manualshive.com logo in svg

Comtrend Corporation WAP-EN300C, User Manual, Page: 75 / 109

Share
Download
Comtrend Corporation WAP-EN300C User Manual Download Page 75

IV-6-3-3.  Security 

The access point provides various security options (wireless data encryption). 

When data is encrypted, information transmitted wirelessly cannot be read by 

anyone who does not know the correct encryption key. 

 

It’s essential to configure wireless security in order to prevent 

unauthorised access to your network. 

 

Select hard-to-guess passwords which include combinations of 

numbers, letters and symbols, and change your password 

regularly. 

 

 

 

SSID 

Select which SSID to configure security settings 

for. 

Broadcast SSID 

Enable or disable SSID broadcast. When 

enabled, the SSID will be visible to clients as an 

available Wi-Fi network. When disabled, the 

SSID will not be visible as an available Wi-Fi 

network to clients – clients must manually 

enter the SSID in order to connect. A hidden 

(disabled) SSID is typically more secure than a 

visible (enabled) SSID. 

Wireless Client 

Isolation 

Enable or disable wireless client isolation. 

Wireless client isolation prevents clients 

connected to the access point from 

communicating with each other and improves 

security. Typically, this function is useful for 

corporate environments or public hot spots 

and can prevent brute force attacks on clients’ 

usernames and passwords. 

Summary of Contents for WAP-EN300C

Page 1: ...WAP EN300C NMS User Manual Version 1 0 June 2016 ...

Page 2: ... by the party responsible for compliance could void the user s authority to operate the equipment To comply with the FCC RF exposure compliance requirements this device and its antenna must not be co located or operating to conjunction with any other antenna or transmitter This equipment should be installed and operated with minimum distance 20cm between the radiator your body Copyright Copyright ...

Page 3: ... waste The cardboard box the plastic contained in the packaging and the parts that make up this router can be recycled in accordance with regionally established regulations Never dispose of this electronic equipment along with your household waste you may be subject to penalties or sanctions under the law Instead please be responsible and ask for disposal instructions from your local ...

Page 4: ... required reducing costs and facilitating efficient remote access point management Access points can be deployed and configured according to requirements creating a powerful network architecture which can be easily managed and expanded in the future with an easy to use interface and a full range of functionality ideal for small and mid sized office environments A secure WLAN can be deployed and ad...

Page 5: ... can monitor configure and manage all Managed APs up to 5 from the single AP Controller Follow the steps below 1 Connect all APs to an Ethernet or PoE switch which is connected to a gateway router You can use your router as a DHCP server or you can later configure your AP Controller as a DHCP server 2 Ensure all APs are powered on and check the LED status ...

Page 6: ...t IP address is 192 168 2 2 DHCP is enabled on the access point by default If no DHCP Service is found the access point will default to IP address 192 168 2 2 Your computer s IP address must be in the same subnet as the AP Controller 192 168 2 10 is being used in this example 6 Enter the username password to login The default username password are admin 1234 respectively 7 You will arrive at the A...

Page 7: ...aged APs should be fully functional Use the top menu to navigate around the NMS Use Local Network Local Settings to configure your Controller AP Use Dashboard Zone Plan NMS Monitor NMS Settings to configure Managed APs Use Toolbox to diagnose connection issues ...

Page 8: ...s Local Network Local Settings Toolbox Dashboard The Dashboard panel displays an overview of your network and key system information with quick links to access configuration options for Managed APs and Managed AP groups Each panel can be refreshed collapsed or moved according to your preference ...

Page 9: ...image can be uploaded for user defined location profiles using NMS Settings à Zone Edit Options can be configured using the menu on the right side and signal strength is displayed for each AP NMS Monitor The NMS Monitor panel provides more detailed monitoring information about the AP Array than found on the Dashboard grouped according to categories in the menu down the left side ...

Page 10: ...ADIUS as well as upgrade firmware across multiple access points The Zone Plan can also be configured using Zone Edit Local Network Local Network settings are for your AP Controller You can configure the IP address and DHCP server of the AP Controller in addition to 2 4GHz 5Ghz Wi Fi and security with WPS RADIUS server MAC filtering and WMM settings also available ...

Page 11: ...ngs are for your AP Controller You can set the operation mode and view network settings clients and logs specifically for the AP Controller as well as other management settings such as date time admin accounts firmware and reset ...

Page 12: ...Toolbox The Toolbox panel provides a network diagnostic tools ping and trace route ...

Page 13: ...ations to Managed APs LOGIN 1 Connect a computer to the designated AP Controller using an Ethernet cable 2 Open a web browser and enter the AP Controller s IP address in the address field The default IP address is 192 168 2 2 Your computer s IP address must be in the same subnet as the AP Controller Refer to V 1 Configuring your IP Address for more help DHCP is enabled on the access point by defau...

Page 14: ...word are admin 1234 RESTART You can restart your AP Controller or any Managed AP using the NMS To restart your AP Controller go to Local Settings à Advanced à Reboot and click Reboot To restart Managed APs click the Restart icon for the specified AP on the Dashboard ...

Page 15: ...rview of your AP array Use the blue icons above to refresh or collapse each panel in the dashboard Click and drag to move a panel to suit your preference You can set the dashboard to auto refresh every 1 minute 30 seconds or disable auto refresh ...

Page 16: ...duct Name model Host Name MAC Address IP Address Firmware Version System Time and Uptime time the access point has been on IV 2 2 Devices Information Devices Information is a summary of the number of all devices in the local network Access Points Clients Connected and Rogue unidentified Devices ...

Page 17: ...nnecting or disconnected The search function can be used to locate a specific Managed AP Type in the search box and the list will update The Status icon displays grey disconnected yellow connecting or green connected for each Managed AP Each Managed AP has Action icons with the following functions 1 Disallow Remove the Managed AP from the AP array and disable connectivity 2 Edit Edit various setti...

Page 18: ...up Managed APs can be grouped according to your requirements Managed AP Group displays information about each Managed AP group in the local network Group Name MAC Address Device Name Model IP Address 2 4GHz 5GHz Wireless Channel Number No of Clients connected to each access point and Status connected or disconnected To edit Managed AP Groups go to NMS Settings à Access Point refer to IV 5 1 Access...

Page 19: ...rray and disable connectivity 2 Edit Edit various settings for the Managed AP refer to IV 5 1 Access Point 3 Blink LED The Managed AP s LED will flash temporarily to help identify locate access points 4 Buzzer The Managed AP s buzzer will sound temporarily to help identify locate access points 5 Network Connectivity Go to the Network Connectivity panel to perform a ping or traceroute 6 Restart Res...

Page 20: ... network Index reference number Client MAC Address Device Name Model IP Address 2 4GHz 5GHz Wireless Channel Number No of Clients connected to each access point and Status on or off The search function can be used to locate a specific client Type in the search box and the list will update ...

Page 21: ...r an AP icon in the zone map to see more information Click an AP icon in the zone map to select it and display action icons Click and drag an AP icon to move the icon around the zone map The signal strength for each AP is displayed according to the Signal key in the menu on the right side Location Select a pre defined location from the drop down menu When you upload a location image in NMS Setting...

Page 22: ...ing to 2 4GHz or 5GHz wireless radio frequency Signal Signal strength key for the signal strength display around each AP in the zone map Zoom Use the slider to adjust the zoom level of the map Transparency Use the slider to adjust the transparency of location images Scale Zone map scale Device Number Displays number and type of devices in the zone map ...

Page 23: ...e Status icon displays the status of each Managed AP Status Icons Icon Color Status Definition Grey Disconnected Managed AP is disconnected Please check the network connection and ensure the Managed AP is in the same IP subnet as the AP Controller Red Authentication Failed Or Incompatible NMS Version System security must be the same for all access points in the AP array Please check security setti...

Page 24: ...ional APs will display this status until an existing Managed AP is removed Each Managed AP has Action icons with the following functions 1 Disallow Remove the Managed AP from the AP array and disable connectivity 1 Edit Edit various settings for the Managed AP refer to IV 5 1 Access Point 2 Blink LED The Managed AP s LED will flash temporarily to help identify locate access points 3 Buzzer The Man...

Page 25: ...ps go to NMS Settings à Access Point refer to IV 5 1 Access Point The search function can be used to locate a specific Managed AP Group Type in the search box and the list will update The Status icon displays grey disconnected red authentication failed incompatible NMS version orange upgrading firmware yellow connecting green connected or blue waiting for approval for each individual Managed AP Re...

Page 26: ...anaged AP s LED will flash temporarily to help identify locate access points 5 Buzzer The Managed AP s buzzer will sound temporarily to help identify locate access points 6 Network Connectivity Go to the Network Connectivity panel to perform a ping or traceroute 7 Restart Restarts the Managed AP ...

Page 27: ...ndex reference number Name SSID VLAN ID Authentication Encryption IP Address and Additional Authentication To configure encryption and VLANs for Managed APs go to NMS Settings à WLAN The search function can be used to locate a specific SSID Type in the search box and the list will update ...

Page 28: ...IV 4 3 Clients IV 4 3 1 Active Clients Displays information about clients currently connected to the AP Array Index reference number Client MAC Address AP MAC Address WLAN SSID Radio 2 4GHz or 5GHz Signal Strength received by Client Connected Time Idle Time Tx Rx Data transmitted and received by Client in KB and the Vendor of the client device You can set or disable the auto refresh time for the c...

Page 29: ...IV 4 4 Information IV 4 4 1 All Events Activities Displays a log of time stamped events for each access point in the Array use the drop down menu to select an access point and view the log ...

Page 30: ... locate an access point or access point group Type in the search box and the list will update The Status icon displays grey disconnected red authentication failed incompatible NMS version orange upgrading firmware yellow connecting green connected or blue waiting for approval for each individual Managed AP Refer to IV 4 1 1 Managed AP Status Icons for full descriptions The Action icons enable you ...

Page 31: ...or all Managed APs To manually approve a Managed AP use the allow Action icon for the specified access point Edit Access Point Configure your selected access point on your LAN You can set the access point as a DHCP client or specify a static IP address for your access point and assign the access point to an AP group as well as edit 2 4GHz 5GHz wireless radio settings An events log is displayed at ...

Page 32: ...nment Select DHCP Client for your access point to be assigned a dynamic IP address from your router s DHCP server or select Static IP to manually specify a static fixed IP address for your access point below Check the box Override Group Setting if the AP is a member of an AP Group and you wish to use a different setting than the AP Group setting IP Address Specify the IP address here This IP addre...

Page 33: ... the default value is blank Secondary DNS DHCP users can select From DHCP to get secondary DNS server s IP address from DHCP or User Defined to manually enter a value For static IP users the default value is blank Radio Settings Wireless Enable or disable the access point s 2 4GHz or 5GHz wireless radio When disabled no SSIDs on that frequency will be active Band Select the wireless standard used ...

Page 34: ...ateSet Set a Basic Service Set BSS rate this is a series of rates to control communication frames for wireless clients These settings are for experienced users only Please do not change any of the values on this page unless you are already familiar with these functions Changing these settings can adversely affect the performance of your access point Advanced Settings Contention Slot Select Short o...

Page 35: ...reless radio The default value is 1 RTS Threshold Set the RTS threshold of the wireless radio The default value is 2347 Fragment Threshold Set the fragment threshold of the wireless radio The default value is 2346 Multicast Rate Set the transfer rate for multicast packets or use the Auto setting Tx Power Set the power output of the wireless radio You may not require 100 output power Setting a lowe...

Page 36: ...edit WLAN groups in NMS Settings à WLAN RADIUS Group Assign the access point s 2 4GHz SSID s to a RADIUS group You can edit RADIUS groups in NMS Settings à RADIUS Access Control Group Assign the access point s 2 4GHz SSID s to a RADIUS group You can edit RADIUS groups in NMS Settings à Access Control ...

Page 37: ...cess point group to WLAN RADIUS and Access Control groups The Group Settings panel can be used to quickly move access points between exsiting groups select an access point and use the drop down menu or search to select access point groups and use and arrows to move APs between groups Basic Group Settings Name Edit the access point group name Description Enter a description of the access point grou...

Page 38: ...will choose a channel Auto Pilot Interval Specify a frequency for how often the auto channel setting will check reassign the wireless channel Check uncheck the Change channel even if clients are connected box according to your preference Channel Bandwidth Set the channel bandwidth or use Auto automatically select based on interference level BSS BasicRateSet Set a Basic Service Set BSS rate this is...

Page 39: ...ess point and access point will broadcast Clear to Send CTS before a packet is sent from client DTIM Period Set the DTIM delivery traffic indication message period value of the wireless radio The default value is 1 RTS Threshold Set the RTS threshold of the wireless radio The default value is 2347 Fragment Threshold Set the fragment threshold of the wireless radio The default value is 2346 Multica...

Page 40: ...can edit WLAN groups in NMS Settings à WLAN RADIUS Group Assign the access point group s 2 4GHz SSIDs to a RADIUS group You can edit RADIUS groups in NMS Settings à RADIUS Access Control Group Assign the access point s 2 4GHz SSIDs to a RADIUS group You can edit RADIUS groups in NMS Settings à Access Control ...

Page 41: ... will be available for selection in NMS Settings à Access Point access point Profile Settings access point group Profile Group Settings IV 5 1 The search function can be used to locate a WLAN or WLAN Group Type in the search box and the list will update Select a WLAN or WLAN Group using the check boxes and click Edit or click Add to add a new WLAN or WLAN Group ...

Page 42: ... Fi network When disabled the SSID will not be visible as an available Wi Fi network to clients clients must manually enter the SSID in order to connect A hidden disabled SSID is typically more secure than a visible enabled SSID Wireless Client Isolation Enable or disable wireless client isolation Wireless client isolation prevents clients connected to the access point from communicating with each...

Page 43: ...ess data encryption are available When data is encrypted information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key It s essential to configure wireless security in order to prevent unauthorised access to your network Select hard to guess passwords which include combinations of numbers letters and symbols and change your password regularly Please refer...

Page 44: ...nt access point Profile Settings access point group Profile Group Settings IV 5 1 WLAN Group Settings Name Edit the WLAN Group name Description Enter a description of the WLAN Group for reference e g 2nd Floor Office HR Group Members Select SSIDs to include in the group using the checkboxes and assign VLAN IDs ...

Page 45: ...US Group it will be available for selection in NMS Settings à Access Point access point Profile Settings access point group Profile Group Settings IV 5 1 The search function can be used to locate a RADIUS Server Account or Group Type in the search box and the list will update Make a selection using the check boxes and click Edit or click Add to add a new WLAN or WLAN Group ...

Page 46: ...he RADIUS server Value must be between 1 65535 Shared Secret Enter a shared secret password between 1 99 characters in length This should match the MAC RADIUS password used in IV 3 1 3 6 or IV 3 2 3 Session Timeout Set a duration of session timeout in seconds between 0 86400 Accounting Enable or disable RADIUS accounting Accounting Port When accounting is enabled above set the UDP port used in the...

Page 47: ...ertificate Internal RADIUS Server Name Enter a name for the Internal RADIUS Server Description Enter a description of the Internal RADIUS Server for reference EAP Certificate File Format Displays the EAP certificate file format PCK 12 pfx p12 EAP Certificate File Click Upload to open a new window and select the location of an EAP certificate file to use If no certificate file is uploaded the inter...

Page 48: ...6400 Termination Action Select a termination action attribute Reauthentication sends a RADIUS request to the access point Not Reathentication sends a default termination action attribute to the access point Not Send no termination action attribute is sent to the access point Add Edit RADIUS Accounts The internal RADIUS server can authenticate up to 256 user accounts The RADIUS Accounts page allows...

Page 49: ...lays if specified user name has a password configured or not not configured Customize Click Edit to open a new field to set edit a password for the specified user name below Delete Selected Delete selected user from the user registration list Delete All Delete all users from the user registration list Edit User Registration List User Name Existing user name is displayed here and can be edited acco...

Page 50: ...up Profile Group Settings IV 5 1 RADIUS Group Settings Group Name Edit the RADIUS Group name Description Enter a description of the RADIUS Group for reference 2 4GHz RADIUS Enable Disable primary secondary RADIUS servers for 2 4GHz 5GHz RADIUS Enable Disable primary secondary RADIUS servers for 5GHz Members Add RADIUS user accounts to the RADIUS group Maximun 5 ...

Page 51: ...d TheAccess Control paneldisplays information about MAC Access Control MAC Access Control Groups and Groups and allows you to add or edit MAC Access Control MAC Access Control Group settings When you add an Access Control Group it will be available for selection in NMS Settings à Access Point access point Profile Settings access point group Profile Group Settings IV 5 1 The search function can be ...

Page 52: ... Reset Clear all fields MAC address entries will be listed in the MAC Address Filtering Table Select an entry using the Select checkbox Select Delete selected or all entries from the table MAC Address The MAC address is listed here Delete Selected Delete the selected MAC address from the list Delete All Delete all entries from the MAC address filtering table Export Click Export to save a copy of t...

Page 53: ...roup Profile Group Settings IV 5 1 MAC Filter Group Settings Group Name Edit the MAC Access Control Group name Description Enter a description of the MAC Access Control Group for reference Action Select Blacklist to deny access to specified MAC addresses in the group and select Whitelist to permit access to specified MAC address in the group Members Add MAC addresses to the group ...

Page 54: ...r external FTP server locate the file and click Upload or Check The table below will display the Firmware Name Firmware Version NMS Version Model and Size Then click Upgrade All to upgrade all access points in the Array or select Access Point groups from the list using check boxes and click Upgrade Selected to upgrade only selected access points ...

Page 55: ...IV 5 6 Advanced IV 5 6 1 System Security Configure the NMS system login name and password ...

Page 56: ...You can also set your AP Controller as a DHCP server to assign IP addresses to other devices on your LAN The access point s default IP address is 192 168 2 2 Disable other DHCP servers on the LAN if using AP Controllers DHCP Server LAN side IP Address IP Address Assignment Select Static IP to manually specify a static fixed IP address for your access point Select DHCP Client for your access point ...

Page 57: ...default value is blank Primary DNS Address For static IP users the default value is blank Secondary DNS Address For static IP users the default value is blank DHCP Client IP Address When DHCP Client is selected this value cannot be modified Subnet Mask When DHCP Client is selected this value cannot be modified Default Gateway Select From DHCP or select User Defined and enter a default gateway Prim...

Page 58: ...r access point s DHCP server will assign to devices on the network Domain Name Enter a domain name Lease Time Select a lease time from the drop down menu IP addresses will be assigned for this period of time Default Gateway Enter a default gateway Primary DNS Address Enter a primary DNS address Secondary DNS Address Enter a secondary DNS address Your access point s DHCP server can be configured to...

Page 59: ... Identifies LAN port 1 or 2 Enable Enable disable specified LAN port Speed Duplex Select a speed duplex type for specified LAN port or use the Auto value LAN ports can operate up to 1000Mbps and full duplex enables simultaneous data packets transfer receive Flow Control Enable disable flow control Flow control can pause new session request until current data processing is complete in order to avoi...

Page 60: ...LAN IDs 1 4094 are supported VLAN IDs in the range 1 4094 are supported VLAN Interface Wired LAN Port Wireless Identifies LAN port 1 or 2 and wireless SSIDs 2 4GHz or 5GHz VLAN Mode Select Tagged Port or Untagged Port for specified LANinterface VLAN ID Set a VLAN ID for specified interface if Untagged Port is selected Management VLAN VLAN ID Specify the VLAN ID of the management VLAN Only the host...

Page 61: ... 2 4GHz Wi Fi network s When auto channel is disabled select a wireless channel manually Channel Select a wireless channel from 1 11 Channel Bandwidth Set the channel bandwidth 20MHz lower performance but less interference 40MHz higher performance but potentially higher interference or Auto automatically select based on interference level BSS BasicRate Set Set a Basic Service Set BSS rate this is ...

Page 62: ...ireless radio preamble type The preamble type in 802 11 based wireless communication defines the length of the CRC Cyclic Redundancy Check block for communication between the access point and roaming wireless adapters The default value is Short Preamble Guard Interval Set the guard interval A shorter interval can improve performance 802 11g Protection Enable disable 802 11g protection which increa...

Page 63: ...ragment Threshold Set the fragment threshold of the wireless radio The default value is 2346 Multicast Rate Set the transfer rate for multicast packets or use the Auto setting Tx Power Set the power output of the wireless radio You may not require 100 output power Setting a lower power output can enhance security since potentially malicious unknown users in distantareas will not be able to access ...

Page 64: ...s for Broadcast SSID Enable or disable SSID broadcast When enabled the SSID will be visible to clients as an available Wi Fi network When disabled the SSID will not be visible as an available Wi Fi network to clients clients must manually enter the SSID in order to connect A hidden disabled SSID is typically more secure than a visible enabled SSID Wireless Client Isolation Enable or disable wirele...

Page 65: ...ct to the access point Disabling wireless authentication is not recommended When disabled anybody within range can connect to your device s SSID IV 6 2 3 2 WEP WEP Wired Equivalent Privacy is abasic encryption type For a higher level of security consider using WPA encryption Key Length Select 64 bit or 128 bit 128 bit is more secure than 64 bit and is recommended Key Type Choose from ASCII anyalph...

Page 66: ...supports your selection Encryption Select TKIP AES Mixed Mode or AES encryption type Key Renewal Interval Specify a frequency for key renewal in minutes Pre Shared Key Type Choose from Passphrase 8 63 alphanumeric characters or Hex up to 64 characters from 0 9 a f andA F Pre Shared Key Please enter a security key password according to the format you selected above IV 6 2 3 5 WPA EAP WPA Type Selec...

Page 67: ...tering RADIUS authentication methods MAC RADIUS Authentication Restrict wireless clients access based on MAC address via a RADIUS server or password authentication via a RADIUS server See IV 6 5 RADIUS to configure RADIUS servers WPS must be disabled to use MAC RADIUS authentication See IV 6 4 for WPS settings MAC RADIUS Password Select whether to use MAC address or password authentication via RAD...

Page 68: ...wn below When using WDS configure the IP address of each access point to be in the same subnet and ensure there is only one active DHCP server among connected access points preferably on the WAN side WDS must be configured on each access point using correct MAC addresses All access points should use the same wireless channel and encryption method ...

Page 69: ...ss encryption method Local MAC Address Displays the MAC address of your access point WDS Peer Settings WDS Enter the MAC address for up to four other WDS devices you wish to connect WDS VLAN VLAN Mode Specify the WDS VLAN mode to Untagged Port or Tagged Port VLAN ID Specify the WDS VLAN ID when Untagged Port is selected above WDS Encryption method Encryption Select whether to use None or AES encry...

Page 70: ...s four categories Basic Advanced Security and WDS IV 6 3 1 Basic The Basic screen displays basic settings for your access point s 5GHz Wi Fi network s Wireless Enable or disable the access point s 5GHz wireless radio When disabled no 5GHz SSIDs will be active Band Select the wireless standard used for the access point Combinations of 802 11a ...

Page 71: ...annel Auto Channel Interval Specify a frequency for how often the auto channel setting will check reassign the wireless channel Check uncheck the Change channel even if clients are connected box according to your preference Channel Bandwidth Set the channel bandwidth 20MHz lower performance but less interference Auto 40 20MHz or Auto 80 40 20MHz automatically select based on interference level BSS...

Page 72: ...frames for wireless clients ...

Page 73: ...ccess point will broadcast Clear to Send CTS before a packet is sent from client DTIM Period Set the DTIM delivery traffic indication message period value of the wireless radio The default value is 1 RTS Threshold Set the RTS threshold of the wireless radio The default value is 2347 Fragment Threshold Set the fragment threshold of the wireless radio The default value is 2346 Multicast Rate Set the...

Page 74: ...t the beacon interval of the wireless radio The default value is 100 Station idle timeout Set the interval for keepalive messages from the access point to a wireless client to verify if the station is still alive active ...

Page 75: ...s for Broadcast SSID Enable or disable SSID broadcast When enabled the SSID will be visible to clients as an available Wi Fi network When disabled the SSID will not be visible as an available Wi Fi network to clients clients must manually enter the SSID in order to connect A hidden disabled SSID is typically more secure than a visible enabled SSID Wireless Client Isolation Enable or disable wirele...

Page 76: ...ation method from the drop down menu and refer to the information below appropriate for your method Additional Authentication Select an additional authentication method from the drop down menu and refer to the information below appropriate for your method Please refer back to IV 6 2 3 Security for more information on authentication and additional authentication types ...

Page 77: ... the WAN side WDS must be configured on each access point using correct MAC addresses All access points should use the same wireless channel and encryption method 5GHz WDS Mode WDS Functionality Select WDS with AP to use WDS with access point or WDS Dedicated Mode to use WDS and also block communication with regular wireless clients When WDS is used each access point should be configured with corr...

Page 78: ...onnect WDS VLAN VLAN Mode Specify the WDS VLAN mode to Untagged Port or Tagged Port VLAN ID Specify the WDS VLAN ID when Untagged Port is selected above WDS Encryption Encryption Select whether to use None or AES encryption and enter a pre shared key for AES with 8 63 alphanumeric characters ...

Page 79: ...cation Please refer to manufacturer s instructions for your other WPS device WPS Check uncheck this box to enable disable WPS functionality WPS must be disabled when using MAC RADIUS authentication see IV 6 2 3 6 IV 6 5 Product PIN Displays the WPS PIN code of the device used for PIN code WPS You will be required to enter this PIN code into another WPS device for PIN code WPS Click Generate PIN to...

Page 80: ...user based authentication to improve security and offer wireless client control users can be authenticated before gaining access to a network The access point can utilize both a primary and secondary backup RADIUS server for each of its wireless frequencies 2 4GHz 5GHz External RADIUS servers can be used or the access point s internal RADIUS server can be used To use RADIUS servers go to Local Net...

Page 81: ...igure the RADIUS server settings for 2 4GHz 5GHz Each frequency can use an internal or external RADIUS server RADIUS Type Select Internal to use the access point s built in RADIUS server or external to use an external RADIUS server ...

Page 82: ...Port When accounting is enabled above set the UDP port used in the accounting protocol of the RADIUS server Value must be between 1 65535 IV 6 5 2 Internal Server The access point features a built in RADIUS server which can be configured as shown below used when Internal is selected for RADIUS Type in the Local Network à RADIUS Settings menu To use RADIUS servers go to Wireless Settings à Security...

Page 83: ...d for use between the internal RADIUS server and RADIUS client The shared secret should be 1 99 characters in length This should match the MAC RADIUS password used in IV 6 2 3 6 or IV 6 3 3 Session Timeout Set a duration of session timeout in seconds between 0 86400 Termination Action Select a termination action attribute Reauthentication sends a RADIUS request to the access point Not Reathenticat...

Page 84: ...ames here separated by commas Add Click Add to add the user to the user registration list Reset Clear text from the user name box Select Check the box to select a user User Name Displays the user name Password Displays if specified user name has a password configured or not not configured Customize Click Edit to open a new field to set edit a password for the specified user name below ...

Page 85: ...gistration list Delete All Delete all users from the user registration list Edit User Registration List User Name Existing user name is displayed here and can be edited according to your preference Password Enter or edit a password for the specified user ...

Page 86: ...permitted to connect to the access point Devices are each identified by their unique MAC address If a device which is not on the list of permitted MAC addresses attempts to connect to the access point it will be denied To enable MAC filtering go to Local Settings à Security à Additional Authentication and select MAC Filter see IV 6 2 3 IV 6 3 3 The MAC address filtering table is displayed below ...

Page 87: ...ll fields MAC address entries will be listed in the MAC Address Filtering Table Select an entry using the Select checkbox Select Delete selected or all entries from the table MAC Address The MAC address is listed here Delete Selected Delete the selected MAC address from the list Delete All Delete all entries from the MAC address filtering table Export Click Export to save a copy of the MAC filteri...

Page 88: ...rent categories of wireless traffic Traffic is sent to the following queues Background Low Priority High throughput non time sensitive bulk data e g FTP Best Effort Medium Priority Traditional IP data medium throughput and delay Video High Priority Time sensitive video data with minimum time delay Voice High Priority Time sensitive data such as VoIP and streaming media with minimum time delay Queu...

Page 89: ...ine priority of frame transmission A shorter window has a higher probability priority of transmission CWMax Maximum Contention Window milliseconds This value is the upper limit to random backoff value doubling see above AIFSN Arbitration Inter Frame Space milliseconds Specifies additional time between when a channel goes idle and the AP client sends data frames Traffic with a lower AIFSN value has...

Page 90: ...de is a standalone access point AP controller mode acts as the designated master of the AP array and Managed AP mode acts as a slave AP within the AP array IV 7 2 Network Settings IV 7 2 1 System Information The System Information page displays basic system information about the access point ...

Page 91: ...ersion Displays thefirmware version MAC Address Displays the access point s MAC address Management VLAN ID Displays the management VLAN ID IP Address Displays the IP address of this device Click Refresh to update this value Default Gateway Displays the IP address of the default gateway DNS IP address of DNS Domain Name Server DHCP Server IP address of DHCP Server Wired LAN Port Settings Wired LAN ...

Page 92: ...hentication method for the specified SSID See IV 6 Wireless Settings Encryption Type Displays the encryption type for the specified SSID See IV 6 Wireless Settings VLAN ID Displays the VLAN ID for the specified SSID See IV 6 1 3 VLAN Additional Authentication Displays the additional authentication type for the specified SSID See IV 6 Wireless Settings Wireless Client Isolation Displays whether wir...

Page 93: ... the SSID which the client is connected to MAC Address Displays the MAC address of the client Tx Displays the total data packets transmitted by the specified client Rx Displays the total data packets received by the specified client Signal Displays the wireless signal strength for the specified client Connected Time Displays the total time the wireless client has been connected to the access point...

Page 94: ...scan is complete click Export to save the results to local storage Site Survey Results Ch Displays the channel number used by the specified SSID SSID Displays the SSID identified by the scan MAC Address Displays the MAC address of the wireless router access point for the specified SSID Security Displays the authentication encryption type of the specified SSID Signal Displays the current signal str...

Page 95: ...n such as up time and connection processes This information is useful for network administrators When the log is full old entries are overwritten Save Click to save the log as a file on your local computer Clear Clear all log entries Refresh Refresh the current log ...

Page 96: ... Settings u System Boot Displays current model name u NTP Client u Wired Link LAN Port link status and speed status u Proxy ARP Proxy ARP module start stop u Bridge Bridge start stop u SNMP SNMP server start stop u HTTP HTTP start stop u HTTPS HTTPS start stop u SSH SSH client server start stop u Telnet Telnet client server start or stop u WLAN 2 4G WLAN 2 4G channel status and country region stat...

Page 97: ...based configuration interface see IV 7 4 4 Factory Default for how to reset the access point Account to Manage This Device Administrator Name Set the access point s administrator name This is used to log in to the browser based configuration interface and must be between 4 16 alphanumeric characters case sensitive Administrator Password Set the access point s administrator password This is used to...

Page 98: ... manager for SNMP SET requests SNMP Trap Enable or disable SNMP Trap to notify SNMP manager of network errors SNMP Trap Community Enter an SNMP Trap Community name for verification with the SNMP manager for SNMP TRAP requests SNMP Trap Manager Specify the IP address or sever name 2 128 alphanumeric characters of the SNMP manager HTTP Internet browser HTTP protocol management interface HTTPS Intern...

Page 99: ...C to enter the required values automatically according to your computer s current time and date NTP Time Server Use NTP The access point also supports NTP Network Time Protocol for automatic time and date setup Server Name Enter the host name or IP address of the time server if you wish Update Interval Specify a frequency in hours for the access point to update synchronize with the NTP server Time...

Page 100: ... to attached USB storage Syslog Email Settings Email Logs Check uncheck the box to enable disable email logs When enabled the log will be emailed according to the settings below Email Subject Enter the subject line of the email which will be sent containing the log SMTP Server Address Specify the SMTP server address for the sender email account SMTP Server Port Specify the SMTP server port for the...

Page 101: ...uzzer which can sound on command using the I m Here page This is useful for network administrators and engineers working in complex network environments to locate the access point The buzzer is loud Duration of Sound Set the duration for which the buzzer will sound when the Sound Buzzer button is clicked Sound Buzzer Activate the buzzer sound for the above specified duration of time ...

Page 102: ...r disabled according to your preference Power LED Select on or off Diag LED Select on or off IV 7 4 2 Update Firmware The Firmware page allows you to update the system firmware to a more recent version Updated firmware versions often offer increased performance and security as well as bug fixes This firmware update is for an individual access point To update firmware for multiple access points in ...

Page 103: ...d firmware from your local computer or from an attached USB device Firmware Update File Click Browse to open a new window to locate and select the firmware file in your computer Update Click Update to upload the specified firmware file to your access point ...

Page 104: ...USB device Save Settings to PC Save Settings Click Save to save settings and a new window will open to specify a location to save the settings file You can also check the Encrypt the configuration file with a password box and enter a password to protect the file in the field underneath if you wish Restore Settings from PC Restore Settings Click the browse button to find a previously saved settings...

Page 105: ...ry Default Click Factory Default to restore settings to the factory default A pop up window will appear and ask you to confirm After resetting to factory defaults please wait for the access point to reset and restart IV 7 4 5 Reboot If the access point malfunctions or is not responding then it is recommended that you reboot the device or reset the access point back to its factory default settings ...

Page 106: ... measure the round trip time for sent messages Destination Address Enter the address of the host Execute Click execute to ping the host IV 8 1 2 Trace Route Traceroute is a diagnostic tool for displaying the route path and measuring transit delays of packets across an IP network Destination Address Enter the address of the host Execute Click execute to execute the traceroute command ...

Page 107: ...gs Follow the example below to A Create a WLAN group B Create an access point group C Assign the access point group to use the SSID group settings A 1 Go to NMS Settings à WLAN and click Add in the WLAN panel 2 Enter an SSID name and set authentication encryption and click Apply 3 The new SSID will be displayed in the WLAN panel Repeat to add additional SSIDs according to your preference and then ...

Page 108: ...ups according to your preference B 1 Go to NMS Settings à Access Point and click Add in the Access Point Group Panel 2 Enter a Name and then scroll down to the Group Settings panel and use the button to add selected access points into your group from the box on the right side Click Apply when done ...

Page 109: ...o any language or computer language in any form or by any means electronic mechanical magnetic optical chemical manual or otherwise without the prior written permission of this company This company makes no representations or warranties either expressed or implied with respect to the contents hereof and specifically disclaims any warranties merchantability or fitness for any particular purpose Any...

Reviews:

No comments