background image

109 

 

Chapter VII: AP Control 

7-1 Scan Device 
This page allows you to scan and add devices to the AP control list.   

 

Click scan under filter device.  It will scan for all managed APs on the network and list them under Scan 
Results. Select the APs you wish to manage and click “Import” 

 

7-1-1 Filter Device 

 

VLAN #:  

 

Select VLAN network to discover managed APs 

Default Password: 

Set Login system password by managed APs 

Sort: 

 

 

Select discovered Aps by type (IP or MAC). 

 

Summary of Contents for HPOW5CM

Page 1: ...www hawkingtech com e mail techsupport hawkingtech com COPYRIGHT 2017 HAWKING TECHNOLOGIES INC ALL RIGHTS RESERVED USER S MANUAL High Power Outdoor Wireless Access Point with Built in AP Controller H...

Page 2: ...g Technology makes no warranty or representation expressed implied or statutory with respect to its products or the contents or use of this documentation and all accompanying software and specifically...

Page 3: ...ired operation Any changes or modifications not expressly approved by the party responsible for compliance could void the authority to operate equipment Federal Communication Commission FCC Radiation...

Page 4: ...setup 18 2 3 2 Mac OS X IP Address Setup 21 2 3 3 Accessing the Web Page User Interface 21 Chapter III Setup Wizard 23 3 1 Controller AP Mode 23 3 1 1 Setup Wizard 24 3 1 2 Scan AP Device 26 3 2 AP Mo...

Page 5: ...2 2 DNS 55 4 2 3 802 1d Spinning Tree 55 4 3 VLAN Setup 56 4 3 1 VLAN Network Settings 56 4 3 2 VLAN DHCP Service 58 4 3 3 VLAN Access Point 61 4 3 4 VLAN Mac Filter 64 4 3 5 VLAN 802 11r Fast Roamin...

Page 6: ...ngs 87 5 3 WMM QoS 88 5 4 Station Setup 90 5 4 1 AP Station Security Settings 90 5 5 Repeater AP Setup 92 5 6 Repeater AP MAC Filter 97 5 7 WDS Setup 97 5 8 WDS Status 99 Chapter VI Advanced Settings...

Page 7: ...Profile Setting 118 8 2 System Upgrade 118 8 3 Network Utility 119 8 4 Reboot 120 Chapter IX Status 121 9 1 Overview 121 9 2 Wireless Client 121 9 3 Online Users 121 9 4 Authentication Log by Captive...

Page 8: ...est wireless speeds and compatibility and the 800mW high power gives you the greatest range and flexibility Other features of the HPOW5CM include Supports 2 4GHz wireless standard Provides IEEE 802 11...

Page 9: ...or transmission speed Dynamic Wireless re transmission IEEE802 11f IAPP Inter Access Point Protocol hand over users to another AP IEEE 802 11i Preauth PMKSA Cache IEEE 802 11d Multi country roaming Wi...

Page 10: ...ontrol IEEE802 11e WMM System Administration Intuitive Web Management Interface Password Protected Access Firmware upgrade via Web Reset to Factory Defaults Profiles Configuration Backup and Restore O...

Page 11: ...ill become warm when used for a long period of time This is normal and is not a malfunction DO NOT put this access point on paper cloth or other flammable materials 7 There are no user serviceable par...

Page 12: ...OW5CM 1x RJ45 Cable 1x Power Adapter Power Supply 1x Power Over Ethernet PoE Adapter 1x Wall Mounting Kit 2x Cable Ties for Stand Pole mounting 1x Setup CD includes Manual QIG 1x Quick Installation Gu...

Page 13: ...dup of static electricity Grounding cable not included in the package We suggest 16 18 AWG grounding cable 8 LED for strong weak WiFi Signal Indicator for Client Bridge Repeater WISP 9 Ethernet cable...

Page 14: ...device Press the center tab you may need a flathead screwdriver and the cover should be able to be removed with a small amount of force 2 Connect the A C power adapter to the wall socket and then conn...

Page 15: ...he IP Address of your computer to be in the same range as the HPOW5CM see section 2 3 Log into the setup page to configure the HPOW5CM 2 2 Definitions of HPOW5CM Supported Modes The HPOW5CM supports 6...

