FCC ID: A8J-ECW270 Cloud6 4x4 Outdoor

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6428459.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case ECW270 User Manual This equipment is not suitable for use in locations where children are likely to be present. What is EnGenius Cloud?

Other Languages:

Before You Begin To start using the EnGenius Cloud service, you must prepare the following:

At least one supported EnGenius Cloud wireless access point or switch. An existing network with an Internet connection including DHCP and DNS conguration. You can also install the "EnGenius Cloud" mobile app (available for both iOS and Android) for easier device registration and monitoring. Supported Web Browsers The EnGenius Cloud is primarily accessible with a web browser. Before signing up for the EnGenius Cloud service or logging on to the web interface to manage your network, rst verify that you are using a supported browser. The following table lists the web browsers that EnGenius Cloud supports:

Browser Release Google Chrome 57.0.2987.110 and later Apple Safari 10.0.3 (12602.4.8) and later Mozilla Firefox 52.0 and later Microsoft Edge 80.0.361.103 and later If you use an unsupported web browser, you may experience issues displaying elements on the web interface. Getting Started This session will assist you in setting up a new network on the EnGenius Cloud web application. For easier, faster setup, use the EnGenius Cloud for iOS or EnGenius Cloud for Android mobile apps. No matter which version you start with, you can always switch seamlessly between the web and mobile. This article is not meant to be a comprehensive list of everything EnGenius Cloud, but rather a stepping stone to get started in the most informed way possible. Signing Up Before you start to manage EnGenius devices, you must rst sign up for the service. Registering EnGenius Cloud is similar to other web-based platforms and can be done either with a social media account (e.g. Google or Facebook) or by creating an account from scratch. You will need to provide your email address, company name, physical address, and phone number. Furthermore, you must determine the country in which your account will be hosted. That is, all relative device information, user congurations, and client statistics will be kept in the corresponding region of servers (Oregon for US and Frankfurt for other countries). This enables EnGenius Cloud to protect customer data and comply with requirements like GDPR for customers within the European Union. Support for signing up with EnGenius Partner Portal will be available soon. Logging On Once your account has been created, you can login to EnGenius Cloud in the followingsteps:

1. Open a web browser to https: // cloud.engenius.ai/ . This will bring up the main login page. 2. Enter your EnGenius Cloud email address and password and click the Sign in button. 3. For EnGenius Partner who has account on EnGenius Partner Portal already, you can simply click on "E Partner" button, and EnGenius Partner Portal will pop up login page for you to use Single-Sign-On capability of Partner Portal to log on to EnGenius Cloud 4. For Google and Facebook users, you can also click on "Google" or "Facebook" button to use your account on Google and Facebook to log on to EnGenius Cloud 5. EnGenius Cloud will create a new default Organization and Network for every new account based on the email address as unique user identication. (note: If someone is invited to an Organization or Network, this account won't have default Organization and Network.) If you have multiple accounts created on EnGenius Cloud, EnGenius Cloud will merge your accounts based on the "email address" of the account. For example, if you have created a new account on EnGenius Cloud using the same email address as your google account, then you're able to login to this email account either through Google account authentication with Google account password, or through EnGenius Cloud Login with the password while you created the EnGenius Cloud account. Registering Devices to Organization Register a device to EnGenius Cloud inventory by using the serial number located on the device. Registering a device Registering devices with a serial number is easy. Just enter the serial numbers of your devices, one per line, then click the Register button. Assigning Devices to Network Before devices on EnGenius Cloud can be managed and congured, they must rst be added to a network that you have created. Adding Devices to a Network 1. Navigate to Organization > Inventory. 2. Select one or multiple devices as required. 3. Click Assign to Network. Device Setup ECW AP Installation ECW AP Package Contents ECW120 Package Contents ECW220/230 Package Contents

-ECW115 ECW115 Package Contents Minimum Access Requirement Power source option - An ECW AP device can be powered by an 802.3af/at/bt-compliant PoE device or by DC12V /54V input Do not use both power sources at the same time. Ethernet port:

LAN (PoE): Uplink port accepts an 802.3af/at/b power source. LAN2: Data link if this port is built on a device. Connect the AP to Internet:

You need to nd a way to let the Cloud AP be able to access internet, so it can be managed by EnGenius Cloud. Connect the uplink LAN port to a switch port or port of router: This is the most common way to let AP be able to access Internet. (Note: please make sure the port is internet accessible by connecting a notebook to the port and browse the internet) Use your existing Cloud-managed ECW AP to mesh the new AP: Sometimes the place the AP installed is not accessible with Ethernet cable, then you can leverage EnGenius Mesh technology to mesh the new AP to your existing cloud-managed ECW AP. After internet connected, you will see Power LED blinking until the AP is able to communicate with EnGenius Cloud and the LED becomes steady lid. Usually it will take about 8 mins if there is new rmware available to upgrade. If the LED keeps blinking, then there could be some issues like no IP address, or local proxy server setting required...etc. To set static IP or Proxy, or managed VLAN, you can login to Local Access Page through Managed SSID of the AP. ECS Switch Installation ECS Switch Package Contents Connecting to ECS Switch A) Connect the supplied power adapter (or power cord) to the switch and plug the other end into an electrical outlet. Verify the power LED indicator is lit on the switch. Wait for the switch to complete boot up. It might take few minutes to complete the process. B) Connect one end of a category 5/6 Ethernet cable into the gigabit (10/100/1000) Ethernet port on the switchs front panel and the other end to the Ethernet port on the computer. Verify that the LED on the Ethernet port of the switch is green. Login to the ECS Switch Local Access Page The switch's default IP address setting is DHCP client mode, which will get an IP address from the DHCP server. It will automatically change to static IP address assignment if the switch cannot get an IP address from the DHCP server within two minutes of booting up. If your switch cannot get an IP address from local DHCP server, or you would like to use static IP address assignment, you may follow the below procedures to manage your computer connection to the switch via a static IP address. IP address conguration on your computer:

A) Once your computer is on, congure the settings of your network adapter. Open Network Connections > Local Area Connection > Internet Protocol Version 4 (TCP/IPv4) > Properties B) Select Use the following IP address and make the following entries:

IP Address: 192.168.0.10 (or any address in the 192.168.0.x network) Subnet mask: 255.255.255.0 Login to ECS Switch A) Open a web browser on your computer. In the address bar of the web browser, enter the ECS switch IP address and hit enter. B) The default username is admin and the password is password. We strongly recommend that you change these as soon as possible. Enter the username and password of the switch and then click Login.

*Your model number may be different in the web browser interface. C) ECS Switch local access page will appear. Instead of default DHCP settings on ECS switch, users may choose a static IP address setting for their deployed network. Remember to open System > Static Route to setup the static IP address/gateway settings on the switch in this case. QIG ECW AP ECW120_ECW220_ECW230_QIG QIG_ECW120_ECW220_ECW230.pdf - 2MB ECW115_QIG QIG_ECW115.pdf - 2MB ECW160_QIG QIG_ECW160.pdf - 2MB ECS Switch ECS_Switch_QIG ECS_QIG.pdf - 2MB Troubleshooting ECW AP 1. Check the LED Status to see if any problem encountered. If Power LED keeps ashing for over 10 minutes, then there could be Cloud connection issues. 2. Use your mobile phone to scan if Default SSID of the AP found. (you have to be around the AP location) From the Default SSID, you can also identify which stage the AP is stuck on. See details of Default SSID. 3. To troubleshoot the connection issue, you may login to Local page:

1. Use your client device (e.g., a laptop, mobile device, or tablet) to nd the SSID:

EnMGMTxxxx (xxxx is the last four digits of LAN MAC which can be found on the back of the device) and connect to it. 2. Enter the URL in web browser: http:// EnGenius.local or the IP 192.168.1.1 to access the devices user interface. You can review device status after logging into the AP with the default account/password ( default admin account/ password : admin/

admin.) Issue: Cannot nd Default SSID 1. Check for available wireless networks (Check if a known default SSID is being broadcast). 2. If a default SSID is being broadcast, connect your device to it. 3. If no known default SSIDs are present, set up a manual wireless network connection. For the SSID name, use 'EnMGMT', e.g. 'EnMGMTxxxx', where the x's are replaced with the last four digits of the LAN MAC address. 4. After connecting, open a web browser and connect to one of the local access page addresses. LED Status ECW120 LED Status LED / Color State Cloud Connected Connecting to Cloud No LAN Physical Connection LAN Connected LAN Transmitting Wi-Fi Interface On Wi-Fi Transmitting Power LED Orange Power LED Orange LAN LED Blue LAN LED Blue LAN LED Blue 2.4G / 5G Blue/Green 2.4G / 5G Blue/Green Solid On Flash Off Solid On Flash Solid On Flash Firmware Upgrade All LED's Flash Mesh Enabled Mesh LED Blue Flash ECW115 LED Status Power Up AP LED Color State Orange Static Waiting Period (before being added to Cloud) Orange Flash (slow) Connected to Cloud Reset to Default Blue Blue Static Flash (quick) Error or Disconnected Orange Flash (quick) Firmware Upgrading Orange/Blue Flash Default SSIDs Default SSIDs (only available before ECW AP is managed by EnGenius Cloud) Potential known default SSID names along with potential causes/solutions:

EnMGMTxxxx-Initializing Cause: AP is in bootup sequence. EnMGMTxxxx-SSID_name>-No_Eth Cause: AP does not have an Ethernet connection. Solution: Check if the Ethernet cable is unplugged. EnMGMTxxxx-No_IP Cause: AP cannot get an IP address from the DHCP server. Solution: Check the AP's IP address conguration. EnMGMTxxxx-IP_Conict Cause: APs IP address conicts with another devices IP in the same network. Solution:

Check the AP's IP address conguration. EnMGMTxxxx-Gateway_ERR Cause: AP is unable to connect to its default gateway. Solution: Check the AP's IP address conguration and connectivity to its default gateway. EnMGMTxxxx-Proxy_ERR Cause: AP could not access Internet through an HTTP/HTTPS proxy. Solution: Check the APs proxy conguration in Miscellaneous Settings. EnMGMTxxxx-DNS_ERR Cause: AP could not resolve the domain name from the DNS server. Solution: Check the AP's IP address conguration. EnMGMTxxxx-Cloud_ERR Cause: Everything appears to work normally, but device is unable to connect to cloud server. Solution: Check cloud server status with EnGenius. EnMGMTxxxx-No_Cloud_Congure Cause: APs S/N has not been added to any network. Solution: Check whether the AP has been added in the inventory and has been added to a network. EnMGMTxxxx-Cloud_Congured Everything is working as it should!

EnMGMTxxxx Cause: An AP has never connected to the EnGenius cloud or has been factory reset. Login to Local Access Page 1. Use your client device (e.g., a laptop, mobile device, or tablet) to nd the SSID:

EnMGMTxxxx (xxxx is the last four digits of the MAC address, found on the back of the device) and connect to it. 2. Under your web browser, enter the URL http:// EnGenius.local or the localhost IP address

(192.168.1.1) to access the devices user interface. You can review device status after logging into the AP with the default admin account/password (default account &

password: admin/admin) By default, EnGenius cloud access points (ECW series) are assigned an IP address dynamically by the DHCP server. If you encounter issues with IP address assignment, please double check that the IP settings include IP address, subnet mask, gateway, proxy, and management VLAN. If any issues still exist, you may change your IP assignment from

"DHCP mode" to "Static IP" via the following procedure:

ECW AP's Local Access Page By default, EnGenius cloud access points (ECW series) are assigned an IP address dynamically by the DHCP server. If you encounter issues with IP address assignment, please double check that the IP settings including IP address, subnet mask, gateway, proxy, and management VLAN. If any issues still exist, you may change your IP assignment from "DHCP mode" to "Static IP"

via the following procedure:

a) Select Local Setting on this page. b) Change IPv4 setting from AS DHCP client to Use Static IP c) Congure the IP address, gateway, net mask, and proxy policy as required. d) Reconnect this device to the LAN again if necessary. Local Access Page Options Every device's status page includes useful information about the status of the device, basic conguration options (such as setting a static IP), and other tools. The following section will explain the items available on the device status page. ECW Access Points provide the following information and conguration options on their local status page:

Device Status Section Contains information regarding the device overview, EnGenius Cloud overview, and network connectivity information. Device Status on Local Access Page Device Overview Provides information regarding the name, model, serial number, IP address, MAC address, and current rmware. Cloud Overview Provides information about the Cloud registration status, date of registration, and time of last update. Network Connectivity Provides connectivity information to local network, Internet, and EnGenius Cloud. Local Setting Section Provides settings for IPv4 / IPv6 address, management VLAN, rmware upgrade, and other miscellaneous conguration items (such as HTTP/HTTPS Proxy). Users can also reboot the device or reset the device to factory default settings from here. Local Setting on Local Access page The HTTP proxy only allows all default management trac from the EnGenius ECW device to be sent through a proxy. Label information ECW AP's The rst step is to get the serial numbers of the Cloud equipment you want to add to your cloud account. The serial number can be found on the box of the Cloud AP (ECW) or Cloud switch (ECS). An example of each is below:

Fig 1: ECW Serial number on box 1. Model number of ECW AP 2. Serial Number of ECW AP (This string of information that is added in the Cloud GUI) 3. Hardware version on ECW AP The serial number for an ECW AP can also be found on the sticker on the back on the unit

(check where you plug in the Ethernet cords into the ECW AP) Fig 2: Back of AP Below is an example of the sticker on the back on an ECW220 AP. Fig 3: Sticker on back of ECW AP As you can see the sticker on the back of the AP has the MAC address of the AP as well. It has the following items:

1. Model of AP 2. Serial number of ECW AP (This string of information that is added in the Cloud GUI) You can also nd the serial number of the ECW AP In the GUI of the ECW AP, when you login into the unit. Highlighted below is the information needed to add the AP to the Cloud GUI, if the information is obtained via login to the ECW AP locally in the web GUI. Fig 4: Local Login information 1. Model of the AP 2. Serial Number of ECW AP (This string of information that is added in the Cloud GUI) 3. Firmware version the AP is currently running ECS Switches Below is the sticker that is on the box of the ECS switch Fig 5: Sticker on the ECS box 1. Model of the ECS switch 2. Serial Number of ECW AP (This string of information that is added in the Gloud GUI) 3. Hardware version of the ECS switch 4. Firmware version that the switch came shipped with Below is the information you nd when you login to the ECS switch locally and go to System > Summary from the left hand column. Fig 7: ECS Switch local login screen 1. Model of ECS Switch 2. Serial Number of ECW AP (This string of information that is added in the Gloud GUI) 3. Firmware version the switch is currently running Working with Organization Trees EnGenius Cloud adopts an organization tree structure to let user dene the scope of their managed networks. All device managing or monitoring functions can be applied to different scopes as laid out in the user's tree. That gives VAR or MSP users great exibility in managing their networks. The current organization tree structure consists of three levels, from largest to smallest:

Organization - A grouping of one or more hierarchies under the umbrella of a single license. Hierarchy View - A cluster of networks, which may be geographically concentrated or spread out. Network - A set of network devices united by a single conguration set. The organization tree denition is shown on the top left corner of the web GUI as follows:

How-to Videos How to build your company networks in EnGenius Cloud https:// www.youtube.com/watch?v=sN2y44Yzi7s&feature=youtu.be&t=5 Organization A collection of hierarchy views and networks that are part of a single organizational entity, such as a company or school district. Each organization is the owner of a single license. Adding an organization Click Menu > Create Organization button to create organization Edit Organization Edit a organization if you need to update any its current settings (for example, if you want to change the Organization name, Country, TimeZone.) Follow these steps to edit a Organization. 1. Click Menu > Find the Organization you want to edit > Edit 2. Update Network Settings as required 3. Click Apply Delete Organization If you no longer need a Organization that you previously created, you can delete it. Follow these steps to delete a organization 1. Click Menu > Find the Organization you want to edit > Delete 2. Popup is displayed and click Conrm Hierarchy View A hierarchy view is a group of networks and/or nested hierarchy views. It follows a tree-like structure much like folders on your computer's operating system. Adding a hierarchy view You can create hierarchy views for a new organization or an existing organization, or even within an existing hierarchy view. Click Menu > Choose organization or hierarchy view >

Add hierarchy view Edit hierarchy views 1. You can edit the name of a hierarchy view name by clicking Menu > Choose hierarchy view > Edit 2. Change the Hierarchy View name and click Apply. Delete Hierarchy View You can delete hierarchy views by clicking Menu > Choose hierarchy view and then clicking on the garbage icon. J 1e ,t ,..\I CJIVX\IXCZV Cl Access Points 0 WA N IP I.Ill Upd;al.-

tl H ofo Mn-, r I _ Q".-se.r_<h_

,81 Ea..._t.. t

@I Emplus

(] EnGerilus;_Talpel

, 81 sonryOrg

' 8111.... 81James tes t isd fs dfef ill} Network._6

.[I Or

, 8S1enll0-1.lnlCO 0 Network A network contains a list of devices and relevant information, such as conguration, SSID, radio settings, and rmware upgrade history. Each network contains a single conguration set for its devices, so if you have multiple congurations for devices, you can create a separate network to handle that. Adding a network 1. Click Menu > Choose organization or hierarchy > Create network 2. Enter a name for the network, select the country, time zone, and then click Create. Edit Network Network name, country, and timezone can be edited as needed. Follow the steps below to edit a network. Choose network > Edit Delete Network If you no longer need a network that you previously created, you can delete it. Follow these steps to delete a network. 1. Click Menu > Choose network > Delete 2. Popup is displayed. Click Conrm. Managing Access Points This screen allows you to view the detailed information about your access points in the selected scope. Click Manage > Access Points to visit the page, and double-click the organization/hierarchy view/network on the tree to change the current scope. The following describes the functions on this screen:

Move: Select one or multiple access points and click to move the AP(s) to another hierarchy view/network. Remove From Networks: Select one or multiple access points and click to remove from the current org/hierarchy view/network. Add From Inventory: Click to add access points from your inventory Detail: Click to display individual access point details Customizing Access Point Radio Settings You can override the network's default radio settings of an individual access point if needed. Follow these steps to customize the radio settings of a network. 1. Choose an access point from the list to show its expanded settings. 2. In the Radio section, click the checkbox below the lock icon to override default settings. 3. Congure the following settings for both the 2.4GHz and 5GHz radio band:

Channel Tx Power Channel Width 4. Click Apply. Customizing the WLAN Settings of an Access Point This shows SSIDs and allows you to override the default SSID setting. Follow these steps to congure to enable the SSID, or hide the SSID of a network. 1. In the WLAN section, click checkbox near lock icon to override default settings. 2. Congure SSID to be enabled or hidden per your request. 3. Click Apply. S@n90J_lflk0 Ll<ftll.3F.ot1k.0 1 [1'

!12(;.8

.ci...1a -

11 1-lJ of l:i M L111t Upd1t 11 HRIMl1 Hl9>

o c:, D C:J

.,._.,... u 0 Cl Cl a

:... _., Ill &

111 ........ . 1.ri,:,,_Jt_(N'l\cf(IJ ii MDC'ilO'-A'r,. lt'Wl;XI

..... 1-0

:l G8

e

111 ml

,0 t10 IJ2 1ft, 11 1921M,OM q10

" a -

a

a 0 Getting Access Point Analytics From the access point list page, you can click Details to get detailed information about an individual access point. Summary SSID This screen allows you to monitor SSID for your access point. SSID: Shows the SSID name. Radio: Shows the SSID use for the 2.4GHz or 5GHz bands. Security: Authenticate users with Open or WPA-PSK or WPA-Enterprise when they connect to the SSID. Captive portal: Shows captive portal authentication type. Throughput This screen allows you to monitor Throughput for your access point. Radio This allows you to congure individual radio settings. The default radio setting will be followed by the network radio setting. If you want the radio settings of an access point to be different from the default, you can override them with custom values. Network This allows you to congure individual access point network settings. DHCP: You can choose to auto assign IP addresses if there is a DHCP server in the network. Static: Allows you to manually assign an IP address. Enter the IP address you wish to assign to the access point and ll in the subnet mask, default gateway, and DNS server address. IPV4 Address: Enter the IP address for the access point. Subnet Mask: Enter the subnet mask for the access point. Gateway: Enter the default gateway for the access point. DNS Server 1: Enter the primary DNS server name. DNS Server 2: Enter the secondary DNS server name. Logs Periodically viewing events that have occurred on an access point (or on clients associated with the access point) can help alert you to potential issues. The Logs tab appears and displays the latest events that have occurred in the last 24 hours. Clients Use the Clients tab on the access point list page to view information about wireless clients that have associated with a particular access point. Realtime Meters Realtime Meters is primarily for viewing real time statistics. By default, there are four types of data:

CPU Memory Throughput 2.4G Throughput 5G Capturing data over a period of time allows you to see trends most useful for determining the overall performance of your access point. LED Use this screen to control LED lights and enable LED Blinking . LED Light: This allows you to enable or disable the LED Lights. LED Blinking: This feature is useful in situations where user could not nd the specic AP properly. Click light bulbs to start blinking . Managing Switches Click Manage > Switches to access this screen and double-click the organization/hierarchy view/network on the tree to change the scope. The Switch List page lists all switches within your organization/hierarchy view/network, and allows you to choose each switch to view the port status, VLAN , STP and PoE. The following describes the functions in this screen:

Move to: Select one or multiple switches and click to move the switches to another hierarchy view/network. Remove From Networks: Select one or multiple switches and click to remove the switches from the current organization/hierarchy view/network. Add From Inventory: Click this button to add switches from your existing inventory. Detail: Click to display the individual switch details. PoE scheduling This allows you to view and congure PoE schedules that can be applied to the ports. Below screens display the existing schedules visually. Click Manage > Switch lists > detail >

PoE scheduling to access this screen Edit PoE Scheduling 1. Select the ports to be set the PoE scheduling then click Edit 2. Enable scheduling and then customize the PoE on or Off by dragging the bar. This behavior is the same when you congure the SSID scheduling. 3. If you want to do the PoE reset, you can simply click PoE rest and then drag the icon to the specic time. 4. Click Apply. Getting Switch Analytics From the Switches page, you can click Details on the web interface to display detailed information about a switch. Summary PoE reset from the Switch Panel :

User can mouse-over to the PoE port of the switch port panel and power-cycle the port, so the device attached to the port will be rebooted Total PoE Usage: This bar graph displays the consumed, remaining, and total wattage utilized by Power over Ethernet. Total PoE Utilization by Port: Displays the current PoE utilization by each port, in watts. System Setting The System Settings section allows you to congure all primary networking options for your switch. Spanning Tree Protocol A Spanning Tree Protocol is a Layer 2 protocol that prevents loops in a network with redundant paths created by multiple switches. We recommend using this feature if your environment incorporates multiple switches. Procedure 1. Enable the STP option 2. Select a Protocol 3. Select a Bridge Priority value 4. Click Apply LLDP The Link Layer Discovery Protocol (LLDP) is a Layer 2, vendor-neutral protocol that allows network devices to advertise capabilities, identity, and other information. This data can potentially be queried by SNMP. Procedure 1. Enable the LLDP option 2. Click Apply Voice VLAN The Voice VLAN feature congures switches to automatically allow and prioritize voice trac over a designated VLAN. This keeps voice trac separate and prioritized over other trac types. Mode: Allows you to dene the Voice VLAN mode. Auto: Automatically advertises the Voice VLAN to connected devices via the LLDP-MED protocol. OUIs: Determines whether a received packet is a voice packet by checking its source MAC address. Switch Voice VLAN: Allows you to choose what VLAN is used for Voice VLAN. You can set up VLANs in Port Settings. QoS Priority: Lets you dene whether the switch will use the Quality of Service CoS value of the incoming packet, or tag the packet with a CoS value between 1-7. OUIs: VoIP trac has a pre-congured Organizationally Unique Identier (OUI) prex in the source MAC address. You can manually add a specic manufacturer's MAC address and description to the OUI table. All trac received on the Voice VLAN ports from the specic IP phone with a listed OUI is forwarded on the voice VLAN. QoS Quality of service (QoS) allows operators to prioritize application trac to ensure that latency-affected data, such as VoIP and video conferencing, is uninterrupted during periods of network congestion. Switches implement this by reading tagged packets and prioritizing them accordingly. Packets are classied using Class of Service (CoS) on the data link layer, and Differentiated Services Code Points (DSCP) on the network layer, mapped to a queue, then sent out accordingly as per QoS. Trust Mode: Allows you to dene whether the switch will use CoS, DSCP, or both trust modes for QoS. Scheduling Method: Allows you to dene what method the switch will use when assessing transmitting incoming packets in queues. Strict priority always prioritizes queues with a higher priority, while Weighted Round Robin (WRR) weights each queue by priority, then applies a round-robin policy when choosing packets for transmission. Queue Mapping: Tagged packets are sent to queues dened in this setting. For each CoS or DSCP value, you can choose the queue to which tagged packets are mapped. IGMP IGMP Snooping is used for controlling multicast trac. It listens to IGMP messages being processed by the switch and prevents these messages from being sent to hosts not part of the respective multicast. Version: The available IGMP Snooping versions are v2 and v3. You can select either/or in the Version dropdown. VLANS: You can enable IGMP Snooping for any VLAN by selecting the corresponding checkbox next to the VLAN ID. Jumbo Frame Ethernet has used the 1500 byte frame size since its inception. Jumbo frames are network layer PDUs that have a size much larger than the typical 1500 byte Ethernet Maximum Transmission Unit (MTU) size. Jumbo frames extend Ethernet to 9000 bytes, making them large enough to carry an 8 KB application datagram plus packet header overhead. If you intend to leave the local area network at high speeds, the dynamics of TCP will require you to use large frame sizes. The switch supports a jumbo frame size of up to 9216 bytes. Jumbo frames need to be congured to work on the ingress and egress port of each device along the end-to-end transmission path. Furthermore, all devices in the network must also be consistent on the maximum jumbo frame size, so it is important to do a thorough investigation of all your devices in the communication paths to validate their settings. Jumbo Frame : Enter the size of a jumbo frame. The range is from 1522 to 9216 bytes. Port Settings Selecting one or more ports and clicking Congure will display the following settings:

Link: Allows you to enable or disable the connection for this port. Label: Allows you to add a descriptor for this port. Speed/Duplex: Allows you to dene the following speed/duplex communication settings for this port:

Auto: Speed/Duplex will auto-negotiate based on the connected node. 1Gbps / Full Duplex 100 Mbps / Full Duplex 100 Mbps / Half Duplex 10 Mbps / Full Duplex 10 Mbps / Half Duplex Power over Ethernet (PoE): Allows you to power a connected device through an Ethernet cable using your switch. VLANs: Allows you to group devices to create a partitioned network on the same LAN. Isolation: Allows you to congure a port to transmit trac only to its connected node. Rate Limit: Allows you to limit the amount of incoming and outgoing trac in Mbps. Flow Control: Enabling this will have the switch regulate trac during times of congestion. QoS: If QoS is enabled in Switch Settings, you can congure additional settings per port. CoS Value: All incoming packets that lack a CoS value will use the one set in this dropdown. Trust CoS: If checked, the switch will queue packets tagged with CoS into their designated queues. If unchecked, all packets will leave the same queue. PD lifeguard: When abnormal events happen on Powered Devices, they might require reboot in order to return to normal operation. PD Lifeguard can be used to judge if the PD is still reachable and turn the unreachable devices off and on. Specied IP: Setting specied IP on a specic port. Ping Interval: Setting ping IP interval on a specic port. Ping Max Count: Setting ping max count on a specic port. Power Recovery Interval: The waiting time between power off and power on a specic port. PD BootUp Time: Setting Powered Device boot-up time on a specic port. Realtime Meters System Metrics is primarily for viewing real time statistics . By default there are two types of data:

CPU Memory Capturing data over a period of time allows you to see trends useful for determining the overall performance of your switch. Override System setting on the Switch Network-wide setting System setting is followed by Switch setting from the Congure > Switch settings as default settings. If you want individual AP System settings to be different from the Switch Network- wide setting , you can click below part in the screen to override the setting . Sen.m / ::i N.:ing,mg / ,;- 8F Ne tw o rk l;I AP List > Device Diagno sis

) I!! System Metrics Q. Madel Name ECW1 2D Firmware V1, 0 . S IP Addn:!:ss 192 .1 6B.1 . 15 255,255 .2 54,0 Sub'1-et M:c 1sk Voice VLAN Ois c1b l t!

CPU J1.1mb0 Fri.im,e5 Enable Serial NO. SN1 234567 8-90 Gatewa'.,' 192 16 B.1 1 I GMP Snooping Enable MAC Addr ess 0A:1B:2C.3D:4F:FE Topology Show STP Enuble LLDP Enable QoS Enable 45'1o Memor y 71%

Summary System Sett ing Port Setting Event Log Spanning Tree Protocol Prot ocol Bri dg e Priority C) Sw it ch Voi ce VLAN Sf!.l ec t a VLAN

.. DoS Prm n !y

, D {B K) Mirror Port Mirroring allows you to copy packets on one or more ports to a mirroring destination port. You can attach a monitoring device to the mirroring destination port to view details about the packets passing through the copied ports. This is useful for network monitoring and troubleshooting purposes. The feature is available is at Manage > Switch < Details >

Mirror The following describe the labels on this screen :

Session id : A number identifying the mirror session. Switch supports up to 3 mirror sessions. Session State : Select whether to enable or disable port mirroring. Destination Port : The port which all mirrored data is sent to . Ingress : indicates that only data being received will be mirrored. Egress : indicates that only data being sent will be mirrored How to congure 1. Click the edit icon towards the right . 2. Enable the Session state. 3. Select the Destination port 4. Select the Ingress and Egress port 5. Click Apply Port state There are four types of port that you congured . Port was assigned to a destination port . Port was assigned only data being sent will be mirrored . Port was assigned only data being received will be mirrored . Port was assigned both directions of data are being mirrored to the destination port. Link Aggregation Link aggregation groups multiple ports together in parallel to act as a single logical link. Aggregation-enabled devices treat all physical links (ports) in an aggregation group entirely as a single logical link (port). Member ports in an aggregation group share egress/ingress trac load, delivering a bandwidth that is multiple of a single physical link. The feature is available is at Manage > Switch < Details > Link Aggregation How to Congure To Congure trunk , you must select aggregation type . Select from the following options:

LACP: LACP is a dynamic protocol which helps to automate the conguration and maintenance of LAGs. The main purpose of LACP is to automatically congure individual links to an aggregate bundle, while adding new links and helping to recover from link failures if the need arises. LACP can monitor to verify if all the links are connected to the authorized group. LACP is a standard in computer networking, hence LACP should be enabled on the Switch's trunk ports initially in order for both the participating Switches/devices that support the standard to use it. Static: Static conguration is used when connecting to a switch that doesn't support LACP. Disable : Disable the trunk that you congured previously. Then select the Member Ports to add into the trunk group. There are two ways to select the ports 1. Click on the port picker to select multiple ports. 2. Click Pencil icon to input port numbers After you complete the trunk settings , remember to click Apply to take effect . Managing Clients EnGenius Cloud provides management views that collect information about connected clients in your organization/hierarchy view/network. Click Manage -> Clients to access this screen and double-click the organization/hierarchy view/network on the tree to change the scope. Filtering the Clients List The list of clients can be customized based on time intervals, and the chart can be customized based on time intervals and SSIDs. To change these parameters, use the appropriate dropdown menu at the top of the screen. Searching for Clients You can search for a client in the current client list by using the search. You can search by any parameter included in the search options, and it will attempt to match your query across all elds. You can also specify multiple parameters by clicking on the icon in the search box, as seen below:

Block Clients This allows you to block clients on the current SSID that clients connected . Once you want to unblock clients , please go to Congure > SSID > Access control to delete the Mac Address from the Block list . VIP Clients This allows you to make clients as VIP on the current SSID or on Network wide that clients connected . Once you want to delete clients from the VIP list , please go to Congure > Access control to delete the Mac Address from the VIP list . Client Timeline The Client Timeline is a great feature that aggregates and analyzes activities of a specic wireless client to provide an intuitive and historical view. With Client Timeline, user can easily know how clients associate, authenticate, and roam among Access Points. It is extremely useful when you need to debug or trace your wireless network. The feature is available at Manage > Client > Client name. Client States The EnGenius Cloud AI system categorizes client activities into ve different states:

Client was connecting to an AP. Client was roaming and connecting to another AP. Client changed to associate with different radio or SSID of the same AP. Client failed to authenticate with an SSID. Client was denied because of it is in block list. The states are displayed at the left hand side of timeline. User can easily see how a client transited its states among APs. Radio Color Conventions The drawing and content of client timeline follows the color conventions as below:

Green: represent a 5G session. Blue: represent a 2.4G session. In the right hand side of each session, the system shows the channel, band, protocol, and signal strength of client detected at the beginning of that session. Transition Details The communication between wireless client and AP could be very complicated. Different clients with different wi chips and wireless drivers can behave very differently while communicating with the same AP. The intelligent engine behind Client Timeline is capable of analyzing communication packets effectively and performs clean and human readable transition details for the user. User can click on the event summary inside a connection session to expand the sequence of transition details:

Table below displays client leave patterns when client leaves each connection session. Leaving reason Description Incorrect password Client entered the incorrect password for WPA or wrong authentication information for EAP Client switch to

{device_name}/{radio}

When the RSSI signal is not good enough, the client did not disassociated from the AP and it connected to new AP directly with regular authentication procedure. Roam out to

{device_name}

When the RSSI signal is not good enough. The client disconnected from the original AP and connected to the new AP by 802.11r fast roaming protocol. Steer to {radio}

protocol. It received the 802.11v trigger and connected to The client disconnected from the AP due to band steering suggested band accordingly. Disconnected by The client was disconnected by the AP due to bad RSSI signal

{device_name}

(fast handover). AP disconnect The client was disconnected by the AP due to unknown reason. Kicked by Cloud The client was kicked by the cloud administrator. Denied by ACL The connection was refused by AP because the client was on the blocked list under access control. Exceed client limit The connection was refused because the client count has exceeded the maximum 2.4G/5G client limit. Client inactive Client disconnect The client was inactive because it was on power saving mode or far away from the AP. The client disconnected because the user disabled the Wi-Fi or choose to connect to other AP. Disconnected due to SSID conguration change The clients was disconnected due to SSID conguration change. Some conguration change took effect only after recycled

(down&up) the NIC (network interface controller). When the NIC is down, all connection are disconnected. Device Map Location This screen allows you to locate a device on the world map to show the relationship between the space and EnGenius Devices. Maps provide a visualization for buildings and access points. Create Buildings A building means a group of oor plans. You can create a new building with the + button. After you create a building, you can drag it to the map. Single-click on the building icon and a hyperlink will appear to allow you to edit oor plans. How to Place Access Points or Buildings on the Map 1. Click access point list or buildings list. 2. Enter the street address in the address eld. 3. Drag the access point/building onto the map. Navigation There are a number of ways to navigate through the map display. Single Click: If the user single-clicks on the focus icon on the access point or building lists, it will auto-locate the same item in the map. Double Click: If the user double-clicks on the building icon in the access point list, the UI will auto-navigate to the oor plans of that building. Floor Plans Floor plans allow you to simulate the heatmap. This article will discuss how to upload custom oor plans, pin them on the map, and place devices within these oor plans. Uploading Floor Plans Before uploading oor plans, a building must be created to contain them (see Managing Devices > Device Map Location in the user manual). To upload a custom oor plan/map:

1. Navigate to Manage > Map & Floor plans. 2. Click Building and click Add. 3. Enter a name and then click Create. 4. Find the building you have just created in the building list and click the picture icon. 5. Enter a name and upload the oor plan, then click Apply. Deleting a Floor Plan If you no longer use a oor plan that you previously imported, you can delete it. Follow these steps to delete a oor plan:

1. Find the building you created in the building list. 2. When the oor plan appears, hover over it and click Delete. Virtual AP Virtual AP is now available for users to add virtual AP together with physical AP, so users can simulate the heat map if he adds more AP to increase the coverage Add Virtual AP and choose units of models to add The Tool icon for users to modify the tx power and channel for heat map simulation Drag the physical AP to Virtual AP (model needs to be the same) then physical AP could use the Virtual AP conguration. Polyline in Obstacle When drawing the walls, users used to draw the line one by one by click start and end for straight lines, now with the Polyline option available, users can simply click on the turning point to draw lines quicker. ADD OBSTANCE Concrete Wall (12dB) Topology Network topology is a powerful tool to provide administrators a graphic overview of the logical network topology and the status of EnGenius devices. Use this screen to view the topology of the Org/Network. Click Manage > Topology to access this screen and double-click the organization/hierarchy view/network on the tree to change the scope. Learn which physical links in your network are most heavily-tracked; simply hover over individual network links and devices to learn statistics about that connections negotiated speed, usage, and a number of directly connected clients using it in the past 5 minutes. The following describes the functions on this screen:

Show label : Click to display or hide the device name & HW status on each device. HW status : Click to display or hide the POE Utilization on each switch. Redundant : Click to display or hide the redundant link . Other Devices : Click to display the third party devices as well as EWS series devices. Export : Click to download topology as PDF format . Conguring Networks Theres a lot that EnGenius Cloud can do to customize a network to meet your specic needs. Well walk you through the most common settings here. Conguring SSIDs Facebook Wi-Fi Facebook login provides a social sign-on experience for users logging in to access points. You can use your Facebook page as the sign-in page when they rst log in to your network. Users can then check in with their Facebook credentials, update their status, and like the Facebook page. Conguring EnGenius Wi-Fi with Facebook Login After creating a Facebook page, Facebook Login is congured on the Congure > SSID >

Click one of the SSID > Captive Portal by taking the following step:

1. Select Facebook Wi-Fi under the Authentication Type section and click the Setup Facebook Wi-Fi button:

2. Wizard is displayed. Click Continue if you have created the Facebook page in advance. If you haven't created it, you could create a Facebook page. 3. You will now see a link Go to FB Wi-Fi Setup page. Clicking on this link will take you to your Facebook Wi-Fi settings page. 4. If you are not logged into Facebook, you will be prompted to log into Facebook. Once you have logged in, you will see the following settings that will let you pair your SSID with your Facebook Page:

5. Once your Facebook page has been successfully paired with your SSID, the SSID page will update the Facebook Wi-Fi section with information about the paired page, along with an option to Unpair. 802.11 Settings 802.11r 802.11r is a standards-based fast roaming technology that is leveraged when using a secure SSID (WPA2-PSK & WPA2-Enterprise). This option improves client device roaming by reducing the handoff delay in situations where client devices roam from one access point to another. 802.11r is disabled by default on EnGenius Cloud. This feature can be enabled from the Congure > SSID page under Network Scope. If this option cannot be enabled, please go to Wireless > Security Type to select WPA2 PSK or WPA2 Enterprise in advance. 802.11w 802.11w is enabled when Security Type is not Open. 802.11w enables Protected Management Frames (PMF) for management frames such as authentication, de-

authentication, association, disassociation, beacon, and probe trac. This enables APs to help prevent rogue devices from spoong management frames from APs. Enable 802.11r will allow APs to begin utilizing Protected Management Frames for any clients that support 802.11w. Conguring Security Security Type Click Congure > SSID > Click one of SSID > Wireless to access this screen. The following describes the authentication types on this screen:

Open: Allows any client to associate with this network without any data encryption or authentication. WPA2 PSK: Enter a pre-shared key of 8-64 case-sensitive characters to enable WPA2-

PSK data encryption. WPA2 Enterprise: Select Custom Radius to use an external Radius server or select the EnGenius Cloud Radius to use the EnGenius Cloud for 802.1X authentication. OWE: When using hotspots in public, users are given better protection through the Wi-

Fi Enhanced Open that provides unauthenticated encryption. WPA3 Personal (SAE) - WPA3 only: This type features easier password selection for users to easily remember. It also feats a higher level of security wherein data stored and data trac in the network will not be compromised even if the password was hacked and data was already transmitted. The upgrade also enabled the Simultaneous Authentication of Equals (SAE) which replaced the Pre-shared Keys (PSK) in WPA2-

Personal. WPA3/WPA2 Personal mixed: WPA2/WPA3 mixed mode allows for the coexistence of WPA2 and WPA3 clients on a common SSID. The passphrase for both WPA2 and WPA3 clients remains the same, the AP just advertises the different encryption cyphers available to be selected for use by the client. Clients choose which cypher to use for the wireless connection. WPA3 Enterprise: This type was mainly built for tighter and consistent application of security protocols across networks of governments, establishments, enterprises, and nancial institutions. Offering optional 192-bit minimum security, the WPA3 will make cryptographic tools better. Hence, better protection for sensitive data. WiFi Access QR code This QR code allows you to use your mobile device to connect to the specic SSID. Client IP Addressing NAT Mode In NAT mode, the EnGenius APs run as DHCP servers to assign IP addresses to wireless clients out of a private 172.x.x.x IP address pool behind a NAT. NAT mode should be enabled when any of the following is true:

Wireless clients associated to the SSID only require Internet access, not access to local wired or wireless resources. There is no DHCP server on the LAN that can assign IP addresses to the wireless clients. There is a DHCP server on the LAN, but it does not have enough IP addresses to assign to wireless clients The implications of enabling NAT mode are as follows:

1. No NAT client can be talked to the other NAT client, neither same SSID nor different SSID (client isolation enabled and block internal routing) 2. Change the IP range of CP DNS to be same as AP DNS (172.16-23.0.0/16) Use Cases NAT mode works well for providing a wireless guest network since it puts clients on a private wireless network with automatic addressing. Diagram When an SSID is congured in NAT Mode, wireless clients will point to the access point as their DNS server. The AP then acts as a DNS proxy and will forward clients' DNS queries to its congured DNS server. Conguring Custom DNS for an SSID in NAT Mode This allows you to set custom DNS servers for a NAT SSID, instead of using the AP's DNS server. This is typically used to forward NAT SSID clients to a DNS server with custom content ltering. Conguration 1. Navigate to Congure > SSID, then choose one SSID to customize the DNS settings. 2. Locate the Client IP mode and choose NAT mode then click Custom DNS. 3. Enter the preferred Custom DNS IP addresses. 4. Click Apply. Bridge Mode In bridge mode, the APs act as bridges, allowing wireless clients to obtain their IP addresses from an upstream DHCP server. Bridge mode should be enabled when the following is true:

Wired and wireless clients in the network need to reach each other (e.g., a wireless laptop needs to discover the IP address of a network printer, or wired desktop needs to connect to a wireless surveillance camera). The implications of enabling Bridge mode are as follows:

Wired and wireless clients have IP addresses in the same subnet User Cases Bridge mode works well in most circumstances, particularly for Roaming. and is the simplest option to put wireless clients on the LAN. Conguration 1. Navigate to Congure > SSID , then choose one SSID . 2. Locate the Client IP mode and choose Bridge mode then click Apply. If you congure Bridge mode on two or more SSIDs in the same network , it means that these Clients have IP addresses in the same subnet. QoS Bandwidth Limit Bandwidth Limitation ensures that users do not consume more bandwidth than they should. We integrated bandwidth Limitation that enforces upload and download limits. Bandwidth Limitation can be applied per SSID or per user or both. When both SSID and Per Client bandwidth limit are set, that means when the total sum of client bandwidth is less than SSID bandwidth limit, per client can have a maximum of per client bandwidth limit. If the total sum is over the SSID limit, then all users will share the upper limit of SSID bandwidth. Use this screen to congure maximum bandwidth. Click Congure > SSID > Bandwidth Limit to access this screen. Download Limit Set the maximum download stream limit for trac from the SSID or Per user . Upload Limit Set the maximum upload stream limit for trac from the SSID or Per user . Captive Portal A captive portal can intercept network trac until a user authenticates his/her connection, usually through a specically designated login page. Click Congure > SSID > Captive Portal to access this screen. Authentication Type Click-through: User must view and acknowledge your splash page before being allowed on the network. EnGenius Authentication: User must enter a username and password before being allowed on the network. You could edit user settings through Congure > Cloud RADIUS User. Custom RADIUS: Enter the host (IP address of your RADIUS server, reachable from the access points), port (UDP port the RADIUS server listens on for access requests, 1812 by default), and secret (RADIUS client shared secret). Optionally, the Accounting Server can be enabled on an SSID that's using WPA2-Enterprise with RADIUS authentication. Voucher Service: Edit the access plan for guests for the front-desk manager. Social Login: Allows users to use a Facebook account to access WiFi. Redirect URL Congure the URL to which users will be redirected after successful login. Redirect to the original URL: Select this option to cache the initial website from the client during the authentication process and then forward it to the originally targeted web server after the user successfully authenticates. Redirect users to a new URL: Select this option to redirect users to a pre-designated URL after the user successfully authenticates. Advanced Setting Session Timeout: Specify a time limit after which users will be disconnected and required to log in again. Idle Timeout: Specify a time limit for an idle client after which users will be disconnected and required to log in again. Walled Garden: This option allows users to dene network destinations that users can access before authenticating. For example, your company's website. HTTPS Login: This option allows users to log in through HTTPS. When you enable it, your password is encrypted, so others could not retrieve your information. Social Login Social login allows you to use your Facebook account to access WiFi. Follow the below steps to congure social login. 1. Click Congure > SSID > Select a SSID 2. Click Captive portal > go to Authentication Type > select Social login. 3. Click Apply. Voucher Service This guide is intended to help you set up your network to generate and accept vouchers. With vouchers, you control access on a per-user basis by generating guest passes you can provide to users. Vouchers can be set to specic time increments and are ideal for hotels, coffee shops, apartments, etc. where you want to limit network access to users for a specic period of time. Enable Voucher Service Enable the voucher service by clicking Congure > SSID > Captive portal > Voucher Service. Note: Please make sure that Security Type at Congure > SSID > Association has been congured as open or WPA2 PSK before trying to enable Voucher Service. Since Voucher Service is capable of generating user/password randomly, it can not work with a dedicated WPA2 Enterprise authentication server. Remember click on the Apply button at top-right corner to conrm your change on SSID settings. Management URL and Access Plan Management URL For each enabled voucher service, a dedicated Management URL is created. Any team members who have permissions of Front-desk Manager or Administrator can log in that specic URL and manage Voucher Users there. Access Plan In addition, you can create different Plans for voucher user to identify how long a voucher user can access the network (Access Time) and how many simultaneous login are allowed for that user (Simultaneous Login). Plan Start Time The plan start time is an option that denes the plan of voucher service is activated when an account is created or after the account's rst login. Managing Voucher Users Generating Guest Pass The rst page after you login the Management URL of Voucher Service allows you to generate guest account/password with different manners:

A network Administrator or Front-desk Manager can rstly select a access plan and then select to generate account/password of voucher user automatically or manually. Auto Generation allows you to generate Guest pass in batch , you can ll in the number of the Guest Pass you want to create. Each network supports total 100 Guest Passes. Managing Voucher User Click on the User Management Button in the toolbar. A Guest Management Page is performed to list all generated voucher user. You can edit the properties of a voucher user by clicking the user_id of that user or pick the users in that list to delete. Print the Voucher User Info In the Guest Management Page, you can also select the users and click on the print button to print the voucher info for end-user. This feature allows you to print voucher users in batch. Conguring Splash Page This guide is intended to help you set up your splash page. With a splash page, you can channel network users to see a custom page before they can access the Internet. Before you start conguring a splash page, please make sure the captive portal is enabled in advance. External Splash Page URL: The external splash page enables the administrator to host their own splash page web server, rather than having it hosted by EnGenius Cloud. Local Splash page : Local Splash page provides the HTML for a splash page that will be hosted internally on the Access Point . For example , allows you to customize your splash page. After you complete the splash page, please remember to click Apply. Using the WYSIWYG editor You can choose different template from the drop-down menu at the top of the editor. Once you select your starting template, you can customize it with your message, colors, fonts, and images. EnGenius uses a WYSIWYG (what-you-see-is-what-you-get) editor that also supports HTML editing. In addition to the standard editing tools along the top toolbar , you can click HTML icon to start editing . Choosing a starting template Choose a template from the drop-down menu at the top of the editor. You can customize the content and presentation of these templates to suit your needs . Any edits you make will be a copy of the template, you can go back to the default at any time. Adding and modifying images Each splash page template comes with a library of stock images. You can also use the Insert Image tool to add your images and logos. 1. Click the Insert Image button, then navigate to a le, or drag and drop it into the upload images. 2. Double-Click on the image or click insert icon to add the image. Access control This page allows you to block clients in mac based on current SSID. The following describes the functions on this screen:

Add : The entry for you to add the Mac address to be blocked. Reset : Clean all the Block list . Delete : Delete the list that you selected . After you add the block list , remember to click Apply to take effect . Clone SSID This allows you to clone SSID conguration which you created previously. So you can create Multiple SSID with same conguration easily. Follow steps to clone SSID 1. Click Clone From 2. Select SSID to be cloned => Click apply in popup 3. Click Apply on tab bar to take effect Examples How to Congure Captive Portal 1. Before you begin conguring a captive portal, you need to create a SSID. Navigate to Congure > SSID (If you can't click congure, please make sure you are on network scope). 2. Select one of the SSIDs from the list. If one is not available, please click Add SSID to create one. 3. Navigate to the captive portal and click Enabled and then select the authentication type. 4. Click Apply. Conguring Radio Use this screen to congure radio settings for all access points in the network. Double-click one of the networks on Org-Trees > Congure > Radio Settings. The settings and options in the Radio Setting page apply to all access points in a network, and you can congure the following settings:

Channel This option allows users to customize the channels. On the Auto setting, EnGenius access points automatically adjust the channels of their radios to avoid RF interference. Channel HT Mode The use of 40 MHz channels on the 2.4 GHz band does not provide for multiple independent channels in multi-AP deployments for 2.4GHz. The recommended setting is 20MHz. To maximize throughput, use 40 MHz for 802.11n and 80 MHz for 802.11ac for 5GHz. Note that higher density deployments should use 20 MHz or 40 MHz channels on 5GHz. Tx Power Using this option, users can set a custom range for Tx power. The higher the transmission power (Tx power) of the access point, the bigger the coverage of the WiFi signal, so usually maximum power is set for an access point to connect to another access point for WDS or mesh purposes. However, it might not be the best practice if the access point serves the purpose of being a client access point because usually client devices (notebooks, mobile phones, etc.) might not have the same transmission power to be able to communicate back. Current device's transmission power can be referenced here, where most notebooks and mobile phone transmission power range from 15dBm - 25dBm. Some WiFi devices, like Amazon Echo, are in the smaller range of 10-11dBm. If your enterprise environment is comprised mainly of notebooks and mobile phones, then it is better to turn down your access point transmission power to 15-17dBm on 5G, and 10-

12dBm for 2.4G (so the coverage area of 5G and 2.4G is about the same). If you keep the same transmission power of 5G and 2.4G, it also means the signal strength of 2.4G is about 6 dB higher than 5G at the same location. Then the client device might roam from 5G to 2.4G because it detects better signal strength. It is highly recommended to leverage EnGenius ezWiFiPlanner tool to simulate coverage with different transmission power settings. Minimum Bit Rate EnGenius access points can adjust the minimum bit rate for each radio (2.4G and 5G separately). When the minimum bitrate is set, an access point will send out beacons based on the minimum bit rate. For example, if the bit rate is set to 6Mbps, then those clients with slower than 6Mbps bit rate will not be able to connect to the WiFi and will not slow down other clients performance. 802.11b max bit rate is 11Mbps, so if 12Mbps is set per radio, then 802.11b clients will not be able to connect to the network. The other benet is to help better roaming, because when a client roams to a weaker RSSI signal and causes slower performance, then the access point will be kicked out, and the client will search the available SSIDs again to connect to a stronger signal SSID. If the value is set too high, then it also means a greater density of access points are required to cover the area with the minimum bit rate. This may potentially cause more channel conict because the transmission power of the access point remains the same, so the RF coverage area is the same and more RF areas overlap. Client Limit This is a hardware limitation, commonly applied to most access points in the market. There can be 254 clients connected to an access point at a maximum (127 clients to each 2.4G and 5G band). To serve more than 127 2.4/5G clients in a space, a higher density of access points must be deployed. Discard 802.11 a/b/g This option allows users to discard 802.11 a/b/g devices to use network to prevent from impact of performance to other 802.11ac/ax clients. Disable 11ax in 2.4G Some legacy wireless clients are not compatible with 11ax . This option allows legacy equipment to connect with your network as usual, we suggest you disabling 11ax in 2.4G of your Radio settings. In this way, you can have equipments working in 5G with better performance and get legacy devices served well in 2.4G. Mesh This option allows users to enable mesh on 2.4GHz or 5GHz. After you enable mesh, there is an Auto Pairing button. After you click Auto Pairing , access points that haven't linked to the Internet are able to be scanned by neighborhood APs to run the mesh. How to enable mesh node 1. Find an AP which is wired and working ne (connecting to Cloud successfully that Power LED is steady orange) 2. Place your new try-to-mesh AP which already registered to your Org and be assigned to a Network nearby the cloud-connected AP. (less than 10 meter depends on the transmission power set of 2 APs) 3. Power on try-to-mesh AP until mesh LED keep ashing 4. Click Auto Pairing and it starts to count down on our Cloud Web UI. That means the Cloud-connected AP is trying to nd the try-to-mesh AP and help it to join Cloud 1. There must be a Cloud-connected AP nearby try-to-mesh AP to access wirelessly and in the same Network, so the Mesh conguration can be pushed to 2 APs to mesh together. 2. It might take some time since the try-to-mesh AP might need to go through rmware upgrade and reboot (around 4-10 min). 5. After everything is good, you can nd try-to-mesh AP (only ECW120) mesh LED is on, and Power LED is blue. After you complete each conguration above, you can click Apply, or click Reset to revert back to the original settings. Conguring Cloud RADIUS Use this screen to view and manage user accounts authenticated using EnGenius Authentication , you can choose EnGenius authentication from Congure > SSID > Captive portal, then select EnGenius Authentication from Authentication Type section ). Double-click one of the networks on Org-Trees > Congure > Cloud RADIUS Users to access this screen. The following describes the labels on this screen:

1. Name: Shows the descriptive name of the user account. 2. Email: Shows the type of the user account. 3. Authorized SSID: Shows the SSID numbers that the user has authorized. 4. Create Date: Shows the date and time that the user was created. 5. Status: Shows whether the user has been blocked or not. The following describes the functions on this screen:

Add User: Add users and authorize users to SSIDs. Authorize: Allows you to authorize users to SSIDs. Delete: Delete users. Block: Block users. Unblock: Unblock users. Conguring MyPSK When setting up an enterprise wireless network, it is common to congure WPA2-PSK authentication in order to onboard different users on to the wireless network. However, IT administrators may still encounter some drawbacks with this method of authentication when they need to use different PSKs in order to assign different VLANs. MyPSK allows a network administrator to use multiple PSKs and assigned different VLANs per SSID. Before Conguring the MyPSK Users, please make sure you have chosen the Cloud myPSK user From Congure > SSID > Wireless > Security Type > WPA2-MyPSK Create my PSK Users You can access this screen from Congure > MyPSK Users > Add Users The following describes the labels on the popup. Auto-Generated: Click the checkbox and then input the number of the users you want to create. Auto-Generated Users are limited to 50 per time. PSK: Input the password for the user to log in, Auto-Generated Users will have PSK automatically. VLAN: By SSID means the user is assigned the VLAN from the SSID which you choose to authorize. If you see the VLAN you wanted is not displayed, you could add the VLAN from Congure > VLAN Settings, then you could select from the dropdown list. Allowed MAC: Only the User with this Mac Address could access the SSID, leave it blank if you don't want to restrict it. Expired Date: Default is Permanent, click the checkbox to choose the expired date User note: Add note to map the user to the PSK to identify the person SSID Authorized: The SSIDs you want users to access Edit MyPSK Users 1. Click the number on the Authorized SSIDs or each PSK 2. Allows you to edit the details of each user. Note 1. Doesn't support Captive portal mode nor NAT mode 2. Each Network has limited to 500 PSK users 3. In the SSID => Wireless => WPA2 myPSK , there is an option "Auth with External RADIUS Server " which is supported with AP v1.X.25 rmware or above. Available models : (ECW220/230/260) Conguring VLAN This setting allows you to congure VLAN to all devices in the network at once . Table displays all VLANs have been congure in selected network . Use this screen to add and delete VLANs for network. Click Congure > VLAN Settings to access this screen. The VLAN Settings page contains the following information :

VLAN ID : VLAN ID. NAME : VLAN name. Voice VLAN : This shows if VLAN has been assigned to Voice VLAN or not. SSID : the SSID that has been assigned the VLAN. Add VLAN 1. Click Add VLAN button. 2. Input VLAN ID and VLAN Name. 3. Click Apply to complete the settings. After you create the Network wide VLAN , you need to go to Switch detail page to assign ports or go to SSID page to assign the VLAN to specic SSID . Conguring Switch Settings This setting allows you to congure Systems & Protocols in the network at once. This gives you to congure the System setting and apply it to whole Switches in the network. you can access this screen by Congure > Switch settings. Many MSP or SI would like to be able to group congure port settings in the Network. Switch Template feature helps users to apply same port conguration to all switch with same models in the Network to save time of conguration one by one. you can access this screen by Congure > Switch Settings > Template You can create any template by Model type (or click on Edit of the template). The setting is similar to Individual Switch port settings. Apply to All will apply the Switch Template to all devices of the same model in the Network. Note The uplink port will not be overridden by the template to prevent losing connection. Uplink port couldn't be the Mirror destination port PoE on the ports should be enabled when the ports are congured the PoE schedule on the devices. You can apply the switch template to the same model of the switches from Manage > Switch List > choose the Switches to be applied > Choose Apply Template Firmware Upgrade Automatic Upgrades EnGenius Cloud enables automatic upgrades by default and will upgrade rmware according to the Maintenance Window time period each week. Manual Upgrade To manually update device rmware:

1. Select the rmware you desire to upgrade. 2. Click Upgrade Now. 3. Click Apply. General Settings General settings allow you to congure Network settings, AP network-wide settings and so do Switches. Click Congure > General Setting to access this screen. Edit Network Network name, country, and timezone can be edited as needed. Follow the steps below to edit a network. 1. Click edit button to change network name 2. Select Country, Timezone, and then click Apply Local Credential This feature allows you to congure the login account of local web GUI for devices. The settings here apply to all APs and Switches in this Network . Note that username and password could be blank if you don't want to change device login account of local web GUI. LED Light This allows you to enable all AP's LED lights in the current network. LAN Port settings (for ECW115AP only) This allows you to congure Lan port settings on ECW115. Noticed that either LAN1 Lan2 can be used for the uplink port. This setting will be applied to the one which is not uplink port System Reserved IP Range When using NAT (AP DHCP) and captive portal, AP will leverage a range of IP addresses as default. If user unconsciously congures their local Network conicting with the range, it will cause problems. the user is able to change the System reserved range if they cannot change their local LAN IP address range. SSID > Wireless > IP Addressing (NAT/Bridge). Click Change will redirect to Network-

wide setting General Settings > AP > System Reserved IP Range Message for blocked Clients Clients can be blocked from accessing the network. When these clients attempt to connect to the network and open a web browser, they will be redirected to a blocked message. The Network-wide Default block message is congured on a per-network basis. The message is set in the Network-wide > General Settings > AP page. The blocked splash page below will be presented below to the blocked clients. Advanced settings Presence reporting For applications like CRM tools, presence analytics, or location-aware services which need to continuously gather presence data of wireless clients, EnGenius Cloud Acess Points are capable of delivering real-time presence data to fulll the requirement. EnGenius Presence Service can have cloud-managed APs continuously gathering 802.11 probe request frames sent by wireless clients and then sending the data to 3rd party servers congured in EnGenius Cloud. Conguration In EnGeniusCloud, the conguration of presence service is at General Settings > AP > Advanced Settings the following parameters can be congured on the page:

Parameters Description Server Location 3rd party server address Secret used to generate a SHA256 HMAC signature, over the payload (the Key JSON message). The signature is then added to a custom HTTP header

(Signature) in the POST message. Interval The Interval between two consecutive messages has been sent. Trac log Trac log feeds wireless client info to remote Syslog server. Note that enabling this setting will severely degrade AP performance. To enable this function, the syslog server must be enabled. Remote System Log The Remote System Log gives you the capability to remotely log Syslog events from a device on EnGenius Cloud to your external logging server. You can enable and congure the remote logging feature from Congure General setting Syslog server. Status: Enable to open the function to the remote system log. Log server address: Specify the IP address or hostname of the Syslog server. Log server port: Specify the port of the Syslog server. The default port is 514. Access Control In some cases, it is necessary to block a specic client on a network. This conguration will apply to the whole network and will affect the client immediately. Blocked List Navigate to Congure > Access Control to access this screen. You could block clients in the current network or on SSID basis depending on your requirement. This blocked list displays which you added the blocked clients in SSID >

Access Control and Manage > Clients . So you could manage whole blocked clients easily in single lists. Noted that there is a limit of 1000 clients for blocking. How to block clients 1. Click Add in the top-right corner . 2. Enter the Mac Address , select the Scope ( Current Network or SSID basis) , then click Apply How to Unblock clients 1. Select the clients on the lists 2. Click Unblock VIP Lists All VIP clients can bypass Captive portal. Wired VIP client can bypass L2 isolation . If wireless printer/scanner/IoT to be accessible, pls make sure the wireless printer/scanner/IoT devices are under SSID of Bridge mode L2 Isolation is disabled Optional: If captive portal is enabled on the SSID, the VIP can let the IoT skip captive portal entry If wired printer / scanner / IoT device to be accessible, then Make the devices be VIP to all SSIDs (or to the SSIDs for the wireless clients to be able to access) Any wireless client can access. No matter if NAT/Bridge mode. L2 Isolation can be enabled / disabled You could add the VIP clients in the current network or on SSID basis depending on your requirement. This VIP list displays which you added the VIP clients in SSID > Access Control and Manage > Clients . So you could manage whole VIP clients easily in single lists. Noted that there is a limit of 50 clients for VIP. How to Add VIP clients 1. Click Add in the top-right corner . 2. Enter the Mac Address , select the Scope ( Current Network or SSID basis) , then click Apply How to remove VIP clients 1. Select the clients on the lists 2. Click Delete Device Events Device events are events that are specic to individual devices, and are logged to EnGenius Cloud. Examples of events would include the specic time that a device comes online or goes oine. Use this screen to view Device Events. Click Analyze > Event Log > Device Event to access this screen. Searching the Event Log EnGenius Cloud allows to search device events based on a number of desired parameters. You can specify date/time, severity, and other parameters. Select one or multiple event types, then enter the SSID, device name/MAC, or select client to display the log messages related to it. After customizing your search parameters, remember to click Apply to perform the search. System Events System events are events related to EnGenius Cloud itself, such as device management or user management. Use this screen to view system events. You can specify date/time and severity, then select one or multiple event types. Enter the operator name to display the log messages related to it. Click Analyze > Event Log > System Events to access this screen. Cong Logs Cong logs capture events based on your conguration changes, such as changes to SSID settings, radio settings, or network updates. Use this screen to view cong logs. you can specify date/time, severity, select one or multiple event types, and enter the operator name to display the log messages related to it. Click Analyze > Event Log > Cong Log to access this screen. Managing Device Inventory and Licence The Inventory page lists all devices currently found in the inventory or added to a network within the current organization. The Inventory page contains the following information about each device:

Type: type of the device. Model: model name of the device. Serial Number: serial number of the device. MAC: MAC address of the device. Network: the network that the device has been added to. Register Time: time of the device's addition to the inventory. Register by: user responsible for adding the device to the inventory. There are also tabs to lter the list based on whether devices are:

Used: Currently added to a network. Unused: Registered, but not in a network. All: Lists all registered devices, regardless of whether they are in a network. Click Organization > Inventory to access this screen. Assigning Devices to a Network This feature helps the users in assigning devices to a network. 1. Navigate to the inventory page. 2. Select one or multiple devices as per your requirements. 3. Click Assign to Network. Removing Devices from a Network This feature allows for devices to be deleted in bulk from a network. To delete devices using bulk delete:

1. Navigate to the inventory page. 2. Select one or multiple devices as per your requirements. 3. Click Remove from Network. De-registering a Device from EnGenius Cloud This feature allows you to remove registered devices from EnGenius Cloud inventory. 1. Navigate to the inventory page. 2. Select one or multiple devices as per your requirements. 3. Click De-Register Device. Register a Device Registering devices onto EnGenius Cloud inventory is easy. Enter devices by their serial number, one per line, and click the Register button. License Click "Switch to Pro" allows you to use the pro features . Professional features are required to pay in the future. Currently, there are free to use. Privacy Exposure Analysis would show you the timeline with the list of clients connected to the same AP based on a particular client. If you enable this feature would allow us to retrieve and present your client data in a timeline manner. Click Organization > Privacy to access this screen. You can click Manage=> Clients to access this page to see the details after you enable the Exposure Analysis.

< Bru ces-iPhone 11

& s10'22"'4nl>l f MACM!li't1l .. T"' II

'1U (11 (ir n'o) ;,. :. El!GenlllMKTc:leMBP Mi1.C. lllklrM1 f4 W::.a .:.:.in o S102629r..B llllCMklrt11 ZI 1' i" 8:20"9C72

.. Toi

'11S[ fr

"11 ) ;,. llen-Tl'llnkPed-Tc 9'1 Bnllrold-dOCl)-10 111111 a, ... W.C:ldltu O,BJ:UFOS'ifD

" flon.emap,leW8ldl MAoC I 0412't U l7 1H f

,:. ume meneblllPIKlne

,:, :11UJ2S13flll J, IPnoo@

.......C101h:11 FDA l.S.0. -4U IBA

,l SI0265CINB

.:, Ped MN!:addlH:I 1Bl f C:tF 79 BI

,.;, S100'237N6 MACl1Mr'H1 3-f.F3 ........7C:o317

,; 102!-23tJ;IIPhooe l,Ur,CMkl'HI E ll2Flt 3 .t.8CI:

ii, :WIIWllii Mol.CadllfHll 111 ,119 8 720 1 9

,l he)l'lll6 WB1cl1

.I, 0 Backup & Restore Generating a New Backup Users can create a new Network-wide setting and device backup by going to Organizations

> Backup & Restore Restore: This allows you to restore all settings( Network-wide settings and Devicesettings) to the corresponding network. Protect: This allows you to protect the backup, so the backup will not be rotated when you exceed 2 backups of the network. Re-Backup: This allows you to update the current settings to the backup of the corresponding network. Clone Network When creating a new network you have the option to clone the conguration from another network. This will copy all network-wide congurations from the existing network with the exception of local device congurations. Managing Team Members Use this screen to view, manage, and create user accounts for organization/network. Click Team Member icon to access this screen. The Team Member page contains the following information about each member:

Name : member name . Email : member email . Org Permissions : member's org permissions . Network Managed : Displayed numbers of member's network permissions , hovering on the permission badge will display the network . Status : Member account status . Active means member has completed the signup . Invited means invitation mail had been sent but member hasn't complete the signup . Last login : time that user last logged in . Modify : click to modify the member permissions . Invite New Members You can invite multiple users and assign them permissions for entire organization trees at once. 1. Input the user email, one per row. 2. Assign member privileges for a network or organization. 3. Click Apply to save changes. Modify Member Permissions 1. Click Modify. 2. Change the Permission based on the organization trees. 3. Click Apply. Senao 0 Team Member s

.-..,. Modify X o,v / Ne1work 1

[!I ORG Stl"l:,O

" L.) HVni:WNI

,. r:,. HVname

.,._... 2F Net 1o'Ork

.,._ ... F Necworx e,. HVRO'Mt

..- l OF Net work HVn"""'

Q, N twOJklJ

+ I nvite New Member

.A(:l!Qfl X Nelw rk Ad '

I Oelele Lock P 1m ls ll0 n .. I.fit Login ... Admi111 A1,110-'28-- 20i8 -16 55 -00 fl! Mod1f:, Aug2J..2018 16:55-00 r Mod1f)'

AIJ0-28.-2018-16. 5500 afMod1f)'

F'ronte!ld AIJ9"'21- 0i 8 -16 5)-QQ @'Mod1f)'

R.ese-!ld Ema1I r Modlf)'

Rese-Bd Emal l

(1fMod1f)'

ll'IIOOYt fl! Modi1)'

Fron1-eBd x cor

Roles and Permissions Organization Permission Types Admin: user has full administrative access to all networks and organization-wide settings. This is the highest level of access available. Viewer: user is able to access most aspects of network and organization-wide settings, but unable to make any changes. Network Permission Types Admin: user has access to view all aspects of a network and makes any changes to it. Viewer: user able to access most aspects of a network, including the conguration section, but no changes can be made. Front desk: user is able to access the front desk portal to generate guess passes and manage guest passes only. Notication Center EnGenius Cloud provides a notication mechanism for alerting you to important events that occurred. You can click the bell icon to access this screen. Recent Notications This shows the event numbers that occur and is ordered by organization. You can click one of the organizations in the list to access detailed event information. Preferences Network Subscription This allows you to subscribe or unsubscribe to network events. When subscribed, you will receive that network's notications. Notications Mobile App Notications: You can turn on/off notications on the EnGenius Cloud Mobile App. Email Notication: You will receive an email digest of network events at a scheduled time if at least one event has occurred. Email format You will receive email formats like below if you enable the Email Notication Click See more details to see Network events. Each card represents an individual organization and each divider inside cards represents different networks. Filter events: On the top of page allows you to lter events. You can check or uncheck the checkbox near error and warning events. Conguring Alert Settings There are a number of options available for email alerts to be sent when certain network or device events occur. Alerts can be congured under Congure > Alerts. Access Point Alerts Alerts can be congured for the following access point events:

AP(s) go oine for XXX minutes: sends an email if one or more access points go oine for a preset (and customizable) amount of time. Conguration changed within network: sends an email if SSID, radio settings, rmware upgrade, or individual device settings override the default settings. Event with severity XXXX and above occurs: sends an email if event severity meeting a minimum severity threshold occurs. Switch Alerts Alerts can be congured for the following switch events:

Conguration changed within network: sends an email if SSID, radio settings, rmware upgrades, or individual device settings override the default settings. Switch port link status change: sends an email when device port link status is changed. Switch STP Port status change: sends an email when device port STP status is changed. Switch LBD Port status change: sends an email when device LBD status is changed. Switch(s) go oine for XX minutes: sends an email when switches go oine for a preset number of minutes. Any/specic switch port(s) changed link speed: sends an email when a switch port link speed changes. Event with severity XXX and above occurs: sends an email if an event occurs with a severity equal to or higher than a preset value. Mobile App The EnGenius Mobile App is a mobile user interface (UI) for EnGenius Cloud. You can keep an eye on your network when you are on the go. This is a great solution for around the clock network support. Versions are available for Android on Google Play and iOS via the App Store. Adding a Device This section explains how to add a networking device to your network using the EnGenius Mobile App. 1. Navigate to the Inventory tab and tap the + symbol on the bottom-right of the screen. Inventory Monitor

& Notification Team Members 0 Sup port 2. Find the QR code at the bottom of the device and scan it. If the camera successfully scanned a QR code, the app will display the Device Information. You could tap Register to complete the Registration. If you failed to scan the QR code successfully, you could tap Okay, try another. 3. Once a device has been successfully registered, you can tap Assign to Network site now. 5. Tap the Network and tap Apply. 6. Once you select the wrong network, you could tap Change to select the correct network. If the network is correct , tap Next . 7. You could tap Finish to complete the whole process or tap Register more to register other devices . Get Remote Support LiveChat Whenever you login the system, you can always nd a LiveChat button at bottom-right corner of the page. You can leave a message with this chat system. EnGenius support team will usually feed back in minutes. Remote Support Passcode The EnGenius Support Passcode is used to verify users' identities for security purposes. When you get trouble on conguring your networks or operating your cloud congurations, you can click on the Help button on the top-right corner of menu. Choose Remote Support and click on Generate PASSCODE

. There is an option here that you can decide how long the generated passcode is valid (from 1 hour to 7 days). By sending the generated passcode to EnGenius support team on LiveChat, support team can access your account temporarily to diagnose and resolve issues you've raised. Note that the generated PASSCODE will automatically expire after a period of time. Support team won't be able to access your resource once the PASSCODE is expired. Security Two Factor Authentication Two Factor Authentication, also known as 2FA or TFA, is a two-step verication process that requires more information in addition to the usual username and password. This extra piece of information is something only the user will know or have physically with them, like a token sent to a mobile app, for example. It is very important to create backup codes the moment you enable 2FA on your account in case your phone is lost and cannot access the 2FA code. How to Enable 2FA to protect your account 1. Download and install the "Google Authenticator" APP on your mobile phone. https:// apps.apple.com/us/app/google-authenticator/id388497605 . Google Authenticator will generate OTP (One-time passcode) for your account on EnGenius Cloud by following below steps. Please be reminded that if you have multiple accounts, then you need to generate corresponding entries to each account in Google Authenticator. 2. Select Two Factor Authentication from the top-right menu. 3. Open your chosen authenticator app on your smartphone. Since the following is using Google Authenticator as an example, the steps might vary slightly. Open the Google Authenticator app on your phone, tap Menu, then tap Begin Setup > Scan barcode. If you already have other accounts, you would click the plus sign (+) on the upper right and then Scan barcode. 4. Your phone will now be in the "scanning" mode. Go ahead and scan the QR code that appeared in the popup. 5. Enter the 6-digit authentication token provided by Google Authenticator into the popup, then click Activate . Recovery codes It is extremely important to back up a set of Recovery codes the moment two-factor authentication is enabled. These codes will allow you to unlock your account to disable 2FA if you somehow lose access to your authenticator app (if say you lost your mobile). You can access Recovery code after you enabled 2FA. You will be given a list of 10 backup codes, copy them somewhere safe. If there's a possibility someone has gained access to your codes, generate new ones to make those compromised ones obsolete. How to Deactivate 2FA 1. Select Two Factor Authentication from the top-right menu. 2. Click Deactivate How to Access a Locked Out Account If you are locked out of your account because you changed mobiles, deleted the authenticator app by mistake or lost your phone, you can get access to your account once more with the below method. Login Cloud using recovery codes 1. Go to cloud.engenius.ai enter your username and password as usual, and prompted for the screen for you to enter code. 2. Now just paste one of the backup codes you previously saved and click Verify. 3. Follow the How to Deactivate 2FA and How to Enable 2FA to protect your account procedure again. Remember to click Download code to save a new set of backup codes. Other possible issues and solutions are discussed in this Google 2-Step Verication Help article. 2FA Enforcement to your Organization This feature helps the Organization administrator to enforce all Cloud users to have more secure to access the organization. If you enable 2FA Enforcement , your team members are required to have two-factor authentication (2FA) enabled when access this organization. If team members don't activate 2FA, they are not allowed to access this organization . You can access this feature by clicking Organization > Security . If the user manages multiple Organizations and does not enable 2FA, he is still able to log in to Cloud. However, he cannot access the Org with 2FA enforcement enabled as a requirement. Report Report lets you compile reports of past activity on your Organization/HV/networks. These reports can be ltered to only include certain organizations, HV, or networks. You can send them to recipients by email and schedule them to run periodically. How can I create Reports?

To create your reports, you need to go to the Reports located on the left panel. Under the tab Task you will nd the button New Task and click it. When you click on this button a new wizard will be displayed with the steps to customize report content directly Cover letter Author: Input Author and will be displayed in report cover letter) Cover letter: Select the style and will be displayed in the cover letter) Language: Support English only currently) Logo: Upload the logo you want to display on the cover letter) Page Content This allows you to select page contents that will be displayed on your report. You can click the gear icon to show or hide the table data. Conguration 1. Select Org-tree: this is the report data to collect from ). 2. Dashboard Period: Select the day, week, or month data you want to display on the dashboard Data. eg: Throughput. Top series . ) 3. Throughput SSID: Select the SSID you want to collect on throughput data) 4. Schedule: Select the report to be generated right now or Specic time or weekly) 5. Email: Enter the recipient's email address that you want to send the report) Conrmation This allows you to review all the page contents and settings on a single page. If you want to change the settings, you could click back to change. If all the settings are OK, click Apply to create a task. Reports View The Report Tab displayed the lists of reports that the system has generated based on your task. When you open a saved report from Report Tab, Insightly will run the report and display:

1. Task name (same as report name): Click to navigate to corresponding tasks. 2. Last report: You can easily download the last generated report by hyperlink. 3. Numbers of reports generated by same tasks. 4. Allows you to email this report to someone. 5. Download report. 6. Delete report. Edit Task After you created the Tasks, this page allows you to monitor the data that you have selected. There are some icons for you to know the task status and do further editing. 1. Mail icon: This task has some email recipients that have been congured. 2. Calendar icon: This task has been scheduled to generate a report continuously. 3. New Task: This allows you to create another task. The basic mode only allowing you to create a single task and only have one report recorded. 4. Edit icon: This allows you to edit the task settings. 5. Pause icon: This allows you to temporarily stop the scheduled task. Access Point LED Behavior Access Point LEDs and what they mean The table below describes the LEDs on the access point, their ashing patterns, and what those mean for its function. LED Static Flash Off Power Power is on Cloud is connecting Power is off LAN Connected to LAN Data is transmitting between AP and the Internet. 2.4G 5G AP is not transmitting AP is transmitting data between data, Radio is on AP and client AP is not transmitting AP is transmitting data between data, Radio is on AP and client No connections to LAN Radio is off Radio is off If four LEDs are ashing, it means that AP is performing a rmware upgrade. SSID Troubleshooting Naming Rules There is a management SSID that lets users know the current status when an access point connects to EnGenius Cloud. If an access point has lost its connection to the Internet but still receives power, it will broadcast a management service set identier (SSID) that can be connected to for administrative tasks. Connect to the default SSID by completing the following steps:

1. Physically check that the access point has power. 2. Check if a known default SSID is being broadcast. 3. If a management SSID is being broadcast, connect your device to it. 4. After connecting, check your gateway IP address to connect to the local status page. If you can't nd the gateway IP, please make sure the access point is in NAT mode. Management SSIDS

<EnMGMTxxxx>-SSID_name>-No_Eth Cause: AP does not have Ethernet connection. Solution: Check if the Ethernet cable is unplugged.

<EnMGMTxxxx>-No_IP Cause: AP cannot get an IP address from DHCP server. Solution: Check the AP's IP address conguration.

<EnMGMTxxxx>-IP_Conict Cause: APs IP address conicts with another device's IP in the same network. Solution: Check the AP's IP address conguration.

<EnMGMTxxxx>-Gateway_ERR Cause: AP is unable to connect to its default gateway. Solution: Check the AP's IP address conguration and connectivity to its default gateway.

<EnMGMTxxxx>-Proxy_ERR Cause: AP could not access Internet through HTTP/HTTPS proxy. Solution: Check the APs proxy conguration in miscellaneous settings.

<EnMGMTxxxx>-DNS_ERR Cause: AP could not resolve the domain name from the DNS server. Solution: Check the AP's IP address conguration.

<EnMGMTxxxx>-Cloud_ERR Cause: Everything seems to be working, but a connection to EnGenius Cloud cannot be established. Solution: Check EnGenius Cloud server status with EnGenius. Firewall rules Below is the Firewall rules which is needed to access EnGenius Cloud. Cloud Devices Cloud Services Source IP Destination IP Ports Protocol

(TCP/UD AP, SW , Ensky Periodical Cloud communication,Firmware Upgrade,Real-Time Meter Your Networks any 443 TCP AP, SW , Persistent Cloud Ensky communication AP Cloud Radius Your Networks Your Networks 44.224.197.174 80 TCP 44.225.123.183 1812/1813 TCP & UD AP, SW , Ensky AP, SW , Ensky NTP time sychronization Your Networks any 123 UDP Remote Tunnel Your Networks 44.230.110.152 22 TCP AP Splash Page Your Networks any 80/443 TCP Physical Interface 1 2 3 4 2.4 GHz Antennas: Detachable 5 dBi 2.4 GHz Omni-directional 5 GHz Antennas Detachable 7 dBi 5 GHz Omni-directional LAN Port 1 (802.3bt PoE Input): Ethernet port for RJ-45 cable. LAN Port 2 (802.3af PSE Output): Ethernet port for RJ-45 cable. 5 Connection. 6 7 LED Indicators: LED lights for Power, LAN Port 1, LAN Port 2,2.4 GHz Connection and 5 GHz Ground Mounting Holes: Using the provided hardware, the ECW270 can be attached to a wall or pole. Wall Mounting the Outdoor Device Using the provided hardware, the AP can be attached to a wall (C) Place the lock and flat washer on the round head screws and drive the screws to attach mounting base to the back of the Access Point.

(A) Determine where the AP is to be placed and mark location on the surface for the four mounting holes. You may adjust the position with a level.

(B) Use the appropriate drill bit to drill four 8mm diagram and 37mm depth holes in the markings and hammer the bolts into the openings. SCREW P4*8(ISO)(SW)(SUS) Pole Mounting the Outdoor Device A) Place the lock and flat washer on the cap screws and drive the screws to attach the mounting base to the back of the Access Point. C) Thread the open end of the Pole Strap through the two tabs on the Pole Mount Bracket. P4*8(ISO)(SW)(SUS)18 SCREW Housing dimension 249.6*217.7*53.7mm Grounding Connection The following information provides installation and recommendations for grounding of the device. Before starting the installation procedure, read the following information:

The Yellow Green cable is not recommended for use in grounding. Ensure the cable with a core diameter of 2 mm exceeds a length of 50 cm from connection point to ground. Electromagnetic Interference (EMI) affects the transmission performance of a device. By properly grounding the device to earth ground through a drain wire, you can setup the best possible noise immunity and emissions. Appendix A - FCC Interference Statement Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.This device and its antenna(s) must not be co-located or operating in conjunction with any other antenna or transmitter.For product available in the USA/Canada market, only channel 1~11 can be operated. Selection of other channels is not possible.Section 15.204(b) states that an approved transmission system must always be marketed as a complete system including the antenna. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help FCC Caution:

Any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate this equipment. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. FOR MOBILE DEVICE USAGE (>20cm/low power) Radiation Exposure Statement:

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. Appendix B - Professional Installation Instruction (FCC) Professional installation instruction 1. Installation personal This product is designed for specific application and needs to be installed by a qualified personal who has RF and related rule knowledge. The general user shall not attempt to install or change the setting. 2. Installation location The product shall be installed at a location where the radiating antenna can be kept 20cm from nearby person in normal operation condition to meet regulatory RF exposure requirement. 3. External antenna Use only the antennas which have been approved by the applicant. The non-approved antenna(s) may produce unwanted spurious or excessive RF transmitting power which may lead to the violation of FCC limit and is prohibited. 4. Installation procedure Please refer to users manual for the detail. 5. Warning Please carefully select the installation position and make sure that the final output power does not exceed the limit set force in relevant rules. The violation of the rule could lead to serious federal penalty. Warning:

In order to make sure that the final output power does not exceed the limit set force in relevant rules, please carefully select the installation position and the installation angle of antenna must be vertical to the ground. The violation of the rule could lead to serious federal penalty. Appendix C - IC Interference Statement Industry Canada statement This device complies with ISEDs licence-exempt RSSs. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Le prsent appareil est conforme aux CNR d ISED applicables aux appareils radio exempts de licence. Lexploitation est autorise aux deux conditions suivantes :

(1) le dispositif ne doit pas produire de brouillage prjudiciable, et (2) ce dispositif doit accepter tout brouillage reu, y compris un brouillage susceptible de provoquer un fonctionnement indsirable. FOR MOBILE DEVICE USAGE (>20cm/low power) Radiation Exposure Statement:

This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with greater than 20cm between the radiator & your body. Dclaration d'exposition aux radiations:

Cet quipement est conforme aux limites d'exposition aux rayonnements ISED tablies pour un environnement non contrl. Cet quipement doit tre install et utilis plus de 20 cm entre le radiateur et votre corps. Caution:

(ii) for devices with detachable antenna(s), the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits as appropriate; (detachable antenna only) Avertissement:

(ii) pour les dispositifs munis dantennes amovibles, le gain maximal dantenne permis (pour les dispositifs utilisant la bande de 5 725 5 850 MHz) doit tre conforme la limite de la p.i.r.e. spcifie, selon le cas; (detachable antenna only) Appendix D 1. Installation personal Professional installation instruction This product is designed for specific application and needs to be installed by a qualified personal who has RF and related rule knowledge. The general user shall not attempt to install or change the setting. 2. Installation location The product shall be installed at a location where the radiating antenna can be kept 20cm from nearby person in normal operation condition to meet regulatory RF exposure requirement. 3. External antenna Use only the antennas which have been approved by the applicant. The non-approved antenna(s) may produce unwanted spurious or excessive RF transmitting power which may lead to the violation of ISED limit and is prohibited. 4. Installation procedure Please refer to users manual for the detail. 5. Warning Please carefully select the installation position and make sure that the final output power does not exceed the limit set force in relevant rules. The violation of the rule could lead to serious federal penalty. Instructions d'installation professionnelle 1. Installation Ce produit est destine a un usage specifique et doit etre installe par un personnel qualifie maitrisant les radiofrequences et les regles s'y rapportant. L'installation et les reglages ne doivent pas etre modifies par l'utilisateur final. 2. Emplacement d'installation En usage normal, afin de respecter les exigences reglementaires concernant l'exposition aux radiofrequences, ce produit doit etre installe de facon a respecter une distance de 20 cm entre l'antenne emettrice et les personnes. 3. Antenn externe. Utiliser uniiquement les antennes approuvees par le fabricant. L'utilisation d'autres antennes peut conduire a un niveau de rayonnement essentiel ou non essentiel depassant les niveaux limites definis par ISED, ce qui est interdit. 4. Procedure d'installation Consulter le manuel d'utilisation. 5. Avertissement Choisir avec soin la position d'installation et s'assurer que la puissance de sortie ne depasse pas les limites en vigueur. La violation de cette regle peut conduire a de serieuses penalites federales. DETACHABLE ANTENNA USAGE This radio transmitter [IC: 10103A-ECW270] has been approved by Innovation, Science and Economic Development Canada to operate with the antenna types listed below, with the maximum permissible gain indicated. Antenna types not included in this list that have a gain greater than the maximum gain indicated for any type listed are strictly prohibited for use with this device. Le prsent metteur radio [IC: 10103A-ECW270] a t approuv par Innovation, Sciences et Dveloppement conomique Canada pour fonctionner avec les types d'antenne numrs ci-dessous et ayant un gain admissible maximal. Les types d'antenne non inclus dans cette liste, et dont le gain est suprieur au gain maximal indiqu pour tout type figurant sur la liste, sont strictement interdits pour l'exploitation de l'metteur.

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6428454.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case Label Location

The side of EUT

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6428455.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6428426.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case EnGenius Technologies 1580 Scenic Avenue, Costa Mesa, California, United States, 92626 Tel: 888.735.7888 FAX: 714.432.8667 Date: October 31, 2022 We, EnGenius Technologies declare that the device does not support channel 12 ~ 13 in 2.4GHz band and any non-US channels in all the operational mode(s) for the following product. FCC ID: A8J-ECW270 If you should have any question(s) regarding this declaration, please dont hesitate to contact us. Thank you!

Mr. Meng Chee Leo, General Manager EnGenius Technologies Tel: 888.735.7888 Ext.888 FAX: 714.432.8667 E-mail: mc.leo@engeniustech.com

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6428427.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case EnGenius Technologies 1580 Scenic Avenue, Costa Mesa, California, United States, 92626 Tel: 888.735.7888 FAX: 714.432.8667 P R O F E S S I O N A L I N S T A L L A T I O N A T T E S T A T I O N Date: 2023-01-05 FCC ID: A8J-ECW270 We, EnGenius Technologies hereby declare that requirements of KDB 353028 D01 Antennas Part 15 Transmitters v01 have been met and shown on the following questions. Further we declare that the info listed below are correct and represent the product in consideration under this filing. 1. Professional installation must be justified. Description: Device is outdoor Access Point and must need special trained professional in configuring and installing the product, more details please refer to user manual exhibit. 2. Professional installation does not permit use of any antenna with the transmitter; the permitted types of antenna specified as below. Description: Below listed of Antennas has been compliance FCC Rule Part 15 requirement, more details please refer to test reports. Ant. Type Connecter Dipole Dipole R-N type (F) R-N type (F) 2.4 5dBi NA Antenna Gain (dBi) Frequency (GHz) 5.150 NA 7dBi 5.470 NA NA 5.850 NA 7dBi 3. The applicant should address the following items when justifying professional installation.

(1) To qualify for professional installation, please explain why the hardware is not readily available to average consumer. Description: Due to this product and will not be sold directly to the general public through retail store, therefore the hardware is not readily available to average consumer.

(2) Marketing Applicant must ensure device cannot be sold via retail to the general public or by mail order. Description: This product and will not be sold directly to the general public through retail store. It will be sold to authorized dealers or installers only. EnGenius Technologies 1580 Scenic Avenue, Costa Mesa, California, United States, 92626 Tel: 888.735.7888 FAX: 714.432.8667

(3) Applicant must show that device intended use is not for consumers and general public. Description: Device is for industrial/commercial use.

(4) Explain what is unique, sophisticated, complex, or specialized about the equipment that REQUIRES it to be installed by a professional installer?

Description: Description Device is outdoor Access Point and must need special trained professional in configuring and installing the pro duct. Professional installation does not permit use of any antenna with the transmitter, the permitted types of antenna is specified. More details please refer to user manual exhibit. 4. Other professional installation requirements

(1) Installation must be controlled. Description: The product will be distributed through controlled distribution channel which has special trained professional to install this product.

(2) Installed by licensed professionals. Description: Device sold to dealer who hires installers and need special trained professional in configuring and installing the product.

(3) Installation requires special training. Description: The product need special programming, access to keypad, field strength measurements made, so must need special trained professional in configuring and installing the product. If you should have any question(s) regarding this declaration, please dont hesitate to contact us. Thank you!

Mr. Meng Chee Leo, General Manager EnGenius Technologies Tel: 888.735.7888 Ext.888 FAX: 714.432.8667 E-mail: mc.leo@engeniustech.com

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6428428.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case Date: 2023-02-10 FCC ID: A8J-ECW270 To the attention of Federal Communications Commission Authorization and Evaluation Division Attestation Statements Attestation Statements Part 2.911(d)(5)(i) Filing EnGenius Technologies certifies that the equipment for which authorization is sought is not covered equipment prohibited from receiving an equipment authorization pursuant to section 2.903 of the FCC rules. Attestation Statements Part 2.911(d)(5)(ii) Filing EnGenius Technologies certifies that, as of the date of the filing of the application, the applicant is not identified on the Covered List as an entity producing covered equipment. Sincerely yours,

Mr. Meng Chee Leo, General Manager EnGenius Technologies Tel: 888.735.7888 Ext.888 FAX: 714.432.8667 E-mail: mc.leo@engeniustech.com

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6428429.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case U.S. Agent for Service of Process Attestation To the attention of Federal Communications Commission Authorization and Evaluation Division Applicant / Designated U.S Agent Company Name: EnGenius Technologies FRN: 0021371836 Grantee Code or FCC ID: A8J Contact Name: Meng Chee Leo Street Address: 1580 Scenic Avenue, City/Province/Zip: Costa Mesa, California, United States, 92626 Telephone No: 888.735.7888 Email: mc.leo@engeniustech.com This letter is to confirm that the Applicant has designated itself as the U.S Agent for service of process as required by 2.911(d)(7). The Applicant further acknowledges acceptance to maintain an agent for no less than one year after the grantee has terminated all marketing and importation or the conclusion of any Commission-related proceeding involving the equipment. Applicant / U.S. Agent Signature: Meng Chee Leo Date: 2023-03-01 Signed by (printed name):

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6428430.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case EnGenius Technologies 1580 Scenic Avenue, Costa Mesa, California, United States, 92626 Tel: 888.735.7888 FAX: 714.432.8667 Date: 2022-10-31 FCC ID: A8J-ECW270 To the attention of Federal Communications Commission Authorization and Evaluation Division Permanent Confidentiality Request Pursuant to Sections 0.457 and 0.459 of the Commissions Rules, the Applicant hereby requests confidential treatment of information accompanying this Application as outlined below:

Schematics Block Diagram Operational Description Software Operational Description The above materials contain trade secrets and proprietary information not customarily released to the public. The public disclosure of these matters might be harmful to the Applicant and provide unjustified benefits to its competitors. The Applicant understands that pursuant to Rule 0.457, disclosure of this Application and all accompanying documentation will not be made before the date of the Grant for this application. Sincerely yours,

Mr. Meng Chee Leo, General Manager EnGenius Technologies Tel: 888.735.7888 Ext.888 FAX: 714.432.8667 E-mail: mc.leo@engeniustech.com

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6428431.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case EnGenius Technologies 1580 Scenic Avenue, Costa Mesa, California, United States, 92626 Tel: 888.735.7888 FAX: 714.432.8667 Date: 2022-10-31 FCC ID: A8J-ECW270 A U T H O R I Z A T I O N L E T T E R To Whom It May Concern:

EnGenius Technologies hereby authorizes Emerald Chen / Specialist of Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch (BV CPS Taoyuan), to act on its behalf in all matters relating to the Federal Communication Commission (FCC) application for equipment authorization in connection with the FCC ID listed above, including signing of all documents relating to these matters. Any and all acts carried out by Emerald Chen / Specialist of BV CPS Taoyuan on EnGenius Technologiess behalf, within the scope of the powers granted herein, shall have the same effect as acts of its own. If you have any questions regarding the authorization, please dont hesitate to contact us. Sincerely yours,

Mr. Meng Chee Leo, General Manager EnGenius Technologies Tel: 888.735.7888 Ext.888 FAX: 714.432.8667 E-mail: mc.leo@engeniustech.com