprisedeployment,WPArequiresaRADIUS authenticationservertobeconfiguredonthewirednetwork.However,for smallofficenetworksthatmaynothavetheresourcestoconfigureand maintainaRADIUSserver,WPAprovidesasimpleoperatingmodethatuses justapresharedpasswordfornetworkaccess.ThePreSharedKeymode usesacommonpasswordforuserauthenticationthatismanuallyentered ontheaccesspointandallwirelessclients.ThePSKmodeusesthesame TKIPpacketencryptionandkeymanagementasWPAintheenterprise, providingarobustandmanageablealternativeforsmallnetworks. EncryptionDataencryptionusesoneofthefollowingmethods:
CCMP(AES)AESCCMPisusedasthemulticastencryption cipher.AESCCMPisthestandardencryptioncipherrequiredfor WPA2.(Thisisthedefaultsetting.) TKIPTKIPisusedasthemulticastencryptioncipher. 43 Chapter4 |WirelessSettings RadioSettings Auto:TKIP+CCMP(AES)Theencryptionmethodusedbythe clientisdiscoveredbytheaccesspoint. KeyWPAisusedtoencryptdatatransmittedbetweenwireless clientsandtheVAP.WPAusesstaticsharedkeys(fixedlength hexadecimaloralphanumericstrings)thataremanuallydistributedto allclientsthatwanttousethenetwork. Stringlengthmustbe8to63ASCIIcharacters(lettersandnumbers). Nospecialcharactersareallowed. WPA2PSK:ClientsusingWPA2withaPresharedKeyareacceptedfor authentication. WPAwasintroducedasaninterimsolutionforthevulnerabilityofWEP pendingtheratificationoftheIEEE802.11iwirelesssecuritystandard.In effect,theWPAsecurityfeaturesareasubsetofthe802.11istandard.WPA2 includesthenowratified802.11istandard,butalsooffersbackward compatibilitywithWPA.Therefore,WPA2includesthesame802.1XandPSK modesofoperationandsupportforTKIPencryption. RefertoWPAPSKforadescriptionofencryptionmethodsandthekey. WPAEAPWPAemploysacombinationofseveraltechnologiesto provideanenhancedsecuritysolutionfor802.11wirelessnetworks.A RADIUSserverisusedforauthentication,andcanalsobeusedfor accounting. RefertoWPAPSKforadescriptionofencryptionmethods. RADIUSSettings ARADIUSservermustbespecifiedfortheaccesspointtoimplementIEEE 802.1XnetworkaccesscontrolandWiFiProtectedAccess(WPA)wireless security. Inaddition,youcanconfigureaRADIUSAccountingservertoreceiveuser sessionaccountinginformationfromtheaccesspoint.RADIUSAccounting canbeusedtoprovidevaluableinformationonuseractivityinthe network. ThisguideassumesthatyouhavealreadyconfiguredRADIUSserver(s)tosupport theaccesspoint.ConfigurationofRADIUSserversoftwareisbeyondthescopeof thisguide,refertothedocumentationprovidedwiththeRADIUSserversoftware. RadiusAuthServerSpecifiestheIPaddressorhostnameofthe RADIUSauthenticationserver. RadiusAuthPortTheUDPportnumberusedbytheRADIUSserver forauthenticationmessages.(Range:102465535;Default:1812) 44 Chapter4 |WirelessSettings RadioSettings RadiusAuthSecretAsharedtextstringusedtoencryptmessages betweentheaccesspointandtheRADIUSserver.Besurethatthesame textstringisspecifiedontheRADIUSauthenticationserver.Donotuse blankspacesinthestring.(Maximumlength:255characters) RadiusAcctServerSpecifiestheIPaddressorhostnameofthe RADIUSaccountingserver. RadiusAcctPortTheUDPportnumberusedbytheRADIUSserver foraccountingmessages.(Range:102465535;Default:1813) RadiusAcctSecretAsharedtextstringusedtoencryptmessages betweentheaccesspointandtheRADIUSserver.Besurethatthesame textstringisspecifiedontheRADIUSaccountingserver.Donotuse blankspacesinthestring.(Maximumlength:255characters) WPA2EAPWPAwasintroducedasaninterimsolutionforthe vulnerabilityofWEPpendingtheratificationoftheIEEE802.11iwireless securitystandard.Ineffect,theWPAsecurityfeaturesareasubsetofthe 802.11istandard.WPA2includesthenowratified802.11istandard,butalso offersbackwardcompatibilitywithWPA.Therefore,WPA2includesthe same802.1XandPSKmodesofoperationandsupportforTKIPencryption. ARADIUSserverisusedforauthentication,andcanalsobeusedto accounting. RefertoWPAPSKforadescriptionofencryptionmethods. RefertoWPAEAPforainformationonconfiguringtheRADIUSserver. AccessControlListWirelessclientscanbeauthenticatedfornetworkaccess bycheckingtheirMACaddressagainstthelocaldatabaseconfiguredonthe accesspoint.(Default:OFF) PolicyTheMAClistcanbeconfiguredtoeitherallowordenynetwork accesstospecifiedclients.(Default:AllowallMACsonlist) FilteredMACsEnteraphysicaladdressforeachclient.Entersixpairsof hexadecimaldigitsseparatedbycolons,andfollowedbyanoptional comment;forexample,00:90:D1:12:AB:89JohnSmithsPC Network Settings NetworkBehaviorOneofthefollowingconnectionmethodsmustbe specified.(Default:RoutetoInternet) BridgetoInternetConfiguresaninterfaceasattachedtotheWAN. TrafficfromthisinterfaceisdirectlybridgedintotheInternet.(SeeFigure6, BridgetoInternet",onpage17.) 45 Chapter4 |WirelessSettings RadioSettings RoutetoInternetConfiguresaninterfaceasamemberoftheLAN. Trafficfromthisinterfaceisroutedacrosstheaccesspointandoutthrough aninterfacewhichisbridgedtotheInternet.(SeeFigure7,Routeto Internet",onpage18.) NetworkNameThenetworktoberouted.ThedefaultisDefault localnetworkasdisplayedunderLANSettingsLocalNetwork. AddtoGuestNetworkThisinterfacecanonlysupporttheguest network. HotspotControlledThisinterfacecanonlysupporthotspotservices. ConfigureHotspotOpensHotspotSettingspage. VLANTagTrafficTagsanypacketspassingfromthisVAP(virtualaccess point)totheassociatedEthernetportasconfiguredunderVLANSettings onpage50.(Range:34095) LimitUploadEnablesratelimitingoftrafficfromtheVAPinterfaceasitis passedtothewirednetwork.YoucansetamaximumrateinKbytespersecond.