Page 16: ...ireless status upgrade firmware and remotely controll multiple HPOW5CMs The other HPOW5CMs must be in AP mode Go to section 3 1 When AP mode is chosen the system can be configured as a standard wirele...

Page 17: ...Repeater AP Mode is chosen the system can be configured in bridged mode In this mode the device can connect to other Access Points via a wireless link and be used to bridge wired clients to the netwo...

Page 18: ...s are bridged together Go to section 3 3 When WISP mode is chosen the system can be configured in Wireless repeater mode In this mode the device can wirelessly connect to a WISP wireless internet serv...

Page 19: ...xt step you should do is setup the access point with proper network parameters so it can work properly in your network environment Before you can connect to the access point and start configuration pr...

Page 20: ...Settings on the left hand column Right click Ethernet or Local Area Connection then select Properties Ethernet Local Area Connection Properties window will appear select Internet Protocol Version 4 T...

Page 21: ...20...

Page 22: ...System Preferences go to Network Select your Ethernet adapter Make sure next to Configure IPv4 you have it set under Manually IP Address 192 168 2 20 Subnet Mask 255 255 255 0 Click Apply when finishe...

Page 23: ...s complete please open your web browser In the address field please type 192 168 2 254 and press enter The following message should be shown For username and passwords see the table below Root Account...

Page 24: ...elected one HPOW5CM is setup to control multiple HPOW5CM s in AP mode on the network The HPOW5CM in AP controller mode can set IPs configure wireless settings monitor wireless status upgrade firmware...

Page 25: ...ard This section is optional and will only setup the IP settings and the AP settings in CAP mode You can change the default IP of the device here if required By default the IP is 192 168 2 254 Choose...

Page 26: ...ver you want Authentication Choose your type of security Hawking recommends AUTO WPA or WPA 2PSK 3 1 1 2 Authentication Wireless Security This section allows you to set up wireless security to prevent...

Page 27: ...IP is short for Temporal Key Integrity Protocol TKIP scrambles the keys using a hashing algorithm and by adding an integrity checking feature ensures that the keys haven t been tampered with Pre share...

Page 28: ...l add the AP you selected to your Controller You can also change the IP address settings of the devices Check the device and then go to the Update IP address and Netmask and make your changes Click Ap...

Page 29: ...ou want to Batch Setup under Device List Under VLAN List you should see options to configure VLAN Authentication Profile Gateway DNS time Server Management Wireless Basic Setup Wireless Advanced Setup...

Page 30: ...29 Reboot For more information go to section 7 2 After you make your changes be sure to choose Reboot and Apply so the changes take effect...

Page 31: ...Ethernet ports wand wireless interfaces are bridged together This section provides a detailed explanation for users on how to configure AP mode Log into the settings page go to system and select Opera...

Page 32: ...have a preferred DNS or you have to specify one please choose specify and enter in your values 3 2 2 Wireless Setup This page is used to define the parameters for the wireless LAN clients ESSID This...

Page 33: ...WPA PSK or WPA2 PSK When you select this mode the wireless access point will use WPA encryption and the following setup menu will be shown on your web browser Cipher Type AES is short for Advanced En...

Page 34: ...pter or the LAN2 port to add this access point to your network Please change your computer IP address back to Obtain an IP automatically You can manually configure these settings by going to section 4...

Page 35: ...ou back into the settings page Go to Wizard Click Next 3 3 1 LAN setup You can change the default IP of the device here if required By default the IP is 192 168 2 254 Choose your DNS type By default i...

Page 36: ...Point to Connect Click Site Survey for it to automatically scan for a network to connect to Site Survey Press this button for the device to automatically scan for wireless networks After it scans a li...

Page 37: ...ar here You can also manually enter the name or click on Site Survey for the device to scan for wireless networks Authentication After you click setup the security type of the wireless network you wis...

Page 38: ...WPA or WPA 2PSK 3 3 3 1 Authentication Wireless Security This section allows you to set up wireless security to prevent any unauthorized access to your wireless network Open System security disabled W...

Page 39: ...at of the information shall according to the key type selected Pre shared key can be either entered as a 256 bit secret in 64 HEX digits format or 8 to 63 ASCII characters Hawking recommends using WPA...

Page 40: ...e signal and can even act as a router for these signals NAT is enabled and wired and wireless computers can share the same IP range This section provides a detailed explanation for users on how to con...

Page 41: ...our DNS type By default it will be received automatically but if you have a preferred DNS or you have to specify one please choose specify and enter in your values 3 4 2 LAN setup You can change the d...

Page 42: ...41 3 4 3 AP Station List Setup This page allows you to search for an available Access Point to Connect Click Site Survey for it to automatically scan for a network to connect to...

Page 43: ...evice to scan for wireless networks Authentication After you click setup the security type of the wireless network you wish to connect to will appear here Type in your key to connect Click Next 3 4 4...

Page 44: ...Cipher Type AES is short for Advanced Encryption Standard The AES cipher is specified as a number of repetitions of transformation rounds that convert the input plain text into the final output of ci...

Page 45: ...ter IP address back to Obtain an IP automatically 3 5 Router Mode When Router mode is chosen the system can be configured as a Wireless Router In this mode the device is supposed to be connected to in...

Page 46: ...omputer s physical connection See below The physical setup is slightly different than the standard setup Plug your computer into LAN2 on the access point Plug your ISP s modem into the PoE 10 100 data...

Page 47: ...your DNS type By default it will be received automatically but if you have a preferred DNS or you have to specify one please choose specify and enter in your values 3 5 2 LAN setup You can change the...

Page 48: ...ne the parameters for the wireless LAN clients ESSID This is the wireless broadcast name By default it is Hawking_HPOW5CM but you can change it to whatever you want Authentication Choose your type of...

Page 49: ...plain text into the final output of ciphertext Each round consists of several processing steps including one that depends on the encryption key A set of reverse rounds are applied to transform ciphert...

Page 50: ...49 Settings can be modified via the VLAN setup after configuration is complete See section 4 3...

Page 51: ...ernet Connection Type Static IP Static IP users can manually setup the WAN IP w a static IP provided by the Internet Service Provider ISP IP Address IP Netmask subnet mask IP Gateway are all provided...

Page 52: ...3 Internet Connection Type PPPoE PPPoE users need to manually enter their ISP provided username password Please contact them if you are not sure Username Enter user name for PPPoE connection Password...

Page 53: ...nect button on WAN information in the overview page to connect to the internet 4 1 4 Internet Connection Type PPTP The Point to Point Tunneling Protocol PPTP mode enables the implementation of secure...

Page 54: ...ported MPPE provides data security for the PPTP connection that is between the VPN client and the VPN server Reconnect Mode Always on A connection to internet is always maintained On Demand A connecti...

Page 55: ...P Address Netmask Gateway DNS and management This feature is only available under Router and WISP mode 4 2 1 LAN IP Setup The administrator can set it to obtain Dynamic IP an IP automatically or manua...

Page 56: ...a DNS server IP to setup a system DNS Primary The IP Address of the Primary DNS server Secondary The IP address of the secondary DNS server 4 2 3 802 1d Spinning Tree The spanning tree network protoc...

Page 57: ...VLANs 6 supported VLAN Flag Modes that are supported IP Address IP address assigned to VLAN Netmask Subnet Mask assigned to VLAN RADIO WiFi frequency supported Action Click Network button for configur...

Page 58: ...ccess Point Enable Disable the Wireless Radio 802 1d Spanning Tree The spanning tree network protocol provides a loop free topology for a bridged LAN between LAN interface and 8 WDS interfaces from wd...

Page 59: ...ETH VLAN Tag Setup Enable Disable and create your tags 4 3 2 VLAN DHCP Service Devices connected to the system can obtain an IP address automatically when this service is enabled This feature is only...

Page 60: ...f IP addresses to be used by the DHCP server when assigning IP address to clients The default range IP address is 192 168 2 10 to 192 168 2 70 Netmask Set IP Netmask Default 255 255 255 0 DNS1 IP Ente...

Page 61: ...es from the DHCP server Default is 86400 seconds Static Lease IP List This function allows you to assign a static IP address to a specific computer forever so you don t have to set the IP address for...

Page 62: ...D information with the site survey software and get unauthorized access to a private network With this disabled network security is enhanced and can prevent the SSID from begin seen on networked Clien...

Page 63: ...ifference between them is that WPA PSK recreates a simple shared key instead of using the user s certification Cipher Type You can chose use AES or TKIP with your WPA WPA2 encryption method AES is sho...

Page 64: ...rprise or WPA2 Enterprise General Setting The RADIUS authentication and encryption will be both enabled if this selected Cipher Type You can chose use AES or TKIP with your WPA WPA2 encryption method...

Page 65: ...characters WEP 802 1x When WEP 802 1x Authentication is enabled please refer to the following Dynamic WEP and RADIUS settings to complete the configuration Key Size Check on the respected button to en...

Page 66: ...s clients in the list which will have denied access to the Access Point while the access will be granted for all the remaining clients Action Type is set to Only Deny List MAC MAC Access Control is th...

Page 67: ...MK RO in minutes the default is 10000 administrator can set 1 65535 Reassoc deadline Reassociation deadline in time units Tus 1 024 ms range 1000 65535 Default 1000 R0 NAS Identifier PMK R0 Key Holder...

Page 68: ...Aps This will enable device roaming between both APs Mac Address Administrators must enter the MAC address of the other AP NAS Identifier Enter 1 48 octets of network domain name 128 bit Key Enter sh...

Page 69: ...omain name 128 bit Key Enter shared key R1 Key Holder List After setting up R1 Key Holder the information will appear on this list 4 4 Authentication This function is for web authentication It support...

Page 70: ...tiple users to simultaneously login 0 not limited Login Timeout After account login with no traffic system with automatically timeout Enter time in minutes Redirect URL After successful login system w...

Page 71: ...guest count limit login time type and flow control Service Enable Disable Login Type One Time login to start counting until end of time Multiple Times logout time will stop counting until the next re...

Page 72: ...unt Password Account password 4 4 4 OAuth2 0 Supports Facebook and Google by default Users can add additional OAuth2 0 servers through UI settings Display items Active Display on off status for the au...

Page 73: ...mber for Host Server Connect Type STARTTLS SSL TTL or none POP3 Server Test Test to see if the settings are operating correctly 4 4 6 Customize Page This function allows the user to customize the user...

Page 74: ...73 Select enable to active default Login Page Select disable to activate HTML Source Code Window for Customization 4 4 7 Customize Language User can create other languages for login page...

Page 75: ...splay Name Set name of Website IP Address Domain Set IP or Domain of the Open the website Full URL Set full website name 4 4 9 Privilege Address This function provides local device can access Internet...

Page 76: ...75 4 5 DHCP Setup Devices connected to the system can obtain an IP address automatically when this service is enabled This feature is only available in Router and WISP Modes...

Page 77: ...server when assigning IP address to clients The default range IP address is 192 168 2 10 to 192 168 2 70 the netmask is 255 255 255 0 DNS1 IP Enter IP address of the first DNS server this field is re...

Page 78: ...nds Static Lease IP List This function allows you to assign a static IP address to a specific computer forever so you don t have to set the IP address for a computer and still enjoy the benefit of usi...

Page 79: ...iption Provide description of the system Location Enter geographical location information of the system 4 6 2 Root Password Full administrative rights and access to all aspects of the configuration Ne...

Page 80: ...d the range is between 1 65535 Enable SSH Check to select SSH Service SSH Port Please The default is 22 and the range is between 1 65535 Click Generate Key button to generate RSA private key The host...

Page 81: ...etup System time can be configured via this page and manual setting or via a NTP server is supported Please go to System Time Server Local Time Display the current system time Mode Select NTP Server o...

Page 82: ...ht saving Setup Time Using Manual The user can manually set time date Date Set the date for system Time Set the time for system 4 8 PoE PassThrough This device supports PoE Bridge function If this is...

Page 83: ...m information remotely You can access the settings by going to System SNMP SNMP v2c Enable Check to enable SNMP v2c RO Community Set a community string to authorize read only access RW Community Set a...

Page 84: ...uthorize read write access SNMP Trap Events such as cold start interface up down and association disassociation will report to an assigned server Community Set a community string required by the remot...

Page 85: ...ient of a certain band If you select 802 11b only wireless clients using the wireless band you select 802 11b will be able to connect to this access point Maximum transfer rate 11Mbps If you select 80...

Page 86: ...you have a specific channel you wish to use you can select it here Tx Power You can adjust the output power of the access point to get the appropriate coverage for your wireless network Specify power...

Page 87: ...erval by default it s Enabled so throughput can be increased However it can also increase error rate in some installations due to increased sensitivity to radio frequency reflections Select the option...

Page 88: ...e All the radio stations received beacon recognizes the existence of such AP and may proceed to the next actions if the information from AP matches the requirement Beacon is sent on a periodic basis T...

Page 89: ...ming to the receiver The short preamble provides 72 bit Synchronization field to improve WLAN transmission efficiency with less overhead IGMP Snooping The process of listening to Internet Group Manage...

Page 90: ...seconds of a range from which the initial random backoff wait time is determined CWmax Maximum Contention Window The value specified here in the Maximum Contention Window is the upper limit in millise...

Page 91: ...nication quality deteriorates This is because when this policy is used a sender does not retransmit packets that have not been received by the recipient When the Normal ACK policy is used the recipien...

Page 92: ...ne is used Effective key is set with a choice of WEP Key 1 2 3 or 4 Network Key You can chose either HEX or ASCII for your WEP key value for 64bit encryption strength can use 10 digits for HEX 0 9 a f...

Page 93: ...orm ciphertext back into the original plaintext using the same encryption key TKIP is short for Temporal Key Integrity Protocol TKIP scrambles the keys using a hashing algorithm and by adding an integ...

Page 94: ...enabled network security is enhanced Client Isolation By default it is Disable Select Enable all clients will be isolated from each other which means they cannot reach each other Connection Limit Enab...

Page 95: ...ser s certification Cipher Type You can chose use AES or TKIP with your WPA WPA2 encryption method AES is short for Advanced Encryption Standard The AES cipher is specified as a number of repetitions...

Page 96: ...rprise or WPA2 Enterprise General Setting The RADIUS authentication and encryption will be both enabled if this selected Cipher Type You can chose use AES or TKIP with your WPA WPA2 encryption method...

Page 97: ...with Authentication RADIUS server Support 1 to 64 characters WEP 802 1x When WEP 802 1x Authentication is enabled please refer to the following Dynamic WEP and RADIUS settings to complete the configur...

Page 98: ...all the remaining clients Action Type is set to Only Allow List MAC Only Deny List MAC Define certain wireless clients in the list which will have denied access to the Access Point while the access wi...

Page 99: ...d with the same channel and own same security type settings This feature is only available in AP Mode Security Type Option is Disable WEP TKIP or AES from drop down list AES Key Enter 8 to 63 ASCII or...

Page 100: ...he status of each WDS enabled device on the network This feature is only available in AP Mode MAC Address Display MAC address of WDS devices RSSI Indicate the RSSI of the respective WDS s link TX RX R...

Page 101: ...e used This feature is only available in Router and WISP Modes Service The DMZ is disabled by default Chose an option to enable DMZ Automatic Assignment Enter Internal IP address of DMZ host Only one...

Page 102: ...ts on different protocols as shown in the IP Filter Setup Important to note that IP filter rules has precedence over Virtual server rules This feature is only available in Router and WISP Modes Click...

Page 103: ...0 80 Destination Address Mask Enter desired destination IP address and netmask i e 192 168 1 10 32 Destination Port Enter a port or a range of ports as start end i e port 20 80 Listen Click Yes radial...

Page 104: ...will be denied Only Deny List MAC The wireless clients in the MAC Filter List will be denied to access to Access Point All others will be allowed MAC Address Enter MAC address e g aa bb cc dd ee ff a...

Page 105: ...tual Server Protocol Type Select appropriate sessions TCP or UDP from shared host via multiple private ports Public Port A port or a range of ports may be specified as start end i e port 20 80 Private...

Page 106: ...Server rules the prior rules have higher priority The Virtual server rules have precedence over the DMZ rules when both rules exist 6 5 Access Control Access Control allows you to block or allow speci...

Page 107: ...Local LAN Destination Port cannot be used TCP UDP Local Port Specify local port LAN port range required for this rule Destination Port Specify destination port range required for this rule ICMP Specif...

Page 108: ...in each rule Local Destination IP Specify local LAN destination IP addresses range required for this rule If you specify local IP addresses range from 192 168 1 1 to 192 168 2 254 The matches a range...

Page 109: ...Domain IP Filtering MAC Filtering and Virtual Server There are 10 policies that can be defined Click Edit to configure edit a policy Create a Policy Select desired schedule for this policy Time Schedu...

Page 110: ...nder filter device It will scan for all managed APs on the network and list them under Scan Results Select the APs you wish to manage and click Import 7 1 1 Filter Device VLAN Select VLAN network to d...

Page 111: ...anaged APs MAC Address Display MAC Address for managed APs Host Name Display Host name for managed APs FW Version Displays the firmware version for managed APs FW Date Displays the firmware Release Da...

Page 112: ...p Administrators can centralize setting changes for managed APs See section 7 2 3 7 2 2 Device List This section shows you all the devices you have connected to the AP controller You can connect devic...

Page 113: ...0 Administrator can enable or disable 2 4GHz of the managed APs 802 1d Spanning Tree Administrator can enable or disable the function See section 4 3 1 Control Port The function administrator can enab...

Page 114: ...Setting system name system login port and system log server service for managed APs See section 4 6 Wireless Batch Setup Setting Wi Fi configurations for managed APs See section 5 1 Wireless Advanced...

Page 115: ...has to change AP devices they can modify MAC address of new managed AP 7 4 Group Setup Group setup allows you to create groups within the same VLAN for your Access Points VLAN Select VLAN Device Butto...

Page 116: ...image Description Enter a description of the map Layout Once the map is on the Map List administrators can click on the Layout button in the action tab to map out the AP network Managed APs will appe...

Page 117: ...e is placed you can click the View button to monitor AP status and locations 7 6 Authentication Profile Administrators can pre set authentication conditions in the profile For authentication refer to...

Page 118: ...or Disable authentication function See section 4 4 Click Dropdown to set authentication functions See section 4 4 Action Setup button can modify or delete for the authentication profile 7 7 Status Che...

Page 119: ...load Reset To Factory Default Click Default button to reset back to the factory default settings and expect Successful loading message Then click Reboot button to activate 8 2 System Upgrade Firmware...

Page 120: ...ctivity Ping utility using ICMP packets detects connectivity and latency between two network nodes As result of that packet loss and latency time are available in the Result field while running the PI...

Page 121: ...utton click Stop button to stopped test Destination Host Specifies the Destination Host for the finding the route taken by ICMP packets across the network MAX Hop Specifies the maximum number of hops...

Page 122: ...ewed on this page 9 2 Wireless Client Administrators can view the status of all Wireless users 9 3 Online Users The status can display online users by captive portal Administrators can monitor user s...

Page 123: ...network 9 4 Authentication Log by Captive Portal The authentication log can monitor account login logout type and account use time 9 5 System Log The Event log displays system events when system is u...

Page 124: ...he device Make sure they are tight and secure Make sure the pole itself is secure Note you will need an Ethernet cable long enough to go from the device to the PoE injector The PoE injector is not wea...

Page 125: ...24 10 2 Wall Mount Using the optional wall mount kit first mount the wall mounting kit on a secure wall Screw it in using the provided screws Once secure simply snap the HPOW5CM into the wall mount ki...

Page 126: ...125...

Page 127: ...le 10 3 Antenna Orientation Once you have mounted and connected HPOW5CM be sure to note the signal pattern of the antenna Only devices within the transmission cone are guaranteed to get a good signal...

Page 128: ...n board 32MB Built In LED Indicators 1 x Power 2 x LAN 4 x WLAN Signal LED Indicator Wireless Specification Network Standards Conformance IEEE802 11 b g n compliant Data Transfer Rate IEEE802 11b 1 2...

Page 129: ...ndensing Storage Humidity 100 Non Condensing Built in Antenna HPOW5CM 5dBi 2 4GHz Omni Antenna H Plane 360 E Plane 60 Input Power 48 VDC Ethernet Connector 2 Ethernet Connector Power Supply AC Input 1...

Reviews: