Advantech EKI-6321AG User Manual Download Page 47 | Manualshive

Page: 47 / 60

background image

47

3.2 Security File Management

For running EAP_TLS secure connection, network administrators may need to able to upload User

Certificate, Root Certificate and RSA Key file to the system. In this menu, system allowed administrators to

upload these Certificate files through TFTP server to the access point. Please refer Annotations for more on

wireless security.

3.3 Firmware Upgrade

«
...
45
46
47
48
49
...
»

Summary of Contents for EKI-6321AG

Page 1: ...EKI 6321AG EKI 6322AG EKI 6323AG 802 11a b g Single Dual Triple Radio Outdoor Wireless Access Point User Manual ...

Page 2: ...ed in any form or by any means without the prior written permission of Advantech Co Ltd Information provided in this manual is intended to be accurate and reliable However Advantech Co Ltd assumes no responsibility for its use nor for any infringements of the rights of third parties which may result from its use Acknowledgements Intel and Pentium are trademarks of Intel Corporation Microsoft Windo...

Page 3: ...placement materials service time and freight Please consult your dealer for more details If you think you have a defective product follow these steps 1 Collect all the information about the problem encountered For example CPU speed Advantech products used other hardware and software used etc Note anything abnormal and list any onscreen messages you get when the problem occurs 2 Call your dealer an...

Page 4: ...ent from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesireFd operation FCC Caution Any c...

Page 5: ...The openings on the enclosure are for air convection Protect the equipment from overheating DO NOT COVER THE OPENINGS 8 Make sure the voltage of the power source is correct before connecting the equipment to the power outlet 9 Position the power cord so that people cannot step on it Do not place anything over the power cord 10 All cautions and warnings on the equipment should be noted 11 If the eq...

Page 6: ...void electrical shock always disconnect the power from your PC chassis before you work on it Don t touch any components on the CPU card or other cards while the PC is on 2 Disconnect power before making any configuration changes The sudden rush of power as you connect a jumper or install a card may damage sensitive electronic components ...

Page 7: ...ced thermal design even extends excellent performance to all harsh outdoor environments Features in a Glance o IEEE 802 11 a b g compatible o Power over Ethernet PoE through Power Injector o Long operating range up to 33Km o Ultra Roaming Handover between AP nodes 10ms enables seamless wireless connectivity o Daisy Chain Mesh Low latency high throughput o Point to Point Point to Multipoint wireles...

Page 8: ...fied IP67 sturdy water tight housing o Wide operating temperature range from 35 70 System Management o Firmware upgrade through TFTP FTP o Interface status display o SNMP v1 v2 Simple Installation and Deployment o Software Alignment Deployment Tools ...

Page 9: ...BaseT System Setting Standard AP AP Client Bridge Router Frequency Range USA 2 412 2 462GHz 5 725 5 850GHz Europe 2 400 2 483GHz 5 15 5 35GHz 5 47 5 725GHz Japan 2 400 2 483GHz 4 90 5 091GHz 5 15 5 25GHz China 2 400 2 483GHz 5 725 5 85GHz Modulation Technique 802 11b g DSSS DBPSK DQPSK CCK OFDM BPSK QPSK 16 QAM 64 QAM 802 11a OFDM BPSK QPSK 16 QAM 64 QAM Wireless Transmission Rate 802 11b g 11 5 5...

Page 10: ...Shared Key 802 1x Support 802 1x Client and Server RADIUS Support RADIUS Client WPA WI FI Protected Access EAP TKIP WPA2 AES 802 11i MAC Support MAC Address Filtering Firewall Support NAT net filter Software Firmware System configuration Console Menu Firmware upgrade Reset to default and configuration backup via Console Menu or System menu Support Telnet to Configurations Configuration Management ...

Page 11: ...rating outdoor AP in a wrong frequency band Advantech takes no responsibility for any penalty or loss caused by using illegal frequency band for Advantech EKI 6321AG EKI 6322AG EKI 6323AG Chapter 2 Hardware Installation This chapter describes the installation procedure of Advantech EKI 6321AG 1 3 Package Contents 1 EKI 6321AG 6322AG 6323AG Outdoor Wireless Access Point unit 2 PoE Power Injector 3 ...

Page 12: ... to link to the cable from the PoE When the outdoor AP unit and the PoE are connected together with proper power supply the outdoor unit is turned on and initialized The console port is used at the initial setup and to connect to the antenna alignment kit Front view of Advantech EKI 6321AG Top view of RF antenna connectors of EKI 6321AG RF antenna connector is a major interface on the top of Advan...

Page 13: ... It is an 8 pin male connector with MIL C 5015 IP67 waterproof Connecting to the PC for initial configuration and diagnostics troubleshooting 2 PoE Power Injector PoE Power Injector is used to combine the data stream and power into one cable It has three ports AC IN is for 100 240V AC power from AC Power Cord Data Input Port is connected the customer premises equipment CPE by Cat 5 cable and Power...

Page 14: ...321AG via the console Data Input Port Connect one end of the cross over Ethernet cable to this port connect the other end to the Ethernet port on the computer Power Data Output Port Attach one end of the Cat 5 Ethernet cable to this port attach the other end to the M12 to RJ45 Ethernet Cable Converter port on the Advantech EKI 6321AG Special Ethernet Port Connect one end of the M12 to RJ45 Etherne...

Page 15: ...ase follow the installation procedure to mount the outdoor unit and the flat panel antenna The contents of the mounting kit are shown below A Wall Mounting Kit B Mast Mounting Kit 4 Grounding wire The grounding wire is used to provide the grounding path for the outdoor unit to minimize the impact of lightening and surge ...

Page 16: ...stallation Advantech EKI 6321AG can be mounted on the wall or an antenna mast as shown in the following Step 1 Compose the holder of Advantech EKI 6321AG Step 2 Connect the female end of the power cord into the PoE Injector and then connect the male end of the power cord into a power outlet The red Power LED at the front of the PoE Injector will be on Step 3 Connect RJ 45 Ethernet connector from A...

Page 17: ...17 Step 4 Run Ethernet cable from Data Input Port at the front of the PoE to the Ethernet Port on the PC or notebook ...

Page 18: ...18 Step 5 Connect M12 to RJ45 Ethernet Cable adaptor into MIL C 5015 Ethernet port at the bottom of the access point Please follow the steps below for the assembly of this connection a b c d e ...

Page 19: ...dation is used for all outdoor installation to be waterproofed Step1 Ensure fasten all connectors securely together Step2 Tightly wrap a layer of self bonding insulating tape tapes from well known brands are recommended forward and backward over the physical connection extending 2 inches beyond the connectors or the end of heat shrinkable tubing on the RF coaxial cable or omni antenna connector an...

Page 20: ...er insert the correct user s ID and password user will be able to enter the system web user s interface In the left of the page the main menu is organized into 4 major sections General Configuration Advanced Setting System Management System Monitoring Login ID and password is required before access the system web user s interface The default user s ID is admin and password is password ...

Page 21: ...onfiguration The General configuration consists of four major parts System General Setup Interface Configuration Assign WAN interface Configuration only available when Router operation mode Routing Configuration Configuration only available when Router operation mode ...

Page 22: ...te mode all interfaces will belong to different IP subnet NetBIOS Filter When enabled each client cannot be seen on MicroSoft Network Neighborhood Wireless Trunk Wireless Trunk mode will be allow user to aggregate multi wireless interfaces into one virtue wireless interface to achieve increasing point to point bandwidth and fail over between various physical interfaces By select different wireless...

Page 23: ...hroughput rate of the deployment DC MESH is a passive wireless backbone link failover methodology Wireless Station interface will automatically switch the wireless backbone connection to another Access Point node which has same ESSID ISP ID and SUB ID configuration By DC MESH configuration system can easily achieve ...

Page 24: ... will be the first device of a Daisy Chain topology a Gateway Node connects wireless network and wire network The Gateway Node device should have a wireless interface configured as Access Point mode to be the very beginning wireless device of a Daisy Chain wireless backbone Normal Node Except Gateway Node other EKI 632XAG series devices in a DC MESH topology are Normal Node Normal Node will be abl...

Page 25: ... ID ISP ID is a specific 32bits digitized code for one wireless network service provider When Normal Node is switching to the other Daisy Chain link Normal Node will match the ISP ID of the new Access Point before connection is created SUB ID ISP ID is an assistant code of ISP ID Usage of SUB ID is same as ISP ID ...

Page 26: ...ided the information for Normal Node to decide new wireless backbone route Max Hops Max Hops setting limits the maximum node numbers in a Daisy Chain link Normal Node will chose the less hops to reconnect when route is switching ...

Page 27: ...available Daisy Chain paths have same number of hops the Normal Node will chose the less RSSI score to reconnect when route is switching In the example above node C will chose node A2 to rebuild the Daisy Chain connection because the Total RSSI Score Path A is more efficient than Path B even the RSSI between C and B2 is better than A2 ...

Page 28: ...p When any NTP server is available in network user can enable the NTP and system will automatically synchronize system time with NTP server DNS Setup In order to enable NTP service DNS setting is required for resolving domain name into IP address Current Clock Indicating the current clock of the AP set by user ...

Page 29: ...aces are configured here Each interface can be individually enable disable When system is configured as a bridge the IP address of system is set in the Bridge interface Depends on the system DHCP server and gateway can also be set in this page When system is configured as a router the interface configuration will change Bridge interface into Ethernet interface in displaying ...

Page 30: ...30 The following settings can be configured for the wireless interfaces In Bridge Mode In Router Mode Individual IP subnet belongs to specific interface will available in setting ...

Page 31: ...iple ESSID MESSID can be assigned by pressing right key Up to eight different ESSID can be assigned for each wireless interface Band Select between 2 4GHz 802 11b g 802 11g only or 5GHz 802 11a The 802 11g band will not allow any client device which only runs 802 11b to connect with Channel Operation channel for the wireless interface When the interface is set as a wireless station selecting Chann...

Page 32: ...System can adjust the TTL of packets according to the given distance to improve the communication quality It is recommended to set MAX RF Distance when the distance between the point to point connection is greater than 3km 1 3 Assign WAN Interface Configuration only available when Router operation mode Once the router operation mode is running one of the physical interfaces on system will be requi...

Page 33: ...33 1 4 Routing Configuration Configuration only available when Router operation mode System also provides static routing table for network administrators to edit the necessary static route rule ...

Page 34: ...re the following System Password Wireless Performance DHCP Configuration NAT Configuration SNMP configuration Wireless Security Setting 2 1 System Password The factory default web user interface password is password Please do change it into another to secure the system login ...

Page 35: ...d upstream data rates for subscriber or the client devices connecting to AP can be defined here There are two bandwidth limit types in system Symmetrical bandwidth limit UL DL Limit Rate consolidates download and upload rate of each single client connection Asymmetrical bandwidth limit UL DL Limit Rate specifies download and upload rate of client connections Once the bandwidth limit is enabled the...

Page 36: ...width of each individual client by MAC address Once these client MAC addresses are set in the table the general bandwidth limit rule will not apply to the connection of devices with these MAC address Only the specified bandwidth limit rule applied The table will support up to 64 MAC address in table ...

Page 37: ...acket classification purposes DSCP replaces the outdated IP precedence a 3 bit field in the Type of Service byte of the IP header originally used to classify and prioritize types of traffic Protocol Protocol base QoS mechanism differentiate packets by TCP UDP service port to assign packets in different priority level ...

Page 38: ...duration that the DHCP server grants to the DHCP client permission to use a particular IP address Lease M is the maximum lease time Each Ethernet or wireless interface can be the gateway of its own subnet Hence there can be three subnet domains in one AP in routing mode This DHCP configuration is only available when SYSTEM is operating in router mode ...

Page 39: ...39 Bridge Mode Router Mode ...

Page 40: ...twork Address Translation can be setup in four different ways 1 Port forwarding NAT Server sets Server sets where internal IP addresses are mapped according to the TCP or UDP port are defined in this Port Forwarding NAT sub menu ...

Page 41: ...e to One Mapping In this menu you will be able to map internal private IP address to a global WAN IP address 3 Dynamic NAT Many to Many Mapping A range of internal IP address can be mapped to a range of global IP address ...

Page 42: ...a range of global IP address The configuration is only available when system is operating in router mode 2 5 SNMP configuration SNMP is configured here for simple network management System supports all SNMP v1 v2 and v3 The private MIBs file can also be download from this page ...

Page 43: ...wn in the table are entered Note that in HEX format HEX number cannot start with 0 An error message will appear upon exiting SMT 26 when an illegal WEP key is entered Number of digit character ASCII HEX 64 bit 5 10 128 bit 13 26 152 bit 16 32 802 1x EAP TLS Both 64 bit and 128 bit WEP can be set for reauthentication period up to 65535 seconds Two Eapol EAP over LAN versions are available 802 1x EA...

Page 44: ...44 2 6 1 MAC Address Filtering System can control the client connection by accepting or blocking the traffic from devices of specific MAC addresses ...

Page 45: ...45 2 6 2 RADIUS RADIUS settings for 802 1x protocol authenticating with the remote RADIUS server for authenticating authorization and accounting are set in this menu ...

Page 46: ...p or restored by using TFTP here In a daisy chained sequential configurations it is recommended to backup all configurations before uploading upgrading firmware You may name your configuration file in any ways you like The configuration of system can be reset to factory default by using this menu ...

Page 47: ...tors may need to able to upload User Certificate Root Certificate and RSA Key file to the system In this menu system allowed administrators to upload these Certificate files through TFTP server to the access point Please refer Annotations for more on wireless security 3 3 Firmware Upgrade ...

Page 48: ... do not shutdown the system during the upgrading process to prevent unexpected system failure System will automatically reboot and perform image backup after the upgrade New firmware will take effect after system reboot Please refer to application note on firmware upgrade for step by step upgrading process ...

Page 49: ...ides system monitoring for device The following sections introduce each menu 4 1 Interface Link Status Real time link statuses of all interfaces are shown in the menu System Up Time Display how long WLD 600A1 has been operating since last boot up Temperature The temperature inside the waterproof housing Interface Status Indicate the interface is ENABLE or DISABLE Type Indicate the wireless interfa...

Page 50: ...ace is set as an AC Link Quality Calculated from RSSI signal and noise level to indicate the quality of the communication link in percentage Channel The channel used by the wireless interface Signal Level A 70 50dBm signal level is recommended for a good connection Too low a signal the wireless link between AP and AC cannot be established Too high a signal level the power amplifier at the receiver...

Page 51: ...vides a signal scan function to detect any available wireless signal around the AP It will help AP installer to clarify the environment 4 2 1 Client List All the connecting clients MAC address will be display in Client List including signal and data rate ...

Page 52: ...alth of device System provides seven system log levels Level1 DEBUG Level2 EMERGENCY Level3 ALERT Level4 CRITICAL Level5 ERROR Level8 WARNING Level7 NOTICE Level8 INFO to indicate the level of attention needed for each log Through setting Syslog server IP address all system log will send back to the specific log server for centralizing monitoring all AP devices in the network ...

Page 53: ...53 4 4 System Information System Information summarizes all the configuration and hardware information of the device ...

Page 54: ...ually in negative dBm that a radio needs to receive in order to demodulate and decode a data packet without errors Antenna Gain The ratio of how much an antenna increases the RF signal over a specified low gain radiator Antennas achieve gain by focusing RF energy EIRP Equivalent Isotropically Radiated Power is the power actually radiated by the antenna element It takes into account the antenna gai...

Page 55: ...etween the transmitter and the receiver Fade Margin is an extra signal power added to ensure the proper working of a link Fade Margin System Gain Antenna Gain FSL Cable Loss A zero Fade Margin indicates the ultimate connection between the transmitter and receiver system A larger Fade Margin indicates a stronger signal for connection and a negative Fade Margin indicates connection fail Here is an e...

Page 56: ...ion that carried by the frames III Glossary 802 11b An IEEE wireless networking standard that specifies a maximum data transfer rate of 11Mbps and an operating frequency of 2 4GHz 802 11g An IEEE wireless networking standard that specifies a maximum data transfer rate of 54Mbps an operating frequency of 2 4GHz and backward compatibility with 802 11b devices 802 11a An IEEE wireless networking stan...

Page 57: ...ary IP addresses to network computers by leasing an IP address to a user for a limited amount of time instead of assigning permanent IP addresses Download To receive a file transmitted over a network DSSS Direct Sequence Spread Spectrum Frequency transmission with a redundant bit pattern resulting in a lower probability of information being lost in transit DTIM Delivery Traffic Indication Message ...

Page 58: ... local network MAC Media Access Control Address The unique address that a manufacturer assigns to each networking device Network A series of computers or devices connected for the purpose of data sharing storage and or transmission between users Node A network junction or connection point typically a computer or work station Packet A unit of data sent over a network Port The connection point on a ...

Page 59: ...the connections in an electrical circuit TCP Transmission Control Protocol A network protocol for transmitting data that requires acknowledgement from the recipient of data sent TCP IP Transmission Control Protocol Internet Protocol A set of instructions PCs use to communicate over a network TKIP Temporal Key Integrity Protocol a wireless encryption protocol that provides dynamic encryption keys f...

Page 60: ...60 Protocol encryption which can be used in conjunction with a RADIUS server ...

Reviews:

No comments

Related manuals for EKI-6321AG

Brand: D-Link Pages: 3

Brand: Icom Pages: 2

Brand: Ebyte Pages: 11

Indoor Mobility Point MP-371

Brand: Trapeze Networks Pages: 57

WG602v3 - Wireless Access Point

Brand: NETGEAR Pages: 122

Rocket Prism AC GEN 2 RP-5AC-Gen2

Brand: Ubiquiti Pages: 28

Brand: Ubiquiti Pages: 24

VERSA WIRELESS LAN - RELEASE NOTES

Brand: NEC Pages: 4

Brand: Ubiquiti Pages: 14

Brand: Foxconn Pages: 28

Brand: ZyXEL Communications Pages: 263

Brand: Linksys Pages: 123

Brand: SHYAM Networks Pages: 8

Brand: Comet Labs Pages: 46

Brand: Advantek Networks Pages: 62

Brand: Allnet Pages: 83

Brand: T-Mobile Pages: 4

Brand: T-Mobile Pages: 2

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands