all | frequencies |
|
exhibits | applications |
---|---|---|---|---|
manual |
app s | submitted / available | |||||||
---|---|---|---|---|---|---|---|---|
1 2 |
|
User manual | Users Manual | 5.06 MiB | April 03 2016 | |||
1 2 | Cover Letter(s) | April 03 2016 | ||||||
1 2 | Cover Letter(s) | April 03 2016 | ||||||
1 2 | External Photos | April 03 2016 | ||||||
1 2 | ID Label/Location Info | April 03 2016 | ||||||
1 2 | Internal Photos | April 03 2016 | ||||||
1 2 | RF Exposure Info | April 03 2016 | ||||||
1 2 | Cover Letter(s) | April 03 2016 | ||||||
1 2 | Cover Letter(s) | April 03 2016 | ||||||
1 2 | Cover Letter(s) | April 03 2016 | ||||||
1 2 | Test Report | April 03 2016 | ||||||
1 2 | Test Setup Photos | April 03 2016 | ||||||
1 2 | Cover Letter(s) | April 03 2016 | ||||||
1 2 | Cover Letter(s) | April 03 2016 |
1 2 | User manual | Users Manual | 5.06 MiB | April 03 2016 |
AC1750CeilingMountAP EW7679WAUser Users Manual Version: 1.0
(January, 2016) CONTENTS I. ProductInformation ............................................................................... 2 I1. I2. I3. I4. I5. I6. PackageContents ..................................................................................................................2 SystemRequirements............................................................................................................3 HardwareOverview...............................................................................................................3 LEDStatus ..............................................................................................................................4 Reset ......................................................................................................................................4 SafetyInformation.................................................................................................................5 II. QuickSetup ............................................................................................ 6 II1. II2. II3. InitialSetup............................................................................................................................6 APMode:BasicSettings ........................................................................................................8 RepeaterMode....................................................................................................................12 III. HardwareInstallation........................................................................... 15 III1. III2. III3. ConnectingtheaccesspointtoarouterorPoEswitch.....................................................15 Mountingtheaccesspointtoaceiling..............................................................................16 TRailMount ......................................................................................................................19 IV. BrowserBasedConfigurationInterface................................................. 21 IV1. IV11. IV12. IV13. IV14. IV2. IV21. IV22. IV23. IV3. IV31. IV32. IV33. IV331. IV332. IV333. IV3331. IV3332. IV3333. Information........................................................................................................................23 SystemInformation ...........................................................................................................23 WirelessClients..................................................................................................................28 WirelessMonitor ...............................................................................................................30 Log......................................................................................................................................32 NetworkSettings ...............................................................................................................34 LANSideIPAddress...........................................................................................................34 LANPort.............................................................................................................................36 VLAN ..................................................................................................................................37 WirelessSettings................................................................................................................38 WirelessExtender..............................................................................................................38 ProfileList ..........................................................................................................................40 2.4GHz11bgn.....................................................................................................................41 Basic .............................................................................................................................41 Advanced .....................................................................................................................44 Security ........................................................................................................................46 NoAuthentication .....................................................................................................48 WEP............................................................................................................................48 IEEE802.1x/EAP..........................................................................................................48 WPAPSK ....................................................................................................................48 IV3334. WPAEAP....................................................................................................................49 IV3335. AdditionalAuthentication .........................................................................................49 IV3336. WDS .............................................................................................................................51 IV334. 5GHz11ac11an .................................................................................................................53 IV34. Basic .............................................................................................................................53 IV341. Advanced .....................................................................................................................55 IV342. Security ........................................................................................................................57 IV343. IV344. WDS .............................................................................................................................59 IV35. WPS......................................................................................................................................61 IV36. RADIUS .................................................................................................................................63 RADIUSSettings ...........................................................................................................64 IV361. IV362. InternalServer .............................................................................................................66 RADIUSAccounts .........................................................................................................68 IV363. IV37. MACFilter ..........................................................................................................................70 IV38. WMM...................................................................................................................................72 IV39. Schedule...............................................................................................................................74 IV310. TrafficShaping .....................................................................................................................76 IV4. Management .....................................................................................................................78 Admin.................................................................................................................................78 IV41. DateandTime....................................................................................................................81 IV42. IV43. SyslogServer......................................................................................................................83 PingTest.............................................................................................................................84 IV44. ImHere .............................................................................................................................85 IV45. IV5. Advanced ...........................................................................................................................86 LEDSettings .......................................................................................................................86 IV51. IV52. UpdateFirmware...............................................................................................................87 Save/RestoreSettings........................................................................................................88 IV53. FactoryDefault ..................................................................................................................90 IV54. IV55. Reboot................................................................................................................................91 OperationMode ................................................................................................................92 IV6. NMS I. ProductInformation ............................................................................. 95 II. QuickSetup .......................................................................................... 96 III. SoftwareLayout ................................................................................. 103 IV. Features ............................................................................................. 110 LOGIN,LOGOUT&RESTART ..............................................................................................110 IV1. DASHBOARD ......................................................................................................................112 IV2. SystemInformation ...........................................................................................................113 IV21. IV22. DevicesInformation...........................................................................................................113 IV23. ManagedAP.......................................................................................................................114 IV24. ManagedAPGroup............................................................................................................115 IV25. ActiveClients .....................................................................................................................116 IV26. ActiveUsers .......................................................................................................................117 IV3. ZONEPLAN.........................................................................................................................118 IV4. NMSMONITOR ..................................................................................................................120 IV41. AccessPoint .......................................................................................................................120 IV411. ManagedAP...............................................................................................................120 IV412. ManagedAPGroup....................................................................................................122 IV42. WLAN .................................................................................................................................124 IV421. ActiveWLAN ..............................................................................................................124 ActiveWLANGroup ...................................................................................................125 IV422. IV43. Clients ................................................................................................................................125 ActiveClients .............................................................................................................125 IV431. RogueDevices....................................................................................................................126 IV44. IV45. Information........................................................................................................................127 AllEvents/Activities ...................................................................................................127 IV451. Monitoring .................................................................................................................128 IV452. IV5. NMSSettings......................................................................................................................129 IV51. AccessPoint .......................................................................................................................129 IV52. WLAN .................................................................................................................................142 IV521. NoAuthentication ...................................................................................................144 WEP..........................................................................................................................144 IV522. IV523. IEEE802.1x/EAP........................................................................................................145 WPAPSK ..................................................................................................................145 IV524. WPAEAP..................................................................................................................146 IV525. IV526. AdditionalAuthentication .......................................................................................146 IV53. RADIUS ...............................................................................................................................148 IV54. AccessControl....................................................................................................................154 IV55. GuestNetwork...................................................................................................................157 ZoneEdit ............................................................................................................................161 IV56. IV57. Schedule.............................................................................................................................163 IV58. DeviceMonitoring ...........................................................................................................165 IV59. FirmwareUpgrade.............................................................................................................166 IV510. Advanced .........................................................................................................................167 SystemSecurity..........................................................................................................167 IV5101. IV5102. Date&Time ...............................................................................................................167 IV6. LocalNetwork ....................................................................................................................169 IV61. NetworkSettings ...............................................................................................................169 IV611. LANSideIPAddress...................................................................................................169 LANPortSettings .......................................................................................................172 IV612. VLAN ..........................................................................................................................173 IV613. IV62. 2.4GHz11bgn.....................................................................................................................174 Basic ...........................................................................................................................174 IV621. Advanced ...................................................................................................................176 IV622. IV623. Security ......................................................................................................................178 NoAuthentication ...................................................................................................179 IV6231. WEP..........................................................................................................................179 IV6232. IV6233. IEEE802.1x/EAP........................................................................................................180 WPAPSK ..................................................................................................................180 IV6234. WPAEAP..................................................................................................................180 IV6235. IV6236. AdditionalAuthentication .......................................................................................181 WDS ...........................................................................................................................182 IV624. IV63. 5GHz11ac11an ...............................................................................................................184 Basic ...........................................................................................................................184 IV631. Advanced .................................................................................................................186 IV632. IV633. Security ....................................................................................................................188 IV634. WDS ...........................................................................................................................190 IV64. WPS....................................................................................................................................192 IV65. RADIUS ...............................................................................................................................193 RADIUSSettings .........................................................................................................194 IV651. IV652. InternalServer ...........................................................................................................195 IV653. RADIUSAccounts .......................................................................................................197 IV66. MACFilter ..........................................................................................................................199 IV67. WMM.................................................................................................................................201 IV7. LocalSettings .....................................................................................................................203 IV71. OperationMode ................................................................................................................203 IV72. SystemSettings..................................................................................................................203 SystemInformation .................................................................................................203 IV721. WirelessClients..........................................................................................................205 IV722. WirelessMonitor .....................................................................................................206 IV723. IV724. Log............................................................................................................................207 IV73. Management .....................................................................................................................208 Admin.......................................................................................................................208 IV731. DateandTime..........................................................................................................210 IV732. IV733. SyslogServer............................................................................................................212 IV734. ImHere ...................................................................................................................213 IV74. Advanced ...........................................................................................................................214 IV741. LEDSettings ...............................................................................................................214 UpdateFirmware.....................................................................................................215 IV742. IV743. Save/RestoreSettings..............................................................................................216 FactoryDefault ........................................................................................................217 IV744. Reboot......................................................................................................................217 IV745. IV8. Toolbox ..............................................................................................................................218 NetworkConnectivity ......................................................................................................218 IV81. Ping ..........................................................................................................................218 IV811. IV812. TraceRoute..............................................................................................................218 V. Appendix ............................................................................................ 219 V1. V11. V12. V13. V14. V15. ConfiguringyourIPaddress.............................................................................................219 WindowsXP .....................................................................................................................220 WindowsVista .................................................................................................................222 Windows7 .......................................................................................................................224 Windows8 .......................................................................................................................228 Mac ..................................................................................................................................232 VI. BestPractice....................................................................................... 234 VI1. HowtoCreateandLinkWLAN&AccessPointGroups...................................................235 OVERVIEW Youraccesspointcanfunctioninfourdifferentmodes. ThedefaultmodeforyouraccesspointisAPmode. APmodeisaregularaccesspointforuseinyourwirelessnetwork. APControllermodeactsasthedesignatedmasterofanAParray(groupof linkedaccesspoints).InAPControllermodetheuserinterfacewillswitchto NMS. ManagedAPmodeactsasaslaveAPwithintheAParray(controlledbythe APControllermaster). InRepeatermodetheaccesspointconnectswirelesslytoyourexisting 2.4GHzand/or5GHznetworkandrepeatsthewirelesssignal(s). 1 I. ProductInformation I1.PackageContents 1 2 3 4 1. AC1750AccessPoint 2. CeilingMountBracket 3. TRailMountingKit&Screws 4. CeilingMountingKit&Screws 5. QuickInstallationGuide 6. EthernetCable 7. PowerAdapter 8. CeilingMountScrewTemplate 2 5 I2.SystemRequirements Existingcable/DSLmodem&router Computerwithwebbrowserforaccesspointconfiguration I3.HardwareOverview MicroUSBPort EthernetPort Power Port 3 I4.LEDStatus LEDColor LEDStatus Description Blue On Theaccesspointison. LongFlashing Upgradingfirmware. ShortFlashing Resettingtofactorydefaults. Amber Off On Flashing Off Startingup. Error. Theaccesspointisoff. I5.Reset Ifyouexperienceproblemswithyouraccesspoint,youcanresetthedevice backtoitsfactorysettings.Thisresetsallsettingsbacktodefault. 1. Pressandholdtheresetbuttonontheaccesspointforatleast10 seconds. Youmayneedtouseapinorsimilarsharpobjecttopushthe resetbutton. 2. Waitfortheaccesspointtorestart.Theaccesspointisreadyforsetup whentheLEDisblue. 4 I6.SafetyInformation Inordertoensurethesafeoperationofthedeviceanditsusers,pleaseread andactinaccordancewiththefollowingsafetyinstructions. 1.Theaccesspointisdesignedforindooruseonly;donotplacetheaccess 2.Donotplacetheaccesspointinornearhot/humidplaces,suchasakitchen 3.Donotpullanyconnectedcablewithforce;carefullydisconnectitfromthe pointoutdoors. orbathroom. accesspoint. 4.Handletheaccesspointwithcare.Accidentaldamagewillvoidthe warrantyoftheaccesspoint. 5.Thedevicecontainssmallpartswhichareadangertosmallchildrenunder 3yearsold.Pleasekeeptheaccesspointoutofreachofchildren. 6.Donotplacetheaccesspointonpaper,cloth,orotherflammablematerials. Theaccesspointmaybecomehotduringuse. 7.Therearenouserserviceablepartsinsidetheaccesspoint.Ifyou experienceproblemswiththeaccesspoint,pleasecontactyourdealerof purchaseandaskforhelp. 8.Theaccesspointisanelectricaldeviceandassuch,ifitbecomeswetfor anyreason,donotattempttotouchitwithoutswitchingthepowersupply off.Contactanexperiencedelectricaltechnicianforfurtherhelp. 9. Ifyousmellburningorseesmokecomingfromtheaccesspointorpower adapter,thendisconnecttheaccesspointandpoweradapterimmediately, asfarasitissafelypossibletodoso.Callyourdealerofpurchaseforhelp. 10.Thisdevicerequiresprofessionalinstallation. 5 II. QuickSetup Youraccesspointcanbeupandrunninginjustafewminutes.Itcanfunction asastandaloneaccesspoint(APmode),aspartofanAParray(ManagedAP mode)orasawirelessrepeater(repeatermode). ForuseaManagedAPinanAParray,theaccesspointwillautomatically switchmodewhenanAPControllerisconfiguredasdescribedinNMS. InitialSetup II1. 1. ConnecttheaccesspointtoacomputerviaEthernetcable. 2. Connectthepoweradaptertotheaccesspoints12VDCportandplugthe poweradapterintoapowersupplyusingtheincludedcable. 3. Pleasewaitamomentfortheaccesspointtostartup.Theaccesspointis readywhentheLEDisblue. 4. SetyourcomputersIPaddressto192.168.2.xwherexisanumberinthe range3100.Ifyouareunsurehowtodothis,pleaserefertotheuser manualformoreinformation. Pleaseensuretherearenootheractivenetworkconnectionson yourcomputer(disconnectWiFiconnectionsandEthernet cables). 5. EntertheaccesspointsdefaultIPaddress192.168.2.2intotheURLbarof awebbrowser. 6 6. Youwillbepromptedforausernameandpassword.Enterthedefault usernameadminandthedefaultpassword1234. 7. YouwillarrivetheSystemInformationscreenshownbelow. 7 8. PleasefollowtheinstructionsbelowinII2.BasicSettingstoconfigurethe accesspointsbasicsettingsforuseasastandaloneAPinAPmode. ForuseaManagedAPinanAParray,theaccesspointwillautomatically switchmodewhenanAPControllerisconfiguredasdescribedinNMS. TousetheAPasanAPController(master)inanAParray,refertoNMS. II2. APMode:BasicSettings Theinstructionsbelowwillhelpyoutoconfigurethefollowingbasicsettings oftheaccesspoint:
LANIPAddress 2.4GHz&5GHzSSID&Security AdministratorName&Password Time&Date Itisrecommendedyouconfigurethesesettingsbeforeusingthe accesspoint. 1. TochangetheaccesspointsLANIPaddress,gotoNetworkSettings>
LANsideIPAddressandyouwillseethescreenbelow. 2. EntertheIPaddresssettingsyouwishtouseforyouraccesspoint.You canuseadynamic(DHCP)orstaticIPaddress,dependingonyournetwork environment.ClickApplytosavethechangesandwaitafewmoments fortheaccesspointtoreload. 8 WhenyouchangeyouraccesspointsIPaddress,youneedtouse thenewIPaddresstoaccessthebrowserbasedconfiguration interfaceinsteadofthedefaultIP192.168.2.2. 3. TochangetheSSIDofyouraccesspoints2.4GHzwirelessnetwork(s),go toWirelessSetting>2.4GHz11bgn>Basic.EnterthenewSSIDfor your2.4GHzwirelessnetworkintheSSID1fieldandclickApply. Toutilizemultiple2.4GHzSSIDs,openthedropdownmenu labelledEnableSSIDnumberandselecthowmanySSIDsyou require.ThenenteranewSSIDinthecorrespondingnumbered fieldsbelow,beforeclickingApply. 4. Toconfigurethesecurityofyouraccesspoints2.4GHzwireless network(s),gotoWirelessSetting>2.4GHz11bgn>Security.Select anAuthenticationMethodandenteraPresharedKeyorEncryption Keydependingonyourchoice,thenclickApply. IfusingmultipleSSIDs,specifywhichSSIDtoconfigureusingthe SSIDdropdownmenu. 9 5. GotoWirelessSettings>5GHz11ac11anandrepeatsteps3&4for theaccesspoints5GHzwirelessnetwork. 6. Tochangetheadministratornameandpasswordforthebrowserbased configurationinterface,gotoManagement>Admin. 7. CompletetheAdministratorNameandAdministratorPasswordfields 8. Tosetthecorrecttimeforyouraccesspoint,gotoManagement>
andclickApply. DateandTime. 10 9. Setthecorrecttimeandtimezoneforyouraccesspointusingthedrop downmenus.TheaccesspointalsosupportsNTP(NetworkTimeProtocol) soalternativelyyoucanenterthehostnameorIPaddressofatimeserver. ClickApplywhenyouarefinished. YoucanusetheAcquireCurrentTimefromyourPCbuttonif youwishtosettheaccesspointtothesametimeasyourPC. 10. Thebasicsettingsofyouraccesspointarenowconfigured.Please refertoIV.HardwareInstallationforguidanceonconnectingyouraccess pointtoarouterorPoEswitch. 11 RepeaterMode II3. Whenyousettheoperationmodetorepeatermode,theAPwillnotgetanIP addressfromtherouter/rootAP.YouwillneedtosetyourcomputersIP addressandusetheAPsdefaultIPaddresstoaccesstheUIforthefirsttime, refertoAppendixformorehelp. WirelessSettingsWirelessExtenderdisplaysdetailsabouttheAPswireless connectioninrepeatermodeandenablesyoutoconnecttoasourceSSIDand configurethenew(repeater)SSID.Settingsaresavedasprofiles. 1. SetyourcomputersIPaddressto192.168.2.xwherexisanumberinthe range3100. Pleaseensuretherearenootheractivenetworkconnectionson yourcomputer(disconnectWiFiconnectionsandEthernet cables). 2. EntertheaccesspointsdefaultIPaddress192.168.2.2intotheURLbarof awebbrowser. 3. Youwillbepromptedforausernameandpassword.Enterthedefault usernameadminandthedefaultpassword1234. 12 4. GotoWirelessSettingsWirelessExtender. 5. ClickScantosearchforanddisplayavailableSSIDsandclickSelectto connecttoanavailablesourceSSID.SSIDscanbeconfiguredindependently foreachfrequency2.4GHz&5GHz. 13 6. EditthenewextendedSSIDaccordingtoyourpreferenceandenterthe securitydetailsforthesourceSSID,andthenclickConnect. 7. TheAPinrepeatermodewillestablishaconnectiontothesourceSSIDand repeattheextendedSSID.TherepeaterAPwillbecomeaDHCPclientof therouter/rootAP.SwitchyourcomputerbacktoadynamicIPaddress. 14 III. HardwareInstallation ConnectingtheaccesspointtoarouterorPoEswitch III1. 1. ConnectarouterorPoEswitchtotheaccesspointsLANportusingan Ethernetcable. 2. Ifyouareusingarouter,then connectthepoweradaptertothe accesspoints12VDCportand plugthepoweradapterintoa powersupply. Donotusethepower adapterifyouareusinga PoEswitch. 15 Mountingtheaccesspointtoaceiling III2. Tomounttheaccesspointtoaceiling,pleasefollowtheinstructionsbelow andrefertodiagramA&B. ForWoodenCeilings(refertodiagramA):
1. Placetheceilingmountbrackettoaceilinginyourdesiredlocationand usetheincludedscrewsx4tofixitintoplace(i). groovesintheaccesspointtotheceilingmount,asshowninii. 2. Attachtheaccesspointtotheceilingmountbracketbyaligningthe 3. Securetheaccesspointfirmlyinplaceusingtheincludedscrewasshown ForOtherCeilings(refertodiagramB):
1. Drillfourholesinyourceilingusingtheceilingmountbracketasaguide, iniii. andinsertthefourincludedwallplugs/screwanchors(i). 2. Aligntheceilingmountbracketwithyourwallplugs/screwanchorsanduse theincludedscrewsx4tofixitintoplace(ii). groovesintheaccesspointtotheceilingmount,asshowniniii. 3. Attachtheaccesspointtotheceilingmountbracketbyaligningthe 4. Securetheaccesspointfirmlyinplaceusingtheincludedscrewasshown iniv. 16 A i ii iii 17 iv B i ii iii 18 TRailMount III3. TomounttheaccesspointtoaTRail,pleasefollowtheinstructionsbelow andrefertodiagramC,D&E. 1. SelectthecorrectsizeTRailbracketfromthetwosizeswhichare includedinthepackagecontents. 2. AttachtheTRailbrackettotheceilingmountusingtheincludedscrewsx 2asshownini. YoucanusetheincludedbracketandlongerscrewsIfyouneed morespacebetweentheaccesspointandtheTRail. groovesintheaccesspointtotheceilingmount,asshowninii. 3. Attachtheaccesspointtotheceilingmountbracketbyaligningthe 4. Securetheaccesspointfirmlyinplaceusingtheincludedscrewasshown 5. CliptheaccesspointontoyourTRailusingthenowattachedTRail iniii. bracket. C i ii iii 19 D E i ii i ii 20 iii iii IV. BrowserBasedConfigurationInterface InManagedAPmodesomefunctionsofthebrowserbased configurationinterfacearedisabled.PleaseuseNMSonyour ControllerAPtoconfigureyourManagedAP(s). Thebrowserbasedconfigurationinterfaceenablesyoutoconfigurethe accesspointsadvancedfeatures.TheAC1750featuresarangeofadvanced functionssuchasMACfiltering,MACRADIUSauthentication,VLAN configurations,upto32SSIDsandmanymore.Toaccessthebrowserbased configurationinterface:
1. ConnectacomputertoyouraccesspointusinganEthernetcable. 2. EnteryouraccesspointsIPaddressintheURLbarofawebbrowser.The accesspointsdefaultIPaddressis192.168.2.2. 3. Youwillbepromptedforausernameandpassword.Thedefault usernameisadminandthedefaultpasswordis1234,thoughitwas recommendedthatyouchangethepasswordduringsetup(seeIII2.Basic Settings). Ifyoucannotrememberyourpassword,resettheaccesspoint backtoitsfactorydefaultsettings.RefertoI5.Reset 4. YouwillarriveattheSystemInformationscreenshownbelow. 21 5. Usethemenuacrossthetopanddowntheleftsidetonavigate.Click Applytosavechangesandreloadtheaccesspoint,orCanceltocancel changes. Pleasewaitafewsecondsfortheaccesspointtoreloadafteryou Applychanges,asshownbelow. 6. Pleaserefertothefollowingchaptersforfulldescriptionsofthebrowser basedconfigurationinterfacefeatures. 22 Information IV1. Screenshotsdisplayedareexamples.Theinformationshownon yourscreenwillvarydependingonyourconfiguration. IV11. SystemInformation TheSystemInformationpagedisplaysbasic systeminformationabouttheaccesspoint. 23 24 System Model ProductName Uptime BootFrom FirmwareVersion MACAddress ManagementVLAN ID IPAddress Default Gateway DNS DHCPServer Displaysthemodelnumberoftheaccess point. Displaystheproductnameforreference, whichconsistsofAPplustheMACaddress. Displaysthetotaltimesincethedevicewas turnedon. Displaysinformationforthebooted hardware,bootedfromeitherUSBorinternal memory. Displaysthefirmwareversion. DisplaystheaccesspointsMACaddress. DisplaysthemanagementVLANID. DisplaystheIPaddressofthisdevice.Click Refreshtoupdatethisvalue. DisplaystheIPaddressofthedefault gateway. IPaddressofDNS(DomainNameServer) IPaddressofDHCPServer. WiredLANPortSettings WiredLANPort Status VLANMode/ID SpecifieswhichLANport.USBistheLANport attachedviaminiUSBadapter. DisplaysthestatusofthespecifiedLANport
(connectedordisconnected). DisplaystheVLANmode(taggedoruntagged) andVLANIDforthespecifiedLANport.See IV23.VLAN Wireless2.4GHz(5GHz) Status MACAddress Channel TransmitPower RSSI Displaysthestatusofthe2.4GHzor5GHz wireless(enabledordisabled). DisplaystheaccesspointsMACaddress. Displaysthechannelnumberthespecified wirelessfrequencyisusingforbroadcast. Displaysthewirelessradiotransmitpower levelasapercentage. DisplaysReceivedSignalStrengthIndicator. 25 Wireless2.4GHZ(5GHz)/SSID SSID Authentication Method EncryptionType VLANID Additional Authentication WirelessClient Isolation DisplaystheSSIDname(s)forthespecified frequency. Displaystheauthenticationmethodforthe specifiedSSID.SeeIV3.WirelessSettings Displaystheencryptiontypeforthespecified SSID.SeeIV3.WirelessSettings DisplaystheVLANIDforthespecifiedSSID. SeeIV23.VLAN Displaystheadditionalauthenticationtypefor thespecifiedSSID.SeeIV3.WirelessSettings Displayswhetherwirelessclientisolationisin useforthespecifiedSSID.SeeIV23.VLAN Wireless2.4GHZ(5GHz)/WDSStatus MACAddress EncryptionType VLANMode/ID DisplaysthepeeraccesspointsMACaddress. Displaystheencryptiontypeforthespecified WDS.SeeIV314.WDS DisplaystheVLANIDforthespecifiedWDS. SeeIV314.WDS Refresh Clicktorefreshallinformation. ExtenderMode:
Wireless2.4GHZ(5GHz)/SSID ConnectionStatus SourceSSID Currentstatusoftherepeatersconnection. DisplaystheSSIDname(s)fortherepeaters 26 ExtendedSSID Authentication Method EncryptionType MACAddress Channel TransmitPower RSSI source. DisplaystheSSIDname(s)oftherepeater. Displaystheauthenticationmethodforthe specifiedSSID.SeeIV3.WirelessSettings Displaystheencryptiontypeforthespecified SSID.SeeIV3.WirelessSettings DisplaystheaccesspointsMACaddress. Displaysthechannelnumberthespecified wirelessfrequencyisusingforbroadcast. Displaysthewirelessradiotransmitpower levelasapercentage. DisplaysReceivedSignalStrengthIndicator. 27 IV12. WirelessClients connectedtotheaccesspointonthe2.4GHzor5GHzfrequency. TheWirelessClientspagedisplays informationaboutallwirelessclients Refreshtime AutoRefreshTime ManualRefresh Selectatimeintervalfortheclienttablelistto automaticallyrefresh. Clickrefreshtomanuallyrefreshtheclient table. 2.4GHz(5GHz)WLANClientTable SSID MACAddress Tx Rx DisplaystheSSIDwhichtheclientis connectedto. DisplaystheMACaddressoftheclient. Displaysthetotaldatapacketstransmittedby thespecifiedclient. Displaysthetotaldatapacketsreceivedby thespecifiedclient. 28 Signal(%) ConnectedTime IdleTime Vendor Displaysthewirelesssignalstrengthforthe specifiedclient. Displaysthetotaltimethewirelessclienthas beenconnectedtotheaccesspoint. Clientidletimeisthetimeforwhichtheclient hasnottransmittedanydatapacketsi.e.is idle. Thevendoroftheclientswirelessadapteris displayedhere. 29 IV13. WirelessMonitor WirelessMonitorisatoolbuiltintotheaccess pointtoscanandmonitorthesurrounding wirelessenvironment.SelectafrequencyandclickScantodisplayalistof allSSIDswithinrangealongwithrelevantdetailsforeachSSID. WirelessMonitor SiteSurvey ChannelSurvey Result SiteSurveyResults Ch SSID MACAddress Security Selectwhichfrequency(orboth)toscan,and clickScantobegin. Afterascaniscomplete,clickExporttosave theresultstolocalstorage. Displaysthechannelnumberusedbythe specifiedSSID. DisplaystheSSIDidentifiedbythescan. DisplaystheMACaddressofthewireless router/accesspointforthespecifiedSSID. Displaystheauthentication/encryptiontype ofthespecifiedSSID. 30 Signal(%) Type Vendor Displaysthecurrentsignalstrengthofthe SSID. Displaysthe802.11wirelessnetworking standard(s)ofthespecifiedSSID. Displaysthevendorofthewireless router/accesspointforthespecifiedSSID. 31 IV14. Log processes.Thisinformationisusefulfornetworkadministrators. Thesystemlogdisplayssystemoperation informationsuchasuptimeandconnection Whenthelogisfull,oldentriesareoverwritten.UsetheSearch functiontoquicklylocatelogentries. Save Clear Refresh Clicktosavethelogasafileonyourlocal computer. Clearalllogentries. Refreshthecurrentlog. 32 Thefollowinginformation/eventsarerecordedbythelog:
USB Mount&unmount
WirelessClient Connected&disconnected Keyexchangesuccess&fail
Authentication Authenticationfailorsuccessful.
Association Successorfail
WPS M1M8messages WPSsuccess
ChangeSettings
SystemBoot Displayscurrentmodelname
NTPClient
WiredLink
ProxyARP LANPortlinkstatusandspeedstatus ProxyARPmodulestart&stop Bridgestart&stop. SNMPserverstart&stop. HTTPstart&stop. HTTPSstart&stop.
Bridge
SNMP
HTTP
HTTPS
SSH
Telnet SSHclientserverstart&stop. Telnetclientserverstartorstop.
WLAN(2.4G)
WLAN(5G) WLAN(2.4G]channelstatusandcountry/regionstatus WLAN(5G)channelstatusandcountry/regionstatus 33 NetworkSettings IV2. Screenshotsdisplayedareexamples.Theinformationshownon yourscreenwillvarydependingonyourconfiguration. IV21. LANSideIPAddress TheLANsideIPaddresspageallowsyouto configureyouraccesspointonyourLocalArea Network(LAN).YoucanenabletheaccesspointtodynamicallyreceiveanIP addressfromyourroutersDHCPserveroryoucanspecifyastaticIPaddress foryouraccesspoint,aswellasconfigureDNSservers. TheaccesspointsdefaultIPaddressis192.168.2.2. LANsideIPAddress IPAddress Assignment IPAddress SubnetMask SelectDHCPClientforyouraccesspointto beassignedadynamicIPaddressfromyour routersDHCPserver,orselectStaticIPto manuallyspecifyastatic/fixedIPaddressfor youraccesspoint(below). SpecifytheIPaddresshere.ThisIPaddress willbeassignedtoyouraccesspointandwill replacethedefaultIPaddress. Specifyasubnetmask.Thedefaultvalueis 255.255.255.0 34 DefaultGateway ForDHCPusers,selectFromDHCPtoget defaultgatewayfromyourDHCPserveror UserDefinedtoenteragatewaymanually. ForstaticIPusers,thedefaultvalueisblank. DHCPuserscanselecttogetDNSserversIPaddressfromDHCPormanually enteravalue.ForstaticIPusers,thedefaultvalueisblank. PrimaryAddress DHCPuserscanselectFromDHCPtoget primaryDNSserversIPaddressfromDHCPor UserDefinedtomanuallyenteravalue.For staticIPusers,thedefaultvalueisblank. SecondaryAddress UserscanmanuallyenteravaluewhenDNS serversprimaryaddressissetto UserDefined. 35 IV22. LANPort pointstwowiredLAN(Ethernet)ports. TheLANPortpageallowsyouto configurethesettingsforyouraccess WiredLANPort Enable Speed&Duplex FlowControl 802.3az IdentifiesLANport.USBistheLANport attachedviaminiUSBadapter. Enable/disablespecifiedLANport. Selectaspeed&duplextypeforspecifiedLAN port,orusetheAutovalue.LANportscan operateupto1000Mbpsandfullduplex enablessimultaneousdatapackets transfer/receive. Enable/disableflowcontrol.Flowcontrolcan pausenewsessionrequestuntilcurrentdata processingiscomplete,inordertoavoid deviceoverloadsunderheavytraffic. Enable/disable802.3az.802.3azisanEnergy EfficientEthernetfeaturewhichdisables unusedinterfacestoreducepowerusage. 36 IV23. VLAN TheVLAN(VirtualLocalAreaNetwork) enablesyoutoconfigureVLANsettings.A VLANisalocalareanetworkwhichmaps workstationsvirtuallyinsteadofphysicallyandallowsyoutogrouptogether orisolateusersfromeachother.VLANIDs14095aresupported. VLANIDsintherange14095aresupported. VLANInterface WiredLAN Port/Wireless VLANMode VLANID ManagementVLAN VLANID IdentifiesLANportnumberandwirelessSSIDs. USBistheLANportattachedviaminiUSB adapter. SelectTaggedPortorUntaggedPortfor specifiedLANinterface. SetaVLANIDforspecifiedinterface,if UntaggedPortisselected. SpecifytheVLANIDofthemanagementVLAN. OnlythehostsbelongingtothesameVLANcan managethedevice. 37 WirelessSettings IV3. Screenshotsdisplayedareexamples.Theinformationshownon yourscreenwillvarydependingonyourconfiguration. IV31. WirelessExtender OnlyavailableinRepeaterMode Thewirelessextenderpagedisplaysdetails abouttheAPswirelessconnectioninrepeater modeandenablesyoutoconnecttoasourceSSIDandconfigurethenew
(repeater)SSID.Settingsaresavedasprofiles.ClickScantosearchforand displayavailableSSIDsandclickSelecttoconnecttoanavailableSSID.SSIDs canbeconfiguredindependentlyforeachfrequency2.4GHz&5GHz. 38 Wireless2.4GHz/5GHz Select Channel SSID MACAddress Security Signal(%) Type ClicktoselectanSSIDanddisplayanewCreate Profilewindowtoentersecurityinformation
(below). DisplaysthechannelnumberoflistedSSID. DisplaystheSSID. DisplaystheMACaddressofspecifiedSSID. Displaystheexistingsecuritytypeforlisted SSID. Displaystheavailablesignalstrengthforlisted SSID. Displaysthewireless802.11standardforeach SSID. WirelessCreateProfile SSID ExtendedSSID Authentication Method DisplaystheselectedsourceSSIDforthis profile. EditthenewSSIDforthisprofile. SelectthesourceSSIDsauthenticationmethod andenterencryptionkey/presharedkey. 39 IV32. ProfileList OnlyavailableinRepeaterMode Repeatermodesettingsaresavedasprofiles. Profilescanbeeditedandmultipleprofiles canbecreatedtoswitchbetweenprofiles easilyasrequired.SelectanexistingprofileandclickEditorConnect. WirelessCreateProfile SSID ExtendedSSID Authentication Method DisplaystheselectedsourceSSIDforthis profile. EditthenewSSIDforthisprofile. SelectthesourceSSIDsauthenticationmethod andenterencryptionkey/presharedkey. 40 IV33. 2.4GHz11bgn The2.4GHz11bgnmenuallowsyoutoview andconfigureinformationforyouraccess points2.4GHzwirelessnetworkacrossfive categories:Basic,Advanced,Security,WDS&Schedule. IV331. Basic TheBasicscreendisplaysbasicsettingsfor youraccesspoints2.4GHzWiFinetwork(s). 41 Wireless Band Enableordisabletheaccesspoints2.4GHz wirelessradio.Whendisabled,no2.4GHz SSIDswillbeactive. Selectthewirelessstandardusedforthe accesspoint.Combinationsof802.11b, 802.11g&802.11ncanbeselected. EnableSSIDNumber SelecthowmanySSIDstoenableforthe AutoChannelRange Selectarangefromwhichtheautochannel SSID#
VLANID AutoChannel AutoChannel Interval ChannelBandwidth BSSBasicRateSet 2.4GHzfrequencyfromthedropdownmenu. Amaximumof16canbeenabled. EntertheSSIDnameforthespecifiedSSID(up to16).TheSSIDcanconsistofany combinationofupto32alphanumeric characters. SpecifyaVLANIDforeachSSID. Enable/disableautochannelselection.Auto channelselectionwillautomaticallysetthe wirelesschannelfortheaccesspoints2.4GHz frequencybasedonavailabilityandpotential interference.Whendisabled,selectachannel manuallyasshowninthenexttable. setting(above)willchooseachannel. Specifyafrequencyforhowoftentheauto channelsettingwillcheck/reassignthe wirelesschannel.Check/unchecktheChange channelevenifclientsareconnectedbox accordingtoyourpreference. Setthechannelbandwidth:20MHz(lower performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher interference)orAuto(automaticallyselect basedoninterferencelevel). SetaBasicServiceSet(BSS)rate:thisisa seriesofratestocontrolcommunication framesforwirelessclients. 42 Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel ChannelBandwidth BSSBasicRateSet Selectawirelesschannelfrom111. Setthechannelbandwidth:20MHz(lower performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher interference)orAuto(automaticallyselect basedoninterferencelevel). SetaBasicServiceSet(BSS)rate:thisisa seriesofratestocontrolcommunication framesforwirelessclients. 43 IV332. Advanced Thesesettingsareforexperiencedusersonly. Pleasedonotchangeanyofthevaluesonthis pageunlessyouarealreadyfamiliarwiththesefunctions. Changingthesesettingscanadverselyaffecttheperformanceof youraccesspoint. ContentionSlot PreambleType GuardInterval SelectShortorLongthisvalueisusedfor contentionwindowsinWMM(seeIV36. WMM). Setthewirelessradiopreambletype.The preambletypein802.11basedwireless communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor communicationbetweentheaccesspointand roamingwirelessadapters.Thedefaultvalueis ShortPreamble. Settheguardinterval.Ashorterintervalcan improveperformance. 44 802.11gProtection Enable/disable802.11gprotection,which increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to accesspoint,andaccesspointwillbroadcast CleartoSend(CTS),beforeapacketissent fromclient.) DTIMPeriod RTSThreshold Fragment Threshold MulticastRate 802.11nProtection Enable/disable802.11nprotection,which increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to accesspoint,andaccesspointwillbroadcast CleartoSend(CTS),beforeapacketissent fromclient.) SettheDTIM(deliverytrafficindication message)periodvalueofthewirelessradio. Thedefaultvalueis1. SettheRTSthresholdofthewirelessradio.The defaultvalueis2347. Setthefragmentthresholdofthewireless radio.Thedefaultvalueis2346. Setthetransferrateformulticastpacketsor usetheAutosetting. Setthepoweroutputofthewirelessradio.You maynotrequire100%outputpower.Settinga lowerpoweroutputcanenhancesecuritysince potentiallymalicious/unknownusersindistant areaswillnotbeabletoaccessyoursignal. Setthebeaconintervalofthewirelessradio. Thedefaultvalueis100. Settheintervalforkeepalivemessagesfrom theaccesspointtoawirelessclienttoverifyif thestationisstillalive/active. Stationidle timeout BeaconInterval TxPower 45 IV333. Security Theaccesspointprovidesvarioussecurityoptions
(wirelessdataencryption).Whendatais encrypted,informationtransmittedwirelesslycannotbereadbyanyonewho doesnotknowthecorrectencryptionkey. Itsessentialtoconfigurewirelesssecurityinordertoprevent unauthorisedaccesstoyournetwork. Selecthardtoguesspasswordswhichincludecombinationsof numbers,lettersandsymbols,andchangeyourpassword regularly. 46 2.4GHzWirelessSecuritySettings SSIDSelection BroadcastSSID WirelessClient Isolation LoadBalancing Authentication Method Additional Authentication SelectwhichSSIDtoconfiguresecuritysettings for. EnableordisableSSIDbroadcast.When enabled,theSSIDwillbevisibletoclientsasan availableWiFinetwork.Whendisabled,the SSIDwillnotbevisibleasanavailableWiFi networktoclientsclientsmustmanually entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana visible(enabled)SSID. Enableordisablewirelessclientisolation. Wirelessclientisolationpreventsclients connectedtotheaccesspointfrom communicatingwitheachotherandimproves security.Typically,thisfunctionisusefulfor corporateenvironmentsorpublichotspots andcanpreventbruteforceattacksonclients usernamesandpasswords. Loadbalancinglimitsthenumberofwireless clientsconnectedtoanSSID.Setaload balancingvalue(maximum50). Selectanauthenticationmethodfromthedrop downmenuandrefertotheinformation belowappropriateforyourmethod. Selectanadditionalauthenticationmethod fromthedropdownmenuandrefertothe informationbelow(IV3136.)appropriatefor yourmethod. 2.4GHzWirelessAdvancedSettings SmartHandover RSSIThreshold Enableordisablesmarthandover. SettheReceivedSignalStrengthIndicator
(RSSI)thresholdtomaintainqualityconnection speeds(minimumreceiversensitivityrequired foraconnection). 47 IV3331. NoAuthentication Authenticationisdisabledandnopassword/keyisrequiredtoconnecttothe accesspoint. Disablingwirelessauthenticationisnotrecommended.When disabled,anybodywithinrangecanconnecttoyourdevicesSSID. IV3332. WEP WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Forahigher levelofsecurityconsiderusingWPAencryption. KeyLength KeyType DefaultKey EncryptionKey1 4 Select64bitor128bit.128bitismoresecure than64bitandisrecommended. ChoosefromASCII(anyalphanumerical character09,azandAZ)orHex(any charactersfrom09,afandAF). Selectwhichencryptionkey(14below)isthe defaultkey.Forsecuritypurposes,youcanset uptofourkeys(below)andchangewhichis thedefaultkey. Enteryourencryptionkey/passwordaccording totheformatyouselectedabove. IV3333. IEEE802.1x/EAP KeyLength Select64bitor128bit.128bitismoresecure than64bitandisrecommended. IV3334. WPAPSK WPAPSKisasecurewirelessencryptiontypewithstrongdata protectionanduserauthentication,utilizing128bitencryptionkeys. WPAType SelectfromWPA/WPA2MixedModePSK, WPA2orWPAonly.WPA2issaferthanWPA only,butnotsupportedbyallwirelessclients. Pleasemakesureyourwirelessclientsupports 48 Encryption KeyRenewal Interval PreSharedKey Type PreSharedKey IV3335. WPAEAP WPAType EncryptionType KeyRenewal Interval yourselection. SelectTKIP/AESMixedModeorAES encryptiontype. Specifyafrequencyforkeyrenewalin minutes. ChoosefromPassphrase(863 alphanumericcharacters)orHex(upto64 charactersfrom09,afandAF). Pleaseenterasecuritykey/passwordaccording totheformatyouselectedabove. SelectfromWPA/WPA2MixedModeEAP, WPA2EAPorWPAEAP. SelectTKIP/AESMixedModeorAES encryptiontype. Specifyafrequencyforkeyrenewalin minutes. WPAEAPmustbedisabledtouseMACRADIUSauthentication. IV3336. AdditionalAuthentication Additionalwirelessauthenticationmethodscanalsobeused:
WPSmustbedisabledtouseadditionalauthentication.SeeIV33. forWPSsettings. MACAddressFilter RestrictwirelessclientsaccessbasedonMACaddressspecifiedintheMAC filtertable. SeeIV35.MACFiltertoconfigureMACfiltering. MACFilter&MACRADIUSAuthentication RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering&
RADIUSauthenticationmethods. 49 MACRADIUSAuthentication RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,or passwordauthenticationviaaRADIUSserver. SeeIV34.RADIUStoconfigureRADIUSservers. WPSmustbedisabledtouseMACRADIUSauthentication.See IV33.forWPSsettings. MACRADIUS Password SelectwhethertouseMACaddressor passwordauthenticationviaRADIUSserver.If youselectUsethefollowingpassword,enter thepasswordinthefieldbelow.Thepassword shouldmatchtheSharedSecretusedin IV34.RADIUS. 50 IV334. WDS WirelessDistributionSystem(WDS)can bridge/repeataccesspointstogetherinan extendednetwork.WDSsettingscanbeconfiguredasshownbelow. WhenusingWDS,configuretheIPaddressofeachaccesspointto beinthesamesubnetandensurethereisonlyoneactiveDHCP serveramongconnectedaccesspoints,preferablyontheWAN side. WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses. Allaccesspointsshouldusethesamewirelesschannelandencryption method. 51 2.4GHz WDSFunctionality SelectWDSwithAPtouseWDSwithaccess pointorWDSDedicatedModetouseWDS andalsoblockcommunicationwithregular wirelessclients.WhenWDSisused,each accesspointshouldbeconfiguredwith correspondingMACaddresses,wireless channelandwirelessencryptionmethod. LocalMACAddress DisplaystheMACaddressofyouraccesspoint. WDSPeerSettings WDS#
WDSVLAN VLANMode VLANID EntertheMACaddressforuptofourother WDSdevicesyouwishtoconnect. SpecifytheWDSVLANmodetoUntagged PortorTaggedPort. SpecifytheWDSVLANIDwhenUntagged Portisselectedabove. WDSEncryptionmethod Encryption SelectwhethertouseNoneorAES encryptionandenterapresharedkeyforAES consistingof863alphanumericcharacters. 52 IV34. 5GHz11ac11an The5GHz11ac11anmenuallowsyoutoview andconfigureinformationforyouraccesspoints 5GHzwirelessnetworkacrossfivecategories:Basic,Advanced,Security,WDS
&Schedule. IV341. Basic TheBasicscreendisplaysbasicsettingsfor youraccesspoints5GHzWiFinetwork(s). Wireless Band Enableordisabletheaccesspoints5GHz wirelessradio.Whendisabled,no5GHzSSIDs willbeactive. Selectthewirelessstandardusedforthe accesspoint.Combinationsof802.11a, 53 802.11n&802.11accanbeselected. EnableSSIDNumber SelecthowmanySSIDstoenableforthe5GHz AutoChannelRange Selectarangefromwhichtheautochannel SSID#
VLANID AutoChannel AutoChannel Interval ChannelBandwidth BSSBasicRateSet frequencyfromthedropdownmenu.A maximumof16canbeenabled. EntertheSSIDnameforthespecifiedSSID(up to16).TheSSIDcanconsistofany combinationofupto32alphanumeric characters. SpecifyaVLANIDforeachSSID. Enable/disableautochannelselection.Auto channelselectionwillautomaticallysetthe wirelesschannelfortheaccesspoints5GHz frequencybasedonavailabilityandpotential interference.Whendisabled,selectachannel manuallyasshowninthenexttable. setting(above)willchooseachannel. Specifyafrequencyforhowoftentheauto channelsettingwillcheck/reassignthe wirelesschannel.Check/unchecktheChange channelevenifclientsareconnectedbox accordingtoyourpreference. Setthechannelbandwidth:20MHz(lower performancebutlessinterference),Auto 40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference level). SetaBasicServiceSet(BSS)rate:thisisa seriesofratestocontrolcommunication framesforwirelessclients. Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel ChannelBandwidth BSSBasicRateSet Selectawirelesschannel. Setthechannelbandwidth:20MHz(lower performancebutlessinterference),Auto 40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference level). SetaBasicServiceSet(BSS)rate:thisisa seriesofratestocontrolcommunication 54 framesforwirelessclients. IV342. Advanced Thesesettingsareforexperiencedusersonly. Pleasedonotchangeanyofthevaluesonthis pageunlessyouarealreadyfamiliarwiththesefunctions. Changingthesesettingscanadverselyaffecttheperformanceof youraccesspoint. GuardInterval Settheguardinterval.Ashorterintervalcan improveperformance. DTIMPeriod 802.11nProtection Enable/disable802.11nprotection,which increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to accesspoint,andaccesspointwillbroadcast CleartoSend(CTS),beforeapacketissent fromclient.) SettheDTIM(deliverytrafficindication message)periodvalueofthewirelessradio. Thedefaultvalueis1. SettheRTSthresholdofthewirelessradio.The defaultvalueis2347. Setthefragmentthresholdofthewireless radio.Thedefaultvalueis2346. Fragment Threshold RTSThreshold 55 MulticastRate TxPower BeaconInterval Stationidle timeout Setthetransferrateformulticastpacketsor usetheAutosetting. Setthepoweroutputofthewirelessradio.You maynotrequire100%outputpower.Settinga lowerpoweroutputcanenhancesecuritysince potentiallymalicious/unknownusersindistant areaswillnotbeabletoaccessyoursignal. Setthebeaconintervalofthewirelessradio. Thedefaultvalueis100. Settheintervalforkeepalivemessagesfrom theaccesspointtoawirelessclienttoverifyif thestationisstillalive/active. 56 IV343. Security Theaccesspointprovidesvarioussecurityoptions
(wirelessdataencryption).Whendatais encrypted,informationtransmittedwirelessly cannotbereadbyanyonewhodoesnotknowthecorrectencryptionkey. Itsessentialtoconfigurewirelesssecurityinordertoprevent unauthorisedaccesstoyournetwork. Selecthardtoguesspasswordswhichincludecombinationsof numbers,lettersandsymbols,andchangeyourpassword regularly. SSIDSelection BroadcastSSID SelectwhichSSIDtoconfiguresecuritysettings for. EnableordisableSSIDbroadcast.When enabled,theSSIDwillbevisibletoclientsasan availableWiFinetwork.Whendisabled,the SSIDwillnotbevisibleasanavailableWiFi networktoclientsclientsmustmanually entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana visible(enabled)SSID. 57 WirelessClient Isolation LoadBalancing Authentication Method Additional Authentication Enableordisablewirelessclientisolation. Wirelessclientisolationpreventsclients connectedtotheaccesspointfrom communicatingwitheachotherandimproves security.Typically,thisfunctionisusefulfor corporateenvironmentsorpublichotspots andcanpreventbruteforceattacksonclients usernamesandpasswords. Loadbalancinglimitsthenumberofwireless clientsconnectedtoanSSID.Setaload balancingvalue(maximum50). Selectanauthenticationmethodfromthedrop downmenuandrefertotheinformation belowappropriateforyourmethod. Selectanadditionalauthenticationmethod fromthedropdownmenuandrefertothe informationbelowappropriateforyour method. PleasereferbacktoIV313.Securityformoreinformationonauthentication andadditionalauthenticationtypes. 58 IV344. WDS configuredasshownbelow. WirelessDistributionSystem(WDS)can bridge/repeataccesspointstogetherinan extendednetwork.WDSsettingscanbe WhenusingWDS,configuretheIPaddressofeachaccesspointto beinthesamesubnetandensurethereisonlyoneactiveDHCP serveramongconnectedaccesspoints,preferablyontheWAN side. WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses. Allaccesspointsshouldusethesamewirelesschannelandencryption method. 59 5GHzWDSMode WDSFunctionality SelectWDSwithAPtouseWDSwithaccess pointorWDSDedicatedModetouseWDS andalsoblockcommunicationwithregular wirelessclients.WhenWDSisused,each accesspointshouldbeconfiguredwith correspondingMACaddresses,wireless channelandwirelessencryptionmethod. LocalMACAddress DisplaystheMACaddressofyouraccesspoint. WDSPeerSettings WDS#
WDSVLAN VLANMode VLANID WDSEncryption Encryption EntertheMACaddressforuptofourother WDAdevicesyouwishtoconnect. SpecifytheWDSVLANmodetoUntagged PortorTaggedPort. SpecifytheWDSVLANIDwhenUntagged Portisselectedabove. SelectwhethertouseNoneorAES encryptionandenterapresharedkeyforAES with863alphanumericcharacters. 60 IV35.WPS WiFiProtectedSetupisasimplewayto establishconnectionsbetweenWPS compatibledevices.WPScanbeactivatedoncompatibledevicesbypushinga WPSbuttononthedeviceorfromwithinthedevicesfirmware/configuration interface(knownasPBCorPushButtonConfiguration).WhenWPSis activatedinthecorrectmannerandatthecorrecttimefortwocompatible devices,theywillautomaticallyconnect.PINcodeWPSisavariationofPBC whichincludestheadditionaluseofaPINcodebetweenthetwodevicesfor verification. PleaserefertomanufacturersinstructionsforyourotherWPS device. 61 WPS WPS ProductPIN PushButtonWPS WPSbyPIN WPSSecurity WPSStatus Check/uncheckthisboxtoenable/disableWPS functionality.WPSmustbedisabledwhen usingMACRADIUSauthentication(see IV3136&IV34). DisplaystheWPSPINcodeofthedevice,used forPINcodeWPS.Youwillberequiredtoenter thisPINcodeintoanotherWPSdeviceforPIN codeWPS.ClickGeneratePINtogeneratea newWPSPINcode. ClickStarttoactivateWPSontheaccess pointforapproximately2minutes.Thishasthe sameeffectasphysicallypushingtheaccess pointsWPSbutton. EnterthePINcodeofanotherWPSdeviceand clickStarttoattempttoestablishaWPS connectionforapproximately2minutes. WPSsecuritystatusisdisplayedhere.Click Releasetocleartheexistingstatus. Wireless2.4GHz/5GHz SSID Security Encryption DisplaystheSSIDname(s)forthespecified frequency. DisplaysthesecurityforthespecifiedSSID. Displaystheencryptiontypeforthespecified SSID.SeeIV3.WirelessSettings 62 IV36. RADIUS TheRADIUSmenuallowsyoutoconfigurethe accesspointsexternalRADIUSserversettings. ARADIUSserverprovidesuserbasedauthenticationtoimprovesecurityand offerwirelessclientcontroluserscanbeauthenticatedbeforegaining accesstoanetwork. Theaccesspointcanutilizebothaprimaryandsecondary(backup)external RADIUSserverforeachofitswirelessfrequencies(2.4GHz&5GHz).. TouseRADIUSservers,gotoWirelessSettingsSecurityand selectMACRADIUSAuthenticationAdditional AuthenticationandselectMACRADIUSAuthentication(see IV313.&IV323). 63 IV361. RADIUSSettings externalRADIUSserver. ConfiguretheRADIUSserversettingsfor 2.4GHz.Eachfrequencycanuseaninternalor 64 RADIUSType RADIUSServer Authentication Port SharedSecret SessionTimeout Accounting AccountingPort SelectInternaltousetheaccesspoints builtinRADIUSserverorexternaltousean externalRADIUSserver. EntertheRADIUSserverhostIPaddress. SettheUDPportusedintheauthentication protocoloftheRADIUSserver.Valuemustbe between165535. Enterasharedsecret/passwordbetween1 99charactersinlength.Thisshouldmatchthe MACRADIUSpasswordusedinIV3136or IV323. Setadurationofsessiontimeoutinseconds between086400. EnableordisableRADIUSaccounting. Whenaccountingisenabled(above),setthe UDPportusedintheaccountingprotocolof theRADIUSserver.Valuemustbebetween1 65535. 65 IV362. InternalServer TheaccesspointfeaturesabuiltinRADIUS serverwhichcanbeconfiguredasshown belowusedwhenInternalisselectedforRADIUSTypeintheWireless SettingsRADIUSRADIUSSettingsmenu. TouseRADIUSservers,gotoWirelessSettingsSecurityand selectMACRADIUSAuthenticationAdditional AuthenticationandselectMACRADIUSAuthentication(see IV313.&IV323). InternalServer Check/unchecktoenable/disabletheaccess pointsinternalRADIUSserver. SelectEAPinternalauthenticationtypefrom thedropdownmenu. DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12) EAPInternal Authentication EAPCertificateFile Format EAPCertificateFile ClickUploadtoopenanewwindowand SharedSecret selectthelocationofanEAPcertificatefileto use.Ifnocertificatefileisuploaded,the internalRADIUSserverwilluseaselfmade certificate. Enterasharedsecret/passwordforuse betweentheinternalRADIUSserverand RADIUSclient.Thesharedsecretshouldbe1 66 SessionTimeout 99charactersinlength.Thisshouldmatchthe MACRADIUSpasswordusedinIV3136or IV323. Setadurationofsessiontimeoutinseconds between086400. TerminationAction Selectaterminationactionattribute:
ReauthenticationsendsaRADIUSrequestto theaccesspoint,NotReathenticationsends adefaultterminationactionattributetothe accesspoint,NotSendno terminationactionattributeissenttothe accesspoint. 67 IV363. RADIUSAccounts TheinternalRADIUSservercanauthenticate upto256useraccounts.TheRADIUS Accountspageallowsyoutoconfigureandmanageusers. 68 UserName Add Reset Select UserName Password Customize Entertheusernameshere,separatedby commas. ClickAddtoaddtheusertotheuser registrationlist. Cleartextfromtheusernamebox. Checktheboxtoselectauser. Displaystheusername. Displaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured). ClickEdittoopenanewfieldtoset/edita passwordforthespecifiedusername(below). DeleteSelected DeleteAll Deleteselecteduserfromtheuserregistration list. Deleteallusersfromtheuserregistrationlist. EditUserRegistrationList UserName Password Existingusernameisdisplayedhereandcan beeditedaccordingtoyourpreference. Enteroreditapasswordforthespecifieduser. 69 IV37. MACFilter Macfilteringisasecurityfeaturethatcan helptopreventunauthorizedusersfrom connectingtoyouraccesspoint. Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto connecttotheaccesspoint.DevicesareeachidentifiedbytheiruniqueMAC address.IfadevicewhichisnotonthelistofpermittedMACaddresses attemptstoconnecttotheaccesspoint,itwillbedenied. ToenableMACfiltering,gotoWirelessSettings2.4G Hz11bgnSecurityAdditionalAuthenticationandselect MACFilter(seeIV313). TheMACaddressfilteringtableisdisplayedbelow:
AddMACAddress EnteraMACaddressofcomputerornetwork devicemanuallye.g.aabbccddeeffor entermultipleMACaddressesseparatedwith 70 Add Reset commas,e.g. aabbccddeeff,aabbccddeegg ClickAddtoaddtheMACaddresstothe MACaddressfilteringtable. Clearallfields. MACaddressentrieswillbelistedintheMACAddressFilteringTable.Select anentryusingtheSelectcheckbox. Select MACAddress DeleteSelected DeleteAll Export Deleteselectedorallentriesfromthetable. TheMACaddressislistedhere. DeletetheselectedMACaddressfromthe list. DeleteallentriesfromtheMACaddress filteringtable. ClickExporttosaveacopyoftheMAC filteringtable.Anewwindowwillpopupfor youtoselectalocationtosavethefile. 71 IV38.WMM WiFiMultimedia(WMM)isaWiFiAlliance interoperabilitycertificationbasedonthe IEEE802.11estandard,whichprovides QualityofService(QoS)featurestoIEE802.11networks.WMMprioritizes trafficaccordingtofourcategories:background,besteffort,videoandvoice. ConfiguringWMMconsistsofadjustingparametersonqueuesfordifferent categoriesofwirelesstraffic.Trafficissenttothefollowingqueues:
Background Low Priority BestEffort Medium Priority High Priority High Priority Video Voice Highthroughput,nontimesensitivebulk datae.g.FTP TraditionalIPdata,mediumthroughputand delay. Timesensitivevideodatawithminimum timedelay. TimesensitivedatasuchasVoIPand streamingmediawithminimumtimedelay. Queuesautomaticallyprovideminimumtransmissiondelaysforvideo,voice, multimediaandcriticalapplications.Thevaluescanfurtherbeadjusted manually:
72 CWMin CWMax AIFSN TxOP MinimumContentionWindow(milliseconds):
Thisvalueisinputtotheinitialrandom backoffwaittimealgorithmforretryofadata frametransmission.Thebackoffwaittimewill begeneratedbetween0andthisvalue.Ifthe frameisnotsent,therandombackoffvalueis doubleduntilthevaluereachesthenumber definedbyCWMax(below).TheCWMinvalue mustbelowerthantheCWMaxvalue.The contentionwindowschemehelpstoavoid framecollisionsanddeterminepriorityof frametransmission.Ashorterwindowhasa higherprobability(priority)oftransmission. MaximumContentionWindow(milliseconds):
Thisvalueistheupperlimittorandom backoffvaluedoubling(seeabove). ArbitrationInterFrameSpace(milliseconds):
Specifiesadditionaltimebetweenwhena channelgoesidleandtheAP/clientsends dataframes.TrafficwithalowerAIFSNvalue hasahigherpriority. TransmissionOpportunity(milliseconds):The maximumintervaloftimeanAP/clientcan transmit.Thismakeschannelaccessmore efficientlyprioritized.Avalueof0meansonly oneframepertransmission.Agreatervalue effectshigherpriority. 73 IV39.Schedule Theschedulefeatureallowsyoutoautomate thewirelessnetworkforspecifiedtimes. Check/unchecktheboxEnableWirelessScheduletoenable/disablethe wirelessschedulingfunction. Theaccesspointstimeanddatesettingsmustbesetinorderto usethisfunction. Wirelessschedulingcansaveenergyandincreasethesecurityof yournetwork. 1. CheckEnableandusetheSelect,Add,EditorDeletecheckboxestoselect 2. WhenyouclickAdd,specifyday(s),starttimeandendtimeforthe andmodifyschedule(s). scheduleusingthedropdownmenusandclickApply. 74 3. RemembertoApplyyourchangesandmakesureEnableischecked. 75 IV310. TrafficShaping Thetrafficshapingfunctionallowsyouto regulatenetworkdatatransfertoensureor prioritizeperformancebylimitinguplinkanddownlinkspeedsaccordingto SSID. EnableUnlimited:0 Mbps Downlink/Uplink Check/unchecktoenableordisableunlimited transferspeed. Specifythemaximumdown/uplinkcapacityin 76 Maximum Downlink Uplink Mbps. EnteradownlinklimitinMBforthelisted SSID. EnteranuplinklimitinMBforthelistedSSID. 77 Management Screenshotsdisplayedareexamples.Theinformationshownon yourscreenwillvarydependingonyourconfiguration. IV4. IV41. Admin Youcanchangethepasswordusedtologinto thebrowserbasedconfigurationinterfacehere. Itisadvisedtodosoforsecuritypurposes. Ifyouchangetheadministratorpassword,pleasemakeanote ofthenewpassword.Intheeventthatyouforgetthis passwordandareunabletologintothebrowserbased configurationinterface,seeI5.Resetforhowtoresetthe accesspoint. 78 AccounttoManageThisDevice Administrator Name Settheaccesspointsadministratorname. Thisisusedtologintothebrowserbased configurationinterfaceandmustbebetween 416alphanumericcharacters(casesensitive). Settheaccesspointsadministratorpassword. Thisisusedtologintothebrowserbased configurationinterfaceandmustbebetween 432alphanumericcharacters(casesensitive). Edittheproductnameaccordingtoyour 79 Administrator Password AdvancedSettings ProductName HTTPPort HTTPSPort Management Protocol SNMPVersion SNMPGet Community SNMPSet Community SNMPTrap SNMPTrap Community SNMPTrap Manager preferenceconsistingof132alphanumeric characters.Thisnameisusedforreference purposes. SpecifyHTTPportnumber. SpecifyHTTPSportnumber. Check/unchecktheboxestoenable/disable specifiedmanagementinterfaces(seebelow). WhenSNMPisenabled,completetheSNMP fieldsbelow. SelectSNMPversionappropriateforyour SNMPmanager. EnteranSNMPGetCommunitynamefor verificationwiththeSNMPmanagerfor SNMPGETrequests. EnteranSNMPSetCommunitynamefor verificationwiththeSNMPmanagerfor SNMPSETrequests. EnableordisableSNMPTraptonotifySNMP managerofnetworkerrors. EnteranSNMPTrapCommunitynamefor verificationwiththeSNMPmanagerfor SNMPTRAPrequests. SpecifytheIPaddressorsevername(2128 alphanumericcharacters)oftheSNMP manager. HTTP InternetbrowserHTTPprotocolmanagementinterface TELNET Clientterminalwithtelnetprotocolmanagementinterface SNMP SimpleNetworkManagementProtocol.SNMPv1,v2&v3protocolsupported. SNMPv2canbeusedwithcommunitybasedauthentication.SNMPv3uses userbasedsecuritymodel(USM)architecture. 80 DateandTime IV42. Youcanconfigurethetimezonesettingsofyour accesspointhere.Thedateandtimeofthe devicecanbeconfiguredmanuallyorcanbesynchronizedwithatimeserver. DateandTimeSettings LocalTime AcquireCurrent TimefromyourPC NTPTimeServer UseNTP Settheaccesspointsdateandtimemanually usingthedropdownmenus. ClickAcquireCurrentTimefromYourPCto entertherequiredvaluesautomatically accordingtoyourcomputerscurrenttimeand date. TheaccesspointalsosupportsNTP(Network TimeProtocol)forautomatictimeanddate setup. 81 ServerName UpdateInterval EnterthehostnameorIPaddressofthetime serverifyouwish. Specifyafrequency(inhours)fortheaccess pointtoupdate/synchronizewiththeNTP server. TimeZone TimeZone Selectthetimezoneofyourcountry/region.If yourcountry/regionisnotlisted,pleaseselect anothercountry/regionwhosetimezoneisthe sameasyours. 82 IV43. SyslogServer Thesystemlogcanbesenttoaserveror toattachedUSBstorage. SyslogServerSettings TransferLogs CopyLogsto AttachedUSBDevice Check/unchecktheboxtoenable/disablethe useofasyslogserver,andenterahost name,domainorIPaddressfortheserver, consistingofupto128alphanumeric characters. Check/unchecktheboxtoenable/disable copyinglogstoattachedUSBstorage. SyslogEmailSettings EmailLogs EmailSubject SMTPServer Address SMTPServerPort SenderEmail ReceiverEmail Checktheboxtoenable/disableemaillogs. Specifythesubjectlineoflogemails. SpecifytheSMTPserveraddressusedtosend logemails. SpecifytheSMTPserverportusedtosendlog emails. Specifythesenderemailaddress. Specifytheemailtoreceivelogemails. 83 Authentication Disableorselectauthenticationtype:SSLorTLS. WhenusingSSLorTLS,entertheusernameand password. IV44. PingTest Theaccesspointincludesabuiltinpingtest function.Pingisacomputer networkadministrationutilityusedtotestwhetheraparticularhostis reachableacrossanIPnetworkandtomeasuretheroundtriptimeforsent messages. DestinationAddress Execute Entertheaddressofthehost. Clickexecutetopingthehost. 84 IV45. ImHere Theaccesspointfeaturesabuiltinbuzzer whichcansoundoncommandusingtheIm Herepage.Thisisusefulfornetworkadministratorsandengineersworking incomplexnetworkenvironmentstolocatetheaccesspoint. Thebuzzerisloud!
DurationofSound SoundBuzzer Setthedurationforwhichthebuzzerwill soundwhentheSoundBuzzerbuttonis clicked. Activatethebuzzersoundfortheabove specifieddurationoftime. 85 Advanced IV5. Screenshotsdisplayedareexamples.Theinformationshownon yourscreenwillvarydependingonyourconfiguration. IV51. LEDSettings preference. TheaccesspointsLEDscanbemanually enabledordisabledaccordingtoyour Power/DiagLED Selectonoroff. 86 IV52. UpdateFirmware TheFirmwarepageallowsyoutoupdate thesystemfirmwaretoamorerecent version.Updatedfirmwareversionsoften offerincreasedperformanceandsecurity,aswellasbugfixes.Youcan downloadthelatestfirmwarefromthewebsite. Donotswitchoffordisconnecttheaccesspointduringafirmware upgrade,asthiscoulddamagethedevice. UpdateFirmware From SelectafileonyourPCtouploadfirmware fromyourlocalcomputerorfroman attachedUSBdevice. FirmwareUpdateFile ClickChooseFiletoopenanewwindowto Update locateandselectthefirmwarefileinyour computer. ClickUpdatetouploadthespecified firmwarefiletoyouraccesspoint. 87 IV53. Save/RestoreSettings TheaccesspointsSave/RestoreSettings pageenablesyoutosave/backuptheaccess pointscurrentsettingsasafiletoyourlocalcomputeroraUSBdevice attachedtotheaccesspoint,andrestoretheaccesspointtopreviouslysaved settings. Save/RestoreSettings UsingDevice SaveSettingstoPC SaveSettings SelectUsingyourPCtosavetheaccess pointssettingstoyourlocalcomputerorto anattachedUSBdevice. ClickSavetosavesettingsandanew windowwillopentospecifyalocationto savethesettingsfile.Youcanalsocheckthe Encrypttheconfigurationfilewitha passwordboxandenterapasswordto protectthefileinthefieldunderneath,ifyou wish. RestoreSettingsfromPC RestoreSettings Clickthebrowsebuttontofindapreviously savedsettingsfileonyourcomputer,then clickRestoretoreplaceyourcurrent settings.Ifyoursettingsfileisencryptedwith 88 apassword,checktheOpenfilewith passwordboxandenterthepasswordin thefieldunderneath. 89 IV54. FactoryDefault Iftheaccesspointmalfunctionsorisnot responding,thenitisrecommendedthatyou rebootthedevice(seeIV5.5)orresetthedevicebacktoitsfactorydefault settings.Youcanresettheaccesspointbacktoitsdefaultsettingsusingthis featureifthelocationoftheaccesspointisnotconvenienttoaccessthereset button. FactoryDefault ClickFactoryDefaulttorestoresettingsto thefactorydefault.Apopupwindowwill appearandaskyoutoconfirm. Afterresettingtofactorydefaults,pleasewaitfortheaccess pointtoresetandrestart. 90 IV55. Reboot Iftheaccesspointmalfunctionsorisnot responding,thenitisrecommendedthat yourebootthedeviceorresettheaccesspointbacktoitsfactorydefault settings(seeIV54).Youcanreboottheaccesspointremotelyusingthis feature. Reboot ClickReboottorebootthedevice.A countdownwillindicatetheprogressofthe reboot. 91 OperationMode IV6. Screenshotsdisplayedareexamples.Theinformationshownon yourscreenwillvarydependingonyourconfiguration. Theaccesspointcanfunctioninthreedifferentmodes.Settheoperation modeoftheaccesspointhere. Youraccesspointcanfunctioninthreedifferentmodes. ThedefaultmodeforyouraccesspointisAPmode. APmodeisaregularaccesspointforuseinyourwirelessnetwork. APControllermodeactsasthedesignatedmasterofanAParray(groupof linkedaccesspoints).InAPControllermodetheuserinterfacewillswitchto NMS. ManagedAPmodeactsasaslaveAPwithintheAParray(controlledbythe APControllermaster). InRepeatermodetheaccesspointconnectswirelesslytoyourexisting 2.4GHzand/or5GHznetworkandrepeatsthewirelesssignal(s). InManagedAPmodesomefunctionsoftheaccesspointwillbe disabledinthisuserinterfaceandmustbesetusingNMSonthe APController. 92 OperationMode APModeisastandardaccesspointina wirelessnetwork. APControllerModeisthemasterofanAP arrayandcontrolsallothermanagedAPs
(below)usingNMS. ManagedAPmodeisanAPwhichispartof theAParrayandismanagedbythe ControllerAP. Whenyousettheoperationmodetorepeatermode,theAPwill notgetanIPaddressfromtherouter/rootAP.Youwillneedto setyourcomputersIPaddressandusetheAPsdefaultIPaddress toaccesstheUIforthefirsttime,refertoAppendixformorehelp. 93 NMS NMS 94 NMS I. ProductInformation NetworkManagementSuite(NMS)supportsthecentralmanagementofa groupofaccesspoints,otherwiseknownasanAPArray.AC1750NMS supportsupto7accesspointswithnoadditionalwirelesscontrollerrequired, reducingcostsandfacilitatingefficientremoteAPmanagement. Accesspointscanbedeployedandconfiguredaccordingtorequirements, creatingapowerfulnetworkarchitecturewhichcanbeeasilymanagedand expandedinthefuture,withaneasytouseinterfaceandafullrangeof functionalityidealforsmallandmidsizedofficeenvironments.Asecure WLANcanbedeployedandadministeredfromasinglepoint,minimizingcost andcomplexity. 95 NMS II. QuickSetup NMSissimpletosetup.Anoverviewofthesystemisshownbelow:
OneAP(accesspoint)isdesignatedastheAPController(master)andother connectedAPsareautomaticallydesignatedasManagedAPs(slaves).Using NMSyoucanmonitor,configureandmanageallManagedAPs(upto32)from thesingleAPController. WhenusinganNMSAPcontroller,otherconnectedAPsare automaticallysettoManagedAPs. 96 NMS Ensureyouhavethelatestfirmwarefromthewebsiteforyour products. 1. ConnectallAPstoanEthernetorPoEswitchwhichisconnectedtoa gateway/router. YoucanuseyourrouterasaDHCPserveroryoucanlater configureyourAPControllerasaDHCPserver. 2. EnsureallAPsarepoweredonandcheckLEDs. 97 NMS 3. DesignateoneAPastheAPControllerwhichwillmanageallother connectedAPs(upto8). 4. ConnectacomputertothedesignatedAPControllerusinganEthernet cable. 98 NMS 5. OpenawebbrowserandentertheAPControllersIPaddressinthe addressfield.ThedefaultIPaddressis192.168.2.2 YourcomputersIPaddressmustbeinthesamesubnetastheAP Controller.Refertotheusermanualformorehelp. IfyouchangedtheAPControllersIPaddress,orifyour gateway/routerusesaDHCPserver,ensureyouenterthecorrect IPaddress.Refertoyourgateway/routerssettings. 6. Entertheusername&passwordtologin.Thedefaultusername&
passwordareadmin&1234. 7. YouwillarriveattheNMSDashboard.GotoOperationModeandselect APControllerModefromthedropdownmenu. 99 NMS 8. ClickApplytosavethesettings. 9. NMSincludesawizardtoquicklysetuptheSSID&securityforManaged APs.ClickWizardinthetoprightcornertobegin. 10. FollowtheinstructionscompleteSteps16andclickFinishtosave thesettings.ThewizardwillhelpyousetupLANIPaddress,2.4GHz&
5GHzSSIDandsecurity,administratorname&password,time&date settingsandManagedAPs. 100 NMS 101 NMS IfanyofyourManagedAPsarenotfoundduringStep5Select FreeAPs,resettheManagedAPtoitsfactorydefaultsettings. RefertotheAPsusermanualforhelp. 11. YourControllerAP&ManagedAPsshouldbefullyfunctional.Usethe topmenutonavigatearoundNMS. UseDashboard,ZonePlan,NMSMonitor&NMSSettingstoconfigure ManagedAPs. UseLocalNetwork&LocalSettingstoconfigureyourControllerAP. 102 NMS III. SoftwareLayout Thetopmenufeatures7panels:Dashboard,ZonePlan,NMSMonitor,NMS Settings,LocalNetwork,LocalSettings&Toolbox. Dashboard TheDashboardpaneldisplaysanoverviewofyournetworkandkeysystem information,withquicklinkstoaccessconfigurationoptionsforManagedAPs andManagedAPgroups.Eachpanelcanberefreshed,collapsedormoved accordingtoyourpreference. 103 NMS ZonePlan ZonePlandisplaysacustomizablelivemapofManagedAPsforavisual representationofyournetworkcoverage.EachAPiconcanbemovedaround themap,andabackgroundimagecanbeuploadedforuserdefinedlocation profilesusingNMSSettingsZoneEdit.Optionscanbeconfiguredusingthe menuontherightsideandsignalstrengthisdisplayedforeachAP. 104 NMS NMSMonitor TheNMSMonitorpanelprovidesmoredetailedmonitoringinformation abouttheAPArraythanfoundontheDashboard,groupedaccordingto categoriesinthemenudowntheleftside. 105 NMS NMSSettings NMSSettingsprovidesextensiveconfigurationoptionsfortheAPArray.You canmanageeachaccesspoint,assignaccesspointsintogroups,manage WLAN,RADIUS,guestnetwork,guestnetwork,usersandschedulingsettings aswellasupgradefirmwareacrossmultipleaccesspoints.TheZonePlancan alsobeconfiguredusingZoneEdit. 106 NMS LocalNetwork LocalNetworksettingsareforyourAPController.YoucanconfiguretheIP addressandDHCPserveroftheAPControllerinadditiontoLANPortand VLANsettings. 107 NMS LocalSettings LocalSettingsareforyourAPController.Youcanviewbasicsystemsettings andlogsspecificallyfortheAPController,aswellasothermanagement settingssuchasdate/time,adminaccounts,firmwareandreset. 108 NMS Toolbox TheToolboxpanelprovidesanetworkdiagnostictools:pingandtraceroute. 109 NMS IV. Features DescriptionsofthefunctionsofeachmainpanelDashboard,ZonePlan,NMS Monitor,NMSSettings,LocalNetwork,LocalSettings&Toolboxcanbefound below.WhenusingNMS,clickApplytosavechanges:
Screenshotsdisplayedareexamples.Theinformationshownon yourscreenwillvarydependingonyourconfiguration. IV1. LOGIN,LOGOUT&RESTART ItisrecommendedthatyoulogintotheAPControllertomake configurationstoManagedAPs. LOGIN 1. ConnectacomputertothedesignatedAPControllerusinganEthernet cable:
2. OpenawebbrowserandentertheAPControllersIPaddressinthe addressfield.ThedefaultIPaddressis192.168.2.1 110 NMS YourcomputersIPaddressmustbeinthesamesubnetastheAP Controller.RefertoVI1.ConfiguringyourIPAddressformore help. IfyouchangedtheAPControllersIPaddress,orifyour gateway/routerusesaDHCPserver,ensureyouenterthecorrect IPaddress.Refertoyourgateway/routerssettings. IfusingaDHCPserveronthenetwork,itisadvisedtouseyour DHCPserverssettingstoassigntheAPControllerastaticIP address. 3. Entertheusername&passwordtologin.Thedefaultusername&
passwordareadmin&1234. LOGOUT Tologoutfrom NMS,clickLogoutinthetoprightcorner:
RESTART YoucanrestartyourAPControlleroranyManagedAPusingNMS.Torestart yourAPControllergotoLocalSettingsAdvancedRebootandclick Reboot. TorestartManagedAPsclicktheRestarticonforthespecifiedAPonthe Dashboard:
111 NMS IV2. DASHBOARD ThedashboarddisplaysanoverviewofyourAParray:
Usetheblueiconsabovetorefreshorcollapseeachpanelinthedashboard. Clickanddragtomoveapaneltosuityourpreference.Youcansetthe dashboardtoautorefreshevery1minute,30secondsordisableautorefresh:
112 NMS IV21. SystemInformation SystemInformationdisplaysinformationabouttheAPController:Product Name(model),HostName,MACAddress,IPAddress,FirmwareVersion, SystemTimeandUptime(timetheaccesspointhasbeenon),CPUUsage&
MemoryUsage. IV22. DevicesInformation DevicesInformationisasummaryofthenumberofalldevicesinthelocal network:AccessPoints,ClientsConnected,andRogue(unidentified)Devices. 113 NMS IV23. ManagedAP ManagedAPdisplaysinformationabouteachManagedAPinthelocal network:Index(referencenumber),MACAddress,DeviceName,Model,IP Address,2.4GHz&5GHzWirelessChannelNumber,No.ofClientsconnected toeachaccesspoint,andStatus(connected,connectingordisconnected). ThesearchfunctioncanbeusedtolocateaspecificManagedAP.Typeinthe searchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),yellow(connecting)orgreen
(connected)foreachManagedAP. EachManagedAPhasActioniconswiththefollowingfunctions:
1. Disallow 2. Edit RemovetheManagedAPfromtheAParrayanddisableconnectivity. EditvarioussettingsfortheManagedAP(refertoIV51.AccessPoint). 3. BlinkLED TheManagedAPsLEDwillflashtemporarilytohelpidentify&locate accesspoints. 114 NMS 4. Buzzer TheManagedAPsbuzzerwillsoundtemporarilytohelpidentify&locate accesspoints. 5. NetworkConnectivity GototheNetworkConnectivitypaneltoperformapingortraceroute. 6. Restart RestartstheManagedAP. IV24. ManagedAPGroup ManagedAPscanbegroupedaccordingtoyourrequirements.ManagedAP GroupdisplaysinformationabouteachManagedAPgroupinthelocal network:GroupName,MACAddress,DeviceName,Model,IPAddress,No.of Clientsconnectedtoeachaccesspoint,andStatus(connectedor disconnected). ToeditManagedAPGroupsgotoNMSSettingsAccessPoint(referto IV51.AccessPoint). ThesearchfunctioncanbeusedtolocateaspecificManagedAPGroup.Type inthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),yellow(connecting)orgreen
(connected)foreachindividualManagedAP. EachManagedAPhasActioniconswiththefollowingfunctions:
115 1. Disallow 2. Edit 3. BlinkLED 4. Buzzer NMS RemovetheManagedAPfromtheAParrayanddisableconnectivity. EditvarioussettingsfortheManagedAP(refertoIV51.AccessPoint) TheManagedAPsLEDwillflashtemporarilytohelpidentify&locate accesspoints. TheManagedAPsbuzzerwillsoundtemporarilytohelpidentify&locate accesspoints. 5. NetworkConnectivity GototheNetworkConnectivitypaneltoperformapingortraceroute. 6. Restart RestartstheManagedAP. IV25. ActiveClients ActiveClientsdisplaysinformationabouteachclientinthelocalnetwork:
Index(referencenumber),ClientMACAddress,APMACAddress,WLAN,User Name,Radio(frequency),SignalStrength,ConnectedTime,IdleTime,Tx&Rx
(datatransmittedandreceived)andVendoroftheclientdevice. Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthesearch boxandthelistwillupdate:
116 NMS IV26. ActiveUsers ActiveUsersdisplaysinformationabouteachuserinthelocalnetworkvia guestportals:Index(referencenumber),UserName,MACAddress,IPAddress, SSID,Creator,CreateTime,ExpireTime,UsagePercentage,Vendor&Platform oftheuserdevice. Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthesearch boxandthelistwillupdate:
117 NMS IV3. ZONEPLAN TheZonePlancanbefullycustomizedtomatchyournetworkenvironment. YoucanmovetheAPiconsandselectdifferentlocationimages(upload locationimagesinNMSSettingsZoneEdit)tocreateavisualmapofyour AParray. UsethemenuontherightsidetomakeadjustmentsandmouseoveranAP iconinthezonemaptoseemoreinformation.ClickanAPiconinthezone maptoselectitanddisplayactionicons:
118 NMS ClickanddraganAPicontomovetheiconaroundthezonemap.Thesignal strengthforeachAPisdisplayedaccordingtotheSignalkeyinthemenuon therightside:
Location APGroup Search Radio Signal Zoom Transparency Scale Device/Number Selectapredefinedlocationfromthedrop downmenu.Whenyouuploadalocation imageinNMSSettingsZoneEdit,itwillbe availableforselectionhere. YoucanselectanAPGrouptodisplayinthe zonemap.EditAPGroupsinNMSSettings AccessPoint. UsethesearchboxtoquicklylocateanAP. UsethecheckboxestodisplayAPsaccording to2.4GHzor5GHzwirelessradiofrequency. Signalstrengthkeyforthesignalstrength displayaroundeachAPinthezonemap. Usetheslidertoadjustthezoomlevelofthe map. Usetheslidertoadjustthetransparencyof locationimages. Zonemapscale. Displaysnumberandtypeofdevicesinthe zonemap. 119 NMS IV4. NMSMONITOR IV41. AccessPoint IV411.ManagedAP DisplaysinformationabouteachManagedAPinthelocalnetwork:Index
(referencenumber),MACAddress,DeviceName,Model,IPAddress,2.4GHz&
5GHzWirelessChannelNumber,No.ofClientsconnectedtoeachaccesspoint, andStatus(connected,connectingordisconnected). ThesearchfunctioncanbeusedtolocateaspecificManagedAP.Typeinthe searchboxandthelistwillupdate:
TheStatusicondisplaysthestatusofeachManagedAP. StatusIcons Icon Color Status Definition Grey Disconnected Red Authentication Failed ManagedAPisdisconnected.Please checkthenetworkconnectionandensure theManagedAPisinthesameIPsubnet astheAPController. Systemsecuritymustbethesameforall accesspointsintheAParray.Please checksecuritysettings(refertoIV581. 120 NMS Or Incompatible NMSVersion Orange Configuringor Upgrading Yellow Connecting Green Connected Blue Waitingfor Approval SystemSecurity). Accesspointsmustusethesameversion of NMS: themanagedAPwillnotbe abletomakeconfigurations.Pleaseuse theAPControllersfirmwareupgrade function(refertoIV57.Firmware Upgrade). PleasewaitwhiletheManagedAPmakes configurationsorwhilethefirmwareis upgrading. PleasewaitwhileManagedAPis connecting. ManagedAPisconnected. ManagedAPiswaitingforapproval. RefertoIV51.AccessPoint:Auto Approval.Note:32ManagedAPsare supported.AdditionalAPswilldisplaythis statusuntilanexistingManagedAPis removed. EachManagedAPhasActioniconswiththefollowingfunctions:
RemovetheManagedAPfromtheAParrayanddisableconnectivity. EditvarioussettingsfortheManagedAP(refertoIV51.AccessPoint). 1. Disallow 1. Edit 2. BlinkLED TheManagedAPsLEDwillflashtemporarilytohelpidentify&locate accesspoints. 3. Buzzer 121 NMS TheManagedAPsbuzzerwillsoundtemporarilytohelpidentify&locate accesspoints. 4. NetworkConnectivity GototheNetworkConnectivitypaneltoperformapingortraceroute. 5. Restart RestartstheManagedAP. IV412.ManagedAPGroup ManagedAPscanbegroupedaccordingtoyourrequirements.ManagedAP displaysinformationabouteachManagedAPinthelocalnetwork:Index
(referencenumber),MACAddress,DeviceName,Model,IPAddress,2.4GHz&
5GHzWirelessChannelNumber,No.ofClientsconnectedtoeachaccesspoint, andStatus(connected,connectingordisconnected). ToeditManagedAPGroupsgotoNMSSettingsAccessPoint(referto IV51.AccessPoint). ThesearchfunctioncanbeusedtolocateaspecificManagedAPGroup.Type inthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),red(authentication failed/incompatibleNMSversion),orange(upgradingfirmware),yellow
(connecting),green(connected)orblue(waitingforapproval)foreach 122 NMS individualManagedAP.RefertoIV411.ManagedAP:StatusIconsforfull descriptions. EachManagedAPhasActioniconswiththefollowingfunctions:
RemovetheManagedAPfromtheAParrayanddisableconnectivity. EditvarioussettingsfortheManagedAP(refertoIV51.AccessPoint). TheManagedAPsLEDwillflashtemporarilytohelpidentify&locate accesspoints. TheManagedAPsbuzzerwillsoundtemporarilytohelpidentify&locate accesspoints. 6. NetworkConnectivity GototheNetworkConnectivitypaneltoperformapingortraceroute. 7. Restart RestartstheManagedAP. 2. Disallow 3. Edit 4. BlinkLED 5. Buzzer 123 NMS IV42. WLAN IV421.ActiveWLAN DisplaysinformationabouteachSSIDintheAPArray:Index(reference number),Name/SSID,VLANID,Authentication,Encryption,IPAddressand AdditionalAuthentication. ToconfigureencryptionandVLANsforManagedAPsgotoNMSSettings WLAN. ThesearchfunctioncanbeusedtolocateaspecificSSID.Typeinthesearch boxandthelistwillupdate:
124 NMS IV422.ActiveWLANGroup WLANgroupscanbecreatedaccordingtoyourpreference.ActiveWLAN GroupdisplaysinformationaboutWLANgroup:GroupName,Name/SSID, VLANID,Authentication,Encryption,IPAddressandAdditional Authentication. ThesearchfunctioncanbeusedtolocateaspecificActiveWLANGroup.Type inthesearchboxandthelistwillupdate:
IV43. Clients IV431.ActiveClients DisplaysinformationaboutclientscurrentlyconnectedtotheAPArray:Index
(referencenumber),ClientMACAddress,APMACAddress,WLAN(SSID),User Name,Radio(2.4GHzor5GHz),SignalStrengthreceivedbyClient,Connected Time,IdleTime,Tx&Rx(DatatransmittedandreceivedbyClientinKB).. Youcansetordisabletheautorefreshtimefortheclientlistorclick Refreshtomanuallyrefresh. Thesearchfunctioncanbeusedtolocateaspecificclient.Typeinthesearch boxandthelistwillupdate:
125 NMS IV44. RogueDevices Rogueaccesspointdetectioncanidentifyanyunauthorizedaccesspoints whichmayhavebeeninstalledinthenetwork. ClickStarttoscanforroguedevices:
UnknownRogueDevicesdisplaysinformationaboutroguedevicesdiscovered duringthescan:Index(referencenumber),Channel,SSID,MACAddress, Security,SignalStrength,Type,VendorandAction. Thesearchfunctioncanbeusedtolocateaknownroguedevice.Typeinthe searchboxandthelistwillupdate:
126 NMS Information IV45. IV451.AllEvents/Activities DisplaysalogoftimestampedeventsforeachaccesspointintheArrayuse thedropdownmenutoselectanaccesspointandviewthelog. 127 NMS IV452.Monitoring DisplaysgraphicalmonitoringinformationaboutaccesspointsintheArrayfor 2.4GHz&5GHz:TrafficTx(datatransmittedinMB),TrafficRx(datareceived inMB),No.ofClients,WirelessChannel,TxPower(wirelessradiopower),CPU UsageandMemoryUsage. Usethedropdownmenustoselectanaccesspointanddate. Youcansetordisabletheautorefreshtimeforthedata:
128 NMS IV5. NMSSettings IV51. AccessPoint Displaysinformationabouteachaccesspointandaccesspointgroupinthe localnetworkandallowsyoutoeditaccesspointsandeditoraddaccess pointgroups. Thesearchfunctioncanbeusedtolocateanaccesspointoraccesspoint group.Typeinthesearchboxandthelistwillupdate:
TheStatusicondisplaysgrey(disconnected),red(authentication failed/incompatibleNMSversion),orange(upgradingfirmware),yellow
(connecting),green(connected)orblue(waitingforapproval)foreach individualManagedAP.RefertoIV411.ManagedAP:StatusIconsforfull descriptions. 129 NMS TheActioniconsenableyoutoallowordisallowanaccesspoint:
Selectanaccesspointoraccesspointgroupusingthe checkboxesandclickEdittomakeconfigurations,orclick Addtoaddanewaccesspointgroup:
TheAccessPointSettingspanelcanenableordisableAuto ApproveforallManagedAPs.Whenenabled,ManagedAPswillautomatically jointheAPArraywiththeControllerAP.Whendisabled,ManagedAPsmust bemanuallyapprovedtojointheAPArraywiththeControllerAP. AccessPointSettings AutoApprove EnableordisableAutoApproveforall ManagedAPs. TomanuallyapproveaManagedAP,usetheallowActioniconforthe specifiedaccesspoint:
EditAccessPoint ConfigureyourselectedaccesspointonyourLAN.Youcansettheaccess pointasaDHCPclientorspecifyastaticIPaddressforyouraccesspoint,and assigntheaccesspointtoanAPgroup,aswellasedit2.4GHz&5GHzwireless radiosettings.Aneventslogisdisplayedatthebottomofthepage. YoucanalsouseProfileSettingstoassigntheaccesspointtoWLAN,Guest Network,RADIUSandAccessControlgroupsindependentlyfromAccessPoint Groupsettings. ChecktheOverrideGroupSettingsboxtousedifferentindividualsettings foraccesspointsassignedtoAPGroups:
130 NMS BasicSettings Name Description MACAddress APGroup IPAddress Assignment IPAddress SubnetMask 131 Edittheaccesspointname.Thedefaultname isAP+MACaddress. Enteradescriptionoftheaccesspointfor referencee.g.2ndFloorOffice. DisplaysMACaddress. UsethedropdownmenutoassigntheAPto anAPGroup.YoucaneditAPGroupsfrom theNMSSettingsAccessPointpage. SelectDHCPClientforyouraccesspointto beassignedadynamicIPaddressfromyour routersDHCPserver,orselectStaticIPto manuallyspecifyastatic/fixedIPaddressfor youraccesspoint(below).Checkthebox OverrideGroupSettingiftheAPisa memberofanAPGroupandyouwishtouse adifferentsettingthantheAPGroupsetting. SpecifytheIPaddresshere.ThisIPaddress willbeassignedtoyouraccesspointandwill replacethedefaultIPaddress. Specifyasubnetmask.Thedefaultvalueis NMS DefaultGateway PrimaryDNS SecondaryDNS 255.255.255.0 ForDHCPusers,selectFromDHCPtoget defaultgatewayfromyourDHCPserveror UserDefinedtoenteragatewaymanually. ForstaticIPusers,thedefaultvalueisblank. DHCPuserscanselectFromDHCPtoget primaryDNSserversIPaddressfromDHCPor UserDefinedtomanuallyenteravalue.For staticIPusers,thedefaultvalueisblank. DHCPuserscanselectFromDHCPtoget secondaryDNSserversIPaddressfromDHCP orUserDefinedtomanuallyenteravalue. ForstaticIPusers,thedefaultvalueisblank. VLANSettings WiredLANPort VLANMode VLANID ManagementVLAN VLANID IdentifiesLANport1or2. SelectTaggedPortorUntaggedPortfor specifiedLANinterface. SetaVLANIDforspecifiedinterface,if UntaggedPortisselected. CheckOverrideDefaultSettingtospecifythe VLANIDofthemanagementVLAN.Onlythe hostsbelongingtothesameVLANcanmanage thedevice. 132 NMS RadioSettings Domain Wireless Band AutoPilot AutoPilotRange 133 Settheregulatorydomainfortheaccess pointswirelesschannelsforeachfrequency. Enableordisabletheaccesspoints2.4GHzor 5GHzwirelessradio.Whendisabled,noSSIDs onthatfrequencywillbeactive. Selectthewirelessstandardusedforthe accesspoint.Combinationsof802.11b, 802.11g,802.11n&802.11accanbeselected. Enable/disableautochannelselection.Auto channelselectionwillautomaticallysetthe wirelesschannelfortheaccesspoints2.4GHz or5GHzfrequencybasedonavailabilityand potentialinterference.Whendisabled,select achannelmanually. Selectarangefromwhichtheautochannel setting(above)willchooseachannel. NMS AutoPilotInterval ChannelBandwidth BSSBasicRateSet Specifyafrequencyforhowoftentheauto channelsettingwillcheck/reassignthe wirelesschannel.Check/unchecktheChange channelevenifclientsareconnectedbox accordingtoyourpreference. SetthechannelbandwidthoruseAuto
(automaticallyselectbasedoninterference level). SetaBasicServiceSet(BSS)rate:thisisa seriesofratestocontrolcommunication framesforwirelessclients. Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions. Changingthesesettingscanadverselyaffecttheperformanceof youraccesspoint. AdvancedSettings ContentionSlot PreambleType GuardInterval SelectShortorLongthisvalueisusedfor contentionwindowsinWMM(seeIV67. WMM). Setthewirelessradiopreambletype.The preambletypein802.11basedwireless communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor communicationbetweentheaccesspointand roamingwirelessadapters.Thedefaultvalueis ShortPreamble. Settheguardinterval.Ashorterintervalcan improveperformance. 802.11gProtection Enable/disable802.11gprotection,which increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to accesspoint,andaccesspointwillbroadcast CleartoSend(CTS),beforeapacketissent fromclient.) 134 NMS DTIMPeriod RTSThreshold Fragment Threshold MulticastRate 802.11nProtection Enable/disable802.11nprotection,which increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to accesspoint,andaccesspointwillbroadcast CleartoSend(CTS),beforeapacketissent fromclient.) SettheDTIM(deliverytrafficindication message)periodvalueofthewirelessradio. Thedefaultvalueis1. SettheRTSthresholdofthewirelessradio.The defaultvalueis2347. Setthefragmentthresholdofthewireless radio.Thedefaultvalueis2346. Setthetransferrateformulticastpacketsor usetheAutosetting. Setthepoweroutputofthewirelessradio.You maynotrequire100%outputpower.Settinga lowerpoweroutputcanenhancesecuritysince potentiallymalicious/unknownusersindistant areaswillnotbeabletoaccessyoursignal. Setthebeaconintervalofthewirelessradio. Thedefaultvalueis100. Settheintervalforkeepalivemessagesfrom theaccesspointtoawirelessclienttoverifyif thestationisstillalive/active. Stationidle timeout BeaconInterval TxPower 135 ProfileSettings WLANGroup GuestNetwork Group Assigntheaccesspoints2.4GHzor5GHz SSID(s)toaWLANGroup.YoucaneditWLAN groupsinNMSSettingsWLAN. Assigntheaccesspoints2.4GHzor5GHz SSID(s)toaGuestNetworkGroup.Youcan editGuestNetworkgroupsinNMSSettings NMS RADIUSGroup AccessControl Group
GuestNetwork. Assigntheaccesspoints2.4GHzSSID(s)toa RADIUSgroup.YoucaneditRADIUSgroupsin NMSSettingsRADIUS. Assigntheaccesspoints2.4GHzSSID(s)toa RADIUSgroup.YoucaneditRADIUSgroupsin NMSSettingsAccessControl 136 NMS Add/EditAccessPointGroup Configureyourselectedaccesspointgroup.Accesspointgroupsettingsapply toallaccesspointsinthegroup,unlessindividuallysettooverridegroup settings. YoucanuseProfileGroupSettingstoassigntheaccesspointgrouptoWLAN, GuestNetwork,RADIUSandAccessControlgroups. TheGroupSettingspanelcanbeusedtoquicklymoveaccesspointsbetween existinggroups:selectanaccesspointandusethedropdownmenuorsearch toselectaccesspointgroupsanduse<<and>>arrowstomoveAPsbetween groups. BasicGroupSettings Name Description Edittheaccesspointgroupname. Enteradescriptionoftheaccesspointgroup forreferencee.g.2ndFloorOfficeGroup. VLANGroupSettings WiredLANPort VLANMode VLANID ManagementVLAN VLANID IdentifiesLANport1or2. SelectTaggedPortorUntaggedPortfor specifiedLANinterface. SetaVLANIDforspecifiedinterface,if UntaggedPortisselected. CheckOverrideDefaultSettingtospecifythe VLANIDofthemanagementVLAN.Onlythe hostsbelongingtothesame VLANcanmanage 137 NMS thedevice. RadioGroupSettings Domain Wireless Band AutoPilot AutoPilotRange 138 Settheregulatorydomainfortheaccess pointswirelesschannelsforeachfrequency. Enableordisabletheaccesspointgroups 2.4GHzor5GHzwirelessradio.When disabled,noSSIDsonthatfrequencywillbe active. Selectthewirelessstandardusedforthe accesspointgroup.Combinationsof802.11b, 802.11g,802.11n&802.11accanbeselected. Enable/disableautochannelselection.Auto channelselectionwillautomaticallysetthe wirelesschannelfortheaccesspointgroups 2.4GHzor5GHzfrequencybasedon availabilityandpotentialinterference.When disabled,selectachannelmanually. Selectarangefromwhichtheautochannel NMS AutoPilotInterval ChannelBandwidth BSSBasicRateSet setting(above)willchooseachannel. Specifyafrequencyforhowoftentheauto channelsettingwillcheck/reassignthe wirelesschannel.Check/unchecktheChange channelevenifclientsareconnectedbox accordingtoyourpreference. SetthechannelbandwidthoruseAuto
(automaticallyselectbasedoninterference level). SetaBasicServiceSet(BSS)rate:thisisa seriesofratestocontrolcommunication framesforwirelessclients. Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions. Changingthesesettingscanadverselyaffecttheperformanceof youraccesspoints. AdvancedSettings ContentionSlot PreambleType GuardInterval SelectShortorLongthisvalueisusedfor contentionwindowsinWMM(seeIV67. WMM). Setthewirelessradiopreambletype.The preambletypein802.11basedwireless communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor communicationbetweentheaccesspointand roamingwirelessadapters.Thedefaultvalueis ShortPreamble. Settheguardinterval.Ashorterintervalcan improveperformance. 802.11gProtection Enable/disable802.11gprotection,which increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to accesspoint,andaccesspointwillbroadcast CleartoSend(CTS),beforeapacketissent fromclient.) 139 NMS DTIMPeriod RTSThreshold Fragment Threshold MulticastRate 802.11nProtection Enable/disable802.11nprotection,which increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to accesspoint,andaccesspointwillbroadcast CleartoSend(CTS),beforeapacketissent fromclient.) SettheDTIM(deliverytrafficindication message)periodvalueofthewirelessradio. Thedefaultvalueis1. SettheRTSthresholdofthewirelessradio.The defaultvalueis2347. Setthefragmentthresholdofthewireless radio.Thedefaultvalueis2346. Setthetransferrateformulticastpacketsor usetheAutosetting. Setthepoweroutputofthewirelessradio.You maynotrequire100%outputpower.Settinga lowerpoweroutputcanenhancesecuritysince potentiallymalicious/unknownusersindistant areaswillnotbeabletoaccessyoursignal. Setthebeaconintervalofthewirelessradio. Thedefaultvalueis100. Settheintervalforkeepalivemessagesfrom theaccesspointtoawirelessclienttoverifyif thestationisstillalive/active. Stationidle timeout BeaconInterval TxPower 140 NMS ProfileGroupSettings WLANGroup GuestNetwork Group RADIUSGroup AccessControl Group Assigntheaccesspointgroups2.4GHzor 5GHzSSIDstoaWLANGroup.Youcanedit WLANgroupsinNMSSettingsWLAN. Assigntheaccesspointgroups2.4GHzor 5GHzSSIDstoaGuestNetworkGroup.You caneditGuestNetworkgroupsinNMS SettingsGuestNetwork. Assigntheaccesspointgroups2.4GHzSSIDs toaRADIUSgroup.YoucaneditRADIUS groupsinNMSSettingsRADIUS. Assigntheaccesspoints2.4GHzSSIDstoa RADIUSgroup.YoucaneditRADIUSgroupsin NMSSettingsAccessControl. 141 NMS IV52. WLAN DisplaysinformationabouteachWLANandWLANgroupinthelocalnetwork andallowsyoutoaddoreditWLANs&WLANGroups.WhenyouaddaWLAN Group,itwillbeavailableforselectioninNMSSettingsAccessPointaccess pointProfileSettings&accesspointgroupProfileGroupSettings(IV51.) ThesearchfunctioncanbeusedtolocateaWLANorWLANGroup.Typein thesearchboxandthelistwillupdate:
SelectaWLANorWLANGroupusingthecheckboxesand clickEditorclickAddtoaddanewWLANorWLAN Group:
142 NMS Add/EditWLAN WLANSettings Name/ESSID Description SSID VLANID BroadcastSSID WirelessClient Isolation EdittheWLANname(SSID). EnteradescriptionoftheSSIDforreference e.g.2ndFloorOfficeHR. SelectwhichSSIDtoconfiguresecurity settingsfor. SpecifytheVLANID. EnableordisableSSIDbroadcast.When enabled,theSSIDwillbevisibletoclientsas anavailableWiFinetwork.Whendisabled, theSSIDwillnotbevisibleasanavailable WiFinetworktoclientsclientsmust manuallyentertheSSIDinordertoconnect. Ahidden(disabled)SSIDistypicallymore securethanavisible(enabled)SSID. Enableordisablewirelessclientisolation. Wirelessclientisolationpreventsclients connectedtotheaccesspointfrom communicatingwitheachotherandimproves security.Typically,thisfunctionisusefulfor corporateenvironmentsorpublichotspots andcanpreventbruteforceattackson clientsusernamesandpasswords. 143 NMS LoadBalancing Authentication Method Additional Authentication Loadbalancinglimitsthenumberofwireless clientsconnectedtoanSSID.Setaload balancingvalue(maximum50). Selectanauthenticationmethodfromthe dropdownmenu. Selectanadditionalauthenticationmethod fromthedropdownmenu. Varioussecurityoptions(wirelessdataencryption)areavailable.Whendatais encrypted,informationtransmittedwirelesslycannotbereadbyanyonewho doesnotknowthecorrectencryptionkey. Itsessentialtoconfigurewirelesssecurityinordertoprevent unauthorisedaccesstoyournetwork. Selecthardtoguesspasswordswhichincludecombinationsof numbers,lettersandsymbols,andchangeyourpassword regularly. PleaserefertoIV521.NoAuthenticationandonwardsbelowformore informationonauthenticationandadditionalauthenticationtypes. WLANAdvancedSettings SmartHandover RSSIThreshold ScheduleGroup EnableordisableSmartHandover. SetaRSSIThresholdlevel. Assigntoaspecifiedschedule(schedulemust bepreconfiguredinNMSSettings Schedule.) IV521. NoAuthentication Authenticationisdisabledandnopassword/keyisrequiredtoconnecttothe accesspoint. Disablingwirelessauthenticationisnotrecommended.When disabled,anybodywithinrangecanconnecttoyourdevicesSSID. IV522. WEP 144 NMS WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Forahigher levelofsecurityconsiderusingWPAencryption. KeyLength KeyType DefaultKey EncryptionKey1 4 Select64bitor128bit.128bitismoresecure than64bitandisrecommended. ChoosefromASCII(anyalphanumerical character09,azandAZ)orHex(any charactersfrom09,afandAF). Selectwhichencryptionkey(14below)isthe defaultkey.Forsecuritypurposes,youcanset uptofourkeys(below)andchangewhichis thedefaultkey. Enteryourencryptionkey/passwordaccording totheformatyouselectedabove. IV523. IEEE802.1x/EAP KeyLength Select64bitor128bit.128bitismoresecure than64bitandisrecommended. IV524. WPAPSK WPAPSKisasecurewirelessencryptiontypewithstrongdata protectionanduserauthentication,utilizing128bitencryptionkeys. WPAType Encryption KeyRenewal Interval PreSharedKey Type PreSharedKey 145 SelectfromWPA/WPA2MixedModePSK, WPA2orWPAonly.WPA2issaferthanWPA only,butnotsupportedbyallwirelessclients. Pleasemakesureyourwirelessclientsupports yourselection. SelectTKIP/AESMixedModeorAES encryptiontype. Specifyafrequencyforkeyrenewalin minutes. ChoosefromPassphrase(863 alphanumericcharacters)orHex(upto64 charactersfrom09,afandAF). Pleaseenterasecuritykey/passwordaccording NMS totheformatyouselectedabove. IV525. WPAEAP WPAType Encryption KeyRenewal Interval SelectfromWPA/WPA2MixedModeEAP, WPA2EAPorWPAEAP. SelectTKIP/AESMixedModeorAES encryptiontype. Specifyafrequencyforkeyrenewalin minutes. WPAEAPmustbedisabledtouseMACRADIUSauthentication. IV526. AdditionalAuthentication Additionalwirelessauthenticationmethodscanalsobeused:
MACAddressFilter RestrictwirelessclientsaccessbasedonMACaddressspecifiedintheMAC filtertable. SeeIV54.MACFiltertoconfigureMACfiltering. MACFilter&MACRADIUSAuthentication RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering&
RADIUSauthenticationmethods. MACRADIUSAuthentication RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,or passwordauthenticationviaaRADIUSserver. SeeIV53.RADIUStoconfigureRADIUSservers. MACRADIUS Password 146 SelectwhethertouseMACaddressor passwordauthenticationviaRADIUSserver.If youselectUsethefollowingpassword,enter NMS thepasswordinthefieldbelow.Thepassword shouldmatchtheSharedSecretusedin IV53.RADIUS. Add/EditWLANGroup WhenyouaddaWLANGroup,itwillbeavailableforselectioninNMS SettingsAccessPointaccesspointProfileSettings&accesspointgroup ProfileGroupSettings(IV51.) WLANGroupSettings Name Description Members EdittheWLANGroupname. EnteradescriptionoftheWLANGroupfor referencee.g.2ndFloorOfficeHRGroup. SelectSSIDstoincludeinthegroupusingthe checkboxesandassignVLANIDs.Youcan overrideindividualschedulesettingsand assignadifferentschedule. 147 NMS IV53. RADIUS DisplaysinformationaboutExternal&InternalRADIUSServers,Accountsand GroupsandallowsyoutoaddoreditRADIUSServers,Accounts&Groups. WhenyouaddaRADIUSGroup,itwillbeavailableforselectioninNMS SettingsAccessPointaccesspointProfileSettings&accesspointgroup ProfileGroupSettings(IV51.) ThesearchfunctioncanbeusedtolocateaRADIUSServer,AccountorGroup. Typeinthesearchboxandthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEditor clickAddtoaddanewWLANorWLANGroup:
148 NMS Add/EditExternalRADIUSServer Name Description RADIUSServer Authentication Port SharedSecret SessionTimeout Accounting AccountingPort EnteranamefortheRADIUSServer. EnteradescriptionoftheRADIUSServerfor reference. EntertheRADIUSserverhostIPaddress. SettheUDPportusedintheauthentication protocoloftheRADIUSserver.Valuemustbe between165535. Enterasharedsecret/passwordbetween1 99charactersinlength.Thisshouldmatchthe MACRADIUSpasswordusedinIV3136or IV323. Setadurationofsessiontimeoutinseconds between086400. EnableordisableRADIUSaccounting. Whenaccountingisenabled(above),setthe UDPportusedintheaccountingprotocolof theRADIUSserver.Valuemustbebetween1 65535. 149 NMS Add/EditInternalRADIUSServer UploadEAPCertificateFile EAPCertificateFile Format EAPCertificateFile ClickUploadtoopenanewwindowand DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12) selectthelocationofanEAPcertificatefileto use.Ifnocertificatefileisuploaded,the internalRADIUSserverwilluseaselfmade certificate. InternalRADIUSServer Name EnteranamefortheInternalRADIUSServer. Description EnteradescriptionoftheInternalRADIUS Serverforreference. DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12) EAPCertificateFile Format EAPCertificateFile ClickUploadtoopenanewwindowand selectthelocationofanEAPcertificatefileto use.Ifnocertificatefileisuploaded,the internalRADIUSserverwilluseaselfmade certificate. 150 NMS EAPInternal Authentication SharedSecret SessionTimeout SelectEAPinternalauthenticationtypefrom thedropdownmenu. Enterasharedsecret/passwordforuse betweentheinternalRADIUSserverand RADIUSclient.Thesharedsecretshouldbe1 99charactersinlength. Setadurationofsessiontimeoutinseconds between086400. TerminationAction Selectaterminationactionattribute:
ReauthenticationsendsaRADIUSrequestto theaccesspoint,NotReathenticationsends adefaultterminationactionattributetothe accesspoint,NotSendno terminationactionattributeissenttothe accesspoint. Add/EditRADIUSAccounts TheinternalRADIUSservercanauthenticateupto256useraccounts.The RADIUSAccountspageallowsyoutoconfigureandmanageusers. 151 NMS RADIUSAccounts UserName Add Reset UserRegistrationList Select UserName Password Customize Entertheusernameshere,separatedby commas. ClickAddtoaddtheusertotheuser registrationlist. Cleartextfromtheusernamebox. Checktheboxtoselectauser. Displaystheusername. Displaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured). ClickEdittoopenanewfieldtoset/edita passwordforthespecifiedusername(below). DeleteSelected DeleteAll Deleteselecteduserfromtheuserregistration list. Deleteallusersfromtheuserregistrationlist. EditUserRegistrationList UserName Password Existingusernameisdisplayedhereandcan beeditedaccordingtoyourpreference. Enteroreditapasswordforthespecifieduser. 152 NMS Add/EditRADIUSGroup WhenyouaddaRADIUSGroup,itwillbeavailableforselectioninNMS SettingsAccessPointaccesspointProfileSettings&accesspointgroup ProfileGroupSettings(IV51.) RADIUSGroupSettings GroupName Description 2.4GHzRADIUS 5GHzRADIUS Members EdittheRADIUSGroupname. EnteradescriptionoftheRADIUSGroupfor reference. Enable/Disableprimary&secondaryRADIUS serversfor2.4GHz. Enable/Disableprimary&secondaryRADIUS serversfor5GHz. AddRADIUSuseraccountstotheRADIUS group. 153 NMS IV54. AccessControl MACAccessControlisasecurityfeaturethatcanhelptoprevent unauthorizedusersfromconnectingtoyouraccesspoint. Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto connecttotheaccesspoint.DevicesareeachidentifiedbytheiruniqueMAC address.IfadevicewhichisnotonthelistofpermittedMACaddresses attemptstoconnecttotheaccesspoint,itwillbedenied. TheAccessControlpaneldisplaysinformationaboutMACAccessControl&
MACAccessControlGroupsandGroupsandallowsyoutoaddoreditMAC AccessControl&MACAccessControlGroupsettings.Whenyouaddan AccessControlGroup,itwillbeavailableforselectioninNMSSettings AccessPointaccesspointProfileSettings&accesspointgroupProfileGroup Settings(IV51.) ThesearchfunctioncanbeusedtolocateaMACaddressorMACAccess ControlGroup.Typeinthesearchboxandthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEditor clickAddtoaddanewMACAddressorMACAccessControl Group:
154 NMS Add/EditMACAccessControl AddMACAddress Add Reset EnteraMACaddressofcomputerornetwork devicemanuallye.g.aabbccddeeffor entermultipleMACaddressesseparatedwith commas,e.g. aabbccddeeff,aabbccddeegg ClickAddtoaddtheMACaddresstothe MACaddressfilteringtable. Clearallfields. MACaddressentrieswillbelistedintheMACAddressFilteringTable.Select anentryusingtheSelectcheckbox. Select MACAddress DeleteSelected DeleteAll Export Deleteselectedorallentriesfromthetable. TheMACaddressislistedhere. DeletetheselectedMACaddressfromthe list. DeleteallentriesfromtheMACaddress filteringtable. ClickExporttosaveacopyoftheMAC filteringtable.Anewwindowwillpopupfor youtoselectalocationtosavethefile. 155 NMS Add/EditMACAccessControlGroup WhenyouaddanAccessControlGroup,itwillbeavailableforselectionin NMSSettingsAccessPointaccesspointProfileSettings&accesspoint groupProfileGroupSettings(IV51.) MACFilterGroupSettings GroupName Description Action Members EdittheMACAccessControlGroupname. EnteradescriptionoftheMACAccessControl Groupforreference. SelectBlacklisttodenyaccesstospecified MACaddressesinthegroup,andselect WhitelisttopermitaccesstospecifiedMAC addressinthegroup. AddMACaddressestothegroup. 156 NMS IV55. GuestNetwork YoucansetupanadditionalGuestWiFinetworksoguestuserscanenjoy WiFiconnectivitywithoutaccessingyourprimarynetworks.TheGuest screendisplayssettingsforyourguestWiFinetwork. TheGuestNetworkpaneldisplaysinformationaboutGuestNetworksand GuestNetworkGroupsandallowsyoutoaddoreditGuestNetworkand GuestNetworkGroupsettings.WhenyouaddaGuestNetworkGroup,itwill beavailableforselectioninNMSSettingsAccessPointaccesspointProfile Settings&accesspointgroupProfileGroupSettings(IV51.) ThesearchfunctioncanbeusedtolocateaGuestNetworkorGuestNetwork Group.Typeinthesearchboxandthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEditor clickAddtoaddanewGuestNetworkorGuestNetwork Group. 157 NMS Add/EditGuestNetwork GuestNetworkSettings Name/ESSID Description VLANID BroadcastSSID WirelessClient Isolation 158 EdittheGuestNetworkname(SSID). EnteradescriptionoftheGuestNetworkfor referencee.g.2ndFloorOfficeHR. SpecifytheVLANID. EnableordisableSSIDbroadcast.When enabled,theSSIDwillbevisibletoclientsas anavailableWiFinetwork.Whendisabled, theSSIDwillnotbevisibleasanavailable WiFinetworktoclientsclientsmust manuallyentertheSSIDinordertoconnect. Ahidden(disabled)SSIDistypicallymore securethanavisible(enabled)SSID. Enableordisablewirelessclientisolation. Wirelessclientisolationpreventsclients NMS connectedtotheaccesspointfrom communicatingwitheachotherandimproves security.Typically,thisfunctionisusefulfor corporateenvironmentsorpublichotspots andcanpreventbruteforceattackson clientsusernamesandpasswords. Loadbalancinglimitsthenumberofwireless clientsconnectedtoanSSID.Setaload balancingvalue(maximum50). EnableordisableWMM(WiFiMultimedia) trafficprioritizing. Selectanauthenticationmethodfromthe dropdownmenu. Selectanadditionalauthenticationmethod fromthedropdownmenu. LoadBalancing WMM Authentication Method Additional Authentication Varioussecurityoptions(wirelessdataencryption)areavailable.Whendatais encrypted,informationtransmittedwirelesslycannotbereadbyanyonewho doesnotknowthecorrectencryptionkey. Itsessentialtoconfigurewirelesssecurityinordertoprevent unauthorisedaccesstoyournetwork. Selecthardtoguesspasswordswhichincludecombinationsof numbers,lettersandsymbols,andchangeyourpassword regularly. PleaserefertoIV623.Securityformoreinformationonauthenticationand additionalauthenticationtypes. GuestAccessPolicy GuestPortal TrafficShaping Downlink Uplink IPFiltering Selectaguestportaltouseforthisguest SSID.GuestportalscanbeconfiguredinNMS SettingsGuestPortal. Enableordisabletrafficshapingfortheguest network. EnteradownlinklimitinMB. EnteranuplinklimitinMB. SelectDenyorAllowtodenyorallow specifiedIPaddressestoaccesstheguest network.SelectDisabletodisableIP 159 NMS Rules filtering. EnterIPaddressestobefilteredaccordingto theDenyorAllowrulespecifiedaboveand checktheboxforeachIPaddresstobe filtered. GuestNetworkAdvancedSettings ScheduleGroup AssignguestSSIDtoaspecifiedschedule
(schedulemustbepreconfiguredinNMS SettingsSchedule.) Add/EditGuestNetworkGroup WhenyouaddaGuestNetworkGroup,itwillbeavailableforselectionin NMSSettingsAccessPointaccesspointProfileSettings&accesspoint groupProfileGroupSettings(IV51.) GuestNetworkGroupSettings GroupName Description EdittheGuestNetworkGroupname. EnteradescriptionoftheGuestNetworkfor reference. AddSSIDstotheGuestNetworkgroup.You canoverrideindividualVLANID&schedule settingsandassignadifferentVLANIDor schedule. Members 160 NMS IV56. ZoneEdit ZoneEditdisplaysinformationaboutzonesforusewiththeZonePlanfeature andallowsyoutoaddoreditzones. Thesearchfunctioncanbeusedtofindexistingzones.Typeinthesearchbox andthelistwillupdate:
MakeaselectionusingthecheckboxesandclickEditor clickAddtoaddanewzone. 161 NMS Add/EditZone UploadZoneImage ChooseFile ZoneSetting Name/Location Description Members Clicktolocateanimagefiletobedisplayedas amapintheZonePlanfeature.Typicallya floorplanimageisuseful. Enteranameofthezone/location. Enteradescriptionofthezone/locationfor reference. Assignaccesspointstothespecified zone/locationforusewiththeZonePlan feature. 162 NMS IV57. Schedule Youcandefineschedulesaccordingtoday,starttimeandendtimeand groupmultipleschedulestogetherintoschedulegroups. SchedulegroupscanbeassignedtoWLANs,WLANGroups&GuestNetwork atNMSSettingsWLANandNMSSettingsGuestNetwork. Add/EditSchedule Usethecheckboxesanddropdownmenustosetupyourschedule. 163 NMS Add/EditScheduleGroup WLANGroupSettings Name Description Members Edittheschedulegroupname. Enteradescriptionoftheschedulegroupfor reference. Selectindividualschedulestoincludeinthe schedulegroupusingthecheckboxes. 164 NMS DeviceMonitoring IV58. DevicemonitoringenablesyoutospecifyandmonitorthestatusanyIP devicesonthenetworksuchasIPcameras.Thedescriptionandstatusofeach deviceisdisplayedinthetable. AddorEditIPdevicesbyenteringtheIPaddress. 165 NMS IV59. FirmwareUpgrade FirmwareUpgradeallowsyoutoupgradefirmwaretoAccessPointGroups. First,uploadthefirmwarefilefromalocaldiskorexternalFTPserver:locate thefileandclickUploadyoucansetatimeoutlimitfortheuploadas desired.ThetablebelowwilldisplaytheFirmwareName,FirmwareVersion, NMSVersion,ModelandSize. ThenclickUpgradeAlltoupgradeallaccesspointsintheArrayorselect AccessPointgroupsfromthelistusingcheckboxesandclickUpgrade Selectedtoupgradeonlyselectedaccesspoints. 166 NMS IV510. Advanced IV5101. SystemSecurity ConfiguretheNMSsystemloginnameandpassword. IV5102. Date&Time Configurethedate×ettingsoftheAPArray.Thedateandtimeofthe accesspointscanbeconfiguredmanuallyorcanbesynchronizedwithatime server. DateandTimeSettings LocalTime AcquireCurrent TimefromyourPC Settheaccesspointsdateandtimemanually usingthedropdownmenus. ClickAcquireCurrentTimefromYourPCto entertherequiredvaluesautomatically accordingtoyourcomputerscurrenttimeand date. NTPTimeServer 167 NMS UseNTP ServerName UpdateInterval TimeZone TimeZone TheaccesspointalsosupportsNTP(Network TimeProtocol)forautomatictimeanddate setup. EnterthehostnameorIPaddressofthetime serverifyouwish. Specifyafrequency(inhours)fortheaccess pointtoupdate/synchronizewiththeNTP server. Selectthetimezoneofyourcountry/region.If yourcountry/regionisnotlisted,pleaseselect anothercountry/regionwhosetimezoneisthe sameasyours. 168 NMS IV6. LocalNetwork IV61. NetworkSettings IV611.LANSideIPAddress TheLANsideIPaddresspageallowsyoutoconfigureyourAPControlleron yourLocalAreaNetwork(LAN).Youcanenabletheaccesspointto dynamicallyreceiveanIPaddressfromyourroutersDHCPserveroryoucan specifyastaticIPaddressforyouraccesspoint,aswellasconfigureDNS servers.YoucanalsosetyourAPControllerasaDHCPservertoassignIP addressestootherdevicesonyourLAN. TheaccesspointsdefaultIPaddressis192.168.2.2 DisableotherDHCPserversontheLANifusingAPControllers DHCPServer. LANsideIPAddress IPAddress Assignment SelectStaticIPtomanuallyspecifya static/fixedIPaddressforyouraccesspoint. SelectDHCPClientforyouraccesspointto beassignedadynamicIPaddressfromyour routersDHCPserver,orselectDHCPServer foryouraccesspointtoactasaDHCPserver andassignIPaddressesonyourLAN. StaticIPAddress IPAddress 169 SpecifytheIPaddresshere.ThisIPaddress willbeassignedtoyouraccesspointandwill NMS SubnetMask DefaultGateway PrimaryDNS Address SecondaryDNS Address replacethedefaultIPaddress. Specifyasubnetmask.Thedefaultvalueis 255.255.255.0 ForDHCPusers,selectFromDHCPtoget defaultgatewayfromyourDHCPserveror UserDefinedtoenteragatewaymanually. ForstaticIPusers,thedefaultvalueisblank. ForstaticIPusers,thedefaultvalueisblank. ForstaticIPusers,thedefaultvalueisblank. DHCPClient IPAddress SubnetMask DefaultGateway PrimaryDNS Address SecondaryDNS Address WhenDHCPClientisselectedthisvalue cannotbemodified. WhenDHCPClientisselectedthisvalue cannotbemodified. SelectFromDHCPorselectUserDefined andenteradefaultgateway. SelectFromDHCPorselectUserDefined andenteraprimaryDNSaddress. SelectFromDHCPorselectUserDefined andenterasecondaryDNSaddress. 170 NMS DHCPServer IPAddress SubnetMask IPAddressRange DomainName LeaseTime DefaultGateway PrimaryDNS Address SecondaryDNS Address SpecifytheIPaddresshere.ThisIPaddress willbeassignedtoyouraccesspointandwill replacethedefaultIPaddress. Specifyasubnetmask.Thedefaultvalueis 255.255.255.0 EnterthestartandendIPaddressoftheIP addressrangewhichyouraccesspointsDHCP serverwillassigntodevicesonthenetwork. Enteradomainname. Selectaleasetimefromthedropdown menu.IPaddresseswillbeassignedforthis periodoftime. Enteradefaultgateway. EnteraprimaryDNSaddress. EnterasecondaryDNSaddress. YouraccesspointsDHCPservercanbeconfiguredtoassignstatic(fixed)IP addressestospecifiednetworkdevices,identifiedbytheiruniqueMACaddress:
DHCPServerStaticIPAddress MACAddress EntertheMACaddressofthenetworkdevice 171 NMS IPAddress Add tobeassignedastaticIPaddress. SpecifytheIPaddresstoassignthedevice. ClicktoassigntheIPaddresstothedevice. IV612.LANPortSettings TheLANPortpageallowsyoutoconfigurethesettingsforyourAP ControllerswiredLAN(Ethernet)ports. WiredLANPort Speed&Duplex FlowControl 802.3az IdentifiesLANport.USBistheLANport attachedviaminiUSBadapter. Selectaspeed&duplextypeforspecifiedLAN port,orusetheAutovalue.LANportscan operateupto1000Mbpsandfullduplex enablessimultaneousdatapackets transfer/receive. Enable/disableflowcontrol.Flowcontrolcan pausenewsessionrequestuntilcurrentdata processingiscomplete,inordertoavoid deviceoverloadsunderheavytraffic. Enable/disable802.3az.802.3azisanEnergy EfficientEthernetfeaturewhichdisables unusedinterfacestoreducepowerusage. 172 NMS IV613.VLAN TheVLAN(VirtualLocalAreaNetwork)pageenablesyoutoconfigureVLAN settings.AVLANisalocalareanetworkwhichmapsworkstationsvirtually insteadofphysicallyandallowsyoutogrouptogetherorisolateusersfrom eachother.VLANIDs14095aresupported. VLANIDsintherange14095aresupported. VLANInterface WiredLANPort VLANMode VLANID ManagementVLAN VLANID IdentifiesLANport.USBistheLANport attachedviaminiUSBadapter. SelectTaggedPortorUntaggedPortfor specifiedLANinterface. SetaVLANIDforspecifiedinterface,if UntaggedPortisselected. SpecifytheVLANIDofthemanagementVLAN. OnlythehostsbelongingtothesameVLANcan managethedevice. 173 NMS IV62. 2.4GHz11bgn The2.4GHz11bgnmenuallowsyoutoviewandconfigureinformationfor youraccesspoints2.4GHzwirelessnetworkacrossfourcategories:Basic, Advanced,SecurityandWDS. IV621.Basic TheBasicscreendisplaysbasicsettingsforyouraccesspoints2.4GHzWiFi network(s). Wireless Band Enableordisabletheaccesspoints2.4GHz wirelessradio.Whendisabled,no2.4GHz SSIDswillbeactive. Selectthewirelessstandardusedforthe accesspoint.Combinationsof802.11b, 802.11g&802.11ncanbeselected. EnableSSIDNumber SelecthowmanySSIDstoenableforthe 2.4GHzfrequencyfromthedropdownmenu. Amaximumof16canbeenabled. EntertheSSIDnameforthespecifiedSSID(up SSID#
174 NMS VLANID AutoChannel to16).TheSSIDcanconsistofany combinationofupto32alphanumeric characters. SpecifyaVLANIDforeachSSID. Enable/disableautochannelselection.Auto channelselectionwillautomaticallysetthe wirelesschannelfortheaccesspoints2.4GHz frequencybasedonavailabilityandpotential interference.Whendisabled,selectachannel manuallyasshowninthenexttable. AutoChannelRange Selectarangefromwhichtheautochannel AutoChannel Interval ChannelBandwidth BSSBasicRateSet setting(above)willchooseachannel. Specifyafrequencyforhowoftentheauto channelsettingwillcheck/reassignthe wirelesschannel.Check/unchecktheChange channelevenifclientsareconnectedbox accordingtoyourpreference. Setthechannelbandwidth:20MHz(lower performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher interference)orAuto(automaticallyselect basedoninterferencelevel). SetaBasicServiceSet(BSS)rate:thisisa seriesofratestocontrolcommunication framesforwirelessclients. Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel ChannelBandwidth BSSBasicRateSet Selectawirelesschannelfrom111. Setthechannelbandwidth:20MHz(lower performancebutlessinterference),40MHz
(higherperformancebutpotentiallyhigher interference)orAuto(automaticallyselect basedoninterferencelevel). SetaBasicServiceSet(BSS)rate:thisisa seriesofratestocontrolcommunication framesforwirelessclients. 175 NMS IV622.Advanced Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions. Changingthesesettingscanadverselyaffecttheperformanceof youraccesspoint. ContentionSlot PreambleType GuardInterval SelectShortorLongthisvalueisusedfor contentionwindowsinWMM(seeIV67. WMM). Setthewirelessradiopreambletype.The preambletypein802.11basedwireless communicationdefinesthelengthoftheCRC
(CyclicRedundancyCheck)blockfor communicationbetweentheaccesspointand roamingwirelessadapters.Thedefaultvalueis ShortPreamble. Settheguardinterval.Ashorterintervalcan improveperformance. 802.11gProtection Enable/disable802.11gprotection,which increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to accesspoint,andaccesspointwillbroadcast CleartoSend(CTS),beforeapacketissent fromclient.) 176 NMS DTIMPeriod RTSThreshold Fragment Threshold MulticastRate 802.11nProtection Enable/disable802.11nprotection,which increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to accesspoint,andaccesspointwillbroadcast CleartoSend(CTS),beforeapacketissent fromclient.) SettheDTIM(deliverytrafficindication message)periodvalueofthewirelessradio. Thedefaultvalueis1. SettheRTSthresholdofthewirelessradio.The defaultvalueis2347. Setthefragmentthresholdofthewireless radio.Thedefaultvalueis2346. Setthetransferrateformulticastpacketsor usetheAutosetting. Setthepoweroutputofthewirelessradio.You maynotrequire100%outputpower.Settinga lowerpoweroutputcanenhancesecuritysince potentiallymalicious/unknownusersindistant areaswillnotbeabletoaccessyoursignal. Setthebeaconintervalofthewirelessradio. Thedefaultvalueis100. Settheintervalforkeepalivemessagesfrom theaccesspointtoawirelessclienttoverifyif thestationisstillalive/active. Stationidle timeout BeaconInterval TxPower 177 NMS IV623.Security Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption). Whendataisencrypted,informationtransmittedwirelesslycannotbereadby anyonewhodoesnotknowthecorrectencryptionkey. Itsessentialtoconfigurewirelesssecurityinordertoprevent unauthorisedaccesstoyournetwork. Selecthardtoguesspasswordswhichincludecombinationsof numbers,lettersandsymbols,andchangeyourpassword regularly. SSID BroadcastSSID WirelessClient Isolation SelectwhichSSIDtoconfiguresecuritysettings for. EnableordisableSSIDbroadcast.When enabled,theSSIDwillbevisibletoclientsasan availableWiFinetwork.Whendisabled,the SSIDwillnotbevisibleasanavailableWiFi networktoclientsclientsmustmanually entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana visible(enabled)SSID. Enableordisablewirelessclientisolation. Wirelessclientisolationpreventsclients connectedtotheaccesspointfrom communicatingwitheachotherandimproves security.Typically,thisfunctionisusefulfor corporateenvironmentsorpublichotspots andcanpreventbruteforceattacksonclients usernamesandpasswords. 178 NMS LoadBalancing Authentication Method Additional Authentication Loadbalancinglimitsthenumberofwireless clientsconnectedtoanSSID.Setaload balancingvalue(maximum50). Selectanauthenticationmethodfromthedrop downmenuandrefertotheinformation belowappropriateforyourmethod. Selectanadditionalauthenticationmethod fromthedropdownmenuandrefertothe informationbelow(IV6236.)appropriatefor yourmethod. IV6231. NoAuthentication Authenticationisdisabledandnopassword/keyisrequiredtoconnecttothe accesspoint. Disablingwirelessauthenticationisnotrecommended.When disabled,anybodywithinrangecanconnecttoyourdevicesSSID. IV6232. WEP WEP(WiredEquivalentPrivacy)isabasicencryptiontype.Forahigher levelofsecurityconsiderusingWPAencryption. KeyLength KeyType DefaultKey EncryptionKey1 4 Select64bitor128bit.128bitismoresecure than64bitandisrecommended. ChoosefromASCII(anyalphanumerical character09,azandAZ)orHex(any charactersfrom09,afandAF). Selectwhichencryptionkey(14below)isthe defaultkey.Forsecuritypurposes,youcanset uptofourkeys(below)andchangewhichis thedefaultkey. Enteryourencryptionkey/passwordaccording totheformatyouselectedabove. 179 NMS IV6233. IEEE802.1x/EAP KeyLength Select64bitor128bit.128bitismoresecure than64bitandisrecommended. IV6234. WPAPSK WPAPSKisasecurewirelessencryptiontypewithstrongdata protectionanduserauthentication,utilizing128bitencryptionkeys. WPAType Encryption KeyRenewal Interval PreSharedKey Type PreSharedKey SelectfromWPA/WPA2MixedModePSK, WPA2orWPAonly.WPA2issaferthanWPA only,butnotsupportedbyallwirelessclients. Pleasemakesureyourwirelessclientsupports yourselection. SelectTKIP/AESMixedModeorAES encryptiontype. Specifyafrequencyforkeyrenewalin minutes. ChoosefromPassphrase(863 alphanumericcharacters)orHex(upto64 charactersfrom09,afandAF). Pleaseenterasecuritykey/passwordaccording totheformatyouselectedabove. IV6235. WPAEAP WPAType Encryption KeyRenewal Interval SelectfromWPA/WPA2MixedModeEAP, WPA2EAPorWPAEAP. SelectTKIP/AESMixedModeorAES encryptiontype. Specifyafrequencyforkeyrenewalin minutes. WPAEAPmustbedisabledtouseMACRADIUSauthentication. 180 NMS IV6236. AdditionalAuthentication Additionalwirelessauthenticationmethodscanalsobeused:
MACAddressFilter RestrictwirelessclientsaccessbasedonMACaddressspecifiedintheMAC filtertable. SeeIV66.MACFiltertoconfigureMACfiltering. MACFilter&MACRADIUSAuthentication RestrictwirelessclientsaccessusingbothoftheaboveMACfiltering&
RADIUSauthenticationmethods. MACRADIUSAuthentication RestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,or passwordauthenticationviaaRADIUSserver. SeeIV65.RADIUStoconfigureRADIUSservers. WPSmustbedisabledtouseMACRADIUSauthentication.See IV64.forWPSsettings. MACRADIUS Password SelectwhethertouseMACaddressor passwordauthenticationviaRADIUSserver.If youselectUsethefollowingpassword,enter thepasswordinthefieldbelow.Thepassword shouldmatchtheSharedSecretusedin IV65.RADIUS. 181 NMS IV624.WDS WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogether inanextendednetwork.WDSsettingscanbeconfiguredasshownbelow. WhenusingWDS,configuretheIPaddressofeachaccesspointto beinthesamesubnetandensurethereisonlyoneactiveDHCP serveramongconnectedaccesspoints,preferablyontheWAN side. WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses. Allaccesspointsshouldusethesamewirelesschannelandencryption method. 182 NMS 2.4GHz WDSFunctionality SelectWDSwithAPtouseWDSwithaccess pointorWDSDedicatedModetouseWDS andalsoblockcommunicationwithregular wirelessclients.WhenWDSisused,each accesspointshouldbeconfiguredwith correspondingMACaddresses,wireless channelandwirelessencryptionmethod. LocalMACAddress DisplaystheMACaddressofyouraccesspoint. WDSPeerSettings WDS#
WDSVLAN VLANMode VLANID EntertheMACaddressforuptofourother WDSdevicesyouwishtoconnect. SpecifytheWDSVLANmodetoUntagged PortorTaggedPort. SpecifytheWDSVLANIDwhenUntagged Portisselectedabove. WDSEncryptionmethod Encryption SelectwhethertouseNoneorAES encryptionandenterapresharedkeyforAES consistingof863alphanumericcharacters. 183 NMS 5GHz11ac11an IV63. The5GHz11ac11anmenuallowsyoutoviewandconfigureinformationfor youraccesspoints5GHzwirelessnetworkacrossfourcategories:Basic, Advanced,SecurityandWDS. IV631.Basic TheBasicscreendisplaysbasicsettingsforyouraccesspoints5GHzWiFi network(s). 184 Wireless Band Enableordisabletheaccesspoints5GHz wirelessradio.Whendisabled,no5GHzSSIDs willbeactive. Selectthewirelessstandardusedforthe accesspoint.Combinationsof802.11a, 802.11n&802.11accanbeselected. EnableSSIDNumber SelecthowmanySSIDstoenableforthe5GHz frequencyfromthedropdownmenu.A maximumof16canbeenabled. NMS SSID#
VLANID AutoChannel EntertheSSIDnameforthespecifiedSSID(up to16).TheSSIDcanconsistofany combinationofupto32alphanumeric characters. SpecifyaVLANIDforeachSSID. Enable/disableautochannelselection.Auto channelselectionwillautomaticallysetthe wirelesschannelfortheaccesspoints5GHz frequencybasedonavailabilityandpotential interference.Whendisabled,selectachannel manuallyasshowninthenexttable. AutoChannelRange Selectarangefromwhichtheautochannel AutoChannel Interval ChannelBandwidth BSSBasicRateSet setting(above)willchooseachannel. Specifyafrequencyforhowoftentheauto channelsettingwillcheck/reassignthe wirelesschannel.Check/unchecktheChange channelevenifclientsareconnectedbox accordingtoyourpreference. Setthechannelbandwidth:20MHz(lower performancebutlessinterference),Auto 40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference level). SetaBasicServiceSet(BSS)rate:thisisa seriesofratestocontrolcommunication framesforwirelessclients. Whenautochannelisdisabled,selectawirelesschannelmanually:
Channel ChannelBandwidth BSSBasicRateSet Selectawirelesschannel. Setthechannelbandwidth:20MHz(lower performancebutlessinterference),Auto 40/20MHzorAuto80/40/20MHz
(automaticallyselectbasedoninterference level). SetaBasicServiceSet(BSS)rate:thisisa seriesofratestocontrolcommunication framesforwirelessclients. 185 NMS IV632. Advanced Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthe valuesonthispageunlessyouarealreadyfamiliarwiththesefunctions. Changingthesesettingscanadverselyaffecttheperformanceof youraccesspoint. GuardInterval Settheguardinterval.Ashorterintervalcan improveperformance. DTIMPeriod RTSThreshold 802.11nProtection Enable/disable802.11nprotection,which increasesreliabilitybutreducesbandwidth
(clientswillsendRequesttoSend(RTS)to accesspoint,andaccesspointwillbroadcast CleartoSend(CTS),beforeapacketissent fromclient.) SettheDTIM(deliverytrafficindication message)periodvalueofthewirelessradio. Thedefaultvalueis1. SettheRTSthresholdofthewirelessradio.The defaultvalueis2347. Setthefragmentthresholdofthewireless radio.Thedefaultvalueis2346. Setthetransferrateformulticastpacketsor usetheAutosetting. Setthepoweroutputofthewirelessradio.You maynotrequire100%outputpower.Settinga lowerpoweroutputcanenhancesecuritysince potentiallymalicious/unknownusersindistant areaswillnotbeabletoaccessyoursignal. Fragment Threshold MulticastRate TxPower 186 NMS BeaconInterval Stationidle timeout Setthebeaconintervalofthewirelessradio. Thedefaultvalueis100. Settheintervalforkeepalivemessagesfrom theaccesspointtoawirelessclienttoverifyif thestationisstillalive/active. 187 NMS IV633. Security Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption). Whendataisencrypted,informationtransmittedwirelesslycannotbereadby anyonewhodoesnotknowthecorrectencryptionkey. Itsessentialtoconfigurewirelesssecurityinordertoprevent unauthorisedaccesstoyournetwork. Selecthardtoguesspasswordswhichincludecombinationsof numbers,lettersandsymbols,andchangeyourpassword regularly. SSID BroadcastSSID WirelessClient Isolation SelectwhichSSIDtoconfiguresecuritysettings for. EnableordisableSSIDbroadcast.When enabled,theSSIDwillbevisibletoclientsasan availableWiFinetwork.Whendisabled,the SSIDwillnotbevisibleasanavailableWiFi networktoclientsclientsmustmanually entertheSSIDinordertoconnect.Ahidden
(disabled)SSIDistypicallymoresecurethana visible(enabled)SSID. Enableordisablewirelessclientisolation. Wirelessclientisolationpreventsclients connectedtotheaccesspointfrom communicatingwitheachotherandimproves security.Typically,thisfunctionisusefulfor corporateenvironmentsorpublichotspots andcanpreventbruteforceattacksonclients usernamesandpasswords. 188 NMS LoadBalancing Authentication Method Additional Authentication Loadbalancinglimitsthenumberofwireless clientsconnectedtoanSSID.Setaload balancingvalue(maximum50). Selectanauthenticationmethodfromthedrop downmenuandrefertotheinformation belowappropriateforyourmethod. Selectanadditionalauthenticationmethod fromthedropdownmenuandrefertothe informationbelowappropriateforyour method. PleasereferbacktoIV623.Securityformoreinformationonauthentication andadditionalauthenticationtypes. 189 NMS IV634.WDS WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogether inanextendednetwork.WDSsettingscanbeconfiguredasshownbelow. WhenusingWDS,configuretheIPaddressofeachaccesspointto beinthesamesubnetandensurethereisonlyoneactiveDHCP serveramongconnectedaccesspoints,preferablyontheWAN side. WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses. Allaccesspointsshouldusethesamewirelesschannelandencryption method. 190 5GHzWDSMode WDSFunctionality SelectWDSwithAPtouseWDSwithaccess pointorWDSDedicatedModetouseWDS andalsoblockcommunicationwithregular wirelessclients.WhenWDSisused,each accesspointshouldbeconfiguredwith correspondingMACaddresses,wireless channelandwirelessencryptionmethod. LocalMACAddress DisplaystheMACaddressofyouraccesspoint. WDSPeerSettings NMS WDS#
WDSVLAN VLANMode VLANID WDSEncryption Encryption EntertheMACaddressforuptofourother WDAdevicesyouwishtoconnect. SpecifytheWDSVLANmodetoUntagged PortorTaggedPort. SpecifytheWDSVLANIDwhenUntagged Portisselectedabove. SelectwhethertouseNoneorAES encryptionandenterapresharedkeyforAES with863alphanumericcharacters. 191 NMS IV64. WPS WiFiProtectedSetupisasimplewaytoestablishconnectionsbetweenWPS compatibledevices.WPScanbeactivatedoncompatibledevicesbypushinga WPSbuttononthedeviceorfromwithinthedevicesfirmware/configuration interface(knownasPBCorPushButtonConfiguration).WhenWPSis activatedinthecorrectmannerandatthecorrecttimefortwocompatible devices,theywillautomaticallyconnect.PINcodeWPSisavariationofPBC whichincludestheadditionaluseofaPINcodebetweenthetwodevicesfor verification. PleaserefertomanufacturersinstructionsforyourotherWPS device. WPS ProductPIN PushButtonWPS WPSbyPIN 192 Check/uncheckthisboxtoenable/disableWPS functionality.WPSmustbedisabledwhen usingMACRADIUSauthentication(see IV6236.&IV65). DisplaystheWPSPINcodeofthedevice,used forPINcodeWPS.Youwillberequiredtoenter thisPINcodeintoanotherWPSdeviceforPIN codeWPS.ClickGeneratePINtogeneratea newWPSPINcode. ClickStarttoactivateWPSontheaccess pointforapproximately2minutes.Thishasthe sameeffectasphysicallypushingtheaccess pointsWPSbutton. EnterthePINcodeofanotherWPSdeviceand clickStarttoattempttoestablishaWPS connectionforapproximately2minutes. NMS WPSStatus WPSsecuritystatusisdisplayedhere.Click Releasetocleartheexistingstatus. IV65. RADIUS TheRADIUSsubmenuallowsyoutoconfiguretheaccesspointsRADIUS serversettings,categorizedintothreesubmenus:RADIUSsettings,Internal ServerandRADIUSaccounts. ARADIUSserverprovidesuserbasedauthenticationtoimprovesecurityand offerwirelessclientcontroluserscanbeauthenticatedbeforegaining accesstoanetwork. Theaccesspointcanutilizebothaprimaryandsecondary(backup)RADIUS serverforeachofitswirelessfrequencies(2.4GHz&5GHz).ExternalRADIUS serverscanbeusedortheaccesspointsinternalRADIUSservercanbeused. TouseRADIUSservers,gotoLocalNetworkSecurity AdditionalAuthenticationandselectMACRADIUS Authentication(seeIV623.&IV633). 193 NMS IV651.RADIUSSettings ConfiguretheRADIUSserversettingsfor2.4GHz&5GHz.Eachfrequencycan useaninternalorexternalRADIUSserver. 194 NMS RADIUSType SelectInternaltousetheaccesspoints builtinRADIUSserverorexternaltousean externalRADIUSserver. RADIUSServer EntertheRADIUSserverhostIPaddress. Authentication Port SharedSecret SessionTimeout Accounting AccountingPort SettheUDPportusedintheauthentication protocoloftheRADIUSserver.Valuemustbe between165535. Enterasharedsecret/passwordbetween1 99charactersinlength.Thisshouldmatchthe MACRADIUSpasswordusedinIV3136or IV323. Setadurationofsessiontimeoutinseconds between086400. EnableordisableRADIUSaccounting. Whenaccountingisenabled(above),setthe UDPportusedintheaccountingprotocolof theRADIUSserver.Valuemustbebetween1 65535. IV652.InternalServer TheaccesspointfeaturesabuiltinRADIUSserverwhichcanbeconfiguredas shownbelowusedwhenInternalisselectedforRADIUSTypeintheLocal NetworkRADIUSSettingsmenu. 195 TouseRADIUSservers,gotoWirelessSettingsSecurity AdditionalAuthenticationandselectMACRADIUS Authentication(seeIV623.&IV633). NMS InternalServer Check/unchecktoenable/disabletheaccess pointsinternalRADIUSserver. SelectEAPinternalauthenticationtypefrom thedropdownmenu. DisplaystheEAPcertificatefileformat:
PCK#12(*.pfx/*.p12) EAPInternal Authentication EAPCertificateFile Format EAPCertificateFile ClickUploadtoopenanewwindowand selectthelocationofanEAPcertificatefileto use.Ifnocertificatefileisuploaded,the internalRADIUSserverwilluseaselfmade certificate. Enterasharedsecret/passwordforuse betweentheinternalRADIUSserverand RADIUSclient.Thesharedsecretshouldbe1 99charactersinlength.Thisshouldmatchthe MACRADIUSpasswordusedinIV6236or IV633. Setadurationofsessiontimeoutinseconds between086400. SharedSecret SessionTimeout TerminationAction Selectaterminationactionattribute:
ReauthenticationsendsaRADIUSrequestto theaccesspoint,NotReathenticationsends adefaultterminationactionattributetothe accesspoint,NotSendno terminationactionattributeissenttothe accesspoint. 196 NMS IV653.RADIUSAccounts TheinternalRADIUSservercanauthenticateupto256useraccounts.The RADIUSAccountspageallowsyoutoconfigureandmanageusers. UserName Add Reset Select UserName Password Customize Entertheusernameshere,separatedby commas. ClickAddtoaddtheusertotheuser registrationlist. Cleartextfromtheusernamebox. Checktheboxtoselectauser. Displaystheusername. Displaysifspecifiedusernamehasapassword
(configured)ornot(notconfigured). ClickEdittoopenanewfieldtoset/edita passwordforthespecifiedusername(below). 197 NMS DeleteSelected DeleteAll Deleteselecteduserfromtheuserregistration list. Deleteallusersfromtheuserregistrationlist. EditUserRegistrationList UserName Password Existingusernameisdisplayedhereandcan beeditedaccordingtoyourpreference. Enteroreditapasswordforthespecifieduser. 198 NMS IV66. MACFilter Macfilteringisasecurityfeaturethatcanhelptopreventunauthorizedusers fromconnectingtoyouraccesspoint. Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedto connecttotheaccesspoint.DevicesareeachidentifiedbytheiruniqueMAC address.IfadevicewhichisnotonthelistofpermittedMACaddresses attemptstoconnecttotheaccesspoint,itwillbedenied. ToenableMACfiltering,gotoLocalSettingsSecurity AdditionalAuthenticationandselectMACFilter(seeIV623.
&IV633). TheMACaddressfilteringtableisdisplayedbelow:
AddMACAddress EnteraMACaddressofcomputerornetwork devicemanuallye.g.aabbccddeeffor entermultipleMACaddressesseparatedwith 199 NMS Add Reset commas,e.g. aabbccddeeff,aabbccddeegg ClickAddtoaddtheMACaddresstothe MACaddressfilteringtable. Clearallfields. MACaddressentrieswillbelistedintheMACAddressFilteringTable.Select anentryusingtheSelectcheckbox. Select MACAddress DeleteSelected DeleteAll Export Deleteselectedorallentriesfromthetable. TheMACaddressislistedhere. DeletetheselectedMACaddressfromthe list. DeleteallentriesfromtheMACaddress filteringtable. ClickExporttosaveacopyoftheMAC filteringtable.Anewwindowwillpopupfor youtoselectalocationtosavethefile. 200 NMS IV67. WMM WiFiMultimedia(WMM)isaWiFiAllianceinteroperabilitycertification basedontheIEEE802.11estandard,whichprovidesQualityofService(QoS) featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofour categories:background,besteffort,videoandvoice. ConfiguringWMMconsistsofadjustingparametersonqueuesfordifferent categoriesofwirelesstraffic.Trafficissenttothefollowingqueues:
Background Low Priority BestEffort Medium Priority High Priority High Priority Video Voice Highthroughput,nontimesensitivebulk datae.g.FTP TraditionalIPdata,mediumthroughputand delay. Timesensitivevideodatawithminimum timedelay. TimesensitivedatasuchasVoIPand streamingmediawithminimumtimedelay. Queuesautomaticallyprovideminimumtransmissiondelaysforvideo,voice, multimediaandcriticalapplications.Thevaluescanfurtherbeadjusted manually:
CWMin 201 MinimumContentionWindow(milliseconds):
Thisvalueisinputtotheinitialrandom backoffwaittimealgorithmforretryofadata frametransmission.Thebackoffwaittimewill begeneratedbetween0andthisvalue.Ifthe NMS CWMax AIFSN TxOP frameisnotsent,therandombackoffvalueis doubleduntilthevaluereachesthenumber definedbyCWMax(below).TheCWMinvalue mustbelowerthantheCWMaxvalue.The contentionwindowschemehelpstoavoid framecollisionsanddeterminepriorityof frametransmission.Ashorterwindowhasa higherprobability(priority)oftransmission. MaximumContentionWindow(milliseconds):
Thisvalueistheupperlimittorandom backoffvaluedoubling(seeabove). ArbitrationInterFrameSpace(milliseconds):
Specifiesadditionaltimebetweenwhena channelgoesidleandtheAP/clientsends dataframes.TrafficwithalowerAIFSNvalue hasahigherpriority. TransmissionOpportunity(milliseconds):The maximumintervaloftimeanAP/clientcan transmit.Thismakeschannelaccessmore efficientlyprioritized.Avalueof0meansonly oneframepertransmission.Agreatervalue effectshigherpriority. 202 NMS IV7. LocalSettings IV71. OperationMode Settheoperationmodeoftheaccesspoint.APmodeisastandaloneaccess point,APcontrollermodeactsasthedesignatedmasteroftheAParray,and ManagedAPmodeactsasaslaveAPwithintheAParray.Repeatermodeacts asawirelessrepeater. IV72. SystemSettings IV721. SystemInformation TheSystemInformationpagedisplaysbasicsysteminformationaboutthe accesspoint. System Model ProductName Uptime 203 Displaysthemodelnumberoftheaccess point. Displaystheproductnameforreference, whichconsistsofAPplustheMACaddress. Displaysthetotaltimesincethedevicewas turnedon. NMS BootFrom Version MACAddress ManagementVLAN ID IPAddress Default Gateway DNS DHCPServer Displaysinformationforthebooted hardware,bootedfromeitherUSBorinternal memory. Displaysthefirmwareversion. DisplaystheaccesspointsMACaddress. DisplaysthemanagementVLANID. DisplaystheIPaddressofthisdevice.Click Refreshtoupdatethisvalue. DisplaystheIPaddressofthedefault gateway. IPaddressofDNS(DomainNameServer) IPaddressofDHCPServer. WiredLANPortSettings WiredLANPort Status VLANMode/ID SpecifieswhichLANport(1or2). DisplaysthestatusofthespecifiedLANport
(connectedordisconnected). DisplaystheVLANmode(taggedoruntagged) andVLANIDforthespecifiedLANport.See IV613.VLAN Refresh Clicktorefreshallinformation. 204 NMS IV722.WirelessClients TheWirelessClientspagedisplaysinformationaboutallwirelessclients connectedtotheaccesspointonthe2.4GHzor5GHzfrequency. Refreshtime AutoRefreshTime ManualRefresh Selectatimeintervalfortheclienttablelistto automaticallyrefresh. Clickrefreshtomanuallyrefreshtheclient table. 2.4GHz(5GHz)WLANClientTable SSID MACAddress Tx Rx Signal(%) ConnectedTime IdleTime Vendor DisplaystheSSIDwhichtheclientis connectedto. DisplaystheMACaddressoftheclient. Displaysthetotaldatapacketstransmittedby thespecifiedclient. Displaysthetotaldatapacketsreceivedby thespecifiedclient. Displaysthewirelesssignalstrengthforthe specifiedclient. Displaysthetotaltimethewirelessclienthas beenconnectedtotheaccesspoint. Clientidletimeisthetimeforwhichtheclient hasnottransmittedanydatapacketsi.e.is idle. Thevendoroftheclientswirelessadapteris displayedhere. 205 NMS IV723. WirelessMonitor WirelessMonitorisatoolbuiltintotheaccesspointtoscanandmonitorthe surroundingwirelessenvironment.SelectafrequencyandclickScanto displayalistofallSSIDswithinrangealongwithrelevantdetailsforeachSSID. WirelessMonitor SiteSurvey ChannelSurvey Result SiteSurveyResults Ch SSID MACAddress Security Signal(%) Type Vendor Selectwhichfrequency(orboth)toscan,and clickScantobegin. Afterascaniscomplete,clickExporttosave theresultstolocalstorage. Displaysthechannelnumberusedbythe specifiedSSID. DisplaystheSSIDidentifiedbythescan. DisplaystheMACaddressofthewireless router/accesspointforthespecifiedSSID. Displaystheauthentication/encryptiontype ofthespecifiedSSID. Displaysthecurrentsignalstrengthofthe SSID. Displaysthe802.11wirelessnetworking standard(s)ofthespecifiedSSID. Displaysthevendorofthewireless router/accesspointforthespecifiedSSID. 206 NMS IV724. Log Thisinformationisusefulfornetworkadministrators.Displaysadetailed informationlogofusersandactivityonthenetwork:ID,DateandTimeof entry,Categoryofentry,Severity,Users,Event/Activitiesdetails. Whenthelogisfull,oldentriesareoverwritten. Save Clear Refresh Clicktosavethelogasafileonyourlocal computer. Clearalllogentries. Refreshthecurrentlog. 207 NMS IV73. Management IV731. Admin Youcanchangethepasswordusedtologintothebrowserbased configurationinterfacehere.Itisadvisedtodosoforsecuritypurposes. Ifyouchangetheadministratorpassword,pleasemakeanote ofthenewpassword.Intheeventthatyouforgetthis passwordandareunabletologintothebrowserbased configurationinterface,seeIV744.FactoryDefaultforhowto resettheaccesspoint. AccounttoManageThisDevice Administrator Name Settheaccesspointsadministratorname. Thisisusedtologintothebrowserbased configurationinterfaceandmustbebetween 416alphanumericcharacters(casesensitive). Settheaccesspointsadministratorpassword. Thisisusedtologintothebrowserbased Administrator Password 208 NMS AdvancedSettings ProductName HTTPPort HTTPSPort Management Protocol SNMPVersion SNMPGet Community SNMPSet Community SNMPTrap SNMPTrap Community SNMPTrap Manager configurationinterfaceandmustbebetween 432alphanumericcharacters(casesensitive). Edittheproductnameaccordingtoyour preferenceconsistingof132alphanumeric characters.Thisnameisusedforreference purposes. SpecifyaHTTPportformanagement. SpecifyaHTTPSportformanagement. Check/unchecktheboxestoenable/disable specifiedmanagementinterfaces(seebelow). WhenSNMPisenabled,completetheSNMP fieldsbelow. SelectSNMPversionappropriateforyour SNMPmanager. EnteranSNMPGetCommunitynamefor verificationwiththeSNMPmanagerfor SNMPGETrequests. EnteranSNMPSetCommunitynamefor verificationwiththeSNMPmanagerfor SNMPSETrequests. EnableordisableSNMPTraptonotifySNMP managerofnetworkerrors. EnteranSNMPTrapCommunitynamefor verificationwiththeSNMPmanagerfor SNMPTRAPrequests. SpecifytheIPaddressorsevername(2128 alphanumericcharacters)oftheSNMP manager. HTTP InternetbrowserHTTPprotocolmanagementinterface HTTPS InternetbrowserHTTPSprotocolmanagementinterface TELNET Clientterminalwithtelnetprotocolmanagementinterface SSH ClientterminalwithSSHprotocolversion1or2managementinterface SNMP 209 NMS SimpleNetworkManagementProtocol.SNMPv1,v2&v3protocolsupported. SNMPv2canbeusedwithcommunitybasedauthentication.SNMPv3uses userbasedsecuritymodel(USM)architecture. IV732. DateandTime Youcanconfigurethetimezonesettingsofyouraccesspointhere.Thedate andtimeofthedevicecanbeconfiguredmanuallyorcanbesynchronized withatimeserver. 210 DateandTimeSettings LocalTime AcquireCurrent TimefromyourPC NTPTimeServer UseNTP ServerName UpdateInterval Settheaccesspointsdateandtimemanually usingthedropdownmenus. ClickAcquireCurrentTimefromYourPCto entertherequiredvaluesautomatically accordingtoyourcomputerscurrenttimeand date. TheaccesspointalsosupportsNTP(Network TimeProtocol)forautomatictimeanddate setup. EnterthehostnameorIPaddressofthetime serverifyouwish. Specifyafrequency(inhours)fortheaccess pointtoupdate/synchronizewiththeNTP server. NMS TimeZone TimeZone Selectthetimezoneofyourcountry/region.If yourcountry/regionisnotlisted,pleaseselect anothercountry/regionwhosetimezoneisthe sameasyours. 211 NMS SyslogServer IV733. Thesystemlogcanbesenttoaserver,attachedtoUSBstorageorsentvia email. SyslogServerSettings TransferLogs CopyLogsto AttachedUSBDevice Check/unchecktheboxtoenable/disablethe useofasyslogserver,andenterahost name,domainorIPaddressfortheserver, consistingofupto128alphanumeric characters. Check/unchecktheboxtoenable/disable copyinglogstoattachedUSBstorage. SyslogEmailSettings EmailLogs EmailSubject SMTPServer Address SMTPServerPort SenderEmail ReceiverEmail Authentication Check/unchecktheboxtoenable/disableemail logs.Whenenabled,thelogwillbeemailed accordingtothesettingsbelow. Enterthesubjectlineoftheemailwhichwillbe sentcontainingthelog. SpecifytheSMTPserveraddressforthesender emailaccount. SpecifytheSMTPserverportforthesender emailaccount. Enterthesendersemailaddress. Specifytheemailrecipientofthelog. SelectDisable,SSLorTLSaccordingto 212 NMS Account Password youremailauthentication. Whenauthenticationisusedabove,enterthe accountname. Whenauthenticationisusedabove,enterthe password. ImHere IV734. Theaccesspointfeaturesabuiltinbuzzerwhichcansoundoncommand usingtheImHerepage.Thisisusefulfornetworkadministratorsand engineersworkingincomplexnetworkenvironmentstolocatetheaccess point. Thebuzzerisloud!
DurationofSound SoundBuzzer Setthedurationforwhichthebuzzerwill soundwhentheSoundBuzzerbuttonis clicked. Activatethebuzzersoundfortheabove specifieddurationoftime. 213 NMS IV74. Advanced WiFiMultimedia(WMM)isaWiFiAllianceinteroperabilitycertification basedontheIEEE802.11estandard,whichprovidesQualityofService(QoS) featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofour categories:background,besteffort,videoandvoice. IV741.LEDSettings TheaccesspointsLEDscanbemanuallyenabledordisabledaccordingto yourpreference. LED Selectonoroff. 214 NMS IV742. UpdateFirmware TheFirmwarepageallowsyoutoupdatethesystemfirmwaretoamore recentversion.Updatedfirmwareversionsoftenofferincreasedperformance andsecurity,aswellasbugfixes.Youcandownloadthelatestfirmwarefrom the website. Thisfirmwareupdateisforanindividualaccesspoint.To updatefirmwareformultipleaccesspointsintheAParray,go toNMSSettingsFirmwareUpgrade. Donotswitchoffordisconnecttheaccesspointduringafirmware upgrade,asthiscoulddamagethedevice. UpdateFirmware From SelectafileonyourPCtouploadfirmware fromyourlocalcomputerorfroman attachedUSBdevice. FirmwareUpdateFile ClickBrowsetoopenanewwindowto locateandselectthefirmwarefileinyour computer. ClickUpdatetouploadthespecified firmwarefiletoyouraccesspoint. Update 215 NMS Save/RestoreSettings IV743. TheaccesspointsSave/RestoreSettingspageenablesyoutosave/backup theaccesspointscurrentsettingsasafiletoyourlocalcomputeroraUSB deviceattachedtotheaccesspoint,andrestoretheaccesspointtopreviously savedsettings. Save/RestoreSettings UsingDevice SaveSettingstoPC SaveSettings SelectUsingyourPCtosavetheaccess pointssettingstoyourlocalcomputerorto anattachedUSBdevice. ClickSavetosavesettingsandanew windowwillopentospecifyalocationto savethesettingsfile.Youcanalsocheckthe Encrypttheconfigurationfilewitha passwordboxandenterapasswordto protectthefileinthefieldunderneath,ifyou wish. RestoreSettingsfromPC RestoreSettings Clickthebrowsebuttontofindapreviously savedsettingsfileonyourcomputer,then clickRestoretoreplaceyourcurrent settings.Ifyoursettingsfileisencryptedwith apassword,checktheOpenfilewith 216 NMS passwordboxandenterthepasswordin thefieldunderneath. FactoryDefault IV744. Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommended thatyourebootthedevice(seeIV745.)orresetthedevicebacktoits factorydefaultsettings.Youcanresettheaccesspointbacktoitsdefault settingsusingthisfeatureifthelocationoftheaccesspointisnotconvenient toaccesstheresetbutton. FactoryDefault ClickFactoryDefaulttorestoresettingsto thefactorydefault.Apopupwindowwill appearandaskyoutoconfirm. Afterresettingtofactorydefaults,pleasewaitfortheaccess pointtoresetandrestart. IV745. Reboot Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommended thatyourebootthedeviceorresettheaccesspointbacktoitsfactorydefault settings(seeIV744).Youcanreboottheaccesspointremotelyusingthis feature. 217 Reboot ClickReboottorebootthedevice.A countdownwillindicatetheprogressofthe reboot. NMS IV8. Toolbox IV81. NetworkConnectivity IV811. Ping Pingisacomputernetworkadministrationutilityusedtotestwhethera particularhostisreachableacrossanIPnetworkandtomeasure theroundtriptimeforsentmessages. DestinationAddress Execute Entertheaddressofthehost. Clickexecutetopingthehost. IV812. TraceRoute Tracerouteisadiagnostictoolfordisplayingtheroute(path)andmeasuring transitdelaysofpacketsacrossanIPnetwork. 218 DestinationAddress Execute Entertheaddressofthehost. Clickexecutetoexecutethetraceroute command. NMS V. Appendix ConfiguringyourIPaddress V1. TheaccesspointusesthedefaultIPaddress192.168.2.2.Inordertoaccess thebrowserbasedconfigurationinterface,youneedtomodifytheIPaddress ofyourcomputertobeinthesameIPaddresssubnete.g.192.168.2.x(x=3 254). TheprocedureformodifyingyourIPaddressvariesacrossdifferentoperating systems;pleasefollowtheguideappropriateforyouroperatingsystem. InthefollowingexamplesweusetheIPaddress192.168.2.10thoughyoucan useanyIPaddressintherange192.168.2.x(x=3254). IfyouchangedtheAPsIPaddress,orifyourgateway/routeruses aDHCPserver,ensureyouenterthecorrectIPaddress.Referto yourgateway/routerssettings.YourcomputersIPaddressmust beinthesamesubnetastheAPController. IfusingaDHCPserveronthenetwork,itisadvisedtouseyour DHCPserverssettingstoassigntheAPastaticIPaddress. 219 NMS V11. WindowsXP 1. ClicktheStartbutton(itshouldbelocatedinthelowerleftcornerof yourcomputer),thenclickControlPanel.DoubleclicktheNetworkand InternetConnectionsicon,clickNetworkConnections,andthen doubleclickLocalAreaConnection.TheLocalAreaConnectionStatus windowwillthenappear,clickProperties. 220 2. SelectUsethefollowingIPaddress,theninputthefollowingvalues:
IPaddress:192.168.2.10 SubnetMask:255.255.255.0 ClickOKwhenfinished. NMS 221 NMS V12. WindowsVista 1. ClicktheStartbutton(itshouldbelocatedinthelowerleftcornerof yourcomputer),thenclickControlPanel.ClickViewNetworkStatusand Tasks,thenclickManageNetworkConnections.RightclickLocalArea Network,thenselectProperties.TheLocalAreaConnectionProperties windowwillthenappear,selectInternetProtocolVersion4(TCP/IPv4), andthenclickProperties. 222 2. SelectUsethefollowingIPaddress,theninputthefollowingvalues:
IPaddress:192.168.2.10 SubnetMask:255.255.255.0 ClickOKwhenfinished. NMS 223 NMS V13. Windows7 1. ClicktheStartbutton(itshouldbelocatedinthelowerleftcornerof yourcomputer),thenclickControlPanel. 2. UnderNetworkandInternetclickViewnetworkstatusandtasks. 224 NMS 3. ClickLocalAreaConnection. 4. ClickProperties. 225 NMS 5. SelectInternetProtocolVersion4(TCP/IPv4)andthenclickProperties. 226 6. SelectUsethefollowingIPaddress,theninputthefollowingvalues:
IPaddress:192.168.2.10 SubnetMask:255.255.255.0 ClickOKwhenfinished. NMS 227 NMS V14. Windows8 1. FromtheWindows8Startscreen,youneedtoswitchtodesktopmode. Moveyourcursertothebottomleftofthescreenandclick. 2. Indesktopmode,clicktheFileExplorericoninthebottomleftofthe screen,asshownbelow. 228 NMS 3. RightclickNetworkandthenselectProperties. 4. Inthewindowthatopens,selectChangeadaptersettingsfromtheleft side. 229 NMS 5. Chooseyourconnectionandrightclick,thenselectProperties. 6. SelectInternetProtocolVersion4(TCP/IPv4)andthenclickProperties. 230 NMS 7. SelectUsethefollowingIPaddress,theninputthefollowingvalues:
IPaddress:192.168.2.10 SubnetMask:255.255.255.0 ClickOKwhenfinished. 231 NMS V15. Mac 1. HaveyourMacintoshcomputeroperateasusual,andclickonSystem Preferences 2. InSystemPreferences,clickonNetwork. 3. ClickonEthernetintheleftpanel. 4. OpenthedropdownmenulabeledConfigureIPv4andselect Manually. 232 NMS 5. EntertheIPaddress192.168.2.10andsubnetmask255.255.255.0.Click onApplytosavethechanges. 233 NMS V2. HardwareSpecification MCU/RF QualcommAtherosQCA9558(2.4GHz)+QCA9880(5GHz) PHY QualcommAtherosAR8035 Memory DDR2128MB Flash 16MB Physical Interface LAN:1x10/100/1000GigabitEthernetwith802.3atPoEsupport ResetButton USB2.0interface DCPowerJack Power Requirement PoweroverEthernet,IEEE802.3at DC:12V/2A Antenna InternalPIFAAntenna(2.4GHzx3,5GHzx3) Others InternalBuzzer(Findme) V3. ENVIRONMENT&PHYSICAL Temperature Range UsePoESwitch:
Operation:0to50(32to122) Storage:20to60(4to140) UsePowerAdapter:
Operation:0to40(32to104) Storage:20to60(4to140) Humidity 90%orlessOperating,90%orlessStorage Certifications FCC,CE Dimensions 208(D)x32.1(H)mm Weight 590g 234 NMS VI. BestPractice VI1. HowtoCreateandLinkWLAN&AccessPointGroups YoucanuseNMStocreateindividualSSIDsandgroupmultipleSSIDstogether intoWLANgroups.Youcanthenassignindividualaccesspointstousethose WLANgroupsettingsand/orgroupmultipleaccesspointstogetherintoaccess pointgroups,whichyoucanalsoassigntouseWLANgroupsettings. Followtheexamplebelowto:
A.CreateaWLANgroup. B.Createanaccesspointgroup. C.AssigntheaccesspointgrouptousetheSSIDgroupsettings. A. 1. GotoNMSSettingsWLANandclickAddintheWLANpanel:
235 NMS 2. EnteranSSIDnameandsetauthentication/encryptionandclick Apply:
3. ThenewSSIDwillbedisplayedintheWLANpanel.Repeattoadd additionalSSIDsaccordingtoyourpreference,andthenclickAddin theWLANGrouppanel:
236 NMS 4. EnteranamefortheSSIDgroupandchecktheboxestoselectwhich SSIDstoincludewithinthegroup.ClickApplywhendone. 5. ThenewWLANgroupwillbedisplayedintheWLANGrouppanel. RepeattoaddadditionalWLANgroupsaccordingtoyourpreference:
237 NMS B. 1. GotoNMSSettingsAccessPointandclickAddintheAccessPoint GroupPanel:
2. EnteraNameandthenscrolldowntotheGroupSettingspanelanduse the<<buttontoaddselectedaccesspointsintoyourgroupfromthe boxontherightside.ClickApplywhendone. 238 NMS 3. ThenewaccesspointgroupwillbedisplayedintheAccessPointGroup panel.Repeattoaddadditionalaccesspointgroupsaccordingtoyour preference:
239 NMS C. 1. GotoNMSSettingsAccessPointandselectanaccesspointgroup usingthecheckboxesintheAccessPointGrouppanel.ClickEdit:
2. ScrolldowntotheProfileGroupSettingspanelandchecktheOverride GroupSettingsboxforWLANGroup(2.4GHzand/or5GHz).Select yourWLANgroupfromthedropdownmenuandclickApply:
3. Repeatforotheraccesspointgroupsaccordingtoyourpreference. 4. 240 COPYRIGHT Copyright2016bythiscompany.Allrightsreserved.Nopartofthispublicationmaybereproduced, transmitted,transcribed,storedinaretrievalsystem,ortranslatedintoanylanguageorcomputer language,inanyformorbyanymeans,electronic,mechanical,magnetic,optical,chemical,manualor otherwise,withoutthepriorwrittenpermissionofthiscompany Thiscompanymakesnorepresentationsorwarranties,eitherexpressedorimplied,withrespecttothe contentshereofandspecificallydisclaimsanywarranties,merchantabilityorfitnessforanyparticular purpose.Anysoftwaredescribedinthismanualissoldorlicensed"asis".Shouldtheprogramsprove defectivefollowingtheirpurchase,thebuyer(andnotthiscompany,itsdistributor,oritsdealer) assumestheentirecostofallnecessaryservicing,repair,andanyincidentalorconsequentialdamages resultingfromanydefectinthesoftware.Further,thiscompanyreservestherighttorevisethis publicationandtomakechangesfromtimetotimeinthecontentsthereofwithoutobligationtonotify anypersonofsuchrevisionorchanges. 241 FederalCommunicationCommissionInterferenceStatement ThisequipmenthasbeentestedandfoundtocomplywiththelimitsforaClassBdigitaldevice,pursuanttoPart 15ofFCCRules.Theselimitsaredesignedtoprovidereasonableprotectionagainstharmfulinterferenceina residentialinstallation.Thisequipmentgenerates,uses,andcanradiateradiofrequencyenergyand,ifnot installedandusedinaccordancewiththeinstructions,maycauseharmfulinterferencetoradiocommunications. However,thereisnoguaranteethatinterferencewillnotoccurinaparticularinstallation.Ifthisequipmentdoes causeharmfulinterferencetoradioortelevisionreception,whichcanbedeterminedbyturningtheequipment offandon,theuserisencouragedtotrytocorrecttheinterferencebyoneormoreofthefollowingmeasures:
1.Reorientorrelocatethereceivingantenna. 2.Increasetheseparationbetweentheequipmentandreceiver. 3.Connecttheequipmentintoanoutletonacircuitdifferentfromthattowhichthereceiverisconnected. 4.Consultthedealeroranexperiencedradiotechnicianforhelp. FCCCaution Thisdeviceanditsantennamustnotbecolocatedoroperatinginconjunctionwithanyotherantennaor transmitter.ThisdevicecomplieswithPart15oftheFCCRules.Operationissubjecttothefollowingtwo conditions:(1)thisdevicemaynotcauseharmfulinterference,and(2)thisdevicemustacceptanyinterference received,includinginterferencethatmaycauseundesiredoperation.Anychangesormodificationsnotexpressly approvedbythepartyresponsibleforcompliancecouldvoidtheauthoritytooperateequipment. FederalCommunicationsCommission(FCC)RadiationExposureStatement ThisequipmentcomplieswithFCCradiationexposurelimitssetforthforanuncontrolledenvironment. Thisequipmentshouldbeinstalledandoperatedwithminimumdistance20cmbetweentheradiator&
yourbody. R&TTEComplianceStatement ThisequipmentcomplieswithalltherequirementsofDIRECTIVE1999/5/ECOFTHEEUROPEANPARLIAMENTAND THECOUNCILofMarch9,1999onradioequipmentandtelecommunicationterminalequipmentandthemutual recognitionoftheirconformity(R&TTE).TheR&TTEDirectiverepealsandreplacesinthedirective98/13/EEC
(TelecommunicationsTerminalEquipmentandSatelliteEarthStationEquipment)AsofApril8,2000. Safety Thisequipmentisdesignedwiththeutmostcareforthesafetyofthosewhoinstallanduseit.However,special attentionmustbepaidtothedangersofelectricshockandstaticelectricitywhenworkingwithelectrical equipment.Allguidelinesofthisandofthecomputermanufacturemustthereforebeallowedatalltimesto ensurethesafeuseoftheequipment. EUCountriesIntendedforUse TheETSIversionofthisdeviceisintendedforhomeandofficeuseinAustria,Belgium,Bulgaria,Cyprus,Czech, Denmark,Estonia,Finland,France,Germany,Greece,Hungary,Ireland,Italy,Latvia,Lithuania,Luxembourg,Malta, Netherlands,Poland,Portugal,Romania,Slovakia,Slovenia,Spain,Sweden,Turkey,andUnitedKingdom.TheETSI versionofthisdeviceisalsoauthorizedforuseinEFTAmemberstates:Iceland,Liechtenstein,Norway,and Switzerland. EUCountriesNotIntendedforUse None 242
frequency | equipment class | purpose | ||
---|---|---|---|---|
1 | 2016-03-04 | 2412 ~ 2462 | DTS - Digital Transmission System | Original Equipment |
2 | 5745 ~ 5825 | NII - Unlicensed National Information Infrastructure TX |
app s | Applicant Information | |||||
---|---|---|---|---|---|---|
1 2 | Effective |
2016-03-04
|
||||
1 2 | Applicant's complete, legal business name |
Edimax Technology Co Ltd
|
||||
1 2 | FCC Registration Number (FRN) |
0008842908
|
||||
1 2 | Physical Address |
No.278, Xinhu 1st Rd., Neihu Dist.
|
||||
1 2 |
Taipei City, N/A
|
|||||
1 2 |
Taiwan
|
|||||
app s | TCB Information | |||||
1 2 | TCB Application Email Address |
T******@siemic.com
|
||||
1 2 | TCB Scope |
A4: UNII devices & low power transmitters using spread spectrum techniques
|
||||
app s | FCC ID | |||||
1 2 | Grantee Code |
NDD
|
||||
1 2 | Equipment Product Code |
9576791507
|
||||
app s | Person at the applicant's address to receive grant or for contact | |||||
1 2 | Name |
T**** C******
|
||||
1 2 | Title |
senior Specialist
|
||||
1 2 | Telephone Number |
+886-********
|
||||
1 2 | Fax Number |
+886-********
|
||||
1 2 |
t******@edimax.com.tw
|
|||||
app s | Technical Contact | |||||
n/a | ||||||
app s | Non Technical Contact | |||||
n/a | ||||||
app s | Confidentiality (long or short term) | |||||
1 2 | Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | Yes | ||||
1 2 | Long-Term Confidentiality Does this application include a request for confidentiality for any portion(s) of the data contained in this application pursuant to 47 CFR § 0.459 of the Commission Rules?: | No | ||||
if no date is supplied, the release date will be set to 45 calendar days past the date of grant. | ||||||
app s | Cognitive Radio & Software Defined Radio, Class, etc | |||||
1 2 | Is this application for software defined/cognitive radio authorization? | No | ||||
1 2 | Equipment Class | DTS - Digital Transmission System | ||||
1 2 | NII - Unlicensed National Information Infrastructure TX | |||||
1 2 | Description of product as it is marketed: (NOTE: This text will appear below the equipment class on the grant) | AC1750 Ceiling Mount AP | ||||
1 2 | Related OET KnowledgeDataBase Inquiry: Is there a KDB inquiry associated with this application? | No | ||||
1 2 | Modular Equipment Type | Does not apply | ||||
1 2 | Purpose / Application is for | Original Equipment | ||||
1 2 | Composite Equipment: Is the equipment in this application a composite device subject to an additional equipment authorization? | Yes | ||||
1 2 | Related Equipment: Is the equipment in this application part of a system that operates with, or is marketed with, another device that requires an equipment authorization? | No | ||||
1 2 | Grant Comments | Power output listed is conducted. Device contains 20/40MHz bandwidth. Device is 3x3 MIMO. The antenna(s) used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons. End-Users must be provided with transmitter operation conditions for satisfying RF exposure compliance. | ||||
1 2 | Listed Power is maximum conducted RF output power. Device contains 20/40/80MHz bandwidth. Device is 3x3 MIMO. The antenna(s) used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons. End-Users must be provided with transmitter operation conditions for satisfying RF exposure compliance. | |||||
1 2 | Is there an equipment authorization waiver associated with this application? | No | ||||
1 2 | If there is an equipment authorization waiver associated with this application, has the associated waiver been approved and all information uploaded? | No | ||||
app s | Test Firm Name and Contact Information | |||||
1 2 | Firm Name |
A Test Lab Techno Corp.
|
||||
1 2 | Name |
J******** L******
|
||||
1 2 | Telephone Number |
886-3********
|
||||
1 2 | Fax Number |
886-3********
|
||||
1 2 |
J******@atl-lab.com.tw
|
|||||
Equipment Specifications | |||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
1 | 1 | 15C | CC MO | 2412.00000000 | 2462.00000000 | 0.3430000 | |||||||||||||||||||||||||||||||||||
Line | Rule Parts | Grant Notes | Lower Frequency | Upper Frequency | Power Output | Tolerance | Emission Designator | Microprocessor Number | |||||||||||||||||||||||||||||||||
2 | 1 | 15E | 38 CC MO | 5180 | 5240 | 0.4 | |||||||||||||||||||||||||||||||||||
2 | 2 | 15E | 38 CC MO | 5745 | 5825 | 0.865 |
some individual PII (Personally Identifiable Information) available on the public forms may be redacted, original source may include additional details
This product uses the FCC Data API but is not endorsed or certified by the FCC