background image

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Pepwave AP One Series:

 

AP One AC Mini (HW1) / AP One Enterprise (HW 1-2) / AP One Flex (HW2-3) /  

AP One Rugged (HW1) / AP Pro AC (HW1) 

 

 

Pepwave AP Firmware 3.6.2 

January 2021 

 

 

 

C

OPYRIGHT

 & T

RADEMARKS

 

Specifications are subject to change without notice. Copyright © 2020 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are

 

 

   

 

 

 

   

 

 

 

 

 

 

 

 

 

 

 

 

trademarks of Peplink. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners. 

Summary of Contents for APO-AC-MINI

Page 1: ...epwave AP Firmware 3 6 2 January 2021 C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners ...

Page 2: ...AP One Flex 10 AP Pro AC 12 Installation 13 Installation Procedures 13 Dashboard 15 General 15 AP 16 Network 18 WAN 18 LAN 20 Interfaces 23 Ethernet Port 23 PepVPN 23 AP 26 Wireless SSID 26 C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentione...

Page 3: ... 53 Status Tab 54 Device 54 Client List 55 Mesh WDS Info 55 Portal 56 Rogue AP 56 Event Log 57 Restoring Factory Defaults 58 Appendix 58 C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their...

Page 4: ...A single access point provides as many as 32 virtual access points 16 on single radio models each with its own security policy WPA WPA2 etc and authentication mechanism 802 1x open captive portal etc allowing faster easier and more cost effective network builds Each member of the AP Series family also features a high powered Wi Fi transmitter that greatly enhances coverage and performance while re...

Page 5: ...ws for wireless expansion and enhancement of Wi Fi coverage WDS support allows secure and fast network expansion Guest Protect support guards sensitive business data and subnetworks WMM Wi Fi Multimedia and QoS Quality of Service support keeps video and other bandwidth intensive data flowing fast and lag free C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020...

Page 6: ...O FLX 1 x AP One Flex 1 x Cable Tie Power supply or Pepwave Passive PoE Injector are not included AP Pro AC APP AGN3 1 x AP Pro AC 1 x Waterproof Power Connector Kit 2 x Waterproof Ethernet Kit C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products ment...

Page 7: ...ademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners LED Indicators Status RED Access point initializing GREEN Access point ready LAN OFF No device connected to Ethernet port BLINKING Ethernet port sending receiving data ON Powered on device connected to Ethernet port Note that LAN 5 displays the status of the uplink connectio...

Page 8: ...her brands or products mentioned may be trademarks or registered trademarks of their respective owners LED Indicators Status RED Access point initializing GREEN Access point ready Wi Fi OFF 2 4 5GHz Wi Fi radio off BLINKING AP sending receiving data GREEN 2 4 5GHz Wi Fi radio on Note that this model includes a 2 4GHz Wi Fi radio and a 5GHz Wi Fi radio that can operate simultaneously to increase sp...

Page 9: ...ed may be trademarks or registered trademarks of their respective owners LED Indicators Power On Power On OFF Power Off Status RED Access point initializing GREEN Access point ready Wi Fi OFF 2 4 5GHz Wi Fi radio off BLINKING AP sending receiving data GREEN 2 4 5GHz Wi Fi radio on Note that this model includes a 2 4GHz Wi Fi radio and a 5GHz Wi Fi radio that can operate simultaneously to increase ...

Page 10: ...EMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners ...

Page 11: ... is connected without traffic BLINKING Ethernet port sending receiving data OFF No data is being transferred or No device connected to Ethernet port Port Type Auto MDI MDI X ports WAN Green LED ON Powered on device connected to Ethernet port or 1000Mbps OFF 10Mbps 100Mbps or No device connected to Ethernet port Orange LED ON Port is connected without traffic BLINKING Ethernet port sending receivin...

Page 12: ...ions are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners ...

Page 13: ...hose Pepwave AP devices having built in PoE ports only using an Ethernet cable to connect to the Power over Ethernet PoE switch or PoE injector 2 2 For those Pepwave AP devices that have a DC power source plug the AC adapter to the DC connector of the unit 3 Wait for the status LED to turn green C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd A...

Page 14: ...fault admin login ID and password admin and public respectively 7 After logging in the Dashboard appears Click the System tab to begin setting up your access point C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or reg...

