4IPNET EAP210 User Manual Download Page 96

Page: 96 / 166

User’s Manual

Enterprise Access Point

ENGLISH

7.2.4 Security

The Access Point supports various wireless authentication and data encryption methods in each VAP

profile. With this, the administrator can provide different service levels to clients. The security type

includes

Open

WEP

802.1X

WPA-Personal

, and

WPA-Enterprise



Open:

Authentication is not required and

data is not encrypted during transmission when this option is

selected. This is the default setting as shown in the following figure.

Security Settings: Open



WEP:

WEP (Wired Equivalent Privacy) is a data encryption mechanism based on a 64-bit, 128-bit, or

152-bit shared key algorithm.

Security Settings: WEP

Summary of Contents for EAP210

Page 1: ...Enterprise Access Point Indoor EAP Series Outdoor OWL Series ...

Page 2: ...en permission of 4IPNET INC Disclaimer 4IPNET INC does not assume any liability arising out the application or use of any products or software described herein Neither does it convey any license under its parent rights not the parent rights of others 4IPNET further reserves the right to make changes in any products described herein without notice The publication is subject to change without notice...

Page 3: ...Adding Virtual Access Points 58 5 Securing the AP 60 6 Creating a WDS Bridge between two APs 71 7 Web Management Interface Configuration 74 7 1 System 76 7 1 1 General 76 7 1 2 Network Interface 78 7 1 3 Port 80 7 1 4 Management 81 7 1 5 CAPWAP 84 7 1 6 IPv6 85 7 2 Wireless 86 7 2 1 VAP Overview 86 7 2 2 General 89 7 2 3 VAP Configuration 93 7 2 4 Security 95 7 2 5 Repeater 100 7 2 6 Advanced 102 ...

Page 4: ... 8 1 System 132 8 1 1 System Information 132 8 1 2 Operating Mode 134 8 1 3 Network Settings 135 8 1 4 Management 138 8 2 Wireless 140 8 2 1 General Settings 140 8 2 2 Advanced Wireless Settings 141 8 2 3 Security Settings 142 8 2 4 Site Survey 144 8 3 Firewall 147 8 3 1 IP Port Forwarding 147 8 3 2 Demilitarized Zone 148 8 4 Utilities 149 8 4 1 Change Password 149 8 4 2 Backup Restore 150 8 4 3 S...

Page 5: ...User s Manual Enterprise Access Point ENGLISH 4 Copyright 4IPNET INC 8 5 6 UPnP Status 162 9 Console Interface Configuration 163 ...

Page 6: ...stallation Corresponding Software Versions for each Model EAP210 Up to software version 1 40 EAP220 Up to software version 1 40 EAP320 Up to software version 2 40 EAP330 Up to software version 1 20 EAP701 Up to software version 1 13 EAP705 Up to software version 1 10 EAP706 Up to software version 1 10 EAP717 Up to software version 1 13 EAP727 Up to software version 1 10 EAP757 Up to software versi...

Page 7: ...s or messages that should not be ignored Note Contains related information that corresponds to a topic Indicates that clicking this button will save the changes you made but you must reboot the system for the changes to take effect Indicates that clicking this button will clear what you have set before the settings are applied ...

Page 8: ... includes 4ipnet EAP220 x1 Quick Installation Guide QIG x1 Console Cable x1 Ethernet Cable x1 Power Adaptor 12V x1 Detachable Antenna x4 The standard package of EAP320 includes 4ipnet EAP320 x1 Quick Installation Guide QIG x1 Console Cable x1 Ethernet Cable x1 Power Adaptor 12V x1 Detachable Antenna x4 The standard package of EAP330 includes 4ipnet EAP330 x1 Quick Installation Guide QIG x1 Console...

Page 9: ...pnet EAP705 x1 Quick Installation Guide QIG x1 Mounting Screws x2 Universal Mounting Panel x1 Mounting Plate Lock Tool x1 Power Adaptor 12V Optional x1 The standard package of EAP706 includes 4ipnet EAP706 x1 Quick Installation Guide QIG x1 Mounting Screws x2 Universal Mounting Panel x1 Mounting Plate Lock Tool x1 Power Adaptor 12V Optional x1 Detachable Antenna x4 The standard package of EAP717 i...

Page 10: ...unting Kit x1 Power Adaptor 12V Optional x1 The standard package of EAP760 includes 4ipnet EAP760 x1 Quick Installation Guide QIG x1 Mounting Kit x1 Power Adaptor 12V Optional x1 Detachable Antenna x3 The standard package of EAP767 includes 4ipnet EAP767 x1 Quick Installation Guide QIG x1 Wall Mount Kit x1 Ceiling Mount Kit x1 Power Adaptor 12V Optional x1 The standard package of OWL530 includes 4...

Page 11: ... The standard package of OWL630 includes 4ipnet OWL630 x1 Quick Installation Guide QIG x1 Mounting Kit x1 Ground Wire x1 Waterproof RJ45 Connector Pack x2 Waterproof M12 Connector Pack x1 Power Sourcing Equipment Optional x1 It is recommended to keep the original packing materials for possible future shipment when repair or maintenance is required Any returned product should be packed in its origi...

Page 12: ...t which means that these Access Points are well suited to WLAN deployment in industrial environments EAP701 EAP705 EAP706 EAP717 EAP727 EAP757 EAP760 EAP767 are packed in wall ceiling mountable plastic enclosures and are built perfectly to blend in with your décor Outdoor OWL530 OWL620 OWL630 The 4ipnet OWL530 OWL620 OWL630 Outdoor Access Point is embedded with dual OWL620 and OWL630 single OWL530...

Page 13: ...aching antennas 1 1 is the primary antenna connector and 1 2 is the secondary 2 12V 2A Power Socket for the power adaptor 3 Uplink Port The port for uplink connection to another gateway or device PoE 802 3af at is supported 4 WES Button WDS Easy Setup Press the button to build up a WDS link with another peer 4 WDS links can be set up 5 Restart Button Press to restart the system 6 LED Indicators Po...

Page 14: ...s for more than 3 seconds Slave Press once and then release right away WES Start LED Green OFF and then BLINKING SLOWLY LED Green BLINKS SLOWLY WES Negotiate BLINKING SLOWLY Green BLINKING RAPIDLY Green WES Success LED Green ON LED Green ON WES Fail Timeout LED Green OFF LED Green OFF 7 Console Port To access EAP210 via the console interface ...

Page 16: ...he system to reset the system to factory default settings hold for more than 5 seconds 2 WES Button RF B WDS Easy Setup Press the button to build up a WDS link with another peer 4 WDS links can be set up per RF card Note that the WES Button only runs on the 5 GHz RF Card B 3 Console Port To access EAP220 via the console interface 4 LAN 1 4 Ports The ports for connections with LAN side devices 5 Up...

Page 17: ...ks can be set up per RF card Note that the WES Button only runs on the 5 GHz RF Card B 3 Console Port To access EAP220 via the console interface 4 LAN 1 4 Ports The ports for connections with LAN side devices 5 Uplink Port PoE The port for uplink connection to another gateway or device PoE 802 3at is supported 6 12V 2A Power Socket for the power adaptor A 1 Primary antenna connector Ant1 for RF Ca...

Page 18: ... B WDS Easy Setup Press the button to build up a WDS link with another peer 4 WDS links can be set up per RF card 4 LED Indicators 6 indicators that displays the states of 6 various functions or progresses The numbers are explained on the leftmost side of the rear panel 5 Uplink Port PoE The port for uplink connection to another gateway or device PoE is supported 6 LAN Ports 1 2 The ports for conn...

Page 19: ... Ethernet cables here to connect to the wired local network 2 DC Jack 5V 2 A Attach the power adaptor here 1 Restart Reset Button Press once to restart the system Press and hold for more than 5 seconds to reset to factory default 2 LED Indicators 4 LED lights Representation is listed at the top of the panel 3 WES Button WDS Easy Setup Press the button to build up a WDS link with another peer ...

Page 20: ... All rights reserved 19 Back Panel 1 2 EAP701 Lower Panel 1 110 Punchdown Block Copper wire punch down for in wall application 2 Uplink PoE Port For Uplink connection This port can be used to connect to a controller gateway or directly to the internet PoE is supported ...

Page 21: ... here to connect to the wired local network 2 Bypass RJ 45 pass through port 3 DC Jack 12V 1 A Attach the power adaptor here 1 Restart Reset Button Press once to restart the system Press and hold for more than 5 seconds to reset to factory default 2 LED Indicators 4 LED lights Representation is listed at the top of the panel 3 WES Button WDS Easy Setup Press the button to build up a WDS link with ...

Page 22: ...ection This port can be used to connect to a controller gateway or directly to the internet PoE is supported 2 110 Punchdown Block Pass through Copper wire punch down for wiring bypass 3 110 Punchdown Block Uplink PoE Copper wire punch down for Uplink connection This can be used to connect to a controller gateway or directly to the internet PoE is supported ...

Page 23: ... here to connect to the wired local network 2 Bypass RJ 45 pass through port 3 DC Jack 12V 1 A Attach the power adaptor here 1 Restart Reset Button Press once to restart the system Press and hold for more than 5 seconds to reset to factory default 2 LED Indicators 4 LED lights Representation is listed at the top of the panel 3 WES Button WDS Easy Setup Press the button to build up a WDS link with ...

Page 24: ...k Pass through Copper wire punch down for wiring bypass 3 110 Punchdown Block Uplink PoE Copper wire punch down for Uplink connection This can be used to connect to a controller gateway or directly to the internet PoE is supported 4a SMA Connectors 2 4GHz Connect external antennas for RF Card A here 1 is the primary antenna connector while 2 is the secondary connector 4b SMA Connectors 5GHz Connec...

Page 25: ... the wired local network 2 Uplink PoE Port For Uplink connection This port can be used to connect to a controller gateway or directly to the internet PoE is supported 3 LED Indicators 4 LED lights Representation is listed at the top of the panel 4 Phone Jack A telephone can bypass to a connected phone line in the back of the AP when connected to the socket 5 5V 2 A Attach the power adaptor here ...

Page 26: ...Panel 1 2 3 EAP717 Rear Panel 1 WES Button WDS Easy Setup Press the button to build up a WDS link with another peer 2 Restart Reset Button Press once to restart the system Press and hold for more than 5 seconds to reset to factory default 3 Console Port To access EAP717 via the console interface ...

Page 27: ... indicator is available to show the uplink status 2 12V 1 0 A Attach power adaptor here 3 Uplink PoE Port Offers uplink connection This port can be used to connect to a controller gateway or directly to the Internet 802 3af PoE is also supported 4 Restart Reset Press once to restart the system to reset the system to factory default settings hold for more than 5 seconds ...

Page 28: ...seconds to reset to factory default 3 WES Button WDS Easy Setup Press the button to build up a WDS link with another peer 4 LED Indicators 4 LED lights Representation is listed at the bottom of the panel Top 2 reserved for RF Card B if applicable 5 Uplink PoE Port For Uplink connection This port can be used to connect to a controller gateway or directly to the internet PoE is supported 6 LAN 1 2 P...

Page 29: ... INC All rights reserved 28 EAP760 Front View 1a 2 1b 1c EAP760 Front View 1 External Antenna External antennas via SMA connectors 1a 1b and 1c corresponds to Ant1 Ant2 and Ant3 of the system 2 LED Indicator An LED indicator is available to show the uplink status ...

Page 30: ...r gateway or directly to the Internet 802 3at PoE is also supported 3 LAN 1 Port The ports for connections with LAN side devices 4 USB Port USB interface reserved for future use 5 WES Button For IT administrators to easily setup WDS links with RF Card A and RF Card B respectively 6 Restart Reset Press once to restart the system to reset the system to factory default settings hold for more than 5 s...

Page 31: ...P767 s Front Panel EAP767 s Rear Panel 1 LED Indicators An LED indicator is available to show the uplink status 2 12V 2 5 A Attach power adaptor here 3 Uplink PoE Port Offers uplink connection This port can be used to connect to a controller gateway or directly to the Internet 802 3at PoE is also supported ...

Page 32: ...ay condense The valve allows ventilation to prevent moisture buildup within the OWL530 2 Ground Connector For connecting the ground wire 3 PoE Connector For connecting to the Power Sourcing Equipment PSE 4 N type Connector x 2 For connecting to an antenna 4 1 is the primary antenna connector and 4 2 is the secondary Utilize both connectors for 802 11n MIMO optimized performance ...

Page 34: ...troubleshooting purposes 2 Ethernet LAN Attach Ethernet cables here for connecting to the wired local network 3 PoE Connector For connecting to the Power Sourcing Equipment PSE 4 N type Connector x 2 For connecting to an antenna OWL610 4 N type Connector x 4 For connecting to an antenna OWL620 RF Card A x 2 RF Card B x 2 A1 B1 is the primary antenna connector and A2 B2 is the secondary Utilize bot...

Page 35: ...4 OWL630 Top Back N type Connector x 6 For connecting to an antenna RF Card A x 3 RF Card B x 3 Connector marked 1 is for the primary antenna when the AP is not in 802 11n or 802 11ac mode Utilize all connectors for optimized MIMO performance Ground Connector For connecting the ground wire ...

Page 36: ...0 may condense The valve allows ventilation to prevent moisture buildup within the OWL630 3 Uplink PoE Connector For connecting to the Power Sourcing Equipment PSE 4 Ethernet LAN Attach Ethernet cables here for connecting to the wired local network 5 Console The system can be configured via a serial console port The administrator can use a terminal emulation program such as Microsoft s Hyper Termi...

Page 37: ...the Ethernet cable to the Uplink port of EAP210 EAP220 EAP320 EAP330 and the other end of the cable to a switch a router or a hub EAP210 EAP220 EAP320 EAP330 is then connected to your existing wired LAN network Step 3 There are two ways to supply power to EAP210 EAP220 EAP320 EAP330 a Connect the DC power adaptor to the EAP210 EAP220 EAP320 EAP330 power jack socket b The EAP210 EAP220 EAP320 EAP33...

Page 38: ...e Mount Mountable on any flat surface You may choose to connect your uplink cable the slit on the side or in through the back b Wall Outlet Mount This Wall Outlet mount can be fitted on any US standard outlet box Secure the mounting plate on the mounting surface by tightening the screws included at the highlighted area below Step 2 Connect one end of the Ethernet cable to the Uplink port and the o...

Page 39: ...01 a Connect the DC power adaptor to the power jack socket b The Uplink port is capable of receiving PoE Connect an IEEE 802 3af compliant PSE device e g a PoE switch to the Uplink port of EAP701 with the Ethernet cable c Use a standard 110 punchdown tool to punch copper wires onto the punchdown block pin assignment 568A Step 4 Fasten the Access Point to the mounting plate a Align the Access Point...

Page 40: ...ntally into the slit turn counter clockwise and slide the Access Point towards the unfastening tool Punch down tools may vary by country Please contact the 4ipnet Support Team for recommendations if needed Please use only the power adapter supplied with the package Using a different power adapter may damage this system To verify the wired connection between the AP and your switch router hub please...

Page 41: ...ion The best location is usually at the center of your intended wireless network Wall Ceiling Mounting Place the mounting bracket on a wall or ceiling Mark the points where you will insert the screws Drill holes in the marked points and insert the plastic anchors Use the supplied screws to attach the mounting bracket to the wall ceiling Attach the Access Point to the mounting bracket After Steps 2...

Page 42: ...nd the other end of the cable to a switch a router or a hub EAP727 is then connected to your existing wired LAN network Step 3 There are two ways to supply power to EAP727 a Connect the DC power adaptor to the EAP727 power jack socket b The EAP727 Uplink port is capable of receiving DC currents Connect a IEEE 802 3af compliant PSE device e g a PoE switch to the Uplink port of EAP727 with the Ether...

Page 43: ...anel to the wall and then turn the EAP717 EAP757 clockwise to fasten to the panel For installation instructions on the Ceiling Mount Kit please refer to the included Installation Guide Step 2 Connect one end of the Ethernet cable to the Uplink port and the other end of the cable to a switch a router or a hub The EAP717 EAP757 is now connected to your existing wired LAN network Step 3 There are two...

Page 44: ...follow the steps mentioned below to install the hardware of EAP760 1 Place the EAP760 at the best location The best location for EAP760 is usually at the center of your intended wireless network Mounting Use the dimensions below to identify and mark correct screw positions on the selected location ...

Page 45: ...Connect one end of the Ethernet cable to the Uplink port of EAP760 and the other end of the cable to a switch a router or a hub EAP760 is then connected to your existing wired LAN network 3 Connect the DC power adapter to the EAP760 power socket There are two ways to supply power over to EAP760 EAP760 Uplink port is capable of receiving DC currents Connect an IEEE 802 3at compliant PSE device e g ...

Page 46: ...o install the hardware of EAP767 Step 1 Place the EAP767 at the best location The best location is usually at the center of your intended wireless network Wall Mounting Secure wall mount bracket on wall Attach the Access Point to the dedicated slots on the mounting bracket Turn the Access Point clockwise as illustrated to fasten AP ...

Page 47: ...t ENGLISH Copyright 4IPNET INC All rights reserved 46 Ceiling Mount Secure ceiling mount bracket on ceiling Attach the Access Point to the dedicated slots on the mounting bracket Turn the Access Point clockwise as illustrated to fasten AP ...

Page 48: ...of the cable to a switch a router or a hub The EAP767 is now connected to your existing wired LAN network Step 3 There are two ways to supply power to EAP767 a Connect the DC power adaptor to the power jack socket b The Uplink port is capable of receiving PoE Connect an IEEE 802 3at compliant PSE device e g a PoE switch to the Uplink port of EAP767 with the Ethernet cable ...

Page 49: ...rt of a 802 3af at PSE device Step 3 Connect one end of an Ethernet cable to the Data In Port of PSE and the other end to the computer Step 4 Power on the PSE in order to supply adequate power to the OWL530 OWL620 OWL630 Now the Hardware Installation is complete Please use only the power adapter supplied with the package Using a different power adapter may damage this system To verify the wired co...

Page 50: ... LAN port of the AP via an Ethernet cable Then set a static IP Address on the same subnet mask as the AP in TCP IP settings of your PC such as the following example IP Address 192 168 1 100 Subnet Mask 255 255 255 0 Note Please note that the IP Address used should not overlap with the IP Addresses of any other device within the same network to avoid IP conflict Launch the web browser on your PC an...

Page 51: ...stem Overview Page To logout simply click on the Logout button at the upper right hand corner of the interface to return to the Administrator Login Page Click OK to logout Logout Prompt For security reasons it is strongly recommended to change the administrator s password upon the completion of all configuration settings ...

Page 52: ...new password with a length of up to 32 characters and retype it in the Re enter New Password field Congratulation Now the 4ipnet Access Point is installed and configured successfully It is strongly recommended to make a backup copy of your configuration settings After the AP s network configuration is completed please remember to change the IP Address of your PC Connection Properties back to its o...

Page 53: ...the TCP IP settings of administrator s computer to have a static IP Address of 192 168 1 10 and Subnet Mask of 255 255 255 0 Step 1 Configuring the AP s System Information Enter the AP s default IP Address 192 168 1 1 into the URL of a web browser Log in using Username admin and Password admin The Web Management Interface will appear as shown below Web Management Interface Main Page System Overvie...

Page 54: ...equires individual setup every time the system starts up Simply choose a time zone and set the time accordingly When it is finished click SAVE Manually Time Setup The alternative method is NTP Upon selecting NTP under the Time field the configuration changes to allow up to two NTP servers Simply enter a local NTP server s IP Address if available or search online for an NTP server nearest to you Se...

Page 55: ...l be getting dynamic IP Addresses from the connected network set Mode to DHCP otherwise set Mode to Static and fill in the required fields marked with a red asterisk IP Address Netmask Gateway and Primary DNS Server with the appropriate values for the network Click SAVE when you are finished to save changes that have been made Step 3 Configure the AP s Wireless General Settings Click on the Wirele...

Page 56: ...st of the fields are optional and can be configured at another time Click SAVE if any changes have been made Note For EAP220 the RF Card A supports only 2 4GHz bands b g n and RF Card B supports only 5GHz bands a n EAP320 EAP750 EAP757 OWL620 supports both 2 4GHz and 5GHz bands on both RF Cards A and B For EAP330 EAP705 EAP706 EAP727 EAP760 EAP767 OWL630 the RF Card A supports only 2 4GHz bands b ...

Page 57: ...t up the AP s wireless access refer to the following VAP 1 configuration other VAP configuration can refer to the same setup steps as done for VAP 1 Click on the Overview tab to proceed Virtual AP Overview Page On this page click the hyperlink in the row and column that corresponds with VAP 1 s State This will bring up the following page ...

Page 58: ...ceeding further please make sure that the VAP field is marked Enable afterwards enter an ESSID to represent the WLAN associated with AP s VAP 1 It is suggested that Profile Name is used to describe what this particular VAP will be used for otherwise leave it as default VLAN ID can be chosen at another time Click SAVE to save all changes up to this point and Reboot the system to apply these revised...

Page 59: ... as multiple virtual access points providing different levels of services from the same physical AP device Please click on the Wireless icon to review the VAP Overview page VAP Overview Page To proceed with specific VAP configuration click on the corresponding cell in the State column and row of the VAP the particular VAP s Configuration page will then appear for further configuration ...

Page 60: ...n menu of Profile Name Choose Enable for the VAP field Pick a descriptive Profile Name and an appropriate ESSID for clients to associate to A VLAN ID can be provided to indicate the traffic through this particular VAP It may allow further management control e g access rights and Internet usage etc of each VAP with a management gateway Click SAVE and then Reboot for the changes to take effect ...

Page 61: ...guide the user through setting up different types of security for a particular VAP Simply repeat the following steps for other VAP with security requirement Step 1 Ensure the intended VAP is Enabled VAP Overview Page On the VAP Overview page check the table to confirm the VAP State If it is Enabled skip to Step 2 If not click on to proceed with VAP Configuration for that particular VAP ...

Page 62: ...he next step Step 2 Configure Security Settings for your VAP The following instructions will guide the user to set up wireless security with a specific VAP If only restricted access of certain MAC addresses is desired skip to Step3 MAC restriction can be coupled with wireless security to provide extra protection First click on the corresponding cell in the column labeled Security Type This hyperli...

Page 63: ...Select the desired Security Type from the drop down menu which includes Open WEP 802 1X WPA Personal and WPA Enterprise 802 11n band does not support WEP nor WPA PSK running TKIP When the Security Type is set as such the wireless link is only able to run at maximum 54Mbps 802 1X option is not available on RF Card B of EAP760 and EAP767 ...

Page 64: ... the default setting as shown in the following figure Security Settings None WEP WEP Wired Equivalent Privacy is a data encryption mechanism with key length selected from 64 bit 128 bit or 152 bit Security Settings WEP 802 11 Authentication Select from Open System Shared Key or Auto WEP Key Length Select a key length from 64 bit 128 bit 152 bit WEP Key Format Select from ASCII or Hex format for th...

Page 65: ...entication and enhanced dynamic WEP are provided Security Settings 802 1X Authentication Dynamic WEP Settings o Dynamic WEP For 802 1X security type Dynamic WEP is always enabled to automatically generate WEP keys for encryption o WEP Key Length Select a key length from 64 bits or 128 bits o Re keying Period The time interval for the dynamic WEP key to be updated the time unit is in seconds RADIUS...

Page 66: ...ting information to the RADIUS server every interval period WPA Personal Provides shared key authentication in WPA data encryption Security Settings WPA Personal Cipher Suite Select an encryption method from WPA2 or WPA2 WPA Roaming Target AP List When 802 11r roaming is enabled the target roaming VAP MAC addresses can be configured here Protected Management Frames Select Disable Optional or Manda...

Page 67: ...t Frames Select Disable Optional or Mandatory o Group Key Update Period The time interval for the Group Key to be renewed the time unit is in seconds RADIUS Server Settings o Host Enter the IP address or domain name of the RADIUS server o Authentication Port The port number used by the RADIUS server Specify a port number or use the default 1812 o Secret Key The secret key for the system to communi...

Page 68: ... Clicking on the hyperlink corresponding with intended VAP in the MAC ACL column will bring the user to the Access Control Settings page Access Control Settings Page Please choose among Disable Allow Deny and RADIUS ACL from the drop down menu of Access Control Type 1 Disable Access Control This means that there is no restriction for client devices to access the system 2 MAC ACL Allow List This me...

Page 69: ...addresses Make sure at least the MAC of the modifying system is included e g network administrator s computer 3 MAC ACL Deny List This means that all client devices are granted with access to the system except those listed in the Deny List denied MAC addresses The administrator can allow any denied MAC address to connect to the system temporarily by checking Enable ...

Page 70: ...RADIUS ACL Authenticate incoming MAC addresses by an external RADIUS server When RADIUS ACL is selected all incoming MAC addresses will be authenticated by an external RADIUS server Please note that each VAP MAC ACL and its security type shown on the Security Settings page share the same RADIUS configuration ...

Page 72: ...ferring the traffic to the other end of WLAN LAN through the AP Since this is a peer to peer connection both APs will be configured the same way Step 1 Make sure the Band and Channel are matched between the WDS peers In order to create a valid WDS link the two APs must be configured to use the same channel and band for their wireless settings Click the Wireless icon and then General tab to go to t...

Page 73: ...ance To prevent such occurrence please make sure Layer 2 STP is enabled To turn on this feature please click on the System icon and the Network Interface tab Network Settings Page Please select Enable in the field labeled Layer2 STP This will prevent data from looping or creating a broadcast storm Click SAVE when completed and then Reboot to allow updated settings to take effect Step 3 Building th...

Page 74: ...AC Address c Enter the MAC Address peer AP and then Click SAVE If you are using another 4ipnet APs as the peer AP simply repeat the above mentioned steps to configure another peer AP s Note To support traffic with unlimited VLAN tags via WDS EAP220 has to be set to Tag Based Mode On selected APs each WDS link interface has its own MAC address Use the respective MAC for each interface to create WDS...

Page 75: ...he Working Area occupies the major area of the WMI displayed in the center of the interface It is also referred to as the configuration page The Main Menu on the top of the WMI allows the administrator to traverse to various management functions of the system The management functions are grouped into branches System Wireless Firewall Utilities and Status Table 1 4ipnet Access Points Function Organ...

Page 76: ...tus Event Log Monitor Note On each configuration page you may click SAVE to save the changes of your configured settings but you must reboot the system for the changes to take effect After clicking SAVE the following message will appear Some modification has been saved and will take effect after Reboot All online users will be disconnected during reboot or restart ...

Page 77: ...ge System Information For maintenance purposes it is highly recommended to have the following information stated as clearly as possible Name The system name used to identify this system Description Further information about the system e g device model firmware version and active date Location The information on geographical location of the system for the administrator to locate the system easily T...

Page 78: ...ve a common NTP server internal or external If there isn t locate a nearby NTP server on the web 2 Manually set up By selecting Manually set up the administrator can manually set the system date and time Manual Time Configuration Fields Set Date Select the appropriate Year Month and Day from the drop down menu Set Time Select the appropriate Hour Min and Sec from the drop down menu Unless Internet...

Page 79: ...AN port o Primary DNS Server The IP address of the primary DNS Domain Name System server o Alternate DNS Server The IP address of the substitute DNS server DHCP This configuration type is applicable when the system is connected to a network with the presence of a DHCP server all related IP information required will be provided by the DHCP server automatically Ethernet IGMP Snooping When Enabled th...

Page 80: ...cast packets are forwarded in an endless loop between switches Moreover a broadcast storm may consume most of the available system resources in addition to available bandwidth Thus enabling the Layer 2 STP can lower such undesired occurrence and derive the best available data path for network communication The AP also supports RSTP Operation Configurable parameters include Bridge Priority Hello Ti...

Page 81: ... Select a LAN VAP or WDS interface to designate its traffic to pass through the CAPWAP Tunnel established between the AP and the controller For network interfaces that are unchecked their traffic will be forwarded locally into the internet if this AP is deployed remotely on the WAN side of a controller The TIP in red at the bottom of the page explains that each service zone from default to Service...

Page 82: ...AN for Management When this is enabled management traffic from the system will be tagged with a VLAN ID In other words administrator who wants to access the WMI must send management traffic with the same VLAN ID such as connecting to a specific VAP with the same VLAN ID Enter a value between 1 and 4094 for the VLAN ID if the option is enabled Note Management is done without the utilization of VLAN...

Page 83: ...he system o Read Enter the community string to access the MIB with Read privilege o Write Enter the community string to access the MIB with Write privilege SNMPv3 User List The system allows 5 SNMP Users with Read or Read Write Access Determine the Name and Authentication Password on the SNMP Account List Trap When enabled events on Cold Start Interface UP Down and Association Disassociation can b...

Page 84: ...ystem remotely System Log Fields Enable Disable Enable or Disable this function SYSLOG Server IP The IP address of the Syslog server that will receive the reported events Server Port The port number of the Syslog server SYSLOG Level Select the desired level of received events from the drop down menu LED To turn On Off the LED on the AP Note Only EAP330 EAP705 EAP706 EAP727 EAP760 support this feat...

Page 85: ...To enable this item select Enable and click Manage Certificates to enter the Upload Certificate page Please refer to the section 7 4 4 Upload Certificate DNS SRV Discovery Using DNS SRV to discover acess controller Domain Name Suffix Enter the suffix of the access controller such as example com DHCP Option Discovery Using DHCP option to discover access controller Broadcast Discovery Using Broadcas...

Page 86: ... stack addressing capability IPv6 by default is disabled but it can be enabled on this tab page Mode There are two options for acquiring an IPv6 address for this device Static Configuring IPv6 address manually via this option if you have already acquired a permanent IPv6 address for operation DHCP Acquire IPv6 address automatically from upstream server ...

Page 87: ...ccess Points VAPs per RF card Each VAP can have its own settings e g ESSID VLAN ID security settings etc With such VAP capabilities different levels of service can be configured to meet network requirements 7 2 1 VAP Overview An overall status is collected on this page including ESSID State Security Type MAC ACL and Advanced Settings where the AP features 16 VAPs per radio with respective settings...

Page 88: ...right 4IPNET INC All rights reserved 87 State The hyperlink showing Enable or Disable links to the VAP Configuration page or VAP State Page Security Type The hyperlink showing the security type links to the Security Settings Page VAP Security Type Page ...

Page 89: ...PNET INC All rights reserved 88 MAC ACL The hyperlink showing Allow or Disable links to the Access Control Settings Page VAP MAC ACL Page Advanced Settings The advanced settings hyperlink links to the Advanced Wireless Settings Page VAP Advanced Settings Page ...

Page 90: ...e RF card for further configuration Band Select Disable if the wireless function is not required Protocol Select an appropriate wireless protocol 802 11a 802 11a 802 11n 802 11ac or 802 11b 802 11g 802 11b 802 11g 802 11g 802 11n The protocol is dependent or the Band of the RF Card Pure 11n Enable 802 11n network only Short Preamble The short preamble with a 56 bit synchronization field can improv...

Page 91: ... of time when the system waits for an Acknowledgement frame sent back from a station without retransmission In other words upon timeout if the Acknowledgement frame is still not received the frames will be retransmitted This option can be used to tune network performance for extended coverage For regular indoor deployments please keep the default setting Beacon Interval ms The entered amount of ti...

Page 92: ...the current channel or adjacent channel reaches the configured threshold in the AP switches to a different Channel WME Configuration Access priority can be configured using with different parameters CW Min Contention Window Minimum CW Max Contention Window Maximum AIFS Arbitration Inter Frame Spacing TXOP Limit Transmission Opportunity Limit Transmission Rate Threshold The client will be kicked wh...

Page 93: ... 4 5 6 7 8 9 10 11 12 13 6M 9M 12M 18M 24M 36M 48M 54M 802 11b 802 11g 1 2 3 4 5 6 7 8 9 10 11 12 13 1M 2M 5 5M 6M 9M 11M 12M 18M 24M 36M 48M 54M 802 11a 802 11n 36 40 44 48 52 56 60 64 100 104 108 112 116 132 136 140 149 153 157 161 165 6M 9M 12M 18M 24M 36M 48M 54M MCS0 23 Level 1 Level 25 model dependent 802 11n 802 11g 1 2 3 4 5 6 7 8 9 10 11 12 13 1M 2M 5 5M 11M 12M 18M 24M 36M 48M 54M MCS0 2...

Page 94: ...ted in the profile as follows VAP Enable or Disable this VAP Profile Name The profile name of a specific RF card and its VAP for identity management purposes ESSID ESSID Extended Service Set ID serves as an identifier for clients to associate with the specific VAP It can be coupled with different service levels like a variety of wireless security types VLAN ID The 4ipnet Access Point supports tagg...

Page 95: ...s Video Voice Internetwork Control Network Control For more information please refer to IEEE Standards 802 1P Downlink 802 1P AC Mapping Re mapping options are available on 802 1P downlink traffic The options available are Background Best Effort Video and Voice CAPWAP Tunnel Interface For not support Split Tunnel model Select Checkbox to designate traffic for the VAP to pass through CAPWAP Tunnel ...

Page 96: ...e different service levels to clients The security type includes Open WEP 802 1X WPA Personal and WPA Enterprise Open Authentication is not required and data is not encrypted during transmission when this option is selected This is the default setting as shown in the following figure Security Settings Open WEP WEP Wired Equivalent Privacy is a data encryption mechanism based on a 64 bit 128 bit or...

Page 97: ...ames during data transmission WEP Keys Provide the pre defined WEP key value the system supports up to 4 sets of WEP keys 802 1X When 802 1X Authentication is selected RADIUS authentication and Dynamic WEP are provided Security Settings 802 1X Authentication Dynamic WEP Settings o Dynamic WEP For 802 1X security type Dynamic WEP is always enabled to automatically generate WEP keys for encryption o...

Page 98: ...Specify a port number or use the default 1813 o Accounting Interim Update Interval The system will update accounting information to the RADIUS server every interval period WPA Personal WPA Personal is a pre shared key authentication method o 802 11r Roaming Roaming is possible for clients within the same Mobility Domain on different APs with the same Encryption Key Security Settings WPA Personal C...

Page 99: ...Pre shared Key Enter the key value for the pre shared key the format of the key value depends on the key type selected Group Key Update Period The time interval for the Group Key to be renewed the time unit is in seconds WPA Enterprise If this option is selected the RADIUS authentication and data encryption will both be enabled Security Settings WPA Enterprise ...

Page 100: ...ondary o Host Enter the IP address or domain name of the RADIUS server o Authentication Port The port number used by the RADIUS server Specify a port number or use the default 1812 o Secret Key The secret key for the system to communicate with the RADIUS server o Accounting Service Enabling this option allows accounting of login and logouts through the RADIUS server o Accounting Port The port numb...

Page 101: ...nections respectively Please fill in remote peer s MAC address and click SAVE to proceed if setting revision is necessary the CLEAR button can be used to clear the contents in the above WDS connection list Repeater Settings WDS o WDS Select Enable to enable the respective WDS links Select Disable to remove them o WDS Link Address Selected AP Models The MAC address for this interface o Remote AP MA...

Page 102: ...e is set to Universal Repeater EAP210 and OWL530 only enter the SSID of upper bound AP for uplink connection Security Type None WEP or WPA PSK can be configured for this Repeater connection but note that the security type configured here needs to be the same as upper bound AP Repeater Settings Universal Repeater ...

Page 103: ...art and can detect only the AP but not each other Fragmentation Threshold 802 11a 802 11b and 802 11g Modes Enter a value between 256 and 2346 A packet size larger than this threshold will be fragmented sent with several pieces instead of one chunk before transmission A smaller value results in smaller frames but allows a larger number of frames in transmission A lower Fragment Threshold setting c...

Page 104: ...enabled the Access Point intelligently forwards traffic only to those ports that request multicast traffic Adversely when disabled multicast traffic is treated like broadcast traffic with packets forwarded to all ports causing network inefficiencies TX STBC STBC is a pre transmission encoding done by MIMO transmitter that allows it to improve the signal to noise ratio even at a single RF receiver ...

Page 105: ...t access the device Access Control Settings Page Maximum Number of Clients The 4ipnet Access Point supports various methods of authenticating clients for wireless LAN access The default policy is unlimited access without any authentication requirement To restrict the station number of wireless connections simply change the Maximum Number of Stations to a desired number For example when the number ...

Page 106: ...system MAC ACL Allow List When selecting MAC ACL Allow List only the client devices identified by their MAC addresses listed in the Allow List allowed MAC addresses are granted access to the system The administrator can temporarily block any allowed MAC address by checking Disable until the administrator re Enables the listed MAC MAC Allow List Note An empty Allow List means that there is no allow...

Page 107: ...ed 106 MAC ACL Deny List When selecting MAC ACL Deny List all client devices are granted access to the system except those listed in the Deny List denied MAC addresses The administrator can allow any denied MAC address to connect to the system temporarily by checking Disable Deny List ...

Page 108: ...AC addresses by an external RADIUS When RADIUS ACL is selected all incoming MAC addresses will be authenticated by an external RADIUS Please note that each VAP s MAC ACL and its security type shown on the Security Settings page share the same RADIUS configuration RADIUS ACL Note RADIUS ACL may be limited on selected AP models ...

Page 109: ...s Point ENGLISH Copyright 4IPNET INC All rights reserved 108 7 2 8 Hotspot 2 0 Hotspot 2 0 is also known as WiFi Certified Passpoint initiated by the WiFi Alliance to provide better bandwidth and services for public WiFi subscribers ...

Page 110: ... violates this requirement Roaming Consortium Organizational Identifier A roaming consortium is a group of service providers SP with which a user s credentials can be used for authentication Roaming consortiums are identified by an organization identifier OI that is assigned by the IEEE similar to the first half of a MAC address An OI is often 24 bits in length but can also be 36 bits i e OUI 36 I...

Page 111: ... Lists Service and Advanced Firewall Settings 7 3 1 Firewall List It provides an overview of firewall rules in the system 6 default rules with up to a total of 20 firewall rules are available for configuration Firewall List Page From the overview table each rule is designated with the following field No The numbering will decide the priority for the system to carry out the available firewall rules...

Page 112: ...faces Service when EtherType is IPv4 Select the available upper layer protocols services from the drop down list DSAP SSAP when EtherType is IEEE 802 3 The value can be further specified for the fields in 802 2 LLC frame header Type when EtherType is IEEE802 3 The field can be used to indicate the type of encapsulated traffic VLAN ID when EtherType is 802 1 Q The VLAN ID is provided to associate w...

Page 113: ...olumn of the firewall list will lead to the following page for detail configuration with rule ID for the current inserted rule From this page a rule can be added or edited from an existing rule for revision To move a specific rule Mv in the Setting column of the firewall list will lead to the following page for reordering confirmation After the SAVE button is clicked and system is rebooted the ord...

Page 114: ...to block or pass traffic of layer 3 or above protocols These services are available to choose from a drop down list of layer2 firewall rule edit page with Ether Type IPv4 The first 28 entries are default services and the administrator can add delete any extra desired services There are 28 firewall services available in default settings these default services cannot be deleted but can be disabled I...

Page 115: ...ARP ARP request is broadcasted down into the AP s wireless network causing network inefficiencies o Force DHCP option when enabled the AP only learns MAC IP pair information through DHCP packets Since devices configured with static IP address does not send DHCP traffic any clients with static IP address will be blocked from internet access unless its MAC IP pair is listed and enabled on the Static...

Page 116: ...meric characters are allowed and it is also recommended to make use of a combination of both numeric and alphabetic characters Change Password Page The administrator can change password on this page Enter the original password admin and new password and then re enter the new password in the Re enter New Password field Click SAVE to save the new password In addition to the admin account there is a ...

Page 117: ...p up Page will appear to re confirm the request to reboot the system Click OK to proceed or click Cancel to cancel the reboot request Reboot Confirmation Prompt A warning message as displayed below will appear during the reboot period The system power must be kept on before the completion of the reboot process The System Overview page will appear upon reboot completion Additionally there are two w...

Page 118: ... Login as reset2def and enter reset2def as your password Type yes to reset the AP to factory default Backup System Settings Click Backup to save the current system settings to a local disk such as the hard disk drive HDD of a local computer or a compact disc CD Restore System Settings Click Browse to search for a previously saved backup file and then click Upload to restore the settings The backup...

Page 119: ...e system after upgrading the firmware System Upgrade Page Note It is recommended to check the firmware version number before proceeding further Please make sure you have the correct firmware file Firmware upgrade may sometimes result in the loss of data Please ensure that all necessary settings are written down before upgrading the firmware During firmware upgrade please do not turn off the power ...

Page 120: ...or security validation required in CAPWAP Upload Certificate It provides flexibility to support customer s own Certificate Private Key or Trusted Certificate for a means of security verification for CAPWAP or other security needs to ensure the authenticity of this AP to other network entities Use Default Certificate Click Use Default Certificate to use the default certificate and key ...

Page 121: ...charts to detect interference from Bluetooth devices Microwave devices Cordless phones and etc Note Please be reminded that when Channel Analysis is in progress the RF card loses its capability to serve clients and kicks off current users The browser used to implement Channel Analysis must have Java Runtime Environment installed or it would not display correctly The system allows only 1 operator t...

Page 122: ...ning without affecting service This works in complement with Channel Analysis so administrators have a complete overview of the wireless environment The Scan Whole Channel button triggers the AP to scan all channels in the configured band Note that the Radio is only capable of scanning in its configured band Note Background Scan may be limited on selected AP models ...

Page 123: ...page is used to view the current condition and state of the system and it includes the following functions Overview Interfaces Associated Clients WDS Link Status Event Log and Monitor 7 5 1 Overview The System Overview page provides an overview of the system status for the administrator System Overview Page ...

Page 124: ...en in operation CPU RAM Usage Displays the current CPU RAM utilization LAN Interface MAC Address The MAC address of the LAN Interface IP Address The IP address of the LAN Interface Subnet Mask The Subnet Mask of the LAN Interface Gateway The Gateway of the LAN Interface Radio Status MAC Address The MAC address of the RF Card Band The RF band in use Channel The channel specified Tx Power Transmit P...

Page 125: ... time Axis The Time Axis is configurable with the following options 1 minute 2 minutes 5 minutes or 10 minutes Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale 7 5 2 Interfaces Traffic information is available per interface Recorded data includes Packets In Packets Out Traffic In kb and Traffic Out kb ...

Page 126: ... 10 minutes Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale 7 5 3 Associated Clients The administrator can remotely oversee the status of all associated clients on this page When a low SNR is found here the administrator can tune the corresponding parameters or investigate the settings of associated clients to improve network communicatio...

Page 127: ... to see if packets are not received Idle Time Time period that the associated client is inactive for the time unit is in seconds Up time Time period that the client is associated for the time unit is in seconds Real Time A real time plot of each associated client s traffic information including Packets In Out Traffic In Out in Kb RSSI Uplink Downlink Rates and etc The Time Axis is configurable wit...

Page 128: ...yright 4IPNET INC All rights reserved 127 7 5 4 WDS Link Status The administrator can review detailed information of the repeater function at Status WDS Link Status Information of WDS status traffic statistics encryption and other details are provided ...

Page 129: ...sion Speed and Receiving Speed The Time Axis is configurable with the following options 1 minute 2 minutes 5 minutes or 10 minutes Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale Voice hint may also be enabled for convenience during antenna adjustment 7 5 5 Event Log The Event Log provides a record of system activities The administrator c...

Page 130: ...r identify which event is from this Access Point Process name Indicate the event generated by the running instance Description Description of the event To save the file locally click SAVE LOG to clear all of the records click CLEAR 7 5 6 Monitor For a quick overview on the AP s performance the Monitor feature displays an RRD graph recording CPU utilization memory usage associated station numbers T...

Page 131: ...e you through setting up the CPE mode with graphical illustrations The following table shows all the functions of the Access Point in CPE mode OPTION System Wireless Firewall Utilities Status FUNCTION System Information General Setting IP Port Forwarding Change Password System Overview Operating Mode Advanced Wireless Settings Demilitarized Zone Backup Restore Event Log Network Security Settings S...

Page 133: ... system restart 8 1 1 System Information For maintenance purpose it is required to specify the system name its location and corresponding basic parameters Fields such as Name Description and Location are used for mnemonic purpose It is recommended to have different values in each AP System Information For maintenance purpose it is recommended to have the following information stated as clearly as ...

Page 134: ...ize the system time either by NTP server or manual setup 1 Enabled NTP By selecting Enabled NTP the Access Point synchronizes its system time with the NTP server automatically While this method is chosen at least one NTP server s IP address or domain name must be provided If FQDN Full Qualified Domain Name is used as the IP address of NTP server the DNS server must also be activated please refer t...

Page 135: ...served 134 8 1 2 Operating Mode OWL530 EAP210 supports two operation modes CPE mode and AP mode The administrator can set the desired mode on this page and then configure the system according to deployment needs Operating Mode Select CPE Mode and then click SAVE to save the setting ...

Page 137: ...p down list with provided Host Name User Name User Email and Password DDNS Select Enable to activate this function or Disable to inactivate it Provider The name of the DDNS provider that the system is registered with Select a DDNS provider from the drop down list box Host Name The FQDN registered with the selected DDNS provider User name E mail The account ID user name or e mail registered with th...

Page 139: ... accessing the Management Information Base MIB of the system o Read Enter the community string for accessing the MIB with Read privilege o Write Enter the community string for accessing the MIB with Write privilege SNMPv3 User List The system allows 5 SNMP Users with Read or Read Write Access Determine the Name and Authentication Password on the SNMP Account List Trap When enabled events on Cold S...

Page 140: ...e reported events Server Port The port number of the Syslog server Syslog Level Select the desired level of received events from the drop down list box Management IP List In the page of Management IP Address List the administrator can grant the access of the web management interface by specifying a list specific IP addresses or ranges of IP addresses no matter the access is from WAN or LAN UPnP Co...

Page 141: ... on the Security tab to be discussed in section 8 2 3 For automatic configuration use the Site Survey tab discussed in section 8 2 4 to search for the desired SSID ESSID The ESSID Service Set ID of the client device that the system is to be associated with Transmit Power The signal strength transmitted from the system Select the Transmit Power Level from the drop down list box Level 1 is the actua...

Page 142: ...hreshold setting can be useful in areas where many client devices are associating with the Access Point or in areas where the clients are far apart and can detect only Access Point and not each other Roaming When the Access Point is mobile and is operating in CPE mode Enable the Roaming feature to determine Background Scanning Period The AP scans in the background for a signal with a higher RSSI a...

Page 143: ...WEP WEP Wired Equivalent Privacy supports key length of 64 128 152 bits 802 11 Authentication Select from Open System Shared Key or Auto WEP Key Length Select from 64 bit 128 bit or 152 bit key length WEP Key Format Select from ASCII or Hex format for the WEP key WEP Key Index Select a key index from 1 through 4 The WEP key index is a number that specifies which WEP key to use for the encryption o...

Page 144: ...er Suite The standard encryption method for WPA Personal is WPA2 Pre shared Key Type Select a pre shared key type PSK Hex or Passphrase Pre shared Key Enter the key value for the pre shared key the format of the key value depends on the key type selected Group Key Update Period The time interval for the Group Key to be renewed Enter the time length required the time unit is in second ...

Page 145: ... to provide information on the surrounding wireless environment available APs are shown with their respective SSID MAC Address Channel Rate setting Signal reading and Security type The administrator can click Setup or Connect to configure the wireless connection according to the mentioned readings AP Scan Result example SSID The SSID Service Set ID of the AP found in the system s coverage area MAC...

Page 146: ...ecurity settings for associating with the respective AP or repeater o WEP Click Setup to configure the WEP setting for associating with the target AP The following configuration box will then appear at the bottom of the screen For more information on the WEP security settings please refer to Section 8 2 3 Security Settings o WPA PSK Click Setup to configure the WPA PSK setting for associating with...

Page 148: ... services such as on line game or video conferencing on this page Please ensure that the internal port to be used is not occupied by other applications Service Name The administrator can provide an easy remembered alias for the specific forwarding External Port Range The range of external port for forwarding traffic can be defined manually by the administrator Internal IP Address Enter the LAN IP ...

Page 149: ...Z host to be exposed to the Internet for special purpose Internet services such as functioning as a web server External users can access the DMZ host without authentication Enable Select Enable to activate this function or Disable to deactivate it Internal IP Address Fill in the internal IP address to allow system forwarding traffic other than those specifically listed in IP Port Forwarding ...

Page 150: ... password and then re enter it in the Re enter New Password field Click SAVE to activate the new password user account Enter a new password and then re enter it in the Re enter New Password field Click SAVE to activate the new password In addition to the admin account there is a user account capable of accessing the web management interface with configuration limitations The user account will not ...

Page 151: ...equest to restart the system Click OK to proceed or click Cancel to cancel the restart request A warning message as displayed below will appear during the reboot period The system power must be turned on before the completion of the reboot process The System Overview page will appear upon the completion of reboot Backup Settings Click Save to save the current system settings to a local disk such a...

Page 152: ...irst step is to acquire the correct firmware file and supply it in the UI field During firmware update please don t turn off the power to prevent from damaging the device permanently Note To prevent data loss during firmware upgrade please back up the current settings before proceeding further Please restart the system after the upgrade Do not interrupt the system i e power on off during the upgra...

Page 153: ...t the system immediately A pop up will appear to confirm the request to restart the system Click OK to proceed or click Cancel to cancel the restart request A warning message as displayed below will appear during the reboot period The system power must be turned on before the completion of the reboot process The System Overview page will appear upon the completion of reboot ...

Page 154: ...PNET INC All rights reserved 153 8 4 5 Upload Certificate In CPE mode a certificate can be uploaded for HTTPS protected login Click Browse to select the desired certificate and the matching Private Key Uploading a certificate allows encrypted content transfer ...

Page 155: ...4IPNET INC All rights reserved 154 8 5 Status This section displays the status of System Overview Interfaces Event Log Monitor DHCP Lease and UPnP 8 5 1 System Overview The System Overview page provides an overview of the system status for the administrator ...

Page 156: ...The Subnet Mask of the LAN Interface DHCP Server DHCP server status Radio Status Status The RF status SSID The SSID of the associated AP MAC Address The MAC address of the associated AP Channel The operating channel Signal Strength The signal strength reading of the wireless connection Security The security type used for wireless connection WAN Status Mode The method to obtain IP for the WAN inter...

Page 157: ...rmation is available per interface Recorded data includes Packets In Packets Out Traffic In kb and Traffic Out kb The Time Axis is configurable with the following options 1 minute 2 minutes 5 minutes or 10 minutes Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale ...

Page 160: ...ents to an external Syslog server Date Time The date and time of the record when the event happened Hostname Indicate which Host records this event Note that all events in this page are local events and this field of all events is the same However in remote syslog service this field will help the network administrator identify which event is from this system For more information please refer to Se...

Page 161: ... the Monitor feature displays an RRD graph recording CPU utilization memory usage associated station numbers TX rate distribution airtime utilization and short retries The begin and end time for the RRD graph can be selected for filtering data Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale ...

Page 162: ... table provides information about the leased LAN IP address with binding MAC address and expiration time No The item number of the LAN IP leased IP The IP address assigned by DHCP server to a specific LAN device MAC Address The MAC address of the LAN device Expires in The expiration time of the leased IP address ...

Page 163: ...about the UPnP overview such as Protocol Internal Port External Port and IP Address IGD Portmap No The item number of an UPnP device Protocol The Protocol used by the UPnP device Internal Port The internal port number of the UPnP device External Port The mapped external port number of the system IP Address The IP address of the UPnP device ...

Page 164: ...h as PuTTy are needed There are 2 ways to access the console interface 1 Direct Connection Notebook USB to RS232 with DB9 connector Console Cable Console Port The USB to RS232 cable is not supplied with standard packaging It is recommended to use only the console cable provided with the packaging USB RS232 Console Cable RS232 Console Cable RJ45 The speed baud rate needs to be selected for direct c...

Page 165: ... Access Point ENGLISH Copyright 4IPNET INC All rights reserved 164 2 Remote Connection The system supports access to the console interface via SSH Typically SSH utilizes Port 22 and would require the WAN IP address for access ...

Page 166: ...def and enter reset2def as your password If the console connection is not readily available the IP address of the AP can be retrieved with an IP Discovery Utility provided by 4ipnet Simply connect via an Ethernet cable and run the Discovery Utility Note that the laptop PC connecting to the AP must run in Windows XP compatible mode and a static IP must be set P N V11020151103 ...

Search results

Summary of Contents for EAP210

Reviews:

Related manuals for EAP210

Brands by name

Popular brands

4IPNET EAP210, User Manual

Search results

Summary of Contents for EAP210

Reviews:

Related manuals for EAP210

Brands by name

Popular brands