(Range:25610048576Kbytespersecond;Default:OFF) LimitDownloadEnablesratelimitingoftrafficfromthewirednetworkasit ispassedtotheVAPinterface.Youcansetamaximumrateinkbytesper second.(Range:25610048576Kbytespersecond;Default:OFF) AdvancedSettings 802.11RatesTheminimumdatarateatwhichtheAPtransmitspacketson thewirelessinterface. Table3:802.11DataRates Option Rate(Max) CodingMethod Radio0(5GHz) Radio1(2.4GHz) Auto 1M 2M 5.5M 11M 6M 9M 12M 18M 24M 36M Auto 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps Basedonsignalstrength CKK CKK CKK CKK OFDM OFDM OFDM OFDM OFDM OFDM 46 Chapter4 |WirelessSettings RadioSettings Table3:802.11DataRates(Continued) Option Rate(Max) CodingMethod Radio0(5GHz) Radio1(2.4GHz) 48M 54M MCS0 MCS1 MCS2 MCS3 MCS4 MCS5 MCS6 MCS7 MCS8 MCS9 MCS10 MCS11 MCS12 MCS13 MCS14 MCS15 48Mbps 54Mbps OFDM OFDM 15Mbps BPSK,singlestream 30Mbps QPSK,singlestream 45Mbps QPSK,singlestream 60Mbps 16QAM,singlestream 90Mbps 16QAM,singlestream 120Mbps 64QAM,singlestream 135Mbps 64QAM,singlestream 150Mbps 64QAM,singlestream 30Mbps BPSK,doublestream 60Mbps QPSK,doublestream 90Mbps QPSK,doublestream 120Mbps 16QAM,doublestream 180Mbps 16QAM,doublestream 240Mbps 64QAM,doublestream 270Mbps 64QAM,doublestream 300Mbps 64QAM,doublestream NSS1MCS0 32.5Mbps 256QAM,singlestream NSS1MCS1 65Mbps 256QAM,singlestream NSS1MCS2 97.5Mbps 256QAM,singlestream NSS1MCS3 130Mbps 256QAM,singlestream NSS1MCS4 195Mbps 256QAM,singlestream NSS1MCS5 260Mbps 256QAM,singlestream NSS1MCS6 292.5Mbps 256QAM,singlestream NSS1MCS7 325Mbps 256QAM,singlestream NSS1MCS8 390Mbps 256QAM,singlestream NSS1MCS9 433.3Mbps 256QAM,singlestream NSS2MCS0 65Mbps 256QAM,doublestream NSS2MCS1 130Mbps 256QAM,doublestream NSS2MCS2 195Mbps 256QAM,doublestream NSS2MCS3 260Mbps 256QAM,doublestream NSS2MCS4 390Mbps 256QAM,doublestream 47 Chapter4 |WirelessSettings RadioSettings Table3:802.11DataRates(Continued) Option Rate(Max) CodingMethod Radio0(5GHz) Radio1(2.4GHz) NSS2MCS5 520Mbps 256QAM,doublestream NSS2MCS6 585Mbps 256QAM,doublestream NSS2MCS7 650Mbps 256QAM,doublestream NSS2MCS8 780Mbps 256QAM,doublestream NSS2MCS9 866.7Mbps 256QAM,doublestream TxStreamsSpecifiesasinglestreamat20MHzoradualstreamat20MHz and40MHzforsignaltransmission.(Options:1,2;Default1) RxStreamsSpecifiesasinglestreamat20MHzoradualstreamat20MHz and40MHzforsignalreception.(Options:1,2;Default1) TxPowerAdjuststhepoweroftheradiosignalstransmittedfromtheaccess point.Thehigherthetransmissionpower,thefartherthetransmissionrange. Powerselectionisnotjustatradeoffbetweencoverageareaandmaximum supportedclients.Youalsohavetoensurethathighpowersignalsdonot interferewiththeoperationofotherradiodevicesintheservicearea.
(Default:17dBmfor5GHzradio,27dBmfor2.4GHzradio) Table4:TxPower Power Radio0(5GHz) Radio1(2.4GHz) 0dBM(1mW) 4dBM(2mW) 5dBM(3mW) 7dBM(5mW) 8dBM(6mW) 9dBM(7mW) 10dBM(10mW) 11dBM(12mW) 12dBM(15mW) 13dBM(19mW) 14dBM(25mW) 15dBM(31mW) 16dBM(39mW) 17dBM(50mW) 18dBM(63mW) 19dBM(79mW) 48 Chapter4 |WirelessSettings RadioSettings Table4:TxPower(Continued) Power Radio0(5GHz) Radio1(2.4GHz) 20dBM(100mW) 21dBM(125mW) 22dBM(158mW) 23dBM(199mW) 24dBM(251mW) 25dBM(316mW) 26dBM(398mW) 27dBM(501mW) ACKTimeoutSetstheacknowledgementtimeout,whichisusedprimarily forlongdistanceconnections.Thistimeoutisusedtomakeanadjustmentfor linkdistance.Itisbasedontheamountoftime,inmicroseconds,thatitshould taketotransmitaframetotheotherendofthelink,beprocessedbythe receivingdevice,andhavetheACKframecreatedandreturnedtothesending device.(Range:0255microseconds;Default:0microseconds) FragmentationThresh.Setsthemaximumframesizeabovewhichpackets arefragmented.Thisreducesthetimerequiredtotransmittheframe,and thereforereducestheprobabilitythatitwillbecorrupted(atthecostofmore dataoverhead).(Range:2562346bytes;Default:2346bytes) RTSThresholdSetsthepacketsizethresholdatwhichaRequesttoSend
(RTS)signalmustbesenttoareceivingstationpriortothesendingstation startingcommunications.TheaccesspointsendsRTSframestoareceiving stationtonegotiatethesendingofadataframe.AfterreceivinganRTSframe, thestationsendsaCTS(cleartosend)frametonotifythesendingstationthatit canstartsendingdata. IftheRTSthresholdissetto1,theaccesspointalwayssendsRTSsignals.Ifset to 2346,theaccesspointneversendsRTSsignals.Ifsettoanyothervalue,and the packetsizeequalsorexceedstheRTSthreshold,theRTS/CTS(Requestto Send/
CleartoSend)mechanismwillbeenabled. Theaccesspointscontendingforthemediummaynotbeawareofeachother. The RTS/CTSmechanismcansolvethisHiddenNodeProblem.(Range:12346bytes:
Default:2346bytes) SGIThe802.11ndraftspecifiestwoguardintervals:400ns(short)and800ns
(long).Supportofthe400nsShortGuardIntervalisoptionalfortransmitand receive.Thepurposeofaguardintervalistointroduceimmunityto propagationdelays,echoes,andreflectionstowhichdigitaldataisnormally verysensitive.EnablingtheSGIsetsitto400ns.(Default:Disabled) 49 Chapter4 |WirelessSettings VLANSettings STBCSpacetimeBlockCodingsendsmultiplecopiesofthesamedataover anumberofantennas,usingthevariousreceivedversionstoimprovethe reliabilityofdatatransfer.Thetransmittedsignalmaytraverseadifficult environmentwithscattering,reflection,andrefractionwhichmaythenbe furthercorruptedbythermalnoiseinthereceiver,sosomeofthereceived copieswillbebetterthanothers.Thisredundancyresultsinahigherchanceof beingabletouseoneormoreofthereceivedcopiestocorrectlydecodethe receivedsignal.(Default:Disabled) AMPDUEnablesordisablestheuseofAggregatedMACProtocolDataUnits. Physicallayer(PHY)datarateimprovementsdonotincreaserealthroughput beyondapointbecauseof802.11protocoloverheads.Themainmediaaccess controlfeaturethatprovidesaperformanceimprovementisaggregation. AggregationofMACprotocoldataunits(MPDUs)isreferredtoasMPDU aggregationor(AMPDU).(Default:Enabled) VLANs(virtuallocalareanetworks)areturnedoffbydefault.Ifturnedontheywill automaticallytaganypacketspassedtotheLANportfromtherelevantVAP(virtual accesspoint). TheaccesspointcanemployVLANtaggingtocontrolaccesstonetworkresources andincreasesecurity.VLANsseparatetrafficpassingbetweentheaccesspoint, associatedclients,andthewirednetwork.YoucanconfigureaVLANforupto13 VAPinterfaces. NotethefollowingpointsabouttheaccesspointsVLANsupport:
IfanEthernetLANportontheaccesspointisassignedaVLANID,anytraffic enteringthatportmustbealsotaggedwiththesameVLANID. AmanagementVLANcanbeusedformanagingtheaccesspointthrough remotemanagementtools,suchasthewebinterface,SSH,TelnetorSNMP. Theaccesspointcanbeconfiguredtoonlyacceptmanagementtrafficthatis taggedwiththespecifiedmanagementVLANID.ThisIDmustbeassignedto theEthernetportsorradiointerfaceswhicharedesignatedtohandle managementtraffic. WirelessclientsassociatedtotheaccesspointcanbeassignedtoaVLAN. WirelessclientsareassignedtotheVLANfortheVAPinterfacewithwhichthey areassociated.TheaccesspointonlyallowstraffictaggedwithcorrectVLAN IDstobeforwardedtoassociatedclientsoneachVAPinterface. WhenVLANsupportisenabledontheaccesspoint,trafficpassedtothewired networkistaggedwiththeappropriateVLANID.WhenanEthernetportonthe accesspointisconfiguredasaVLANmember,trafficreceivedfromthewired 50 VLANSettings Chapter4 |WirelessSettings VLANSettings networkmustalsobetaggedwiththesameVLANID.Receivedtrafficthathas an unknownVLANIDornoVLANtagisdropped. WhenVLANsupportisdisabled,theaccesspointdoesnottagtrafficpassedto thewirednetworkandignorestheVLANtagsonanyreceivedframes. Note:BeforeenablingVLANtaggingontheaccesspoint,besuretoconfigurethe attachednetworkswitchporttosupporttaggedVLANframesfortheVLANIDs configuredontheaccesspoint.Otherwise,connectivitytotheaccesspointwillbe lostwhenyouenabletheVLANfeature. Figure31: ConfiguringVLANs Thefollowingitemsaredisplayedonthispage:
VLANIDAVLANidentifiertobeassigned.(Range:34095)
(VLAN1and2arereservedforinternaluse.) PortsTheEthernetportsassignedtothespecifiedVLAN. SSIDsTheSSIDofaVAPconfiguredtobeamemberofthespecifiedVLAN. ThisoptionisconfiguredunderRadioSettings(NetworkSettingsNetwork Behavior). 51 SystemSettings 5 Thischapterdescribesmaintenancesettingsontheaccesspoint.Itincludesthe following sections:
SystemSettingsonpage53 Maintenanceonpage54 UserAccountsonpage57 Servicesonpage57 52 Chapter5 |SystemSettings SystemSettings SystemSettings TheSystemSettingspageisusedtoconfiguregeneraldescriptiveinformation abouttheaccesspoint,suchasthesystemidentificationname,itsgeographic coordinates,andlocaltime. Figure32:SystemSettings Thefollowingitemsaredisplayedonthispage:
DeviceNameAnaliasfortheAP,enablingthedevicetobeuniquely identifiedonthenetwork.(Default:none;Range:050characters) DeviceLatitudeThegeographiclatitudeoftheaccesspoint,givenin degreesandminutes.(Range:90to+90degrees) DeviceLongitudeThegeographiclongitudeoftheaccesspoint,givenin degreesandminutes.(Range:180to+180degrees) EnableresetbuttonEnablesordisablesthehardwareresetbutton. LocalTimeThelocaltime,givenasdayofweek,month,time,year. ConfigureNetworkTimeLinkstotheNetworkTime(NTP)sectiononthe Servicespage. 53 Chapter5 |SystemSettings Maintenance Maintenance TheMaintenancepagesupportsgeneralmaintenancetasksincludingdisplaying thesystemlog,rebootingthedevice,restoringfactorydefaults,backingupor restoringconfigurationsettings,andupgradingfirmware. Figure33:Maintenance Displaying SystemLogs Theaccesspointsaveseventanderrormessagestoalocalsystemlogdatabase. Thelogmessagesincludethedateandtime,devicename,messagetype,and messagedetails. Figure34: SystemLog 54 Chapter5 |SystemSettings Maintenance Rebootingthe AccessPoint TheRebootpageallowsyoutoreboottheaccesspoint. Figure35:RebootingtheAccessPoint Resettingthe AccessPoint TheResetpageallowsyoutoresettheaccesspointtothefactorydefaults.Note thatalluserconfiguredinformationwillbelost.Youwillhavetoreenterthe defaultusernameandpasswordtoregainmanagementaccesstothisdevice. Figure36:ResettingtoDefaults Note:Itisalsopossibletorebootorresettheaccesspointbyinsertingapininthe pinholelabeledRESETontheconnectorpaneloftheaccesspointand:
press2secondstoreboottheaccesspoint;
press10secondstoresettheaccesspointtothefactorydefaults. 55 Chapter5 |SystemSettings Maintenance BackingUp Configuration Settings TheBackupfunctionallowsyoutobackuptheaccesspointsconfigurationtoa managementworkstation.InWindows,aGNUZip(*.tar.gz)filewillbestoredinthe Downloadsfolder.Thisisasamplefilename:backupACNAP20140627.tar.gz Restoring Configuration Settings TheRestorepageallowsyoutouploadconfigurationsettingsfromamanagement workstation.Thespecifiedfilemustbeonethatwaspreviouslybackedupfromthe accesspoint. Figure37:RestoringConfigurationSettings UpgradingFirmwareYoucanupgradenewaccesspointsoftwarefromalocalfileonthemanagement workstation.Newsoftwaremaybeprovidedperiodicallyfromyourdistributor. Afterupgradingnewsoftware,youmustreboottheaccesspointtoimplementthe newcode.Untilarebootoccurs,theaccesspointwillcontinuetorunthesoftware itwasusingbeforetheupgradestarted.Theaccesspointsupportsdualsoftware images,soifnewlyloadedsoftwareiscorrupted,thealternateimagewillbeused onthenextreboot.Configurationsettingsarestoredseparatelyfromthesoftware, sothecurrentsettingswillalwaysbeusedforanynewsoftware.However,note thatifthecurrentconfigurtionsettingsarecorrupted,thesystemdefaultswillbe used. Figure38:UpgradingFirmware 56 Chapter5 |SystemSettings UserAccounts UserAccounts TheUserAccountspageallowsyoutocontrolmanagementaccesstotheswitch basedonmanuallyconfiguredusernamesandpasswords. Figure39:UserAccounts Thefollowingitemsaredisplayedonthispage:
UsernameThenameoftheuser.(Range:315ASCIIcharacters,nospecial characters) PasswordTheuserpassword.(Range:315ASCIIcharacters,casesensitive, nospecialcharacters) Services TheServicespageallowsyoutocontrolremotemanagementaccesstotheswitch andtoconfigureofNTPtimeservers. RemoteManagement Settings TheSSH,Telnet,Web,andSNMPmanagementinterfacesareenabledandopento accessfromtheInternet.Toprovidemoresecurity,specificservicescanbedisabled andmanagementaccesspreventedfromtheInternet. SSH TheSecureShell(SSH)canactasasecurereplacementforTelnet.TheSSHprotocol usesgeneratedpublickeystoencryptalldatatransferspassingbetweentheaccess pointandSSHenabledmanagementstationclientsandensuresthatdatatraveling overthenetworkarrivesunaltered.Clientscanthensecurelyusethelocaluser nameandpasswordforaccessauthentication. NotethatSSHclientsoftwareneedstobeinstalledonthemanagementstationto accesstheaccesspointformanagementviatheSSHprotocol. 57 Chapter5 |SystemSettings Services Figure40: SSHServerSettings Thefollowingitemsaredisplayedonthispage:
SSHServerEnablesordisablesSSHaccesstotheaccesspoint.
(Default:Enabled) PortSetstheTCPportnumberfortheSSHserverontheaccesspoint.
(Range:165535;Default:22) AllowSSHfromWANAllowsSSHmanagementaccessfromtheWAN. Telnet Telnetisaremotemanagementtoolthatcanbeusedtoconfiguretheaccesspoint fromanywhereinthenetwork.However,notethatTelnetisnotsecurefromhostile attacks. Figure41:TelnetServerSettings Thefollowingitemsaredisplayedonthispage:
TelnetServerEnablesordisablesTelnetaccesstotheaccesspoint.
(Default:Enabled) PortSetstheTCPportnumberfortheTelnetserverontheaccesspoint.
(Range:165535;Default:23) AllowTelnetfromWANAllowsTelnetmanagementaccessfromtheWAN. WebserverAWebbrowserprovidestheprimarymethodofmanagingtheaccesspoint.Both HTTPandHTTPSservicecanbeaccessedindependently.IfyouenableHTTPS,you mustindicatethisintheURL:https://device:port_number]
WhenyoustartHTTPS,theconnectionisestablishedinthisway:
58 Chapter5 |SystemSettings Services Theclientauthenticatestheserverusingtheserversdigitalcertificate. Theclientandservernegotiateasetofsecurityprotocolstouseforthe connection. Theclientandservergeneratesessionkeysforencryptinganddecryptingdata. Theclientandserverestablishasecureencryptedconnection. Apadlockiconshouldappearinthestatusbarformostbrowsers. Figure42:WebServerSettings Thefollowingitemsaredisplayedonthispage:
HTTPPortTheTCPporttobeusedbytheHTTPWebbrowserinterface.
(Range:165535;Default:80) AllowHTTPfromWANAllowsHTTPmanagementaccessfromtheWAN. HTTPSPortTheTCPporttobeusedbytheHTTPSWebbrowserinterface.
(Range:165535;Default:443) AllowHTTPSfromWANAllowsHTTPSmanagementaccessfromtheWAN. NetworkTime NetworkTimeProtocol(NTP)allowstheaccesspointtosetitsinternalclockbased onperiodicupdatesfromatimeserver(SNTPorNTP).Maintaininganaccuratetime ontheaccesspointenablesthesystemlogtorecordmeaningfuldatesandtimes forevententries.Iftheclockisnotset,theaccesspointwillonlyrecordthetime fromthefactorydefaultsetatthelastbootup. TheaccesspointactsasanNTPclient,periodicallysendingtimesynchronization requeststospecifiedtimeservers.Theaccesspointwillattempttopolleachserver intheconfiguredsequence. 59 Chapter5 |SystemSettings Services Figure43: NTPSettings Thefollowingitemsaredisplayedonthispage:
LocalTimeDisplaysthelocaltimeasdayofweek,month, hour:minute:second,year,basedonUniversalTimeCoordinates. NTPServiceEnablesordisablessendingofrequestsfortimeupdates.
(Default:Enabled) NTPServersSetsthehostnamesfortimeservers.Theswitchattemptsto updatethetimefromthefirstserver,ifthisfailsitattemptsanupdatefromthe nextserverinthesequence.Toconfigureadditionalservers,clickthe+
buttontoopenaneweditfield. TimeZoneTodisplayatimecorrespondingtoyourlocaltime,chooseone ofthepredefinedtimezonesfromthescrolldownlist. SNMPSimpleNetworkManagementProtocol(SNMP)isacommunicationprotocol designedspecificallyformanagingdevicesonanetwork.Itistypicallyusedto configurethesedevicesforproperoperationinanetworkenvironment,aswellas tomonitorthemtoevaluateperformanceordetectpotentialproblems. Figure44:SNMPSettings Thefollowingitemsaredisplayedonthispage:
SNMPServerEnablesordisablesSNMPontheaccesspoint.
(Default:Enabled) 60 Chapter5 |SystemSettings Services ContactAdministratorresponsiblefortheaccesspoint. CommunityStringAcommunitystringthatactslikeapasswordand permitsaccesstotheSNMPprotocol.(Range:132characters,casesensitive;
Default:public) Thedefaultstringpublicprovidesreadonlyaccesstotheaccesspoints ManagementInformation(MIB)database. AllowSNMPfromWANAllowsSNMPmanagementaccessfromtheWAN. 61 SectionIII Appendices Thissectionprovidesadditionalinformationandincludestheseitems:
Troubleshootingonpage62 61 A Troubleshooting ProblemsAccessingtheManagementInterface Table5:TroubleshootingChart Symptom Action Cannot connect using Telnet,webbrowser,or SNMPsoftware BesuretheAPispoweredup. Checknetworkcablingbetweenthemanagementstationandthe AP. CheckthatyouhaveavalidnetworkconnectiontotheAPand thatintermediateswitchportshavenotbeendisabled. BesureyouhaveconfiguredtheAPwithavalidIPaddress,subnet maskanddefaultgateway. BesurethemanagementstationhasanIPaddressinthesame subnetastheAPsIP. IfyouaretryingtoconnecttotheAPusingataggedVLANgroup, yourmanagementstation,andtheportsconnectingintermediate switchesinthenetwork,mustbeconfiguredwiththeappropriate tag. If you cannot connect using Telnet, you mayhave exceeded the maximum number of concurrent Telnet/SSH sessions permitted. Tryconnectingagainatalatertime. Forgotorlostthepassword ResettheAPtofactorydefaultsusingitsResetbutton. UsingSystemLogs Ifafaultdoesoccur,refertotheQuickStartGuidetoensurethattheproblemyou encounteredisactuallycausedbytheAP.Iftheproblemappearstobecausedby theAP,followthesesteps:
1. EnableSNMPintheSystem>Servciesmenu. 2. EnableSNMPaccessfromtheWANwhenconnectingfromaremotelocation. 3. Repeatthesequenceofcommandsorotheractionsthatleaduptotheerror. 4. Makealistofthecommandsorcircumstancesthatledtothefault.Alsomakea listofanyerrormessagesdisplayed. 5. Recordallrelevantsystemsettings. 62 Chapter A |Troubleshooting UsingSystemLogs 6. DisplaythelogfilethroughtheSystem>Maintenancemenu,andcopythe informationfromthelogfile. 7. Contactyourdistributorsserviceengineer,andsendadetaileddescriptionof theproblem,alongwithalloftheinformationmentionedintheabovesteps. 63 64 QuickStart Guide FollowthestepsinthisguidetoinstalltheAPinyournetwork. Caution:TheplanningandinstallationoftheAPrequiresprofessionalpersonnel thataretrainedintheinstallationofradiotransmittingequipment.Theuseris responsibleforcompliancewithlocalregulationsconcerningitemssuchas antennapower,useoflightningarrestors,grounding,andradiomastortower construction.Therefore,itisrecommendedtoconsultaprofessionalcontractor knowledgeableinlocalradioregulationspriortoequipmentinstallation. 1. UnpacktheAP UnpacktheAPandcheckthepackagecontents. OutdoorStandAloneAccess Point SkyFireAC866 Polemountingkitincludestwosteelbandclamps PoEpowerinjectorwithpowercordeitherUS,ContinentalEuropeorUK DocumentationQuickStartGuideandRegulatoryandSafetyInformation 2. MounttheAP Afterplanningyourinstallation,mounttheunitonapole,mast,ortowerusingthe includedtwosteelbandclamps. Also,formodelsthatrequireexternalantennas,installtheantennasneartheAP andattachtheRFcoaxialcablestotheappropriateconnectorsontheAP. 1 2 PoleMounting 1 2 Feedthesteelbandclampsthroughthe integratedpolemountbracketpointson thebackoftheAP. Fastenthesteelbandclampsaroundthe poletosecuretheAPtothepole. 2 2 3 1 QuickStart Guide AttachExternalAntennas 1 2 3 Removethefrontportcoverby pushingthelockingtabupandthen slidingthecoveroff. Connectexternalantennastothe APs5GHzRPSMAconnectorsusing RFcoaxialcableprovidedinthe antennapackage. Connectexternalantennastothe APs2.4GHzRPSMAconnectors usingRFcoaxialcableprovidedinthe antenna package. Note:Thenumberofavailable2.4GHzor5GHzexternalantennaconnectors dependsonthespecificmodel. 3. ConnectCablesConnectoutdoorratedEthernetcabletothe1000BASETRJ45ETH0(PoE)porton theunit. 1 2 3 4 Connect outdoorrated Category 5e orbettercabletotheleftsideRJ45 ETH0(PoE)port.
(Optional)ConnectalocalLAN switchorcomputertotherightside ETH1100BASETXRJ45port. Pass the cables through the access holesatthebottomoftheAP. ReplacetheportcoverontheAPand pushthelockingtabdowntosecure itinplace. 2 1 3 4 4. ConnectPower InstallthePoEpowerinjectorindoors.ConnectthepowerinjectortotheEthernet cablefromtheAP,toaportonalocalLANswitch,andthentoanACpowersource. Caution:Thepowerinjectormoduleisdesignedforindooruseonly.Nevermount thepowerinjectoroutsidewiththeAPunit. 3 QuickStart Guide 1 2 3 ConnecttheEthernetcablefromtheAPto thePOEportonthepowerinjector. ConnectEthernetcablefromtheLANport onthepowerinjectortoaLANswitch. ConnectthepowercordtoanearbyAC powersource(100240VAC,50/60Hz). 3 1 2 Note: ConnectingtheEthernetcablefromtheAPtotheinjectormodulepowers ontheunit. 5. VerifyAPOperation VerifybasicAPoperationbycheckingthesystemLEDs. ThepowerLEDshouldbeongreen,theETH0portLEDon/blinkinggreen,andthe 5GHzwirelessLED/blue(5GHz). 1 2 3 4 5 5GHzsignalstrength LEDs. 5GHzlink/activityLED. ETH1 port link/activity LED. ETH0(PoE) portlink/activityLED. PowerLED. 1 2 3 4 5 4 6. ConnecttotheWeb UserInterface QuickStart Guide ThestandaloneAPsofferawebbasedmanagementinterfaceforthe configurationofalltheunitsfeatures. YoucanmakeinitialconfigurationchangesbyconnectingaPCdirectlytotheAPs ETH1RJ45port.TheAPhasadefaultmanagementIPaddressof192.168.2.1anda subnetmaskof255.255.255.0.YoumustsetyourPCIPaddresstobeonthesame subnetastheAP(thatis,thePCandAPaddressesmustbothstart192.168.2.x). Logintothewebinterfaceusingthedefaultsettings:
LoginNameroot Passwordadmin123 FormoreinformationonstandaloneAPconfigurationusingthewebinterface, refertotheManagementGuide. 5 HardwareSpecifications QuickStart Guide Item Chassis Specification Size(HxWxD:) 283x94x50mm(11.14x3.7x1.97inches) Weight Temperature 762g(1.68lb) Operating:20Cto65C(4Fto149F) Storage:30Cto80C(22Fto176F) Humidity Operating:15%to95%(noncondensing) Waterproof/Dustproof IP55 NetworkInterfaces Ports 2.4GHzRadio 5GHzRadio RadioFrequencies ETH0(PoE)RJ45Port:1000BASET,passivePoE ETH1RJ45Port:100BASETX IEEE802.11b/g/n IEEE802.11a/n/ac 5745~5825MHz(China) 5180~5240MHz(NCC) 5260~5230MHz(NCC) 5745~5825MHz(NCC) PowerSupply PoEInputPower 24VDC,1.0A PowerConsumption 24Wmaximum PowerInjectorModule 100240VAC,5060Hz,autosensing RegulatoryCompliances Radio Emissions Immunity EN300328V1.8.1:2012 EN301893V1.7.1:2012 EN3014891V1.9.2(201109) EN3014897V1.3.1:2005 FCCPart15E15.407(5.150GHz5.250GHz) EN550222010+AC:2011 EN61000322006+A1:2009+A2:2009 FCCClassBPart15 EN55024:2010 EN6100042:2009 6 FederalCommunicationCommissionInterferenceStatement QuickStart Guide ThisdevicecomplieswithPart15oftheFCCRules.Operationissubjecttothefollowingtwoconditions:(
1)Thisdevicemaynotcauseharmfulinterference,and
(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethatmaycauseundesiredoperation. ThisequipmenthasbeentestedandfoundtocomplywiththelimitsforaClassBdigitaldevice,pursuanttoPart15 oftheFCCRules.Theselimitsaredesignedtoprovidereasonableprotectionagainstharmfulinterferenceina residentialinstallation.Thisequipmentgenerates,usesandcanradiateradiofrequencyenergyand,ifnotinstalled andusedinaccordancewiththeinstructions,maycauseharmfulinterferencetoradiocommunications.However, thereisnoguaranteethatinterferencewillnotoccurinaparticularinstallation.Ifthisequipmentdoescause harmfulinterferencetoradioortelevisionreception,whichcanbedeterminedbyturningtheequipmentoffandon, theuserisencouragedtotrytocorrecttheinterferencebyoneofthefollowingmeasures:
Reorientorrelocatethereceivingantenna. Increasetheseparationbetweentheequipmentandreceiver. Connecttheequipmentintoanoutletonacircuitdifferentfromthat towhichthereceiverisconnected. Consultthedealeroranexperiencedradio/TVtechnicianforhelp. FCCCaution:Anychangesormodificationsnotexpresslyapprovedbythepartyresponsibleforcompliancecouldvoid theuser'sauthoritytooperatethisequipment. Thistransmittermustnotbecolocatedoroperatinginconjunctionwithanyotherantennaortransmitter. Foroperationwithin5.15~5.25GHz/5.47~5.725GHzfrequencyrange,itisrestrictedtoindoorenvironment. Thebandfrom56005650MHzwillbedisabledbythesoftwareduringthemanufacturingandcannotbechanged bytheenduser.ThisdevicemeetsalltheotherrequirementsspecifiedinPart15E,Section15.407oftheFCCRules. RadiationExposureStatement:
ThisequipmentcomplieswithFCCradiationexposurelimitssetforthforanuncontrolledenvironment. Thisequipmentshouldbeinstalledandoperatedwithminimumdistance20cmbetweentheradiator&yourbody. Note:ThecountrycodeselectionisfornonUSmodelonlyandisnotavailabletoallUSmodel. PerFCCregulation,allWiFiproductmarketedinUSmustfixedtoUSoperationchannelsonly. 7 QuickStart Guide Professionalinstallationinstruction 1.Installationpersonal ThisproductisdesignedforspecificapplicationandneedstobeinstalledbyaqualifiedpersonalwhohasRFand relatedruleknowledge.Thegeneralusershallnotattempttoinstallorchangethesetting. 2.Installationlocation Theproductshallbeinstalledatalocationwheretheradiatingantennacanbekept20cmfromnearbypersonin normaloperationconditiontomeetregulatoryRFexposurerequirement. 3.Externalantenna Useonlytheantennaswhichhavebeenapprovedbytheapplicant.Thenonapprovedantenna(s)mayproduce unwantedspuriousorexcessiveRFtransmittingpowerwhichmayleadtotheviolationofFCClimitandisprohibited. 4.Installationprocedure Pleaserefertousersmanualforthedetail. 5.Warning Pleasecarefullyselecttheinstallationpositionandmakesurethatthefinaloutputpowerdoesnotexceedthe limitsetforceinrelevantrules.Theviolationoftherulecouldleadtoseriousfederalpenalty. professionalinstaller:5.155.25Gband(UNIIband1)iscertifiedtoindooruseonly.InstallermustdisableUNIIband1byprovidedproprietarytool whenyouinstallthisdeviceforoutdoorapplicationtocomplywithFCCrequirement. MPE1mW/cm2 0.682 mW/cm2 8
frequency | equipment class | purpose | ||
---|---|---|---|---|
1 | 2015-05-06 | 5745 ~ 5825 | NII - Unlicensed National Information Infrastructure TX | Original Equipment |
app s | Applicant Information | |||||
---|---|---|---|---|---|---|
1 | Effective |
2015-05-06
|
||||
1 | Applicant's complete, legal business name |
Accton Technology Corp
|
||||
1 | FCC Registration Number (FRN) |
0017693334
|
||||
1 | Physical Address |
No. 1, Creation Rd. III
|
||||
1 |
Hsin Chu 30077, N/A
|
|||||
1 |
Taiwan
|
|||||
app s | TCB Information | |||||
1 | TCB Application Email Address |
c******@curtis-straus.com
|
||||
1 | TCB Scope |
A4: UNII devices & low power transmitters using spread spectrum techniques
|
||||
app s | FCC ID | |||||
1 | Grantee Code |
HED
|
||||
1 | Equipment Product Code |
AC866
|
||||
app s | Person at the applicant's address to receive grant or for contact | |||||
1 | Name |
A****** W****
|
||||
1 | Title |
Manager
|
||||
1 | Telephone Number |
886-3******** Extension:
|
||||
1 | Fax Number |
886-3********
|
||||
1 |
m******@accton.com
|
|||||
app s | Technical Contact | |||||
n/a | ||||||
app s | Non Technical Contact | |||||
n/a | ||||||
app s | Confidentiality (long or short term) | |||||
1 | Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | Yes | ||||
1 | Long-Term Confidentiality Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | Yes | ||||
1 | If so, specify the short-term confidentiality release date (MM/DD/YYYY format) | 10/30/2015 | ||||
if no date is supplied, the release date will be set to 45 calendar days past the date of grant. | ||||||
app s | Cognitive Radio & Software Defined Radio, Class, etc | |||||
1 | Is this application for software defined/cognitive radio authorization? | No | ||||
1 | Equipment Class | NII - Unlicensed National Information Infrastructure TX | ||||
1 | Description of product as it is marketed: (NOTE: This text will appear below the equipment class on the grant) | 5GHz Outdoor AP, 802.11ac Outdoor 5GHz Access Point | ||||
1 | Related OET KnowledgeDataBase Inquiry: Is there a KDB inquiry associated with this application? | No | ||||
1 | Modular Equipment Type | Does not apply | ||||
1 | Purpose / Application is for | Original Equipment | ||||
1 | Composite Equipment: Is the equipment in this application a composite device subject to an additional equipment authorization? | No | ||||
1 | Related Equipment: Is the equipment in this application part of a system that operates with, or is marketed with, another device that requires an equipment authorization? | No | ||||
1 | Grant Comments | Power listed is the maximum combined conducted output power. This device must be professionally installed. Marketing to the General Public is prohibited. Only those antenna(s) tested with the device or similar antenna(s) with equal or lesser gain may be used with this transmitter. The use of other antenna requires a Class II Permissive Change filing. The antennas used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter, except in accordance with FCC multi-transmitter product guidelines. End -users and installers must be provided with antenna installation instructions and transmitter operating conditions for satisfying RF exposure compliance. Operations in the 5.15-5.25GHz band are restricted to indoor usage only. This device has 20 MHz, 40 MHz and 80 MHz bandwidth mode. | ||||
1 | Is there an equipment authorization waiver associated with this application? | No | ||||
1 | If there is an equipment authorization waiver associated with this application, has the associated waiver been approved and all information uploaded? | No | ||||
app s | Test Firm Name and Contact Information | |||||
1 | Firm Name |
Bureau Veritas CPS (H.K.) Ltd., Taoyuan Branch
|
||||
1 | Name |
R**** C******
|
||||
1 | Telephone Number |
+886-******** Extension:
|
||||
1 | Fax Number |
+886-********
|
||||
1 |
r******@tw.bureauveritas.com
|
|||||
Equipment Specifications | |||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
1 | 1 | 15E | 38 MO | 5180 | 5240 | 0.283 | |||||||||||||||||||||||||||||||||||
1 | 2 | 15E | 38 MO | 5745 | 5825 | 0.24 |
some individual PII (Personally Identifiable Information) available on the public forms may be redacted, original source may include additional details
This product uses the FCC Data API but is not endorsed or certified by the FCC