Page 15: ...logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners WAN IP Address When your access point is connected to a WAN this field displays the WAN IP address For more information click the Details link which shows connection type details Status This field displays the current WAN connection status Device Information Model...

Page 16: ...ademarks of their respective owners AP Status Wireless Network SSID This field displays your access point s SSID Radio The radio frequency currently used by your access point appears here If you re using the AP One AC mini or the AP One In Wall and have configured both radios this displays both radios in use Security Policy This field displays the security policy your access point is currently usi...

Page 17: ...A value of 0 indicates that a VLAN ID is not being used MAC Address BSSID Your access point s MAC address appears here If you re using the AP One AC mini and have configured both radios this displays a MAC address for both the 2 4GHz and 5GHz radio Info Click this link to display the following information panel Stat Click this link to display the following statistics panel Usage Data Type Select P...

Page 18: ...168 0 3 as your access point s IP address IP Address Mode IP Address Mode options are Automatic and Manual In Automatic mode the IP address of your access point is acquired from a DHCP server on the Ethernet segment In Manual mode a user specified IP address is used for your access point as described below Static IP Address Subnet Mask You can use these fields to specify a unique IP address that y...

Page 19: ...d to prevent loops in bridged Ethernet LANs Scheduled Reboot When this box is checked your access point can be scheduled to reboot automatically on a recurring basis as indicated by the values under the Schedule Day and Time headings Ethernet Speed Duplex This is the port speed of the WAN connection It should be set to the same speed as the connected device in case of any port negotiation problems...

Page 20: ... of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners IP Settings IP Address Enter the LAN IP address and subnet mask to assign to your access point on the LAN DHCP Server Settings DHCP Server Check to enable the DHCP server feature of your access point Enabling DHCP is the best option for most users The following options will be enabl...

Page 21: ...offered to DNS clients or accept the default of 192 168 1 1 which is your access point s address on the LAN You can also specify up to two additional DNS servers to use when the primary server is busy or down Lease Time Specify the length of time that an IP address of a DHCP client remains valid When an address lease time has expired the assigned IP address is no longer valid and renewal of the IP...

Page 22: ...Port Range Port Mapping Single Port Traffic that is received by your access point via the specified protocol at the specified port is forwarded via the same port to the servers specified by the Server IP Address setting For example with IP Protocol set to TCP and Port set to Single Port and Service Port 80 TCP traffic received on port 80 is forwarded to the configured servers via port 80 Port Rang...

Page 23: ...N ID is supported 7 4 PepVPN PepVPN securely connects one or more remote sites to the site running your access point To set up PepVPN first give your site a local PepVPN ID To modify an existing local ID click C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands ...

Page 24: ... represent this profile The name can be any combination of alphanumeric characters 0 9 A Z a z underscores _ dashes and or non leading trailing spaces Encryption By default VPN traffic is encrypted with 256 bit AES If Off is selected on both sides of a VPN connection no encryption will be applied Remote ID To allow your access point to establish a VPN connection with a specific remote peer using a...

Page 25: ...king a connection If the field is empty your access point will wait for connection from the remote peer Therefore at least one of the two VPN peers must specify this value Otherwise VPN connections cannot be established Layer 2 Bridging When this check box is unchecked traffic between local and remote networks will be IP forwarded To bridge the Ethernet network of an Ethernet port on a local and r...

Page 26: ...icy can be defined and managed in this section Click New SSID to create a new network profile or click the existing network profile to modify its settings C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered t...

Page 27: ...ose a rate from the drop down menu Click the MCS Index link to display a reference table containing MCS and matching HT20 and HT40 values Multicast Filter This setting enables the filtering of multicast network traffic to the wireless SSID Multicast Rate This setting specifies the transmit rate to be used for sending multicast network traffic IGMP Snooping To allow your access point to convert mul...

Page 28: ...int or enter 0 to allow unlimited Wi Fi clients Security Settings Security Policy This setting configures the wireless authentication and encryption methods Available options are Open No Encryption WPA2 Personal WPA2 Enterprise WPA3 Personal WPA WPA2 Personal WPA WPA2 Enterprise and WPA2 WPA3 Personal To allow any Wi Fi client to access your AP without authentication select Open No Encryption Deta...

Page 29: ...against forged management frames spoofed from other devices Frames that are protected include Disassociation Deauthentication and QoS Action WPA3 Personal Passphrase Enter a passphrase of between 8 and 63 alphanumeric characters to create a passphrase used for data encryption and authentication Click Hide Show Passphrase to toggle visibility Fast Transition 802 11r The transition process of a mobi...

Page 30: ... not support v2 select v1 The default is v2 Management Frame Protection This feature protects stations against forged management frames spoofed from other devices Frames that are protected include Disassociation Deauthentication and QoS Action WPA2 WPA3 Personal Passphrase Enter a passphrase of between 8 and 63 alphanumeric characters to create a passphrase used for data encryption and authenticat...

Page 31: ...uthentication or RADIUS to require authentication If RADIUS is selected you ll be given the opportunity to select a RADIUS security method in the next field RADIUS Security Select PAP EAP TTLS PAP EAP TTLS MSCHAPv2 or PEAPv0 EAP MSCHAPv2 Splash Page If your web portal will use a splash page choose HTTP or HTTPS and enter the splash page s URL Landing Page If your web portal will use a landing page...

Page 32: ...e inactivity logouts Quota Reset Time This menu determines how your usage quota resets Setting it to Daily will reset it at a specified time every day Setting a number of minutes after quota reached establishes a timer for each user that begins after the quota has been reached Allowed Domains IPs To whitelist a domain or IP address enter the domain name IP address here and click To delete an exist...

Page 33: ...ver Authentication Port Enter the UDP authentication port s used by your RADIUS server s or click the Default button to enter 1812 Accounting Port Enter the UDP accounting port s used by your RADIUS server s or click the Default button to enter 1813 Maximum Retransmission Enter the maximum number of allowed retransmissions RADIUS Request Interval Enter a value in seconds to limit RADIUS request fr...

Page 34: ...k enter the IP address and choose a subnet mask from the drop down menu To add the blocked subnet click To delete a blocked subnet click Block Exception To create an exception to a blocked subnet above enter the IP address and choose a subnet mask from the drop down menu To add the exception click To delete an exception click Block PepVPN To block PepVPN access check this box Bandwidth Management ...

Page 35: ...d upstream bandwidth Client Downstream Limit Enter a value in kbps to limit connected clients downstream bandwidth Enter 0 to allow unlimited downstream bandwidth Firewall Settings Firewall Mode Choose Flexible Allow all except or Lockdown Block all except to turn on the firewall then create rules for the firewall exceptions by clicking See the discussion below for details on creating a firewall r...

Page 36: ... as your firewall rule type enter the IP address and subnet mask identifying the subnet to allow or deny MAC Address If you have chosen MAC Address as your firewall rule type enter the MAC address identifying the machine to allow or deny Application Service If you have chosen Application Service as your firewall rule type choose TCP or UDP from the Protocol drop down menu to allow or deny traffic ...

Page 37: ...ARP Request Control ARP request control is a Broadcast filter feature which blocks all broadcast traffic relays DHCP requests responds to ARP requests asking the MAC address of the gateway Default handling Choose between Bypass or Drop default Bypass Custom Action Add IP MAC address pairs to this field to either REPLY The AP replies to the MAC address itself according to the config DNAT The AP can...

Page 38: ...nk Other brands or products mentioned may be trademarks or registered trademarks of their respective owners AP Settings Protocol Choose 802 11ng or 802 11n ac as your access point s Wi Fi protocol The AP One AC mini provides the 802 11ng protocol for the 2 4 GHz band and the 802 11n ac protocol for the 5GHz band as shown below Operating Country This drop down menu specifies the national regional r...

Page 39: ... selects the 2 4 Ghz and 5GHz 802 11 channels to be used When Auto is selected the system will perform channel scanning based on the scheduled time set and choose the most suitable channel automatically Output Power This option enables the configuration of transmission power Choose between Max High Medium Low Max is the Maximum power supported for that country or Maximum power supported for the de...

Page 40: ... 48 μs Frame Aggregation With this feature enabled throughput will be increased by sending two or more data frames in a single transmission Aggregation Length This field is only available when Frame Aggregation is enabled It specifies the frame length for frame aggregation By default it is set to 50000 Max number of Clients Enter the maximum clients that can simultaneously connect to your access p...

Page 41: ...hts Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners Networks Scanning Interval This setting controls the interval in seconds that your access point scans for nearby networks Scanning Time This setting specifies the time in milliseconds that your access point scans any particular...

Page 42: ...ns are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners Mesh Settings Mesh ID Enter a name to represent Mesh profile Enable Click the box to enable Mesh Profile Frequency Select the 2 4GHz or 5GHz frequency to...

Page 43: ...ddress of the access point with which to form a WDS link Radio Selection Select the radio 2 4GHz or 5GHz for the WDS peer connection Encryption Select AES to enable encryption for WDS peer connections Selecting None disables encryption Admin Settings Devicer Name This field allows you to define a name for this Peplink Balance unit By default Device Name is set as Model_XXXX where XXXX refers to th...

Page 44: ...d allows you to specify a new administrator password Confirm Admin Password This field allows you to verify and confirm the new administrator password Web Session Timeout A web login session will be logged out automatically when it has been idle longer than the Web Session Timeout Unlimited session timeout 0 hours 0 minutes Default 4 hours 0 minutes Security This option is for specifying the proto...

Page 45: ...erver The settings for time server configuration are located at System Time C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners Firmware Upgrade Status Status LED Informa...

Page 46: ... located at System SNMP C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners Remote Syslog Settings Remote Syslog This setting specifies whether or not to log events at th...

Page 47: ...ogo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners SNMP Settings SNMP Device Name This field shows the router name defined at System Admin Security SNMP Port This option specifies the port which SNMP will use The default port is 161 SNMPv1 This option allows you to enable SNMP version 1 SNMPv2 This option allows yo...

Page 48: ... This setting specifies a subnet from which access to the SNMP server is allowed Enter subnet address here e g 192 168 1 0 and select the appropriate subnet mask Access Mode Choose between Read Onl y and Read and Write SNMPv3 User Settings Enable Enable the SNMPv3 user SNMPv3 User Name This setting specifies a user name to be used in SNMPv3 Authentication Protocol This setting specifies via a drop...

Page 49: ...arks or registered trademarks of their respective owners CBC DES CFB AES When CBC DES or CFB AES is selected an entry field will appear for the password Access Mode Choose between Read Only and Read and Write Controller Management Settings Controller Management Controller management is enabled when ticked when untickerd the Access Point is configured through the Web Admin GUI Controller Type This ...

Page 50: ...tings The Restore Factory Settings button is to reset the configuration to factory default settings After clicking the button you will need to click the Apply Changes button on the top right corner to make the settings effective Tick the Network Settings option to include the I P Address Subnet Mask Default Gateway DNS Server and Management VLAN ID Download Active Configurations Click Download to ...

Page 51: ...ng Mode Operating Mode allows you to select your desired operation mode between either AP or Air Monitor The settings for operation mode are located at System Operation Mode 9 10 Reboot C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned ma...

Page 52: ...tion 9 11 Tools 9 11 1 PING The ping test tool tests connectivity pinging the specified destination IP address The ping utility is located at System Tools Ping 9 11 2 Traceroute The traceroute test tool traces the routing path to the specified IP address The traceroute test utility is located at System Tools Traceroute C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copy...

Page 53: ... System Tools Nslookup C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners ...

Page 54: ...espective owners System Information Device Name This is the name specified in the Device Name field located at System Admin Security Model This shows the model name and number of this device Hardware Revision This shows the hardware version of this device Location This is the location name specified in the Location field located at System Admin Security Serial Number This shows the serial number o...

Page 55: ...without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners System Time This shows the current system time Diagnostic Report The Download link is for exporting a diagnostic report file required for system investigation Remote Assistance C...

Page 56: ...displayed 10 5 Rogue AP This section displays a list of nearby suspected rogue access points C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners ...

Page 57: ...utomatically Click the Clear Log button to clear the log C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Peplink Other brands or products mentioned may be trademarks or registered trademarks of their respective owners ...

Page 58: ...energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense This device complies with Part 15 of the FCC Rules Operation is subject to the following ...

Page 59: ...ng in conjunction with any other antenna or transmitter The availability of some specific channels and or operational frequency bands is country dependent and is firmware programmed at the factory to match the intended destination C OPYRIGHT T RADEMARKS Specifications are subject to change without notice Copyright 2020 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of ...

Reviews: