background image

User Guide

For TP-Link Omada Access Points

1910012995   REV4.7.0

July   2021

Summary of Contents for omada OC200

Page 1: ...User Guide For TP Link Omada Access Points 1910012995 REV4 7 0 July 2021 ...

Page 2: ...ure SSIDs 24 2 1 2 Configure Wireless Advanced Settings 30 Radio Setting 30 Load Balance 32 Airtime Fairness 32 More Settings 33 2 2 Configure Portal Authentication 35 Configure Portal 36 Configure Free Authentication Policy 42 2 3 Configure VLAN 45 2 4 Configure MAC Filtering 46 2 5 Configure Scheduler 49 2 6 Configure Band Steering 52 2 7 Configure QoS 54 2 8 Configure Rogue AP Detection 58 Dete...

Page 3: ...anage System Logs 77 View System Logs 77 Configure the Way of Receiving Logs 78 4 3 Configure Web Server 80 4 4 Configure Management Access 81 Configure Access MAC Management 81 Configure Management VLAN 82 4 5 Configure LED 83 4 6 Configure Wi Fi Control Only for Certain Devices 84 4 7 Configure PoE Out Only for Certain Devices 85 4 8 Configure SSH 86 4 9 Configure SNMP 87 5 Configure the System ...

Page 4: ...5 5 Backup and Restore the Configuration 100 5 6 Update the Firmware 101 6 Application Example 102 6 1 Determine the Network Requirements 103 6 2 Build the Network Topology 104 6 3 Log in to the EAP 105 6 4 Configure the EAP 106 Configure SSIDs 106 Configure Portal Authentication 107 Configure Scheduler 109 6 5 Test the Network 111 ...

Page 5: ...ard 802 11 specifications Range and coverage specifications along with the number of connected devices were defined according to test results under normal usage conditions Actual wireless transmission rate wireless coverage and number of connected devices are not guaranteed and will vary as a result of 1 environmental factors including building materials physical objects and obstacles 2 network co...

Page 6: ...uide can be found where you find this guide or inside the package of the EAP The authentication information can be found where you find this guide Specifications can be found on the product page at https www tp link com To ask questions find answers and communicate with TP Link users or engineers please visit https community tp link com to join TP Link Community If you have any suggestions or need...

Page 7: ...useholds They can either work independently as standalone APs or be centrally managed by Omada Software Controller Omada Hardware Controller OC200 OC300 or Omada Cloud Based Controller providing a flexible richly functional but easily configured wireless network for small medium business and households ...

Page 8: ... to build a wireless network using the EAPs and how to complete the basic settings Follow the steps below 1 1 Determine the Management Method 1 2 Connect Network Devices 1 3 Log in to the EAP and Change the SSID 1 4 Configure and Manage the EAP ...

Page 9: ...ller and download the User Guide Standalone Mode If you want to manage only a few EAPs choose Standalone Mode In Standalone Mode you can singly configure and monitor your EAPs via Omada APP or a web browser and each EAP has its own management page This chapter introduces how to start configuring the EAP in Standalone Mode Note Standalone Mode is inaccessible while the EAP is managed by a controlle...

Page 10: ...or Internet port of the router to the internet 2 Connect your EAPs to the LAN port of the router 3 Connect your wireless clients such as phones tablets and laptops to the WiFi of the EAP The default SSID is printed at the bottom of the EAP Now you can surf the internet on your phones tablets and laptops If you cannot access the internet follow the FAQ to troubleshoot the problem ...

Page 11: ...network and devices in the LAN surf the internet via the router At the same time the router acts as a DHCP server to assign dynamic IP addresses to the EAPs and clients The dual band EAP has two default SSIDs named TP Link_2 4GHz_XXXXXX on the 2 4GHz band and TP Link_5GHz_XXXXXX on the 5GHz band and the single band EAP has a default SSID named TP Link_2 4GHz_XXXXXX on the 2 4GHz band ...

Page 12: ...e EAP at one time Omada app is designed to help you quickly configure some basic settings To configure advanced functions use the web browser on your PC Omada app is only compatible with certain firmware versions of the EAP To check the firmware versions of the supported EAPs please refer to https www tp link com omada_compatibility_ list Using Omada App on Your Mobile Device Internet Router DHCP ...

Page 13: ...WiFi of the EAP The default SSID is printed at the bottom of the EAP 3 Launch the Omada app tap Standalone APs and wait for the EAP to be discovered Tips All the EAPs in the same subnet will be discovered by Omada app and shown on the page ...

Page 14: ...10 4 Tap on the EAP appearing on the page Set a new username and password for your login account of the EAP 5 Change the SSID and password to keep your wireless network secure Tap Next ...

Page 15: ...11 6 Confirm the settings in the summary page Tap Next and the settings will take effect in several minutes 7 To join your new wireless network select the SSID and tap Join ...

Page 16: ... want to change the settings incuding radio SSID and device account tap Now you can connect your phones tablets and laptops to the new WiFi If you cannot access the internet follow the FAQ to troubleshoot the problem Using Web Browser on Your PC and Connecting to the WiFi Internet Router DHCP Server WAN LAN EAP EAP PC ...

Page 17: ...13 1 Set your PC to obtain an IP address automatically 2 Connect your PC to the WiFi of the EAP The default SSID is printed at the bottom of the EAP ...

Page 18: ...the IP address default gateway and DNS server from the DHCP server 4 To log in to the EAP launch a web browser and enter http tplinkeap net in the address bar The login page will appear By default both the username and password are admin ...

Page 19: ... for your user account then click Next 6 Configure the SSID and password For the dual band EAP you can configure the SSID and password for both 2 4GHz and 5GHz Click Save Tips You can skip this step and configure wireless settings later on the management page If needed you can also create more SSIDs For detailed instructions refer to 2 1 Configure the Wireless Parameters ...

Page 20: ... new WiFi If you cannot access the internet follow the FAQ to troubleshoot the problem Using Web Browser on Your PC and Connecting to the Ethernet 1 Get the IP address of the EAP There are two methods Using DHCP Client List of the Router Log in to the router which acts as the DHCP server In the DHCP client list find the IP address of your EAP according to its MAC address The MAC address can be fou...

Page 21: ...he DHCP server is not available in your network the EAP has the DHCP fallback IP address which is 192 168 0 254 by default Using EAP Discovery Utility Go to https www tp link com download EAP Controller html EAP_Discovery_Tool to download install and launch EAP Discovery Utility on your PC EAP Discovery Utility can ...

Page 22: ...tware version 2 To log in to the EAP launch a web browser and enter the IP address of the EAP in the address bar The login page will appear By default both the username and password are admin Tips To facilitate access to the EAP you can set a static IP address for the EAP and remember it well or write it down But make sure that this IP address is not being used by other devices in the same LAN For...

Page 23: ... for your user account then click Next 4 Configure the SSID and password For the dual band EAP you can configure the SSID and password for both 2 4GHz and 5GHz Click Save Tips You can skip this step and configure wireless settings later on the management page If needed you can also create more SSIDs For detailed instructions refer to 2 1 Configure the Wireless Parameters ...

Page 24: ...e that your device has connected to the new wireless network and tick the checkbox Then click Finish Now you can connect your phones tablets and laptops to the new WiFi If you cannot access the internet follow the FAQ to troubleshoot the problem ...

Page 25: ...chapters discuss these topics in detail Status You can view the information of the EAP wireless traffic and clients Wireless You can configure the wireless parameters and advanced features such as Portal VLAN MAC Filtering Scheduler Band Steering QoS and Rogue AP Detection Management You can manage the EAP using the management features such as System Logs Web Server Management Access LED Control S...

Page 26: ...parameters and the advanced features of the EAP including 2 1 Configure the Wireless Parameters 2 2 Configure Portal Authentication 2 3 Configure VLAN 2 4 Configure MAC Filtering 2 5 Configure Scheduler 2 6 Configure Band Steering 2 7 Configure QoS 2 8 Configure Rogue AP Detection ...

Page 27: ...e wireless parameters go to the Wireless Wireless Settings page For a dual band EAP there are two bands 2 4GHz and 5GHz The wireless parameters are separately set on each band You can click to select a band and configure the wireless parameters on this band ...

Page 28: ...onstrated with 2 4GHz the following sections introduce these contents 2 1 1 Configure SSIDs and 2 1 2 Configure Wireless Advanced Settings 2 1 1 Configure SSIDs SSID Service Set Identifier is used as an identifier for a wireless LAN and is commonly called as the network name Clients can find and access the wireless network through the SSID For one EAP you can build up to eight SSIDs per frequency ...

Page 29: ...s need to pass the authentication before accessing the wireless network For network security we recommend that you encrypt your wireless network The following sections will introduce how to configure these security modes Guest Network With this option enabled guest network will block clients from reaching any private IP subnet Rate Limit With this option enabled the download and upload rate of eac...

Page 30: ...tem Clients can pass the authentication and associate with the wireless network without password However correct password is necessary for data transmission Shared Key Clients have to input the correct password to pass the authentication otherwise the clients cannot associate with the wireless network or transmit data Key Selected Select one key to specify You can configure four keys at most WEP K...

Page 31: ...AP Extensible Authentication Protocol WPA Enterprise can generate different passwords for different clients which ensures higher network security But it also costs more to maintain the network so it is more suitable for business networks The following table introduces how to configure each item Version Select the version of WPA Enterprise according to your needs If you select WPA WPA2 Enterprise t...

Page 32: ...e RADIUS Server RADIUS Password Enter the shared secret key of the RADIUS server RADIUS Accounting Enable or disable RADIUS accounting feature Accounting Server IP Enter the IP address of the accounting server Accounting Server Port Enter the port number of the accounting server Accounting Server Password Enter the shared secret key of the accounting server Interim Update With this option enabled ...

Page 33: ...l TKIP is not supported in 802 11n mode 802 11ac mode or 802 11n ac mixed mode If TKIP is applied in 802 11n 802 11 ac or 802 11n ac mixed mode the clients may not be able to access the wireless network If TKIP is applied in 11b g n mode 2 4GHz or 11a n mode 5GHz the device may work at a low transmission rate AES Advanced Encryption Standard It is securer than TKIP Wireless Password Configure the ...

Page 34: ...s section introduces how to configure the advanced wireless parameters of the EAP including Radio Setting Load Balance Airtime Fairness and More Settings Radio Setting Radio settings directly control the behavior of the radio in the EAP and its interaction with the physical medium that is how and what type of signal the EAP emits ...

Page 35: ...Hz frequency can connect to the EAP 802 11ac only Only 802 11ac clients can connect to the EAP Channel Width Select the channel width of the EAP The available options differ among different EAPs For some EAPs available options include 20MHz 40MHz and 20 40MHz For other EAPs available options include 20MHz 40MHz 80MHz and 20 40 80MHz When the radio mode includes 802 11n we recommend you set the cha...

Page 36: ...nsumes more power and reduces longevity of the device Load Balance With the Load Balance feature you can limit the maximum number of clients who can access the EAP In this way you can achieve rational use of network resources Follow the steps below to configure Load Balance 1 Click to choose a frequency band on which the load balance feature will take effect 2 Check the box to enable Load Balance ...

Page 37: ...hroughput of the network decreases Therefore we recommend you check the box to enable this function under multi rate wireless networks In this way the faster clients can get more time for the data transmission and the network overall throughput can be improved Note With Airtime Fairness enabled 50 wireless clients at most can connect to the EAP in 2 4GHz band More Settings Proper wireless paramete...

Page 38: ...ta packet the client will send an RTS packet to the EAP to request data transmitting And then the EAP will send CTS packet to inform other clients to delay their data transmitting In this way packet collisions can be avoided For a busy network with hidden nodes a low threshold value will help reduce interference and packet collisions But for a not so busy network a too low threshold value will cau...

Page 39: ...to enter the authentication login page and use the correct login information to pass the authentication In addition you can customize the authentication login page and specify a URL which the authenticated clients will be redirected to In this module you can also configure Free Authentication Policy which allows the specific clients to access the specific network resources without authentication T...

Page 40: ...n type configured clients can pass the authentication and access the network without providing any login information They only need to accept the term of use on the authentication page Follow the steps below to configure No Authentication as the portal authentication type 1 Select the SSID on which the portal will take effect 2 Select No Authentication as the authentication type 3 Configure the re...

Page 41: ...e newly authenticated client will be redirected to the specific URL Redirect URL With Redirect enabled you also need to enter the URL in this field The newly authenticated client will be redirected to this URL Portal Customization Configure the authentication page Local Web Portal is the only available option in this authentication type Enter the title and term of use in the two boxes The EAP uses...

Page 42: ...the authentication Follow the steps below to configure Local Password as the portal authentication type 1 Select the SSID on which the portal will take effect 2 Select Local Password as the authentication type 3 Configure the relevant parameters as the following table shows Password Specify a password for authentication ...

Page 43: ...lient will be redirected to the specific URL Redirect URL With Redirect enabled you also need to enter the URL in this field The newly authenticated client will be redirected to this URL Portal Customization Configure the authentication page Local Web Portal is the only available option is this authentication type Enter the title and term of use in the two boxes The EAP uses its built in web serve...

Page 44: ...rnal RADIUS Server If you have a RADIUS server on the network to authenticate the clients you can select External Radius Server Clients need to provide the correct login information to pass the authentication ...

Page 45: ...nd a customized authentication response RADIUS Accounting Enable or disable RADIUS accounting feature Accounting Server IP Enter the IP address of the accounting server Accounting Server Port Enter the port number of the accounting server Accounting Server Passsword Enter the shared secret key of the accounting server Interim Update With this option enabled you can specify the duration between acc...

Page 46: ...configured the authentication page will be provided by the web portal server built on the network To configure External Web Portal you need to complete the following configurations 1 Build an external web portal server on your network and make sure that it is reachable by the EAP 2 On this configuration page enter the URL of the authentication page provided by the external portal server 3 Add the ...

Page 47: ...e with the subnet and mask length The clients in this IP range can access the network without authentication Leaving the field empty means that clients with any IP address can access the specific resources Destination IP Range Specify an IP range with the subnet and mask length The devices in this IP range can be accessed by the clients without authentication Leaving the field empty means that all...

Page 48: ...s no matter what service they are using Status Check the box to enable the policy Tips When External Web Portal is configured in the portal configuration you should set the IP address and subnet mask of the external web server as the Destination IP Range As for Source IP Range Source MAC Address and Destination Port you can simply keep them as empty or configure them according to your actual needs...

Page 49: ...h each other Note that the traffic from the wired clients will not be added with VLAN tags To configure VLAN for the wireless network go to the Wireless VLAN page Follow the steps below to configure VLAN on this page 1 Select the specific SSID in the list to configure the VLAN 2 In the VLAN column and select Enable to enable the VLAN function on the SSID 3 Specify the VLAN ID for the wireless netw...

Page 50: ...e network With this feature you can effectively control clients access to the wireless network according to your needs To configure MAC Filtering go to the Wireless MAC Filtering page Follow the steps below to configure MAC Filtering on this page 1 In the Settings section check the box to enable MAC Filtering and click Save ...

Page 51: ...e color of the selected one will change to blue Click to add group members to the MAC group Specify the MAC address of the host and click OK In the same way you can add more MAC addresses to the selected MAC group 3 In the MAC Filtering Association section configure the filtering rule For each SSID you can select a MAC group in the MAC Group Name column and select the filtering rule Allow Deny in ...

Page 52: ...48 For example the following configuration means that the hosts in Group 2 are denied to access the SSID SSID 1 on the 2 4GHz band and allowed to access the SSID SSID 2 on the 5GHz band ...

Page 53: ...to reduce power consumption To configure Scheduler go to the Wireless Scheduler page Follow the steps below to configure Scheduler on this page 1 In the Settings section check the box to enable Scheduler and select the Association Mode There are two modes Associated with SSID the scheduler profile will be applied to the specific SSID and Associated with AP the profile will be applied to all SSIDs ...

Page 54: ...rofiles 2 Select a profile in the list the color of the selected one will change to blue Click to add time range items to the profile Specify the Day Start Time and End Time of the time range and click OK Tips You can add up to eight time range items for one profile If there are several time range items in one profile the time range of this profile is the sum of all of these time ranges ...

Page 55: ...duler rule Radio On Radio Off in the Action column Then click Save For example the following configuration means that during the time range defined in Profile2 the radio of SSID SSID 1 is on and the radio of SSID SSID 2 is off Association with AP If you select Association with AP in step 1 the Scheduler Association table will display the name and MAC address of the EAP Select a profile in the Prof...

Page 56: ...nd Steering can steer dual band clients to the 5GHz frequency band which supports higher transmission rates and more client devices and thus to greatly improve the network quality Note Only the dual band EAP products support Band Steering To configure Band Steering go to the Wireless Band Steering page Follow the steps below to configure Band Steering on this page 1 Check the box to enable Band St...

Page 57: ...he following two conditions are both met the EAP prefer to refuse the connection request on 5GHz band and no longer steer other clients to the 5GHz band 1 The number of clients on the 5GHz band reaches the Connection Threshold value 2 The difference between the number of clients on the 2 4GHz band and 5GHz band reaches the Difference Threshold value Max Failures If a client repeatedly attempts to ...

Page 58: ...media and traditional IP data In QoS configuration you should set parameters on the transmission queues for different types of wireless traffic and specify minimum and maximum wait time for data transmission In normal use we recommend that you keep the default values To configure QoS go to the Wireless QoS page Follow the steps below to configure QoS on this page 1 Click to choose a frequency band...

Page 59: ...ters The following table detailedly explains these parameters Queue Displays the transmission queue By default the priority from high to low is Data 0 Data 1 Data 2 and Data 3 The priority may be changed if you reset the EDCA parameters Data 0 Voice Highest priority queue minimum delay Timesensitive data such as VoIP and streaming media are automatically sent to this queue Data 1 Video High priori...

Page 60: ...rmance 4 In the Station EDCA Parameters section configure the station EDCA Enhanced Distributed Channel Access parameters Station EDCA parameters affect traffic flowing from the client station to the EAP The following table detailedly explains these parameters Queue Displays the transmission queue By default the priority from high to low is Data 0 Data 1 Data 2 and Data 3 The priority may be chang...

Page 61: ...e TXOP Limit is a station EDCA parameter and only applies to traffic flowing from the client station to the EAP The Transmission Opportunity TXOP is an interval of time in milliseconds when a WME Wireless Multimedia Extensions client station has the right to initiate transmissions onto the wireless medium WM towards the EAP The valid values are multiples of 32 between 0 and 8192 5 Choose whether t...

Page 62: ...e detected APs in the Detected Rogue AP list If the specific AP is known as safe you can move it to the Trusted APs list Also you can backup and import the Trusted AP list as needed Note The Rogue AP Detection feature is only used for collecting information of the nearby wireless network and does not impact the detected APs no matter what operations you have executed in this feature To configure R...

Page 63: ...cted Rogue AP List section click 3 Wait for a few seconds without any operation After detection is finished the detected APs will be displayed in the list The following table introduces the displayed information of the APs MAC Displays the MAC address of the AP SSID Displays the SSID of the AP Band Displays the frequency band the AP is working on Channel Displays the channel the AP is using Securi...

Page 64: ...ew the trusted APs in the Trusted AP List section To move the specific AP back to the Rogue AP list you can click in the Action column Manage the Trusted AP List You can download the trusted AP list from your local host to the EAP or backup the current Trusted AP list to your local host Download the Trusted AP List From the Host You can import a trusted AP list which records the MAC addresses of t...

Page 65: ...ce and Merge Replace means that the current trusted AP list will be replaced by the one you import Merge means that the APs in the imported list will be added to the current list with the original APs remained 5 Click Save to import the trusted AP list Backup the Trusted AP List to the Host You can backup the current trusted AP list and save the backup file to the local host Follow the steps below...

Page 66: ...Monitor the Network This chapter introduces how to monitor the running status and statistics of the wireless network including 3 1 Monitor the EAP 3 2 Monitor the Wireless Parameters 3 3 Monitor the Clients ...

Page 67: ...Firmware Version Displays the current firmware version the EAP To update the firmware you can refer to 5 6 Update the Firmware Hardware Version Displays the hardware version the EAP MAC Address Displays the MAC address of the EAP IP Address Displays the IP address of the EAP Subnet Mask Displays the subnet mask of the EAP System Time Displays the current system time To configure the system time yo...

Page 68: ...64 CPU Utilization Displays the CPU occupancy If this value is too high the EAP may work abnormally Memory Utilization Displays the memory occupancy ...

Page 69: ... wireless parameters of the EAP including SSID lists radio settings radio traffic and LAN traffic Tips To change the wireless parameters you can refer to 2 1 Configure the Wireless Parameters To monitor the wireless parameters go to the Status Wireless page ...

Page 70: ...to the SSID Band Displays the frequency band the SSID is currently using Security Displays the security mode of the SSID Portal Displays whether portal function is enabled on the SSID VLAN ID Displays the VLAN ID of the SSID Guest Network Display guest network is enabled on the SSID Down Byte Displays the total download traffic since the SSID starts working Up Byte Displays the total upload traffi...

Page 71: ... radio band Channel Frequency Displays the channel and frequency which are currently used by the EAP Channel Width Displays the channel width which is currently used by the EAP IEEE802 11 Mode Displays the IEEE802 11 protocol currently used by the EAP Max TX Rate Displays the maximum physical rate of the EAP Tx Power Displays the transmit power of the EAP Monitor Radio Traffic You can monitor the ...

Page 72: ... Packets Displays the total number of the dropped packets which are sent on the 2 4GHz 5GHz band since the EAP starts up Rx Errors Displays the total number of error packets which are received on the 2 4GHz 5GHz band since the EAP starts up Tx Errors Displays the total number of error packets which are sent on the 2 4GHz 5GHz band since the EAP starts up Monitor LAN Traffic You can view the LAN tr...

Page 73: ...nce it starts up Tx Dropped Packets Displays the total number of the dropped packets which are sent by the EAP since it starts up Rx Errors Displays the total number of the received error packets since the EAP starts up Tx Errors Displays the total number of the sent error packets since the EAP starts up ...

Page 74: ...ts Users are the clients that connect to the SSID with portal authentication disabled Guests are the clients that connect to the SSID with portal authentication enabled Click the to select the client types to view the information of the EAP The following figure posted in the introduction takes user as an example The following client information is displayed Hostname Displays the hostname of the us...

Page 75: ...he user Rate Mbps Displays the wireless transmission rate of the user You can execute the corresponding operation to the EAP by clicking an icon in the Action column Click the icon to configure the rate limit of the client to balance bandwidth usage Enter the download limit and upload limit and click OK You can limit the download and upload rate for each clients by which connect to specific SSIDs ...

Page 76: ...cked client is displayed Hostname Displays the hostname of the user MAC Address Displays the MAC address of the user Up Byte Displays the user s total uploaded traffic to the EAP since the last connection Down Byte Displays the user s total downloaded traffic from the EAP since the last connection Action You can click the to resume the client s access to the internet ...

Page 77: ...roduces how to manage the EAP including 4 1 Manage the IP Address of the EAP 4 2 Manage System Logs 4 3 Configure Web Server 4 4 Configure Management Access 4 5 Configure LED 4 6 Configure Wi Fi Control Only for Certain Devices 4 7 Configure PoE Out Only for Certain Devices 4 8 Configure SSH 4 9 Configure SNMP ...

Page 78: ...specify a static IP address according to your needs Tips For detailed introduction about how to find the dynamic IP address of the EAP refer to Using Web Browser on Your PC and Connecting to the Ethernet To configure the IP address of the EAP go to the Management Network page Follow the steps below to configure the IP address of the EAP 1 Choose your desired IP address mode Dynamic or Static 2 Con...

Page 79: ...that however the EAP will keep trying to obtain an IP address from the DHCP server until it succeeds DHCP Fallback IP Specify a fallback IP address for the EAP Make sure that this IP address is not being used by any other device in the same LAN The default DHCP fallback IP is 192 168 0 254 DHCP Fallback IP MASK Specify the network mask of the fallback IP The default DHCP fallback IP mask is 255 25...

Page 80: ...he following table shows IP Address Specify a static IP address for the EAP IP Mask Specify the network mask Gateway Specify the network gateway Primary DNS Specify the primary DNS server Secondary DNS Specify the secondary DNS server Optional 3 Click Save ...

Page 81: ...help of system log you can get informed of system running status and detect the reasons for failure To manage system logs go to the Management System Log page On this page you can view the system logs and configure the way of receiving system logs View System Logs In the Log section you can click to refresh the logs and view them in the table ...

Page 82: ...nt to a specified mailbox Check the box to enable the feature and configure the related parameters Note SSL encryption is not currently supported The following table introduces how to configure these parameters From Enter the sender s E mail address To Enter the receiver s E mail address SMTP Server Enter the IP address of the sender s SMTP server Note At present the domain name of SMTP server is ...

Page 83: ...u select Period Time specify a period time to regularly send the system log mail For example 6 indicates that the mail will be sent every six hours Server If Server is configured system logs will be sent to the specified system log server and you can use the syslog software to view the logs on the server Enable this feature and enter the IP address and port of the system log server System Log Serv...

Page 84: ... server in HTTPS mode By default the port is 443 Server Port Designate a server port for web server in HTTP mode By default the port is 80 Session Timeout Set the session timeout If you do nothing with the web page within the timeout the system will log out automatically You can log in again if you want to go back to web page Layer 3 Accessibility With this feature enabled devices from a different...

Page 85: ...age of the EAP you can specify the MAC addresses and management VLAN of the hosts that are allowed to access the web page To configure Management Access go to the Management Management Access page Configure Access MAC Management Only the hosts with the specific MAC addresses are allowed to access the web page and other hosts without MAC addresses specified are not allowed to access the web page ...

Page 86: ...ctory defaults and use the default username and password both admin to log in Configure Management VLAN Management VLAN provides a safer method to manage the EAP With Management VLAN enabled only the hosts in the Management VLAN can access the web page of the EAP Since most hosts cannot process VLAN TAGs you can connect the management host to the network via a switch and set up correct VLAN settin...

Page 87: ...sh the LED to locate your device To configure LED go to the Management LED Control page Check the box to turn on or turn off the LED light of the EAP and click Save To flash the LED click Locate Then the LED will flash for 10 minutes or until the locate button is clicked again ...

Page 88: ...e there is Management Wi Fi Control in the menu structure Certain devices have an LED Wi Fi button on the front panel With Wi Fi Control enabled you can press the button to turn on or off both of the Wi Fi and LED at the same time To configure Wi Fi Control go to the Management Wi Fi Control page Check the box to enable Wi Fi Control and click Save Note You can enable Wi Fi Control only when the o...

Page 89: ...eb interface If PoE Out is available there is Management LAN Port Config in the menu structure Certain devices have a PoE OUT port that can transmit data and supply power to the client simultaneously You can also disable PoE Out to make the port transmit data only To configure PoE Out go to the Management LAN Port Config page Check the box to enable PoE Out and click Save ...

Page 90: ...igure SSH on this page 1 Refer to the following table to configure the parameters Server Port Designate a server port for SSH By default the port is 22 Layer 3 Accessibility With this feature enabled devices from a different subnet can access Omada managed devices via SSH With this feature disabled only the devices in the same subnet can access Omada managed devices via SSH SSH Login Enable or dis...

Page 91: ... SysContact Enter the textual identification of the contact person for this managed node SysName Enter an administratively assigned name for this managed node SysLocation Enter the physical location of this managed node Get Community Community refers to a host group aiming at network management Get Community only has the read only right of the device s SNMP information The community name can be co...

Page 92: ...Community to read and write the SNMP information of this device The default is 0 0 0 0 which means all hosts can read and write the SNMP information of this device 3 Click Save Note Defining community can allow management systems in the same community to communicate with the SNMP Agent The community name can be seen as the shared password of the network hosts group Thus for the security we recomme...

Page 93: ... introduces how to configure the system of the EAP including 5 1 Configure the User Account 5 2 Controller Settings 5 3 Configure the System Time 5 4 Reboot and Reset the EAP 5 5 Backup and Restore the Configuration 5 6 Update the Firmware ...

Page 94: ...ccount as needed Tips Please remember your user account well If you forget it reset the EAP to the factory defaults and log in with the default user account username and password are both admin To configure the user account go to System User Account page Follow the steps below to change your user account on this page 1 Enter the old username and old password of your user account 2 Specify a new us...

Page 95: ...discover and adopt the EAP without any controller settings Otherwise you need to inform the EAP of the controller s URL IP address and one possible way is to Configure Controller Inform URL For details about the whole procedure refer to the User Guide of Omada SDN Controller The guide can be found on the download center of our official website https www tp link com support download Enable Cloud Ba...

Page 96: ...92 EAP to your Omada Cloud Based Controller you can check the connection status on this page ...

Page 97: ...L Go to the System Controller Settings page In the Controller Inform URL section inform the EAP of the controller s URL IP address and click Save Then the EAP make contact with the controller so that the controller can discover the EAP ...

Page 98: ...me based functions The EAP supports the basic system time settings and the Daylight Saving Time DST feature To configure the system time go to the System Time Settings page The following two sections introduce how to configure the basic system time settings and the Daylight Saving Time feature ...

Page 99: ... Time Zone Select your time zone from the drop down list Here GMT means Greenwich Mean Time Date Specify the current date in the format MM DD YYYY MM means month DD means day and YYYY means year For example 06 01 2017 Time Specify the current time in the format HH MM SS HH means hour MM means minute and SS means second It uses 24 hour system time For example 14 36 21 2 Click Save Note The system t...

Page 100: ...y NTP server Primary NTP Server Enter the IP address of the primary NTP server Note If you have only one NTP server on your network enter the IP address of the NTP server in this field Secondary NTP Server Enter the IP address of the secondary NTP server 3 Click the button and the acquired system time will be displayed in the Date and Time fields 4 Click Save Synchronize the System Time with PC s ...

Page 101: ...mode Predefined Mode If you select Predefined Mode choose your region from the drop down list and the EAP will use the predefined daylight saving time of the selected region There are four regions provided USA European Austrilia and New Zealand The following table introduces the predefined daylight saving time of each region USA From 2 00 a m on the Second Sunday in March to 2 00 a m on the First ...

Page 102: ...erval between the start time and end time should be more than 1 day and less than 1 year 365 days Date Mode If you select Date Mode manually specify an absolute time range for the daylight saving time of the EAP This configuration will be used only once The following table introduces how to configure the absolute time range Time Offset Specify the time to set the clock forward by Start Specify the...

Page 103: ... the EAP will be rebooted automatically Please wait without any operation To reset the EAP click the button and the EAP will be reset to the factory defaults automatically Please wait without any operation Note After reset all the current configuration of the EAP will be lost We recommend that you check whether you have any configuration that needs to be backed up before resetting the EAP ...

Page 104: ... you backup the configuration before resetting or upgrading the EAP To backup and restore the configuration go to the System Backup Restore page To backup the configuration click the button in the Backup section and the backup file will be saved to the host automatically To restore the configuration click the button in the Restore section and choose the backup file from the host Then click the but...

Page 105: ...age Follow the steps below to update the firmware of your EAP 1 Go to our website https www tp link com and search your EAP model Download the proper firmware file on the support page of the EAP 2 Click the button locate and choose the correct firmware file from your host 3 Click the button to update the firmware of the EAP After updated the EAP will be rebooted automatically Note The update proce...

Page 106: ...ts to provide the wireless internet access for the employees and guests The restaurant now has a router a switch a dual band EAP and a computer Follow the steps below to establish the wireless network 1 6 1 Determine the Network Requirements 2 6 2 Build the Network Topology 3 6 3 Log in to the EAP 4 6 4 Configure the EAP 5 6 5 Test the Network ...

Page 107: ...Portal feature needs to be configured on the SSIDs for the guests In this way the guests who have passed the portal authentication will be redirected to the restaurant s official website http www restaurant1 com The employees of the restaurant can use the correct password to access the internet and do not need to pass the portal authentication For security the SSIDs for the employees should be enc...

Page 108: ...es to the management host EAP and clients The LAN IP of the router is 192 168 88 1 24 Connect the switch to the LAN port of the router Connect the management host and the EAP to the switch The IP address mode of the management host and EAP is dynamic which means that they will get dynamic IP addresses from the router Tips If the router has more than one LAN port we can also respectively connect th...

Page 109: ...ddress bar Then log in to the router and find the IP address of the EAP As the following figure shows the IP address of the EAP is 192 168 88 101 2 Enter 192 168 88 101 in the address bar to load the login page of the EAP Type the default username and password both admin in the two fields and click LOGIN 3 In the pop up window specify a new username and a new password for the user account Click Ne...

Page 110: ...igure Scheduler Configure SSIDs 1 After Logging in to EAP follow the step by step instructions to complete the basic configurations of creating SSIDs Configure the SSID as employee_2 4GHz and employee_5GHz specify the Password as restaurant123abc Click Save 2 Go to the Wireless Wireless Settings page Create SSIDs for guests on 2 4GHz Click to add a new SSID ...

Page 111: ...e the Portal feature for this SSID Click OK 4 Click to enter the configuration page for the 5GHz band Similarly to the configurations for the 2 4GHz band configure another SSID for the guests on the 5GHz band Configure Portal Authentication Follow the steps below to configure portal authentication 1 Go to the Wireless Portal page ...

Page 112: ...word as restaurant123 3 Configure Authentication Timeout Here we customize the timeout as 2 hours It means that guests will be logged out after they have been authenticated for 2 hours To continue to use the internet service these guests need to enter the password to pass the portal authentication once again 4 Check the box to enable Redirect and enter the website of the restaurant http www restau...

Page 113: ...Configure Scheduler Follow the steps below to schedule the radio to operate only during the working time 9 00 am to 22 00 pm 1 Go to the Wireless Scheduler page 2 In the Settings section check the box to enable Scheduler and select the Association Mode as Associated with AP Click Save 3 In the Scheduler Profile Configuration section click 1 The following page will appear Click and specify the prof...

Page 114: ... and click Then the item configuraiton page will appear Specify the time range as everyday 9 00 to 22 00 Click OK 4 In the Scheduler Association section select worktime in the Profile Name column and select Radio On in the Action column Click Save ...

Page 115: ... 4GHz or employee_5GHz among the detected SSIDs 3 Enter the password restaurant123abc to join the wireless network 4 Check whether internet websites can be visited successfully To test the SSIDs for the guests follow the steps below 1 Enable the Wi Fi feature of the client device 2 Choose the SSID guest_2 4GHz or guest_5GHz among the detected SSIDs 3 The default web browser on the device will pop ...

Page 116: ...t if the web browser does not pop up we can manually launch the web browser and visit any http website Then the authentication page will appear 4 If the network is working normally we will be redirected to the website of the restaurant http www restaurant1 com ...

Page 117: ...oduct names are trademarks or registered trademarks of their respective holders No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation transformation or adaptation without permission from TP Link Technologies Co Ltd Copyright 2021 TP Link Technologies Co Ltd All rights reserved ...

Reviews: