FCC ID: TE7WA901NDV4 450Mbps Wireless N Access Point

TL-WA901ND 450Mbps Wireless N Access Point REV2.0.0 1910010841 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-LINK TECHNOLOGIES CO., LTD. Copyright 2015 TP-LINK TECHNOLOGIES CO., LTD. All rights reserved. http://www.tp-link.com FCC STATEMENT This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

Reorient or relocate the receiving antenna. Connect the equipment into an outlet on a circuit different from that to which the receiver Increase the separation between the equipment and receiver. is connected. Consult the dealer or an experienced radio/ TV technician for help. This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:

1 This device may not cause harmful interference. 2 This device must accept any interference received, including interference that may cause undesired operation. Any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate the equipment. Note: The manufacturer is not responsible for any radio or TV interference caused by unauthorized modifications to this equipment. Such modifications could void the users authority to operate the equipment. FCC RF Radiation Exposure Statement:

This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This device and its antenna must not be co-located or operating in conjunction with any other antenna or transmitter. To comply with FCC RF exposure compliance requirements, this grant is applicable to only Mobile Configurations. The antennas used for this transmitter must be installed to provide a separation distance of at least 24 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter. CE Mark Warning This is a class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. Canadian Compliance Statement This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions:

(1) This device may not cause interference, and

(2)This device must accept any interference, including interference that may cause undesired operation of the device. Cet appareil est conforme aux norms CNR exemptes de licence dIndustrie Canada. Le fonctionnement est soumis aux deux conditions suivantes:

(1) cet appareil ne doit pas provoquer dinterfrences et

(2) cet appareil doit accepter toute interfrence, y compris celles susceptibles de provoquer un fonctionnement non souhait de lappareil. This device has been designed to operate with the antennas listed below, and having a maximum gain of 5 dBi. Antennas not included in this list or having a gain greater than 5 dBi are strictly prohibited for use with this device. The required antenna impedance is 50 ohms. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (e.i.r.p.) is not more than that permitted for successful communication. Industry Canada Statement Complies with the Canadian ICES-003 Class B specifications. Cet appareil numrique de la classe B est conforme la norme NMB-003 du Canada. This device complies with RSS 210 of Industry Canada. This Class B device meets all the requirements of the Canadian interference-causing equipment regulations. Cet appareil numrique de la Classe B respecte toutes les exigences du Rglement sur le matriel brouilleur du Canada. Korea Warning Statements

. NCC Notice & BSMI Notice

,

. Safety Information When product has power button, the power button is one of the way to shut off the product;

when there is no power button, the only way to completely shut off power is to disconnect the product or the power adapter from the power source. Dont disassemble the product, or make repairs yourself. You run the risk of electric shock and voiding the limited warranty. If you need service, please contact us. Avoid water and wet locations. This product can be used in the following countries:

AT ES LT RU BG FI LV SE BY FR MT SK CA GB NL TR CZ GR NO UA DE HU PL US DK IE PT EE IT RO TP-LINK TECHNOLOGIES CO., LTD DECLARATION OF CONFORMITY For the following equipment:

Product Description: 450Mbps Wireless N Access Point Model No.: TL-WA901ND Trademark: TP-LINK We declare under our own responsibility that the above products satisfy all the technical regulations applicable to the product within the scope of Council Directives:

Directives 1999/5/EC, Directives 2006/95/EC, Directives 1999/519/EC, Directives 2011/65/EU The above product is in conformity with the following standards or other normative documents EN 300 328 V1.8.1 EN 301 489-1 V1.9.2 & EN 301 489-17 V2.2.1 EN 60950-1: 2006 + A11: 2009 + A1: 2010 + A12: 2011 EN 50385: 2002 The product carries the CE Mark:

Person responsible for marking this declaration:

Yang Hongliang Product Manager of International Business Date of issue:2015 TP-LINK TECHNOLOGIES CO., LTD. Building 24 (floors 1, 3, 4, 5), and 28 (floors 1-4) Central Science and Technology Park, Shennan Rd, Nanshan, Shenzhen, China CONTENTS Package Contents .................................................................................................... 1 Chapter 1 Introduction ........................................................................................... 2 1.1 Product Overview ............................................................................................ 2 1.2 Conventions .................................................................................................... 2 1.3 Main Features ................................................................................................. 3 1.4 Appearance ..................................................................................................... 3 1.4.1 The Front Panel ................................................................................................. 3 1.4.2 The Rear Panel.................................................................................................. 4 Chapter 2 Hardware Installation ........................................................................... 6 2.1 Before You Begin ............................................................................................ 6 2.2 Basic Requirements ........................................................................................ 6 2.3 Connecting the Device .................................................................................... 6 Chapter 3 Quick Installation Guide ....................................................................... 9 3.1 Quick Setup ..................................................................................................... 9 Chapter 4 Configure the Device .......................................................................... 17 4.1 Login ............................................................................................................. 17 4.2 Status ............................................................................................................ 18 4.3 Quick Setup ................................................................................................... 19 4.4 WPS .............................................................................................................. 19 4.5 Network ......................................................................................................... 25 4.5.1 LAN .................................................................................................................. 26 4.5.2 DHCP Settings ................................................................................................. 26 4.5.3 DHCP Client List .............................................................................................. 28 4.6 Wireless ........................................................................................................ 28 4.6.1 Wireless Settings ............................................................................................. 29 4.6.2 Wireless Security ............................................................................................. 40 4.6.3 Wireless MAC Filtering .................................................................................... 52 4.6.4 Wireless Advanced .......................................................................................... 54 4.6.5 Wireless Statistics............................................................................................ 55 4.6.6 Throughput Monitor ......................................................................................... 55 4.7 System Tools ................................................................................................. 56 4.7.1 SNMP .............................................................................................................. 57 4.7.2 Diagnostic ........................................................................................................ 58 4.7.3 Ping Watch Dog ............................................................................................... 60 4.7.4 Firmware Upgrade ........................................................................................... 61 4.7.5 Factory Defaults............................................................................................... 62 4.7.6 Backup & Restore ............................................................................................ 62 4.7.7 Reboot ............................................................................................................. 63 4.7.8 Password ......................................................................................................... 63 4.7.9 System Log ...................................................................................................... 64 Appendix A: Application Example ........................................................................ 65 Appendix B: Factory Defaults ............................................................................... 68 Appendix C: Troubleshooting ............................................................................... 69 Appendix D: Specifications ................................................................................... 70 Appendix E: Glossary ............................................................................................ 71 TL-WA901ND 450Mbps Wireless N Access Point User Guide Package Contents The following items should be found in your package:

One TL-WA901ND 450Mbps Wireless N Access Point One Power Injector Ethernet Cable One Power Adapter for TL-WA901ND 450Mbps Wireless N Access Point Quick Installation Guide One Resource CD for TL-WA901ND 450Mbps Wireless N Access Point, including:

This User Guide Other helpful information Note:

Make sure that the package contains the above items. If any of the listed items are damaged or missing, please contact with your distributor. 1 TL-WA901ND 450Mbps Wireless N Access Point User Guide Chapter 1 Introduction 1.1 Product Overview The TL-WA901ND 450Mbps Wireless N Access Point is dedicated to Small Office/Home Office

(SOHO) wireless network solutions. It allows for greater range and mobility within your wireless network while also allowing you to connect the wireless devices to a wired environment. Increased mobility and the absence of cabling will be beneficial for your network. With using IEEE 802.11n wireless technology, your device can transmit wireless data at the rate of up to 450Mbps. With multiple protection measures, including SSID broadcast control and wireless LAN 64/128/152-bit WEP encryption, WiFi protected Access (WPA2- PSK, WPA- PSK), the TL-WA901ND 450Mbps Wireless N Access Point delivers complete data privacy. This device leverages some 802.11n features to provide improved performance and coverage compared to 802.11a/g devices, and fully interoperates with 802.11n products if they are Wi-Fi CERTIFIED. It supports an easy, web-based setup for installation and management. Even though you may not be familiar with the Access Point, you can easily configure it with the help of this Guide. Before installing the AP, please look through this Guide to get the full information of the TL-WA901ND 450Mbps Wireless N Access Point. 1.2 Conventions The AP or TL-WA901ND, or device mentioned in this user guide stands for TL-WA901ND 450Mbps Wireless N Access Point without any explanations. Parameters provided in the pictures are just references for setting up the product, which may differ from the actual situation. You can set the parameters according to your demand. 2 TL-WA901ND 450Mbps Wireless N Access Point User Guide 1.3 Main Features Wireless speed up to 450Mbps Supports Access Point, Multi-SSID, Client, RepeaterUniversal Repeaterand Bridge with AP modes Up to 4 SSIDs and VLAN support Up to 30 meters (100 feet) of flexible deployment with included Power over Ethernet Injector Easily setup a WPA encrypted secure connection at a push of the WPS button Supports Remote and Web management Backward compatible with 802.11b/g products 1.4 Appearance 1.4.1 The Front Panel Figure 1-1 The front panel of the TL-WA901ND consists of several LED indicators, which is designed to indicate connections. View from left to right, Table 1-1 describes the LEDs on the front panel of the device. LED Explanation Name Status Indication Off On Off On No Power. Power on. There is no device linked to the corresponding port. There is a device linked to the corresponding port but no activity. Flashing Off Flashing There is an active device linked to the corresponding port. The Wireless function is disabled. The Wireless function is enabled. Slow Flash A wireless device is connecting to the network by WPS function. This process will last in the first 2 minutes. A wireless device has been successfully added to the network by WPS function. On Quick Flash A wireless device failed to be added to the network by WPS function. Table 1-1 3 1.4.2 The Rear Panel TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 1-2 Viewed from left to right, the following parts are located on the rear panel of TL-WA901ND. ON/OFF: The switch for the power. POWER: The power port connects to the power adapter provided with the TL-WA901ND 450Mbps Wireless N Access Point. Ethernet: One LAN 10/100Mbps RJ45 port connects to a network device, such as a switch or a router. WPS/RESET: This button is used for both WPS and Reset function. To use the WPS function, press it for less than five seconds; to use the RESET function, press it for more than five seconds. Used as RESET button:

There are two ways to reset to the Router's factory defaults:

1) Use the Factory Defaults function on System Tools -> Factory Defaults page in the Router's Web-based Utility. 2) Use the WPS/RESET button: With the Router powered on, press and hold the WPS/RESET button (more than 5 seconds) until the SYS LED becomes quick-flash from slow-flash. Then release the button and wait the Access Point to reboot to its factory default settings. 4 TL-WA901ND 450Mbps Wireless N Access Point User Guide Used as WPS button:

If you have client devices, such as wireless adapters, that support Wi-Fi Protected Setup, then you can press this button to quickly establish a connection between the Access Point and client devices and automatically configure wireless security for your wireless network. Wireless antenna: The external antenna is used to transmit and receive wireless data. 5 TL-WA901ND 450Mbps Wireless N Access Point User Guide Chapter 2 Hardware Installation 2.1 Before You Begin Please read this User Guide carefully before installing and using the equipment. The operating distance range of your wireless connection can vary significantly depending on the physical position of the wireless devices. Factors that can weaken signals by getting in the way of your networks radio waves are metal appliances or obstructions, and walls. Typical ranges vary base on the types of materials and background RF (radio frequency) noise in your home or office. For best performance of your wireless network, you are suggested to:

1). Avoid redundant obstacles and interference between the wireless devices. 2). Keep your AP away from appliances with a strong electric field or magnetic field, such as a microwave oven or refrigerator. 3). Place the AP near the center of the area in which your computers operates. 2.2 Basic Requirements Use only the power adapter provided with your AP Place your AP in a well ventilated place far from direct sunlight, any heater or heating vent Leave at least 2 inches (5cm) space around the device for heat dissipation Turn off your AP and unplug the power adapter in a lighting storm to avoid damage Web browser, such as Microsoft Internet Explorer 5.0 or above, Netscape Navigator 6.0 or above Operating temperature: 0~40 (32~104) Operating Humidity: 10%~90%RH, Non-condensing 2.3 Connecting the Device Figure 2-1 is an example of the typical application of TL-WA901ND in the infrastructure network. An Infrastructure network contains an access point or a wireless router. 6 TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 2-1 The Example of Infrastructure Network Incorporating the TL-WA901ND To establish a typical connection of the AP, please take the following steps:

1. Connect the Cable or DSL modem to a Router. 2. Locate an optimum location for the AP. The best place is usually near the center of the area in which your wireless devices like PCs, smart phones will wirelessly connect. 3. Adjust the direction of the antenna. Normally, upright is a good direction. 4. Connect the Ethernet Broadband Router to the TL-WA901ND Access Point. Power on the AP. 5. Then you can connect a desktop PC or laptop to your network. (Make sure your computer or laptop is equipped with a Wireless Adapter and the IP address is configured as obtain an IP address automatically.) Note:

If you are not so clear about how to connect your devices to the network, please refer to Appendix A Application Example. 7 TL-WA901ND 450Mbps Wireless N Access Point User Guide Note:

The diameter of the screw, 3.5mm<D<7.8mm, and the distance of two screws is 107.5mm. The screw that project from the wall need around 4mm based, and the length of the screw need to be at least 20mm to withstand the weight of the product. 8 TL-WA901ND 450Mbps Wireless N Access Point User Guide Chapter 3 Quick Installation Guide This chapter will guide you to configure your PC to communicate with the AP and to configure and manage the TL-WA901ND 450Mbps Wireless N Access Point easily with a Web-based utility. 3.1 Quick Setup With a Web-based utility, it is easy to configure and manage the TL-WA901ND 450Mbps Wireless N Access Point. The Web-based utility can be used on any Windows, Macintosh or UNIX OS with a Web browser, such as Microsoft Internet Explorer, Mozilla Firefox or Apple Safari. Note:

If you cannot access the web-based configuration page, please refer to T3 in Appendix C:

Troubleshooting for help. 1. To access the configuration utility, open a web-browser and type in the default address http://tplinkap.net in the address field of the browser and press Enter. Figure 3-1 Login to the AP After a moment, a login window will appear, similar to the Figure 3-2. Enter the default values for the User Name and Password (both are admin in lower case letters). Then click OK or press Enter. Enter the default values for the User Name and Password (both are admin in lower case letters) in Figure 4-2 below. Then click Login or press Enter. Figure 3-2 Login Windows 9 TL-WA901ND 450Mbps Wireless N Access Point User Guide Note:

If the above screen does not prompt, it means that your web-browser has been set to a proxy. Go to Tools menu>Internet Options>Connections>LAN Settings, in the screen that appears, cancel the Using Proxy checkbox, and click OK to finish it. 2. After successfully logging in, the Quick Setup page will display. Click Next to continue. 3. The Quick Setup Start page will display. Click Next to continue. Figure 3-3 Quick Setup Figure 3-4 Quick Setup Note:

By selecting YES for Change the login account, you can modify your login user name and password. In this case, it is suggested that you record them in some place easy to find. 4. The Operation Mode page will appear then, shown in Figure 3-5. The TL-WA901ND supports up to five operation modes. Figure 3-5 Operation Mode 10 TL-WA901ND 450Mbps Wireless N Access Point User Guide In Access Point mode, the product will act as a wireless central hub for your wireless LAN clients, giving a wireless extension for your current wired network. In Repeater(Range Extender) mode, the product can extend the coverage of your main Router/AP. In Bridge with AP mode, the product can wirelessly connect two or more remote LANs together. In Client mode, the product will act as a wireless adapter to connect your wired devices

(e.g. IPTV Set-top-box, Smart TVs, Game Consoles, DVD and Blu-ray Players, etc.) to a wireless network. In Multi-SSID mode, the product can be assigned up to four SSIDs to work with your VLAN. 5. Select the operation mode based on your need. A. When you choose Access Point mode, the Wireless Settings page will be shown in Figure 3-6. Figure 3-6 Wireless Setting - Access Point mode 1) Create an easy-to-remember and distinguish name for your wireless network, write it into Wireless Network Name(SSID). 2) Select Channel for your device. 3) It's recommended select Most Secure (WPA/WPA2-PSK) encryption mode and enter a password below to prevent unauthorized access to your AP. 4) Click Next, you will then come to Network Setting page for furthers configuration. B. When you choose Repeater (Range Extender) mode, the AP will detect the wireless networks in your neighborhood, and then the window displaying a list of available SSIDs will appear in Figure 3-7. 11 TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 3-7 AP List 1) Find the SSID of the Access Point / Router or WISP which you want you to connect to, and click Connect in the corresponding row. You will then see the page shown in Figure 3-8. 2) Select the security mode and enter the password that is the same as on your router or access point in Figure 3-8. 3) Click Next, you will then come to Network Settings page for furthers configuration. Figure 3-8 Wireless Setting Repeater (Range Extender) mode C. When you choose Bridge with AP mode, the AP will detect the wireless networks in your neighborhood, and then the window displaying a list of available SSIDs will appear in Figure 3-9. 12 TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 3-9 AP List 1) Find the SSID of the Access Point / Router or WISP which you want you to connect to, and click Connect in the corresponding row. You will then see the page shown in Figure 3-10. 2) Select the security mode and enter the password that is the same as on your router or access point in Wireless Bridge Setting. 3) You can name the bridge AP in Local Wireless Name, and configure the Local Wireless Setting for the bridge AP. 4) Click Next in Figure 3-10, and you will come to Network Settings page for furthers configuration. Figure 3-10 Wireless Setting Bridge with AP mode 13 TL-WA901ND 450Mbps Wireless N Access Point User Guide D. When you choose Client mode, the AP will detect the wireless networks in your neighborhood, and then the window displaying a list of available SSIDs will appear in Figure 3-11. Figure 3-11 AP List 1) Find the SSID of the Access Point / Router or WISP which you want you to connect to, and click Connect in the corresponding row. You will then see the page shown in Figure 3-12. 2) Select the security mode and enter the password that is the same as on the main Router/AP. 3) Click Next, you will then come to Network Settings page for furthers configuration. Figure 3-12 Wireless Setting Client mode E. When you choose Multi-SSID mode, the Wireless Settings page will be shown in Figure 3-13. 14 TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 3-13 Wireless Setting Multi-SSID mode You are suggested to implement Multi-SSID function with a switch that supports Tag VLAN feature. For advanced configuration of this step, please refer to explanations of this mode in 4.6.1 Wireless Settings. 6. When you have configured Wireless Settings in step 4, The Network Settings page will appear then, shown in Figure 3-14. It is recommended that you keep the default settings on this page. Figure 3-14 Network Setting Note:

These settings are only for basic wireless parameters, for advanced settings, please refer to 4.5 Network. 15 TL-WA901ND 450Mbps Wireless N Access Point User Guide 7. Click the Next button. You will then see the Finish page. Here takes the settings for Access Point mode for example. Check your settings and click Save to save your settings for future reference. Click the Finish button to finish the configuration of the Access Point. Figure 3-15 Quick Setup Finish 16 TL-WA901ND 450Mbps Wireless N Access Point User Guide Chapter 4 Configure the Device This Chapter describes how to configure your Access Point via the web-based management page. The TL-WA901ND 450Mbps Wireless N Access Point is easy to configure and manage with the Web-based (Internet Explorer, Netscape Navigator, Firefox, Safari, Opera or Chrome) management page, which can be launched on any windows, Macintosh or UNIX OS with a web browser. 4.1 Login Open your web browser. Type in http://tplinkap.net in the address field of web browser and press Enter. Figure 4-1 Login to the AP Enter the default values for the User Name and Password (both are admin in lower case letters) in Figure 4-2 below. Then click Login or press Enter. Figure 4-2 Login Windows Note:

If the above screen does not prompt, it means that your web-browser has been set to a proxy. Go to Tools menu>Internet Options>Connections>LAN Settings, in the screen that appears, cancel the Using Proxy checkbox, and click OK to finish it. After a successful login, you can configure and manage the device. There are five main menus on the leftmost column of the web-based management page: Status, WPS, Network, Wireless and System Tools. Submenus will be available after clicking one of the main menus. On the right of the web-based management page lies the detailed explanations and instructions for the corresponding page. 17 TL-WA901ND 450Mbps Wireless N Access Point User Guide 4.2 Status Selecting Status will enable you to view the APs current status and configuration, all of which is read-only. Figure 4-3 Device Status Firmware Version - This field displays the current firmware version of the AP. Hardware Version - This field displays the current hardware version of the AP Wired - This field displays the current settings or information for the Network, including the MAC address, IP address and Subnet Mask. Wireless - This field displays basic information or status for wireless function, including Operating Mode, Wireless Network Name, Channel, Mode, Channel Width, Max Tx Rate and MAC Address. Traffic Statistics - This field displays the AP's traffic statistics. 18 TL-WA901ND 450Mbps Wireless N Access Point User Guide System Up Time - This filed displays the run time of the AP since its powered on or reset. Note:

If you select Client mode in Figure 4-14, the wireless status in Figure 4-3 will change, similar to the figure below:

Figure 4-4 Device Status - Client 4.3 Quick Setup Please refer to Section 3.1 Quick Setup for more details. 4.4 WPS WPS (Wi-Fi Protected Setup) can help you to quickly and securely connect to a network. This section will guide you to add a new wireless device to an existing network quickly by function. The WPS function is only available when the Operation Mode is set to Access Point and Multi-SSID. Here we take the Access Point mode for example. Select menu WPS, you will see the next screen shown in Figure 4-5. Figure 4-5 WPS WPS Status - To enable or disable the WPS function here. Current PIN - The current value of the device's PIN is displayed here. The default PIN of the 19 TL-WA901ND 450Mbps Wireless N Access Point User Guide device can be found in the label or User Guide. Restore PIN - Restore the PIN of the device to its default. Gen New PIN - Click this button, and then you can get a new random value for the device's PIN. You can ensure the network security by generating a new PIN. Disable PIN of this device - WPS external register of entering the devices PIN can be disabled or enabled manually. If the device receives multiple failed attempts to authenticate an external Register, this function will be disabled automatically. Add Device - You can add a new device to the existing network manually by clicking this button. To add a new device:

If the wireless adapter supports Wi-Fi Protected Setup (WPS), you can establish a wireless connection between wireless adapter and device using either Push Button Configuration (PBC) method or PIN method. Note:

To build a successful connection by WPS, you should also do the corresponding configuration of the new device for WPS function meanwhile. For the configuration of the new device, here takes the Wireless Adapter of our company for example. I. By PBC If the wireless adapter supports Wi-Fi Protected Setup and the Push Button Configuration (PBC) method, you can add it to the network by PBC with the following two methods. Method One:

Step 1: Press the WPS/RESET button on the rear panel of the device. Step 2: Press and hold the WPS button of the adapter directly for 2 or 3 seconds. Step 3: Wait for a while until the next screen appears. Click OK to complete the WPS configuration. 20 TL-WA901ND 450Mbps Wireless N Access Point User Guide The WPS Configuration Screen of Wireless Adapter Method Two:

Step 1: Press the WPS/RESET button on the rear panel of the device. Step 2: For the configuration of the wireless adapter, please choose Push the button on my access point or wireless router. in the configuration utility of the WPS as below, and click Next. The WPS Configuration Screen of Wireless Adapter Step 3: Wait for a while until the next screen appears. Click OK to complete the WPS configuration. 21 TL-WA901ND 450Mbps Wireless N Access Point User Guide The WPS Configuration Screen of Wireless Adapter Method Three:

Step 1: Keep the default WPS Status as Enabled and click the Add device button in Figure 4-5, then the following screen will appear. Figure 4-6 Add A New Device Step 2: Choose Press the button of the new device in two minutes and click Connect. Step 3: For the configuration of the wireless adapter, please choose Push the button on my access point or wireless router in the configuration utility of the WPS as below, and click Next. 22 TL-WA901ND 450Mbps Wireless N Access Point User Guide The WPS Configuration Screen of Wireless Adapter Step 4: Wait for a while until the next screen appears. Click OK to complete the WPS configuration. The WPS Configuration Screen of Wireless Adapter II. By PIN If the new device supports Wi-Fi Protected Setup and the PIN method, you can add it to the network by PIN with the following two methods. Method One: Enter the PIN into my AP Step 1: Keep the default WPS Status as Enabled and click the Add device button in Figure 4-5, then the following screen will appear. 23 TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 4-7 Enter the PIN Step 2: Choose Enter the new device's PIN and enter the PIN code take 16952898 for example of the wireless adapter in the field after PIN as shown in the figure above. Then click Connect. Note:

The PIN code of the adapter is always displayed on the WPS configuration screen as shown in the following figure. Step 3: For the configuration of the wireless adapter, please choose Enter the PIN of this device into my access point or wireless router. in the configuration utility of the WPS as below, and click Next. The WPS Configuration Screen of Wireless Adapter Note:

In this example, the default PIN code of this adapter is 16952898 as the above figure shown. Method Two: Enter the PIN from my AP Step 1: Get the Current PIN code of the AP in Figure 4-5 (each AP has its unique PIN code. Here takes the PIN code 12345670 of this AP for example). Step 2: For the configuration of the wireless adapter, please choose Enter the PIN of my access point or wireless router. in the configuration utility of the WPS as below, and 24 TL-WA901ND 450Mbps Wireless N Access Point User Guide enter the PIN code of the AP into the field after Access Point PIN. Then click Next. The WPS Configuration Screen of Wireless Adapter Note:

The default PIN code of the AP can be found in its label or the WPS configuration screen as Figure 4-5 . You will see the following screen when the new device has successfully connected to the network. Note:

1. The WPS LED on the AP will light green for five minutes if the device has been successfully added to the network. 2. The WPS function cannot be configured if the Wireless function of the AP is disabled. Please make sure the Wireless function is enabled before configuring the WPS. 4.5 Network 25 TL-WA901ND 450Mbps Wireless N Access Point User Guide 4.5.1 LAN The Network option allows you to customize your local network manually by changing the default settings of the AP. Selecting Network will enable you to configure the IP parameters of Network on this page. Figure 4-8 Network MAC Address - The physical address of the AP. The value can't be changed. Type - Select Dynamic IP(DHCP) to get IP address from DHCP server or select Static IP to configure IP address manually from the drop-down list. IP Address - Enter the IP address of your AP in dotted-decimal notation (factory default setting is 192.168.0.254). Subnet Mask - An address code that determines the size of the network. Normally use 255.255.255.0 as the subnet mask. Gateway - The gateway should be in the same subnet as your IP address. Note:

1. 2. If you change the IP Address, you must use the new IP Address to log in the AP. If the new LAN IP Address you set is not in the same subnet with the IP Address pool of DHCP sever, the IP Address pool will not take effect until it is re-configured accordingly. 4.5.2 DHCP Settings Selecting DHCP > DHCP Settings will enable you to set up the AP as a DHCP (Dynamic Host Configuration Protocol) server, which provides the TCP/IP configuration for all the PCs that are connected to the system on the LAN. The DHCP Server can be configured on the page (shown as Figure 4-9):

26 TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 4-9 DHCP Settings DHCP Server - Selecting the radio button before Disable/Enable will disable/enable the DHCP server on your AP. The default setting is Enable. If you disable the Server, you must have another DHCP server within your network or else you must manually configure the computer. Start IP Address - This field specifies the first address in the IP Address pool. 192.168.0.100 is the default start IP address. End IP Address - This field specifies the last address in the IP Address pool. 192.168.0.199 is the default end IP address. Address Lease Time - Enter the amount of time for the PC to connect to the AP with its current assigned dynamic IP address. The time is measured in minutes. After the time is up, the PC will be automatically assigned a new dynamic IP address. The range of the time is 1 ~

2880 minutes. The default value is 120 minutes. Default Gateway (optional) - Enter the IP address of the gateway for your LAN. The factory default setting is 0.0.0.0. Default Domain (optional) - Enter the domain name of the your DHCP server. You can leave the field blank. Primary DNS (optional) - Enter the DNS IP address provided by your ISP. Consult your ISP if you dont know the DNS value. The factory default setting is 0.0.0.0. Secondary DNS (optional) - Enter the IP address of another DNS server if your ISP provides two DNS servers. The factory default setting is 0.0.0.0. Click Save to save the changes. Note:

disabled. 1. When the device is working on Dynamic IP mode, the DHCP Server function will be 2. To use the DHCP server function of the device, you should configure all computers in the LAN as "Obtain an IP Address automatically" mode. This function will not take effect until the device reboots. 27 TL-WA901ND 450Mbps Wireless N Access Point User Guide 4.5.3 DHCP Client List Selecting DHCP > DHCP Client List will enable you to view the Client Name, MAC Address, Assigned IP and Lease Time for each DHCP Client attached to the device (Figure 4-10). Figure 4-10 DHCP Clients List ID - Here displays the index of the DHCP client. Client Name - Here displays the name of the DHCP client. MAC Address - Here displays the MAC address of the DHCP client. Assigned IP - Here displays the IP address that the AP has allocated to the DHCP client. Lease Time - Here displays the time of the DHCP client leased. Before the time is up, DHCP client will request to renew the lease automatically. You cannot change any of the values on this page. To update this page and to show the current attached devices, click on the Refresh button. 4.6 Wireless The Wireless option, improving functionality and performance for wireless network, can help you make the AP an ideal solution for your wireless network. Here you can create a wireless local area network just through a few settings. Wireless Settings is used for the configuration of some basic parameters of the AP. Wireless Security provides three different security types to secure your data and thus provide greater security for your wireless network. MAC filtering allows you to control the access of wireless stations to the AP. Wireless Advanced allows you to configure some advanced parameters for the AP. Throughput Monitor helps to watch wireless throughput information Wireless statistics enables you to get detailed information about the current connected wireless stations. There are six submenus under the Wireless menu (shown in Figure 4-11): Wireless Settings, Wireless Security, Wireless MAC Filtering, Wireless Advanced, Wireless Statistics and Throughput Monitor. Click any of them, and you will be able to configure the corresponding function. The detailed explanations for each submenu are provided below. 28 TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 4-11 Wireless menu 4.6.1 Wireless Settings Selecting Wireless > Wireless Settings will enable you to configure the basic settings for your wireless network on the screen below (Figure 4-12).This page allows you to configure the wireless mode for your device. Six operation modes are supported here, including Access Point, Multi-SSID, Client, WDS Repeater, Universal Repeater and Bridge with AP. The available setting options for each operation mode are different from those of the other. 1) Access Point: This mode allows wireless stations to access this device. Figure 4-12 Wireless Settings in Access Point mode Wireless Network Name - Identifies your wireless network name. Create a name up to 32 characters and make sure all wireless points in the wireless network with the same SSID. The default SSID is TP-LINK_AP_XXXX (XXXX indicates the last unique four characters of each devices MAC address). This value is case-sensitive. For example, TEST is NOT the same as test. 29 TL-WA901ND 450Mbps Wireless N Access Point User Guide Channel - Determines the operating frequency to be used. It is not necessary to change the wireless channel unless you notice interference problems with another nearby access point. Mode - Select the desired wireless mode. The options are:

11b only - Only 802.11b wireless stations can connect to the device. 11g only - Only 802.11g wireless stations can connect to the device. 11n only - Only 802.11n wireless stations can connect to the device. 11bg mixed - Both 802.11b and 802.11g wireless stations can connect to the device. 11bgn mixed - All 802.11b, 802.11g and 802.11n wireless stations can connect to the device. Channel Width - Determines the channel width to be used. It is unnecessary to change the default value unless required. Enable Wireless Radio - Select or deselect this check box to allow or deny wireless stations to access the device. Enable SSID Broadcast - Select or deselect this check box to allow or deny the device to broadcast its name (SSID) on the air. If its allowed, when wireless clients survey the local area for wireless networks to associate with, they will detect the SSID broadcast by the device. Note:

To apply any settings you have altered on the page, please click the Save button, and then you will be reminded to reboot the device. 30 TL-WA901ND 450Mbps Wireless N Access Point User Guide 2) Multi-SSID: This mode allows the device to support up to four SSIDs. Figure 4-13 Wireless Settings in Multi-SSID mode Enable VLAN - Check this box and then you can change the VLAN ID of each SSID. If you want to configure the Guest and Internal networks on VLAN, the switch you are using must support VLAN. As a prerequisite step, configure a port on the switch for handling VLAN tagged packets as described in the IEEE802.1Q standard, and enable this field. SSID (1-4) - Up to four SSIDs for each BSS (Basic Service Set) can be entered in the filed SSID1 ~ SSID4. The name can be up to 32 characters. The same name (SSID) must be assigned to all wireless devices in your network. If Enable VLAN is checked, the wireless stations connecting to SSID of different VLANID can not communicate with each other. VLAN ID (1-4) - Provide a number between 1 and 4095 for VLAN. This will cause the device to send packets with VLAN tags. The switch connecting with the device must support VLAN IEEE802.1Q frames. The wireless stations connecting to the SSID of a specified VLAN ID can communicate with the PC connecting to the port with the same VLAN ID on the Switch. Channel - Determines the operating frequency to be used. It is not necessary to change the 31 TL-WA901ND 450Mbps Wireless N Access Point User Guide wireless channel unless you notice interference problems with another nearby access point. Mode - This field determines the wireless mode which the device works on. 11b only - Only 802.11b wireless stations can connect to the device. 11g only - Only 802.11g wireless stations can connect to the device. 11n only - Only 802.11n wireless stations can connect to the device. 11bg mixed - Both 802.11b and 802.11g wireless stations can connect to the device. 11bgn mixed - All 802.11b, 802.11g and 802.11n wireless stations can connect to the device. Channel Width - Determines the channel width to be used. It is unnecessary to change the default value unless required. Enable Wireless Radio - Select or deselect this check box to allow or deny wireless stations to access the device. Enable SSID Broadcast - Select or deselect this check box to allow or deny the device to broadcast its name (SSID) on the air. If its allowed, when wireless clients survey the local area for wireless networks to associate with, they will detect the SSID broadcast by the device. Note:

To apply any settings you have altered on the page, please click the Save button, and then you will be reminded to reboot the device. You are suggested to implement Multi-SSID function with a switch that supports Tag VLAN feature. Here is an example of how to configure Multi-SSID. Please take the following steps:

32 TL-WA901ND 450Mbps Wireless N Access Point User Guide 1. Configure the Access Point Configure the Access Point Select Multi-SSID as the operation mode of TL-WA901ND. Select the checkbox before Enable VLAN to enable VLAN function for this access point. Configure the SSID and its corresponding VLAN ID. The detailed parameters are shown as the above figure. STA1, STA2, STA3 and STA4 join to the wireless network with SSID1, SSID2, SSID3 and SSID4 respectively. Click Save to apply the current security settings for the selected SSID. Note:

1. The wireless STAs join to the network with different VLAN IDs cannot communicate with each other, for example, STA1 and STA2. 2. The wireless STAs join to the network with the same VLAN ID can communicate with each other, for example, STA1 and STA3. 3. All wireless STAs can log on to the Web management page of TL-WA901ND and manage the access point, for example, STA1, STA2, STA3 and STA4. 4. All the packets received in the wired network from the wireless STA will be added a corresponding VLAN Tag of the wireless STA, unless the VLAN ID of the wireless network is set to 1. 33 TL-WA901ND 450Mbps Wireless N Access Point User Guide 2. Configure the Switch. Enable 802.1Q Tag VLAN function on the switch. Make sure the Untag frames are forwarded. The following table shows the detailed configuration for the switch Port VLAN ID 1 2 3 4 5 1 2 3 4 Port5 belongs VLANs Frames Forwarding PVID Egress Rule Processing mode of Utag 1 2 3 4 Untag Untag Untag Untag Forwarding Forwarding Forwarding to all 1 Tag Forwarding Table 4-1 Configure the Tag VLAN Switch Connect PC1, PC2, PC3 and PC4 to port1, port2, port3 and port4 of the switch respectively. The corresponding VLAN IDs of the four ports are 1, 2, 3 and 4. Configure port5 of the switch to be the member of VLAN1, VLAN2, VLAN3 and VLAN4 and connect it to the LAN port of TL-WA901ND. Configure the VLAN ID of the PC that can log on to the Web management page of TL-WA901ND via the LAN port equal to the PVID of port 5. 3. Verify the communication status after the above configuration is completed. If VLAN ID of the PC connected to the switch is different from the VLAN ID of the wireless STA, the two cannot communicate with each other, for example, PC1 and STA2. If the PC connected to the switch and the wireless STA have the same VLAN ID, the two can communicate with each other, for example PC2 and STA2. Multi-SSID+VLAN 34 TL-WA901ND 450Mbps Wireless N Access Point User Guide Note:

If the LAN port of TL-WA901ND is not connected to a switch but directly to a PC, 1. The PC can directly log on to the Web management page of TL-WA901ND and manage the access point. 2. Only the wireless STA with its VLAN ID set to 1 can communicate with the wired PC. 3) Client: This mode allows the device to act as a wireless station to enable wired host(s) to access an AP. Figure 4-14 Wireless Settings in Client mode Enable WDS - The AP client can connect to AP with WDS enabled or disabled. If WDS is enabled, all traffic from wired networks will be forwarded in the format of WDS frames consisting of four address fields. If WDS is disabled, three address frames are used. If your AP supports WDS well, please enable this option. Wireless Name of Root AP - If you select the radio button before Wireless Name of Root AP, the AP client will connect to the AP according to SSID. Enter the SSID of AP that you want to access. MAC Address of Root AP - If you select the radio button before MAC Address of Root AP, the AP client will connect to the AP according MAC address. Enter the MAC address of AP that you want to access. Enable Wireless Radio - Select or deselect this check box to allow or deny wireless stations to access the device. 35 TL-WA901ND 450Mbps Wireless N Access Point User Guide Click the Survey button to detect the SSIDs in the local area. Note:

To apply any settings you have altered on the page, please click the Save button, and then you will be reminded to reboot the device. 4) WDS Repeater: In WDS Repeater mode, the AP with WDS enabled will relay data to an associated root AP. AP function is enabled meanwhile. The wireless repeater relays signal between its stations and the root AP for greater wireless range. Figure 4-15 Wireless Settings in Repeater mode Wireless Name of Root AP - If you select the radio button before Wireless Name of Root AP, the AP client will connect to the AP according to SSID. Enter the SSID of AP that you want to access. MAC Address of Root AP - If you select the radio button before MAC Address of Root AP, the AP client will connect to the AP according MAC address. Enter the MAC address of AP that you want to access. Mode - Select the desired wireless mode. The options are:

11b only - Only 802.11b wireless stations can connect to the device. 11g only - Only 802.11g wireless stations can connect to the device. 36 TL-WA901ND 450Mbps Wireless N Access Point User Guide 11n only - Only 802.11n wireless stations can connect to the device. 11bg mixed - Both 802.11b and 802.11g wireless stations can connect to the device. 11bgn mixed - All 802.11b, 802.11g and 802.11n wireless stations can connect to the device. Channel Width - Determines the channel width to be used. It is unnecessary to change the default value unless required. Enable Wireless Radio - Select or deselect this check box to allow or deny wireless stations to access the device. Click the Survey button to detect the SSIDs in the local area. Note:

To apply any settings you have altered on the page, please click the Save button, and then you will be reminded to reboot the device. 5) Universal Repeater: In Universal Repeater mode, the AP with WDS disabled will relay data to an associated root AP. AP function is enabled meanwhile. The wireless repeater relays signal between its stations and the root AP for greater wireless range. Figure 4-16 Wireless Settings in Repeater mode Wireless Name of Root AP - If you select the radio button before Wireless Name of Root AP, the AP client will connect to the AP according to SSID. Enter the SSID of AP that you want to access. MAC Address of Root AP - If you select the radio button before MAC Address of Root AP, the AP client will connect to the AP according MAC address. Enter the MAC address of AP that you want to access. 37 TL-WA901ND 450Mbps Wireless N Access Point User Guide Mode - Select the desired wireless mode. The options are:

11b only - Only 802.11b wireless stations can connect to the device. 11g only - Only 802.11g wireless stations can connect to the device. 11n only - Only 802.11n wireless stations can connect to the device. 11bg mixed - Both 802.11b and 802.11g wireless stations can connect to the device. 11bgn mixed - All 802.11b, 802.11g and 802.11n wireless stations can connect to the device. Channel Width - Determines the channel width to be used. It is unnecessary to change the default value unless required. Enable Wireless Radio - Select or deselect this check box to allow or deny wireless stations to access the device. Click the Survey button to detect the SSIDs in the local area. Note:

To apply any settings you have altered on the page, please click the Save button, and then you will be reminded to reboot the device. 38 TL-WA901ND 450Mbps Wireless N Access Point User Guide 6) Bridge with AP: This mode can bridge the AP and up to 4 APs also in bridge mode to connect two or more wired LANs. Figure 4-17 Wireless Settings in Bridge with AP mode Wireless Bridge Settting Wireless Name of Remote AP - If you select the radio button before Wireless Name of Remote AP, the AP client will connect to the AP according to SSID. Enter the SSID of AP that you want to access. MAC Address of Remote AP - If you select the radio button before MAC Address of Remote AP, the AP client will connect to the AP according MAC address. Enter the MAC address of AP that you want to access. Click the Survey button to detect the SSIDs in the local area. Key type - This option should be chosen according to the AP's security configuration. It is recommended that the security type is the same as your AP's security type. Password - If the Remote AP that your device is going to connect needs password, you need to fill the password in this blank. Local Wireless AP Setting Local Wireless Name - Name for the AP. 39 TL-WA901ND 450Mbps Wireless N Access Point User Guide Mode - This field determines the wireless mode which the device works on. 11b only - Only 802.11b wireless stations can connect to the device. 11g only - Only 802.11g wireless stations can connect to the device. 11n only - Only 802.11n wireless stations can connect to the device. 11bg mixed - Both 802.11b and 802.11g wireless stations can connect to the device. 11bgn mixed - All 802.11b, 802.11g and 802.11n wireless stations can connect to the device. Channel Width - Determines the channel width to be used. It is unnecessary to change the default value unless required. Enable Wireless Radio - Select or deselect this check box to allow or deny wireless stations to access the device. Enable SSID Broadcast - Select or deselect this check box to allow or deny the device to broadcast its name (SSID) on the air. If its allowed, when wireless clients survey the local area for wireless networks to associate with, they will detect the SSID broadcast by the device. Note:

To apply any settings you have altered on the page, please click the Save button, and then you will be reminded to reboot the device. 4.6.2 Wireless Security Selecting Wireless > Wireless Security will enable you to configure wireless security for your wireless network to protect your data from intruders. The AP provides three security types: WEP, WPA/WPA2 and WPA-PSK/WPA2-PSK. Wireless security can be set on the following screen shown as Figure 4-18. The security options are different for different operation mode. 40 1) Access Point TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 4-18 Wireless Security - Access Point Disable Security - Check this box radio button to disable wireless security. If disabled, the wireless stations will be able to connect this device without encryption. It is strongly recommended that you choose one of the security types to enable security. WPA/WPA2-Personal(Recommended) - Select WPA/WPA2 based on Radius Server. Version - You can select one of following versions. 1) Automatic(Recommended) - Select WPA-Personal or WPA2-Personal automatically based on the wireless station's capability and request. 2) WPA-PSK - Pre-shared key of WPA. 3) WPA2-PSK - Pre-shared key of WPA2. Encryption - You can select either Automatic(Recommended), TKIP or AES. Wireless Password - You can enter ASCII or Hexadecimal characters. For Hexadecimal, the length should be between 8 and 64 characters; for ASCII, the length should be between 8 and 63 characters. 41 TL-WA901ND 450Mbps Wireless N Access Point User Guide Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 or at least 30. Enter 0 to disable the update. WPA/WPA2-Enterprise - Select WPA/WPA2 based on Radius Server. Version - You can select one of following versions. 1) Automatic - Select WPA or WPA2 automatically based on the wireless station's capability and request. 2) WPA - Wi-Fi Protected Access. 3) WPA2 - WPA version 2. Encryption - You can select either Automatic, TKIP or AES. Radius Server IP - Enter the IP address of the Radius Server. Radius Port - Enter the port used by radius service. Radius Password - Enter the password for the Radius Server. Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 or at least 30. Enter 0 to disable the update. WEP - Select 802.11 WEP security. Type - You can select one of following types. 1) Automatic - Select Shared Key or Open System authentication type automatically based on the wireless station's capability and request. 2) Shared Key - Select 802.11 Shared Key authentication type. 3) Open System - Select 802.11 Open System authentication. WEP Key Format - You can select ASCII or Hexadecimal format. ASCII format stands for any combination of keyboard characters in the specified length. Hexadecimal format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified length. WEP Key - Select which of the four keys will be used and enter the matching WEP key information for your network in the selected key radio button. These values must be identical on all wireless stations in your network. Key Type - You can select the WEP key length (64-bit, or 128-bit, or 152-bit.) for encryption. "Disabled" means this WEP key entry is invalid. 1) For 64-bit encryption - You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 5 ASCII characters. 2) For 128-bit encryption - You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 13 ASCII characters. 3) For 152-bit encryption - You can enter 32 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 16 ASCII characters. Note:

1. If you do not set the key, the wireless security function is still disabled even if you have selected Shared Key as Authentication Type. 2. You will be reminded to reboot the device after clicking the Save button. 42 2) Multi-SSID TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 4-19 Wireless Security Multi-SSID You can choose which SSID to configure wireless security settings for in the blank behind Operation Mode. Disable Security - Check this box radio button to disable wireless security. If disabled, the wireless stations will be able to connect this device without encryption. It is strongly recommended that you choose one of the security types to enable security. WPA/WPA2-Personal(Recommended) - Select WPA/WPA2 based on Radius Server. Version - You can select one of following versions. 1) Automatic(Recommended) - Select WPA-Personal or WPA2-Personal automatically based on the wireless station's capability and request. 2) WPA-PSK - Pre-shared key of WPA. 3) WPA2-PSK - Pre-shared key of WPA2. Encryption - You can select either Automatic(Recommended), TKIP or AES. Wireless Password - You can enter ASCII or Hexadecimal characters. For Hexadecimal, the length should be between 8 and 64 characters; for ASCII, the length should be between 8 and 63 characters. Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 or at least 30. Enter 0 to disable the update. WPA/WPA2-Enterprise - Select WPA/WPA2 based on Radius Server. Version - You can select one of following versions. 43 TL-WA901ND 450Mbps Wireless N Access Point User Guide 1) Automatic - Select WPA or WPA2 automatically based on the wireless station's capability and request. 2) WPA - Wi-Fi Protected Access. 3) WPA2 - WPA version 2. Encryption - You can select either Automatic, TKIP or AES. Radius Server IP - Enter the IP address of the Radius Server. Radius Port - Enter the port used by radius service. Radius Password - Enter the password for the Radius Server. Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 or at least 30. Enter 0 to disable the update. Note:

You will be reminded to reboot the device after clicking the Save button. 3) Client Figure 4-20 Wireless Security Client Disable Security - Check this box radio button to disable wireless security. If disabled, the wireless stations will be able to connect this device without encryption. It is strongly recommended that you choose one of the security types to enable security. WPA/WPA2-Personal(Recommended) - Select WPA/WPA2 based on Radius Server. Version - You can select one of following versions. 44 TL-WA901ND 450Mbps Wireless N Access Point User Guide 1) Automatic(Recommended) - Select WPA-Personal or WPA2-Personal automatically based on the wireless station's capability and request. 2) WPA-PSK - Pre-shared key of WPA. 3) WPA2-PSK - Pre-shared key of WPA2. Encryption - You can select either Automatic(Recommended), TKIP or AES. Wireless Password - You can enter ASCII or Hexadecimal characters. For Hexadecimal, the length should be between 8 and 64 characters; for ASCII, the length should be between 8 and 63 characters. Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 or at least 30. Enter 0 to disable the update. WEP - Select 802.11 WEP security. Type - You can select one of following types. 1) Automatic - Select Shared Key or Open System authentication type automatically based on the wireless station's capability and request. 2) Shared Key - Select 802.11 Shared Key authentication type. 3) Open System - Select 802.11 Open System authentication. WEP Key Format - You can select ASCII or Hexadecimal format. ASCII format stands for any combination of keyboard characters in the specified length. Hexadecimal format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified length. WEP Key - Select which of the four keys will be used and enter the matching WEP key information for your network in the selected key radio button. These values must be identical on all wireless stations in your network. Key Type - You can select the WEP key length (64-bit, or 128-bit, or 152-bit.) for encryption. "Disabled" means this WEP key entry is invalid. 1) For 64-bit encryption - You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 5 ASCII characters. 2) For 128-bit encryption - You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 13 ASCII characters. 3) For 152-bit encryption - You can enter 32 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 16 ASCII characters. Note:

1. If you do not set the key, the wireless security function is still disabled even if you have selected Shared Key as Authentication Type. 2. You will be reminded to reboot the device after clicking the Save button. 45 4) WDS Repeater TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 4-21 Wireless Security Repeater Disable Security - Check this box radio button to disable wireless security. If disabled, the wireless stations will be able to connect this device without encryption. It is strongly recommended that you choose one of the security types to enable security. WPA/WPA2-Personal(Recommended) - Select WPA/WPA2 based on Radius Server. Version - You can select one of following versions. 1) Automatic(Recommended) - Select WPA-Personal or WPA2-Personal automatically based on the wireless station's capability and request. 2) WPA-PSK - Pre-shared key of WPA. 3) WPA2-PSK - Pre-shared key of WPA2. Encryption - You can select either Automatic(Recommended), TKIP or AES. Wireless Password - You can enter ASCII or Hexadecimal characters. For Hexadecimal, the length should be between 8 and 64 characters; for ASCII, the length should be between 8 and 63 characters. Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 or at least 30. Enter 0 to disable the update. WEP - Select 802.11 WEP security. Type - You can select one of following types. 46 TL-WA901ND 450Mbps Wireless N Access Point User Guide 1) Automatic - Select Shared Key or Open System authentication type automatically based on the wireless station's capability and request. 2) Shared Key - Select 802.11 Shared Key authentication type. 3) Open System - Select 802.11 Open System authentication. WEP Key Format - You can select ASCII or Hexadecimal format. ASCII format stands for any combination of keyboard characters in the specified length. Hexadecimal format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified length. WEP Key - Select which of the four keys will be used and enter the matching WEP key information for your network in the selected key radio button. These values must be identical on all wireless stations in your network. Key Type - You can select the WEP key length (64-bit, or 128-bit, or 152-bit.) for encryption. "Disabled" means this WEP key entry is invalid. 1) For 64-bit encryption - You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 5 ASCII characters. 2) For 128-bit encryption - You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 13 ASCII characters. 3) For 152-bit encryption - You can enter 32 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 16 ASCII characters. Note:

1. If you do not set the key, the wireless security function is still disabled even if you have selected Shared Key as Authentication Type. 2. You will be reminded to reboot the device after clicking the Save button. 47 5) Universal Repeater TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 4-22 Wireless Security Repeater Disable Security - Check this box radio button to disable wireless security. If disabled, the wireless stations will be able to connect this device without encryption. It is strongly recommended that you choose one of the security types to enable security. WPA/WPA2-Personal(Recommended) - Select WPA/WPA2 based on Radius Server. Version - You can select one of following versions. 1) Automatic(Recommended) - Select WPA-Personal or WPA2-Personal automatically based on the wireless station's capability and request. 2) WPA-PSK - Pre-shared key of WPA. 3) WPA2-PSK - Pre-shared key of WPA2. Encryption - You can select either Automatic(Recommended), TKIP or AES. Wireless Password - You can enter ASCII or Hexadecimal characters. For Hexadecimal, the length should be between 8 and 64 characters; for ASCII, the length should be between 8 and 63 characters. Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 or at least 30. Enter 0 to disable the update. WEP - Select 802.11 WEP security. Type - You can select one of following types. 48 TL-WA901ND 450Mbps Wireless N Access Point User Guide 1) Automatic - Select Shared Key or Open System authentication type automatically based on the wireless station's capability and request. 2) Shared Key - Select 802.11 Shared Key authentication type. 3) Open System - Select 802.11 Open System authentication. WEP Key Format - You can select ASCII or Hexadecimal format. ASCII format stands for any combination of keyboard characters in the specified length. Hexadecimal format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified length. WEP Key - Select which of the four keys will be used and enter the matching WEP key information for your network in the selected key radio button. These values must be identical on all wireless stations in your network. Key Type - You can select the WEP key length (64-bit, or 128-bit, or 152-bit.) for encryption. "Disabled" means this WEP key entry is invalid. 1) For 64-bit encryption - You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 5 ASCII characters. 2) For 128-bit encryption - You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 13 ASCII characters. 3) For 152-bit encryption - You can enter 32 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 16 ASCII characters. Note:

1. If you do not set the key, the wireless security function is still disabled even if you have selected Shared Key as Authentication Type. 2. You will be reminded to reboot the device after clicking the Save button. 49 6) Bridge with AP TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 4-23 Wireless Security Bridge with AP Disable Security - Check this box radio button to disable wireless security. If disabled, the wireless stations will be able to connect this device without encryption. It is strongly recommended that you choose one of the security types to enable security. WPA/WPA2-Personal(Recommended) - Select WPA/WPA2 based on Radius Server. Version - You can select one of following versions. 1) Automatic(Recommended) - Select WPA-Personal or WPA2-Personal automatically based on the wireless station's capability and request. 2) WPA-PSK - Pre-shared key of WPA. 3) WPA2-PSK - Pre-shared key of WPA2. Encryption - You can select either Automatic(Recommended), TKIP or AES. Wireless Password - You can enter ASCII or Hexadecimal characters. For Hexadecimal, the length should be between 8 and 64 characters; for ASCII, the length should be between 8 and 63 characters. 50 TL-WA901ND 450Mbps Wireless N Access Point User Guide Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 or at least 30. Enter 0 to disable the update. WPA/WPA2-Enterprise - Select WPA/WPA2 based on Radius Server. Version - You can select one of following versions. 1) Automatic - Select WPA or WPA2 automatically based on the wireless station's capability and request. 2) WPA - Wi-Fi Protected Access. 3) WPA2 - WPA version 2. Encryption - You can select either Automatic, TKIP or AES. Radius Server IP - Enter the IP address of the Radius Server. Radius Port - Enter the port used by radius service. Radius Password - Enter the password for the Radius Server. Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 or at least 30. Enter 0 to disable the update. WEP - Select 802.11 WEP security. Type - You can select one of following types. 1) Automatic - Select Shared Key or Open System authentication type automatically based on the wireless station's capability and request. 2) Shared Key - Select 802.11 Shared Key authentication type. 3) Open System - Select 802.11 Open System authentication. WEP Key Format - You can select ASCII or Hexadecimal format. ASCII format stands for any combination of keyboard characters in the specified length. Hexadecimal format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified length. WEP Key - Select which of the four keys will be used and enter the matching WEP key information for your network in the selected key radio button. These values must be identical on all wireless stations in your network. Key Type - You can select the WEP key length (64-bit, or 128-bit, or 152-bit.) for encryption. "Disabled" means this WEP key entry is invalid. 1) For 64-bit encryption - You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 5 ASCII characters. 2) For 128-bit encryption - You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 13 ASCII characters. 3) For 152-bit encryption - You can enter 32 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 16 ASCII characters. Note:

1. If you do not set the key, the wireless security function is still disabled even if you have selected Shared Key as Authentication Type. 2. You will be reminded to reboot the device after clicking the Save button. 51 TL-WA901ND 450Mbps Wireless N Access Point User Guide 4.6.3 Wireless MAC Filtering Selecting Wireless > Wireless MAC Filtering will allow you to set up some filtering rules to control wireless stations accessing the device, which depend on the stations MAC address on the following screen as shown Figure 4-24. This function is not available when the operation is set to Client. As the configuration is the same in each operation mode, here we just take the Access Point for example. Figure 4-24 Wireless MAC address Filtering The Wireless MAC Address Filtering feature allows you to control wireless stations accessing the device, which depend on the station's MAC addresses. Wireless MAC Filtering - Click the Enable button to enable the Wireless MAC Address Filtering. The default setting is disabled. To Add a Wireless MAC Address filtering entry, click the Add New button. The Add or Modify Wireless MAC Address Filtering entry" page will appear, shown in Figure 4-25 Figure 4-25 Add or Modify Wireless MAC Address Filtering entry MAC Address - Enter the wireless station's MAC address that you want to control. Description - Give a simple description of the wireless station. 52 TL-WA901ND 450Mbps Wireless N Access Point User Guide Status - Select a status for this entry, either Enabled or Disabled. To set up an entry, follow these instructions:

First, you must decide whether the unspecified wireless stations can access the device or not. If you desire that the unspecified wireless stations can access the device, please select the radio button Deny the stations specified by any enabled entries in the list to access, otherwise, select the radio button Allow the stations specified by any enabled entries in the list to access. To add a MAC Address Filtering entry, follow these instructions:

1. Enter the appropriate MAC Address into the MAC Address field. The format of the MAC is any hexadecimal digit). For example:

is XX-XX-XX-XX-XX-XX

(X Address 00-0A-EB-B0-00-0B. 2. Enter a simple description of the wireless station in the Description field. For example:

Wireless station A. 3. Select Enabled or Disabled for this entry on the Status pull-down list. 4. Click the Save button to save this entry. To add additional entries, repeat steps 1-4. To modify or delete an existing entry:

1. Click the Modify in the entry you want to modify. If you want to delete the entry, click the Delete. 2. Modify the information. 3. Click the Save button. Click the Enable All button to make all entries enabled Click the Disabled All button to make all entries disabled. Click the Delete All button to delete all entries Click the Next button to go to the next page and click the Previous button to return to the previous page. For example: If you desire that the wireless station A with MAC address 00-0A-EB-00- 07-BE is able to access the device, while all other wireless stations cannot access the device, you should configure the Wireless MAC Address Filtering list by following these steps:

1. Click the Enable button to enable this function. 2. Select the radio button: Allow the stations specified by any enabled entries in the list to access for Filtering Rules. 3. Delete all or disable all entries if there are any entries already. 4. Click the Add New... button and enter the MAC address 00-0A-EB-00-07-BE in the MAC Address field, enter Wireless Station A in the Description field and select Enabled in the Status pull-down list. Click the Save button. The filtering rules that configured should be similar to the following list:

53 TL-WA901ND 450Mbps Wireless N Access Point User Guide Note:

If you enable the function and select the Allow the stations specified by any enabled entries in the list to access for Filtering Rules, and there are not any enabled entries in the list, thus, no wireless stations can access the device. 4.6.4 Wireless Advanced Selecting Wireless > Wireless Advanced will allow you to do some advanced settings for the device in the following screen shown in Figure 4-26. As the configuration for each operation mode is almost the same, we take Access Point mode for example here. Figure 4-26 Wireless Advanced Beacon Interval - Specifies a value between 20-1000 milliseconds. The beacons are the packets sent by the device to synchronize a wireless network. Beacon Interval value determines the time interval of the beacons. The default value is 100. RTS Threshold - Specifies the RTS (Request to Send) Threshold. If the packet is larger than the specified RTS Threshold size, the device will send RTS frames to a particular receiving station and negotiate the sending of a data frame. The default value is 2346. Fragmentation Threshold - This value is the maximum size determining whether packets will be fragmented. Setting the Fragmentation Threshold too low may result in poor network performance since excessive packets. 2346 is the default setting and is recommended. DTIM Interval - Determines the interval of the Delivery Traffic Indication Message (DTIM). You can specify the value between 1-255 Beacon Intervals. The default value is 1, which indicates the DTIM Interval is the same as Beacon Interval. Enable WMM - WMM function can guarantee the packets with high- priority messages being transmitted preferentially. It is strongly recommended enabled. Enable Short GI - This function is recommended for it will increase the data capacity by reducing the guard interval time. 54 TL-WA901ND 450Mbps Wireless N Access Point User Guide Enable AP Isolation - Isolates all connected wireless stations so that wireless stations cannot access each other through WLAN. This function will be disabled if WDS/Bridge is enabled. 4.6.5 Wireless Statistics Selecting Wireless > Wireless Statistics will allow you to see the wireless transmission information in the following screen shown in Figure 4-27. Figure 4-27 Statistics of the device attached wireless stations MAC Address - Shows the connected wireless station's MAC address Current Status - The connected wireless station's running status, one of STA-AUTH /

STA-ASSOC / STA-JOINED / WPA / WPA-PSK / WPA2 / WPA2-PSK / AP-UP / AP-DOWN /

Disconnected Received Packets - packets received by the station Sent Packets - packets sent by the station You cannot change any of the values on this page. To update this page and to show the current connected wireless stations, click the Refresh button. If the numbers of connected wireless stations go beyond one page, click the Next button to go to the next page and click the Previous button to return the previous page. Note:

This page will be refreshed automatically every 5 seconds. 4.6.6 Throughput Monitor Selecting Wireless > Throughput Monitor will helps to watch wireless throughput information in the following screen shown in Figure 4-28. 55 TL-WA901ND 450Mbps Wireless N Access Point User Guide Figure 4-28 Throughput Monitor Rate - The Throughput unit. Run Time - How long this function is running. Transmit - Wireless transmit rate information. Receive - Wireless receive rate information. Click the Start button to start wireless throughput monitor. Click the Stop button to stop wireless throughput monitor. 4.7 System Tools System Tools option helps you to optimize the configuration of your device. SNMP can help you to manage the device locally or remotely with specified software. The diagnostic tools (Ping and Traceroute) allow you to check the connections of your network components. You can upgrade the AP to the latest version of firmware as well as backup or restore the APs configuration files. Ping Watch Dog can help to continuously monitor a particular connection to a remote host. Its suggested that you change the default password to a more secure one because it controls access to the devices web-based management page. Besides, you can find out what happened to the system in System Log. 56 TL-WA901ND 450Mbps Wireless N Access Point User Guide There are nine submenus under the System Tools menu (shown as Figure 4-29): Time Settings, Diagnostic, Ping Watch Dog, Firmware Upgrade, Factory Defaults, Backup & Restore, Reboot, Password, System Log and Statistics. Clicking any of them will enable you to configure the corresponding function. The detailed explanations for each submenu are provided below. Figure 4-29 The System Tools menu 4.7.1 SNMP Selecting System Tools > SNMP to enable this function will allow the network management station to retrieve statistics and status from the SNMP agent in this device. Simple Network Management Protocol (SNMP) is a popular network monitoring and management protocol, used to refer to a collection of specifications for network management that include the protocol itself. To use this function, select Enable and enter the following parameters in Figure 4-30. Figure 4-30 SNMP Settings 57 TL-WA901ND 450Mbps Wireless N Access Point User Guide SNMP Agent - Select the radio button before Enable will enable this function if you want to have remote control through SNMPv1/v2 agent with MIB-II. Select the radio button before Disable will disable this function. The default setting is Disable. SysContact - The textual identification of the contact person for this managed node. SysName - An administratively-assigned name for this managed node. SysLocation - The physical location of this node. Note:

Specifying one of these values via the Device's Web-Based Utility makes the corresponding object read-only. If there isn't such a config setting, then the write request will succeed (assuming suitable access control settings), but the new value would be forgotten the next time the agent was restarted. Get Community - Enter the community name that allows Read-Only access to the Device's SNMP information. The community name can be considered a group password. The default setting is public. Get Source - Get source defines the IP address or subnet for management systems that can read information from this 'get' community device. Set Community - Enter the community name that allows Read/Write access to the Device's SNMP information. The community name can be considered a group password. The default setting is private. Set Source - Set source defines the IP address or subnet for management systems that can control this 'set' community device. Note:

A restricted source can be a specific IP address (e.g. 10.10.10.1), or a subnet - represented as IP/BITS (e.g. 10.10.10.0/24). If an IP Address of 0.0.0.0 is specified, the agent will accept all requests under the corresponding community name. Click the Save button to save your settings. 4.7.2 Diagnostic Selecting System Tools > Diagnostic allow you to check the connections of your network components on the screen shown in Figure 4-31. 58 TL-WA901ND 450Mbps Wireless N Access Point User Guide Diagnostic Tools - Click the radio button to select one diagnostic tool Figure 4-31 Diagnostic Ping - This diagnostic tool troubleshoots connectivity, reachability, and name resolution to a given host or gateway by using the Internet Control Message Protocol (ICMP) protocol's mandatory Echo Request datagram to elicit an ICMP Echo Response from a host or gateway. You can use ping to test both numeric IP address or domain name. If pinging the IP address is successful, but pinging the domain name is not, you might have a name resolution problem. In this case, ensure that the domain name you are specifying can be resolved by using Domain Name System (DNS) queries. Traceroute - This diagnostic tool determines the path taken to a given host by sending Internet Control Message Protocol (ICMP) Echo Request messages with varying Time to Live (TTL) values to the destination. Each gateway along the path is required to decrement the TTL in an IP packet by at least 1 before forwarding it. Effectively, the TTL is a maximum link counter. When the TTL on a packet reaches 0, the gateway is expected to return an ICMP Time Exceeded response to your device. Traceroute determines the path by sending the first Echo Request message with a TTL of 1 and incrementing the TTL by 1 on each subsequent transmission until the target responds or the maximum number of hops is reached. The maximum number of hops is 20 by default and can be specified in the field "Traceroute Max TTL". The path is determined by examining the ICMP Time Exceeded messages returned by intermediate gateways and the Echo Reply message returned by the destination. However, some gateways do not return Time Exceeded messages for packets with expired TTL values and are invisible to the traceroute tool. In this case, a row of asterisks (*) is displayed for that hop. 59 TL-WA901ND 450Mbps Wireless N Access Point User Guide IP Address - Enter the IP Address (such as 202.108.22.5) of the PC whose connection you wish to diagnose. Ping Count - Specifies the number of Echo Request messages sent. The default is 4. Ping Packet Size - Specifies the number of data bytes to be sent. The default is 64. Ping Timeout - Specifies the time to wait for a response in milliseconds. The default is 800. Traceroute Max TTL - Set the maximum number of hops (max TTL to be reached) in the path to Survey for the target (destination). The default is 20. Click the Start button to start the diagnostic procedure. The Diagnostic Results page displays the result of diagnosis. If the result is similar to the following screen, the connectivity of the Internet is fine. Figure 4-32 Diagnostic Results Note:

1. Only one user can use this tool at one time. 2. Options Number of Pings, Ping Size and Ping Timeout are only available for Ping function. Option Tracert Hops is available only for Tracert function. 4.7.3 Ping Watch Dog Selecting System Tools > Ping Watch Dog allows you to continuously monitor the particular connection between the device to a remote host. It makes this device continuously ping a user defined IP address (it can be the internet gateway for example). If it is unable to ping under the user defined constraints, this device will automatically reboot. Figure 4-33 Ping Watch Dog Utility 60 TL-WA901ND 450Mbps Wireless N Access Point User Guide Enable - Turn on/off Ping Watch Dog. IP Address - The IP address of the target host where the Ping Watch Dog Utility is sending ping packets. Interval - Time internal between two ping packets which are sent out continuously. Delay - Time delay before first ping packet is sent out when the device is restarted. Fail Count - Upper limit of the ping packet the device can drop continuously. If this value is overrun, the device will restart automatically. Be sure to click the Submit button to make your settings in operation. 4.7.4 Firmware Upgrade Selecting System Tools > Firmware Upgrade allows you to upgrade the latest version of firmware for the device on the screen shown in Figure 4-34. Figure 4-34 Firmware Upgrade New firmware versions are posted at www.tp-link.com and can be downloaded for free. Firmware Version - Here displays the current firmware version. Hardware Version - Here displays the current hardware version. The hardware version of the upgrade file must accord with the current hardware version. Note:

1. There is no need to upgrade the firmware unless the new firmware has a new feature you want to use. However, when experiencing problems caused by the device itself, you can try to upgrade the firmware. 2. Before upgrading the devices firmware, you should write down some of your customized settings to avoid losing important configuration settings of device. To upgrade the device's firmware, follow these instructions:

1. Download a more file firmware upgrade recent

(http://www.tp-link.com). from the TP-LINK website 2. Enter the path name or click Browse to select the downloaded file on the computer into the File blank. 3. Click Upgrade. Note:

Do not turn off the device or press the Reset button while the firmware is being upgraded. The device will reboot after the Upgrading has been finished. 61 TL-WA901ND 450Mbps Wireless N Access Point User Guide 4.7.5 Factory Defaults Selecting System Tools > Factory Defaults allows you to restore the factory default settings for the device on the screen shown in Figure 4-35. Click Restore to reset all configuration settings to their default values. Figure 4-35 Restore Factory Defaults Default User Name: admin Default Password: admin Default IP Address: 192.168.0.254 Default Subnet Mask: 255.255.255.0 Note:

Any settings you have saved will be lost when the default settings are restored. 4.7.6 Backup & Restore Selecting System Tools > Backup & Restore allows you to save all configuration settings to your local computer as a file or restore the device's configuration on the screen shown in Figure 4-36. Figure 4-36 Save or Restore the Configuration Click Backup to save all configuration settings to your local computer as a file. To restore the device's configuration, follow these instructions:

Click Browse to find the configuration file which you want to restore. Click Restore to update the configuration with the file whose path is the one you have input or selected in the blank. Note:

1. The current configuration will be covered with the uploading configuration file. 2. Wrong process will lead the device unmanaged. 3. The restoring process lasts for 20 seconds and restart automatically. Do not power off the device during the process to avoid any damage. 62 TL-WA901ND 450Mbps Wireless N Access Point User Guide 4.7.7 Reboot Selecting System Tools > Reboot allows you to reboot the device on the screen shown in Figure 4-37. Figure 4-37 Reboot the device Click the Reboot button to reboot the device. Some settings of the device will take effect only after rebooting, which include:

Change LAN IP Address (System will reboot automatically). Change the Wireless configurations. Change the Web Management Port. Upgrade the firmware of the device (system will reboot automatically). Restore the device's settings to factory defaults (system will reboot automatically). Update the configuration with a file (system will reboot automatically). 4.7.8 Password Selecting System Tools > Password allows you to change the factory default user name and password of the device on the screen shown in Figure 4-38. Figure 4-38 Password It is strongly recommended that you change the factory default user name and password of the device. All users who try to access the device's web-based management page or Quick Setup will be prompted for the device's user name and password. Note:

The new user name and password must not exceed 14 characters in length and must not include any spaces. Enter the new Password twice to confirm it. 63 TL-WA901ND 450Mbps Wireless N Access Point User Guide Click Save when finished. Click Clear All to clear all. 4.7.9 System Log Selecting System Tools > System Log allows you to query the Logs of the device on the screen shown in Figure 4-39. Figure 4-39 System Log The device can keep logs of all traffic. You can query the logs to find what happened to the device. Log Type - By selecting the log type, only logs of this type will be shown. Log Level - By selecting the log level, only logs of this level will be shown. Click the Refresh button to show the latest log list.. Click the Save Log button to save all the logs in a txt file. Click the Clear Log button to delete all the logs from the system permanently, not just from the page. Click the Next button to go to the next page, or click the Previous button return to the previous page. 64 TL-WA901ND 450Mbps Wireless N Access Point User Guide Appendix A: Application Example The TL-WA901ND allows you to connect a wireless device to the wired network. Providing that you want to connect your computer equipped with wireless adapter to a wired network wirelessly, you can take the following instructions. 1. Configure the AP via a wired connection. 1) Connect your AP to your PC with an Ethernet cable. 2) Log on to the web-based management page. Configure your AP in the Access Point mode and check the Enable SSID Broadcast box referring to 4.6.1 Wireless Settings. 3) View the Wireless > Wireless Settings page and keep the SSID of the AP in mind.

(Here we choose TP-LINK as the SSID for example.) You are suggested to change the SSID and secure your wireless network referring to 4.6.1 Wireless Settings and 4.6.2 Wireless Security. 4) Remove the Ethernet cable between the AP and your PC. 2. Connect your AP to the LAN port on the Router with an Ethernet cable. 3. Configure your PC to connect to the network wirelessly. 1) Click start (in the lower left corner of the PCs screen), right-click My Network Connections and choose Properties. 65 TL-WA901ND 450Mbps Wireless N Access Point User Guide 2) On the My Network Connections window, right-click Wireless Network and choose Enable to enable wireless network function. 3) Right-click the wireless connection icon View Available Wireless Networks. on the screen of the PC and then select 4) Highlight the SSID of the AP (Here is TP-LINK) and click Connect to add to the network. 66 TL-WA901ND 450Mbps Wireless N Access Point User Guide 5) Then the following page will display, which indicates you have been successfully added to the network wirelessly. 67 TL-WA901ND 450Mbps Wireless N Access Point User Guide Appendix B: Factory Defaults Item Default Value Common Default Settings Login Username Login Password IP Address Subnet Mask Wireless SSID admin admin 192.168.0.254 255.255.255.0 TP-LINK_AP_XXXX Wireless Security Disable Wireless MAC Address Filtering Disable DHCP DHCP Server Start IP Address End IP Address Domain Name Enable 192.168.0.100 192.168.0.199 http://tplinkap.net Default Gateway (optional) Primary DNS (optional) Secondary DNS (optional) 0.0.0.0 0.0.0.0 0.0.0.0 Note:

The default SSID is TP-LINK_AP_XXXX (XXXX indicates the last unique four characters of each devices MAC address). This value is case-sensitive. 68 TL-WA901ND 450Mbps Wireless N Access Point User Guide Appendix C: Troubleshooting T1. How do I restore my Access Points configuration to its factory default settings?

With the Access Point powered on, use a pin to press and hold the WPS/RESET button on the rear panel for more than 8 seconds before releasing it. Note:

Once the Access Point is reset, the current configuration settings will be lost and you will need to reconfigure the Access Point. T2. What can I do if I forget my password?

1) Try to use the default user name and password: admin, admin;

2) Referring to the file that you have saved in step 6 of 3.1 Quick Setup last time you configured the device, the file will show you the user name and password that you have configured. If the password is still not the correct one, then you can try to restore the Access Points configuration to its factory default settings referring to previous section T1 and try to reconfigure your AP by following the instructions in 3.1 Quick Setup. 3) T3. What can I do if I cannot access the web-based configuration page?

1) Please check to see if you have input the correct address http://tplinkap.net in the address bar of your browser. 2) Please make sure your hardware connection is OK. You can confirm this by the LAN LED on the front panel of TL-WA901ND. If the LED of the LAN port, which your Ethernet cable is connected to, is lighting green, your hardware connection is OK; otherwise, please check your hardware connection carefully. 3) Make sure your wired devices IP address is set as Obtain an IP address automatically. 4) If the problem still persists, please feel free to contact our technical support. 69 TL-WA901ND 450Mbps Wireless N Access Point User Guide Appendix D: Specifications General Standards and Protocols IEEE 802.3, 802.3u, 802.11n, 802.11b and 802.11g, TCP/IP, DHCP Safety & Emission FCC, CE Ports One 10/100M Auto-Negotiation RJ45 port, supporting passive PoE 10BASE-T: UTP category 3, 4, 5 cable (maximum 100m) EIA/TIA-568 100 STP (maximum 100m) 100BASE-TX: UTP category 5, 5e cable (maximum 100m) EIA/TIA-568 100 STP (maximum 100m) Cabling Type Wireless Frequency Band 2.4~2.4835GHz Radio Data Rate 11nup to 450MbpsAutomatic 11g54/48/36/24/18/12/9/6MAutomatic 11b11/5.5/2/1MAutomatic Frequency Expansion DSSS(Direct Sequence Spread Spectrum) Modulation Security DBPSK, DQPSK, CCK, OFDM, 16-QAM, 64-QAM WEP,WPA / WPA2,WPA-PSK/ WPA2-PSK Sensitivity @PER 270M: -68dBm@10% PER 108M: -68dBm@10% PER;

54M: -68dBm@10% PER 11M: -85dBm@8% PER;

6M: -88dBm@10% PER 1M: -90dBm@8% PER Antenna Gain 5dBi Physical and Environment Working Temperature 0~40 (32~104) Working Humidity 10% ~ 90% RH, Non-condensing Storage Temperature

-40~70(-40~158) Storage Humidity 5% ~ 90% RH, Non-condensing 70 TL-WA901ND 450Mbps Wireless N Access Point User Guide

- specification Appendix E: Glossary 802.11n - 802.11n builds upon previous 802.11 standards by adding MIMO (multiple-input multiple-output). MIMO uses multiple transmitter and receiver antennas to allow for increased data throughput via spatial multiplexing and increased range by exploiting the spatial diversity, perhaps through coding schemes like Alamouti coding. The Enhanced Wireless Consortium (EWC) [3] was formed to help accelerate the IEEE 802.11n development process and promote a technology specification for interoperability of next-generation wireless local area networking (WLAN) products. 802.11b - The 802.11b standard specifies a wireless networking at 11 Mbps using direct-sequence spread-spectrum (DSSS) technology and operating in the unlicensed radio spectrum at 2.4GHz, and WEP encryption for security. 802.11b networks are also referred to as Wi-Fi networks. 802.11g for wireless networking at 54 Mbps using direct-sequence spread-spectrum (DSSS) technology, using OFDM modulation and operating in the unlicensed radio spectrum at 2.4GHz, and backward compatibility with IEEE 802.11b devices, and WEP encryption for security. Access Point (AP) - A wireless LAN transceiver or "base station" that can connect a wired LAN to one or many wireless devices. Access points can also bridge to each other. DNS (Domain Name System) An Internet Service that translates the names of websites into IP addresses. Domain Name - A descriptive name for an address or group of addresses on the Internet. DoS (Denial of Service) - A hacker attack designed to prevent your computer or network from operating or communicating. DSL (Digital Subscriber Line) - A technology that allows data to be sent or received over existing traditional phone lines. ISP (Internet Service Provider) - A company that provides access to the Internet. MTU (Maximum Transmission Unit) - The size in bytes of the largest packet that can be transmitted. SSID - A Service Set Identification is a thirty-two character (maximum) alphanumeric key identifying a wireless local area network. For the wireless devices in a network to communicate with each other, all devices must be configured with the same SSID. This is typically the configuration parameter for a wireless PC card. It corresponds to the ESSID in the wireless Access Point and to the wireless network name. WEP (Wired Equivalent Privacy) - A data privacy mechanism based on a 64-bit or 128-bit or 152-bit shared key algorithm, as described in the IEEE 802.11 standard. Wi-Fi - A trade name for the 802.11b wireless networking standard, given by the Wireless Ethernet Compatibility Alliance (WECA, see http://www.wi-fi.net), an industry standards group promoting interoperability among 802.11b devices. WLAN (Wireless Local Area Network) - A group of computers and associated devices communicate with each other wirelessly, which network serving users are limited in a local area. WPA (Wi-Fi Protected Access) - WPA is a security technology for wireless networks that improves on the authentication and encryption features of WEP (Wired Equivalent Privacy). In fact, WPA was developed by the networking industry in response to the shortcomings of WEP. One of the 71 TL-WA901ND 450Mbps Wireless N Access Point User Guide key technologies behind WPA is the Temporal Key Integrity Protocol (TKIP). TKIP addresses the encryption weaknesses of WEP. Another key component of WPA is built-in authentication that WEP does not offer. With this feature, WPA provides roughly comparable security to VPN tunneling with WEP, with the benefit of easier administration and use. This is similar to 802.1x support and requires a RADIUS server in order to implement. The Wi-Fi Alliance will call this, WPA-Enterprise. One variation of WPA is called WPA Pre Shared Key or WPA-PSK for short - this provides an authentication alternative to an expensive RADIUS server. WPA-PSK is a simplified but still powerful form of WPA most suitable for home Wi-Fi networking. To use WPA-PSK, a person sets a static key or "passphrase" as with WEP. But, using TKIP, WPA-PSK automatically changes the keys at a preset time interval, making it much more difficult for hackers to find and exploit them. The Wi-Fi Alliance will call this, WPA-Personal. 72

CONSTRUCTION PHOTOS OF EUT Page 1 Page 2 Page 3 Page 4

TP-Link Technologies Co., Ltd. Building 24 (floors 1,3,4,5) and 28 (floors1-4), Central Science and Technology Park, Nanshan, Shenzhen, China Declaration for no nonUS channel operation We, TP-LINK TECHNOLOGIES CO., LTD declare that the device does not support channel 12 ~ 13 in 2.4GHz band and any non-US channels in all the operational mode(s) for the following product. May 12, 2015 FCC ID:TE7WA901NDV4 If you should have any question(s) regarding this declaration, please dont hesitate to contact us. Thank you!

Name of authorized signer: Yongquan Wang Title of authorized signer: Product Dept. Manager Company Name: TPLINK Technologies Co., Ltd. Tel: 8675526525554 Fax: 8675526508930 Web site: WWW.TPLINK.COM Email: public@tplink.com.cn

TP-Link Technologies Co., Ltd. Building 24 (floors 1,3,4,5) and 28 (floors1-4), Central Science and Technology Park, Nanshan, Shenzhen, China Date: 20150511 FCC ID: TE7WA901NDV4 To the attention of Federal Communications Commission Authorization and Evaluation Division Confidentiality Request Pursuant to Sections 0.457 and 0.459 of the Commissions Rules, the Applicant hereby requests confidential treatment of information accompanying this Application as outlined below:

Schematics Block Diagram Operational Description The above materials contain trade secrets and proprietary information not customarily released to the public. The public disclosure of these matters might be harmful to the Applicant and provide unjustified benefits to its competitors. The Applicant understands that pursuant to Rule 0.457, disclosure of this Application and all accompanying documentation will not be made before the date of the Grant for this application. Sincerely yours, Name: Yongquan Wang TPLink Technologies Co., Ltd. Tel.: +8675526502509 Fax.: +8675526508930 Email: public@tplink.com.cn

LETTER HEAD

(Company letterhead) XXXX (Address) TEL: XXX FAX: XXXX Date: 2015-05-19 FCC ID: TE7WA901NDV4 A U T H O R I Z A T I O N L E T T E R To whom it may concern:

We, the undersigned, hereby authorize Andrea Hsia (Senior Specialist) of Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch (BV CPS Taoyuan) of Taiwan to act on our behalf in all manners relating to FCC application for equipment authorization, including signing of all documents relating to these matters. Any and all acts carried out by Andrea Hsia (Senior Specialist) of BV CPS Taoyuan on our behalf shall have the same effect as acts of our own. If you have any questions regarding the authorization, please dont hesitate to contact us. Sincerely yours,

-----------------------------------

Name: Yongquan Wang TPLink Technologies Co., Ltd. Tel.: +8675526502509 Fax.: +8675526508930 Email: public@tplink.com.cn

TP-Link Technologies Co., Ltd. Building 24 (floors 1,3,4,5) and 28 (floors1-4), Central Science and Technology Park, Nanshan, Shenzhen, China Attestation for FCC Declaration of Conformity FCC ID: TE7WA901NDV4 Date: 2015-05-11 Please be notified that we, the undersigned, TP-LINK TECHNOLOGIES CO., LTD declare that the product bears the above FCC ID is also complying with the requirements of FCC DoC. The test report number for FCC DoC is FD150126C16 with is issued by an accredited lab, Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch (BV CPS Taoyuan) of Taiwan. Which has been accredited in accordance to all of the requirements of 47CFR 2.948(d) and (e) of the FCC rules and KDB349827. Sincerely, Name of authorized signer: Yongquan Wang Title of authorized signer: Product Dept. Manager Company Name: TPLINK Technologies Co., Ltd. Tel: 8675526525554 Fax: 8675526508930 Web site: WWW.TPLINK.COM Email: public@tplink.com.cn