manualshive.com logo in svg

Pepwave AP One AC mini, User Manual, Page: 32 / 58

Share
Download
Pepwave AP One AC mini User Manual Download Page 32

 

http://www.pepwave.com  

32

  

Copyright © 

5/23/16

 Pepwave 

 

 

 

 

 

 

 

User Manual 

PEPWAVE

 AP Series

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Web Portal Login 

 

 

Web Portal  

Select Enable to turn on your access point’s built-in web portal functionality. 

 

Authentication  

Choose Open Access to allow users to connect without authentication or RADIUS to 

Method 

 

require authentication. If RADIUS is selected, you’ll be given the opportunity to select a RADIUS security method in 

the next field. 

 

RADIUS Security 

Select PAP, EAP-TTLS PAP, EAP-TTLS MSCHAPv2, or PEAPv0 EAP-MSCHAPv2. 

 

Splash Page  

If your web portal will use a splash page, choose HTTP or HTTPS and enter the splash page’s URL. 

 

 

Landing Page  

If your web portal will use a landing page, check this box. 

 

Landing Page 

 

 

URL  

If you have checked Landing Page, enter your landing page’s URL here. 

 

Concurrent Login 

Check this box to allow users to have more than one logged in session active at a time. 

 

Summary of Contents for AP One AC mini

Page 1: ...e AP Pro Series AP Pro AP Pro 300M AP Pro Duo May 2016 COPYRIGHT TRADEMARKS Specifications are subject to change without notice Copyright 2016 Pepwave Ltd All Rights Reserved Pepwave and the Pepwave logo are trademarks of Pepwave Ltd Other brands or products mentioned may be trademarks or registered trademarks of their respective owners ...

Page 2: ...6 3 6 AP Pro AP Pro 300M AP Pro Duo 6 4 Hardware Overview 7 4 1 AP One Enterprise 7 4 2 AP One AC mini 8 4 3 AP One In Wall 9 4 4 AP One Rugged AP One Rugged M12 10 4 5 AP One Flex 300M 11 4 6 AP Pro AP Pro 300M AP Pro Duo 12 5 Installation 13 5 1 Installation Procedures 14 6 Using the Dashboard 15 6 1 General 15 6 2 AP 17 7 Configuration 19 7 1 System 19 7 1 1 Admin Security 19 7 1 2 Firmware 21 ...

Page 3: ...ngs 37 7 2 3 WDS 40 7 3 Network 41 7 3 1 WAN 41 7 3 2 LAN 43 7 3 3 PepVPN 46 8 Tools 49 8 1 Ping 49 8 2 Traceroute 49 8 3 Nslookup 50 9 Monitoring Device Status 51 9 1 Device 51 9 2 Client List 511 9 3 WDS Info 52 9 4 Portal 522 9 5 Rogue AP 53 9 6 Event Log 53 10 Restoring Factory Defaults 54 11 Appendix 55 12 Datasheets 57 ...

Page 4: ...eries offers wireless networking solutions to suit any business need and every access point is loaded with essential features such as multiple SSIDs VLAN WDS and Guest Protect A single access point provides as many as 32 virtual access points 16 on single radio models each with its own security policy WPA WPA2 etc and authentication mechanism 802 1x open captive portal etc allowing faster easier a...

Page 5: ...ent security policies and encryption mechanisms for each virtual access point allow fast flexible cost effective network builds Centralized management via InControl reduces maintenance expense and time WDS support allows secure and fast network expansion Guest Protect support guards sensitive business data and subnetworks WMM Wi Fi Multimedia and QoS Quality of Service support keeps video and othe...

Page 6: ...ctional antenna 1 x Power supply 1 x Instruction sheet 3 3 AP One In Wall 1 x AP One In Wall 1 x Mounting kit 1 x Instruction sheet 3 4 AP One Rugged 1 x AP One Rugged 3 x Omni directional antennas 1 x Power supply 1 x Instruction sheet 3 5 AP One Flex 300M 1 x AP One Flex 300M 1 x Instruction sheet 3 6 AP Pro AP Pro 300M AP Pro Duo 1 x AP Pro AP Pro 300M AP Pro Duo 1 x Instruction sheet 1 x Insta...

Page 7: ...prise Bottom View Top View Front View LED Indicators RED Access point initializing Status GREEN Access point ready OFF No device connected to Ethernet port BLINKING Ethernet port sending receiving data LAN 1 ON Powered on device connected to Ethernet port Note that LAN 5 displays the status of the uplink connection ...

Page 8: ... LED Indicators Status RED Access point initializing GREEN Access point ready Wi Fi OFF 2 4 5GHz Wi Fi radio off BLINKING AP sending receiving data GREEN 2 4 5GHz Wi Fi radio on Note that this model includes a 2 4GHz Wi Fi radio and a 5GHz Wi Fi radio that can operate simultaneously to increase speed and reduce interference ...

Page 9: ...ceiving data GREEN 2 4 5GHz Wi Fi radio on Note that this model includes a 2 4GHz Wi Fi radio and a 5GHz Wi Fi radio that can operate simultaneously to increase speed and reduce interference WLAN1 displays the status of the 2 4GHz Wi Fi radio while WLAN2 displays the status of the 5GHz WiFi radio LAN 1 5 OFF No device connected to Ethernet port BLINKING Ethernet port sending receiving data ON Powe...

Page 10: ...P One Rugged M12 Front View AP One Rugged M12 Rear Panel View AP One Rugged M12 LED Indicators Power On Power On OFF Power Off Status RED Access point initializing GREEN Access point ready Wireless OFF 2 4 5GHz Wi Fi radio off BLINKING AP sending receiving data GREEN 2 4 5GHz Wi Fi radio on Note that this model can operate in either 2 4GHz or 5GHz mode depending on Wi Fi radio settings ...

Page 11: ...Rear Panel View Connector Panel Inside the Lid LED Indicators Status RED Access point initializing GREEN Access point ready LAN OFF No device connected to Ethernet port BLINKING Ethernet port sending receiving data ON Powered on device connected to Ethernet port Number of connected clients 1 10 11 20 21 30 31 40 ...

Page 12: ...http www pepwave com 12 Copyright 5 23 16 Pepwave User Manual PEPWAVE AP Series 4 6 AP Pro AP Pro 300M AP Pro Duo Front Top View Rear Panel View ...

Page 13: ...http www pepwave com 13 Copyright 5 23 16 Pepwave User Manual PEPWAVE AP Series 5 Installation Your access point acts as a bridge between wireless and wired Ethernet interfaces A typical setup follows ...

Page 14: ...r adapter into a power source 3 Wait for the status LED to turn green 4 Connect a PC to the backbone network Configure the IP address of the PC to be any IP address between 192 168 0 4 and 192 168 0 254 with a subnet mask of 255 255 255 0 5 Using Microsoft Internet Explorer 6 or above Mozilla Firefox 2 0 or above or Google Chrome 2 0 or above connect to https 192 168 0 3 6 Enter the default admin ...

Page 15: ...access point s status and operation Remote assistance can also be enabled here 6 1 General This section contains WAN status and general device information WAN IP Address When your access point is connected to a WAN this field displays the WAN IP address For more information click the Details link which displays the following Status This field displays the current WAN connection status ...

Page 16: ...EPWAVE AP Series Device Information Model This field displays your access point s model number Firmware The firmware version currently running on your access point appears here Uptime This field displays your access point s uptime since the last reboot or shutdown ...

Page 17: ...om 17 Copyright 5 23 16 Pepwave User Manual PEPWAVE AP Series 6 2 AP This section displays a variety of information about your wireless network AP Status Wireless Network This field displays your access point s SSID SSID ...

Page 18: ...isplayed in this field VLAN If your access point is using a VLAN ID for management traffic it will appear here A value of 0 indicates that a VLAN ID is not being used MAC Address Your access point s MAC address appears here If you re using the AP One AC mini and have configured both radios this displays a MAC address for both the 2 4GHz and BSSID 5GHz radio Click this link to display the following...

Page 19: ...7 Configuration 7 1 System The options on the System tab control login and security settings firmware upgrades SNMP settings and other settings 7 1 1 Admin Security The Admin Security section allows you to set up your access point s name password security settings and other options ...

Page 20: ...cessing the web admin interface To automatically redirect HTTP access to HTTPS check HTTP to HTTPS Redirection Web Admin Port Specify the port number on which the web admin interface can be accessed Allowed Source IP Subnets This field allows you to restrict access to the web admin to only defined IP subnets Any Allow web admin accesses from anywhere without IP address restrictions Allow access fr...

Page 21: ...ccess point will automatically download and install it To upgrade your access point using a firmware file on your network click Choose File to select the firmware file Then click Manual Upgrade to initiate the firmware upgrade process using the selected file Note that your access point can store two different firmware versions in two different partitions A firmware upgrade will always replace the ...

Page 22: ...ver other than the default enter the URL here To restore the default time server click the Default button 7 1 4 Event Log The section allows you to turn on event logging at a specified remote syslog server Event Log Remote Syslog Check this box to turn on remote system logging Remote Syslog Host Enter the IP address or hostname of the remote syslog server as well as the port number ...

Page 23: ...ction offers a range of settings to control simple network management protocol access SNMP Settings SNMP Device Name This field shows the AP name defined at System Admin Security SNMP Port This option specifies the port which SNMP will use The default port is 161 SNMPv1 This option allows you to enable SNMP version 1 SNMPv2c This option allows you to enable SNMP version 2c SNMPv3 This option allow...

Page 24: ... SNMP community IP Address IP These settings specify a subnet from which access to the SNMP server is allowed Enter the subnet address here e g 192 168 1 0 and select the appropriate subnet Mask mask Access Mode Select Read Only or Read and Write as the SNMP community access mode Status Use these controls to enable or disable SNMP community access To define a user name for SNMPv3 click Add SNMP Us...

Page 25: ...selected authentication protocol Confirm Authentication Password Re enter the authentication password Privacy Protocol Select None or CBC DES as the SNMPv3 privacy protocol When CBC DES is selected an entry field will appear for the password Access Mode Select Read Only or Read and Write as the SNMPv3 access mode Status Use these controls to enable or disable SNMPv3 access 7 1 6 Controller In the ...

Page 26: ... the configuration to factory default settings After clicking the button click the Apply Changes button on the top right Configuration to corner to make the settings effective To save existing network settings when restoring Factory Settings factory settings check the Network Settings box before clicking Restore Factory Settings Download Active Configurations Click Download to backup the current a...

Page 27: ... firmware version you would like to reboot the device with The firmware marked with Running is the current system boot up firmware Please note that a firmware upgrade will always replace the inactive firmware partition 7 2 AP Use the controls on the AP tab to set the wireless SSID and AP settings as well as wireless distribution system WDS settings 7 2 1 Wireless SSID Wireless network settings inc...

Page 28: ...Check this box to enable wireless SSID Radio Selection Available only on the AP One AC mini this setting shown below allows you to enable or disable either of the two on board radios SSID This setting specifies the AP SSID that Wi Fi clients will see when scanning Broadcast SSID This setting specifies whether or not Wi Fi clients can scan the SSID of this wireless network Broadcast SSID is enabled...

Page 29: ...agged on all outgoing packets generated from this wireless network i e packets that travel from the Wi Fi segment through your access point to the Ethernet segment via the LAN port If 802 1x is enabled and a per user VLAN ID is specified in authentication reply from the Radius server then the value specified by Default VLAN ID will be overridden The default value of this setting is 0 which means V...

Page 30: ...ds follow WEP Key Size Select 40 bits 64 bit WEP or 104 bits 128 bit WEP Key Format Choose ASCII or Hex format for the WEP key ASCII can be applied only to encryption keys that are manually entered Hex can be applied to encryption keys that are manually entered or automatically generated Passphrase Enter a series of alphanumeric characters and then click Generate Key to create a WEP key using the ...

Page 31: ...ains Re keying Period valid When the re keying period expires the broadcast key is no longer valid and broadcast key renewal is required The default is 14400 seconds four hours 0 disables re keying WPA WPA2 Personal Passphrase Enter a passphrase of between 8 and 63 alphanumeric characters to create a passphrase used for data encryption and authentication Click Hide Show Passphrase to toggle visibi...

Page 32: ...d you ll be given the opportunity to select a RADIUS security method in the next field RADIUS Security Select PAP EAP TTLS PAP EAP TTLS MSCHAPv2 or PEAPv0 EAP MSCHAPv2 Splash Page If your web portal will use a splash page choose HTTP or HTTPS and enter the splash page s URL Landing Page If your web portal will use a landing page check this box Landing Page URL If you have checked Landing Page ente...

Page 33: ...Setting a number of minutes after quota reached establishes a timer for each user that begins after the quota has been reached Allowed Domains To whitelist a domain or IP address enter the domain name IP address here and click IPs To delete an existing entry click the button next to it address enter the IP address here and click To Allowed Client IPs To whitelist a client IP delete an existing ent...

Page 34: ...e secondary RADIUS server Authentication Port Enter the UDP authentication port s used by your RADIUS server s or click the Default button to enter 1812 Accounting Port Enter the UDP accounting port s used by your RADIUS server s or click the Default button to enter 1813 Maximum Retransmission Enter the maximum number of allowed retransmissions RADIUS Request Interval Enter a value in seconds to l...

Page 35: ...tion to a blocked subnet above enter the IP address and choose a subnet mask from the drop down menu To add the exception click To delete an exception click Block PepVPN To block PepVPN access check this box Bandwidth Management Bandwidth Management Check this box to enable bandwidth management Upstream Limit Enter a value in kpbs to limit the wireless network s upstream bandwidth Enter 0 to allow...

Page 36: ...ewall Rule Name Enter a descriptive name for the firewall rule in this field Type Choose Port Domain IP Address or MAC Address to allow or deny traffic from any of those identifiers Depending on the option chosen the following fields will vary Protocol Port Choose TCP or UDP from the Protocol drop down menu to allow or deny traffic using either of those protocols From the Port drop down menu choos...

Page 37: ...ini provides the 802 11ng protocol for the 2 4 GHz band and the Protocol 802 11ac protocol for the 5GHz band as shown below This drop down menu specifies the national regional regulations the AP should follow If a North American region is selected RF channels 1 to 11 will be available and the maximum transmission power will be 26 dBm 400 mW Operating If European region is selected RF channels 1 to...

Page 38: ...less of context When Auto is selected the AP will adjust its power level based on surrounding APs to maximize performance While single radio models allow setting power output levels for one frequency band only the AP One AC mini provide output power settings for both the 2 4GHz and 5GHz bands as shown below Beacon Rate This drop down menu provides the option to send beacons in different transmit b...

Page 39: ...cceptable client signal strength specified in Strength Threshold megawatts If client signal strength does not meet this minimum the client will not be allowed to connect Advanced Features Discover Nearby Check this box to enable network discovery Note that setting Channel to Auto will Networks activate this feature automatically Scanning Interval This setting controls the interval in seconds that ...

Page 40: ...S can also extend wireless network coverage for wireless clients Note that your access point s channel setting should not be set to Auto when using WDS To create a new WDS click Add WDS Enable Check this box to enable WDS MAC Address Enter the MAC address of the access point with which to form a WDS link Encryption Select AES to enable encryption for WDS peer connections Selecting None disables en...

Page 41: ...ic mode the IP IP Address Mode address of your access point is acquired from a DHCP server on the Ethernet segment In Manual mode a user specified IP address is used for your access point as described below Static IP Address You can use these fields to specify a unique IP address that your access point will use to communicate on the Ethernet segment This IP address is distinct from the admin IP Su...

Page 42: ...ed Reboot When this box is checked your access point can be scheduled to reboot automatically on a recurring basis as indicated by the values under the Schedule Day and Time headings Ethernet Speed Duplex Select a speed and duplex setting for sending and receiving When selecting a speed manually you can also control whether the access point s speed will be advertised on the network by checking or ...

Page 43: ...settings that affect your access point s operation on the LAN such as settings for DHCP DMZ and port forwarding Note that the following settings will be available only when your access point is operating in router mode IP Settings IP Address Enter the LAN IP address and subnet mask to assign to your access point on the LAN ...

Page 44: ...dress that DHCP clients will use to access the internet By default this address will be the same as your access point s IP address on the LAN DNS 1 2 3 In DNS 1 enter the IP address of the primary DNS server offered to DNS clients or accept the default of 192 168 1 1 which is your access point s address on the LAN You can also specify up to two additional DNS servers to use when the primary server...

Page 45: ...ting specifies the protocol of the service as TCP UDP ICMP or IP Traffic that is received by your access point via the specified protocol at the specified port s is forwarded to the LAN hosts specified by the Servers setting Please see below for details on the Port and Servers settings Alternatively the Protocol Selection Tool drop down menu can be used to automatically fill in the protocol and a ...

Page 46: ...ecified by the Server IP Address setting For example with IP Protocol set to TCP and Port set to Port Range and Service Ports 80 88 TCP traffic received on ports 80 through 88 is forwarded to the configured servers via the respective ports Port Mapping Traffic that is received by your access point via the specified protocol at the specified port is forwarded via a different port to the servers spe...

Page 47: ...acters 0 9 A Z a z underscores _ dashes and or nonleading trailing spaces Encryption By default VPN traffic is encrypted with 256 bit AES If Off is selected on both sides of a VPN connection no encryption will be applied Remote ID To allow your access point to establish a VPN connection with a specific remote peer using a unique identifying number enter the peer s ID or serial number here Select B...

Page 48: ...one of the two VPN peers must specify this value Otherwise VPN connections cannot be established When this check box is unchecked traffic between local and remote networks will be IP forwarded To bridge the Ethernet network of an Ethernet port on a local and remote Layer 2 Bridging network select Layer 2 Bridging When this check box is selected the two networks will become a single LAN and any bro...

Page 49: ...Ping The ping test tool tests connectivity pinging the specified destination IP address The ping utility is located at System Tools Ping 8 2 Traceroute The traceroute test tool traces the routing path to the specified IP address The traceroute test utility is located at System Tools Traceroute ...

Page 50: ...http www pepwave com 50 Copyright 5 23 16 Pepwave User Manual PEPWAVE AP Series 8 3 Nslookup The nslookup tool is used to test DNS name servers The nslookup utility can be found at System Tools Nslookup ...

Page 51: ...a client activity rogue device access and more 9 1 Device Here you can access a variety of data about your access point download a diagnostic report and check MAC addresses To download a diagnostic report click the Download link 9 2 Client List The Client List displays all currently connected clients Use the Expand and Collapse buttons to control the amount of data displayed ...

Page 52: ...stribution system WDS and track activity by MAC address If you re using the AP One AC mini this section will display information for both the 2 4GHz and 5GHz radios 9 4 Portal If you ve turned on your access point s captive portal client connection data will appear here Use the Expand and Collapse buttons to control the amount of data displayed ...

Page 53: ...ies 9 5 Rogue AP This section displays a list of nearby suspected rogue access points 9 6 Event Log The Event Log displays a list of all events associated with your access point Check Auto Refresh to refresh log entries automatically Click the Clear Log button to clear the log ...

Page 54: ...t to factory defaults Power on the unit and wait for one minute Press and hold the reset button for at least five seconds then release The unit will automatically reboot Wait for one minute or until the status LED turns green upon which the settings of the device will have been restored to the factory defaults By default the unit will acquire an IP address from a DHCP server ...

Page 55: ... case the user will be required to correct the interference at his own expense FCC Caution Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate this equipment IEEE 802 11b or 802 11g operation of this product in the U S A is firmware limited to channels 1 through 11 5 15 5 25GHz is for indoor user only IMPORTANT NOTE...

Page 56: ...articular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an out...

Page 57: ...e licence L exploitation est autorisée aux deux conditions suivantes 1 l appareil ne doit pas produire de brouillage et 2 l utilisateur de l appareil doit accepter tout brouillage radioélectrique subi même si le brouillage est susceptible d en compromettre le fonctionnement For devices with detachable antenna s the maximum antenna gain permitted for devices in the band 5725 5850 MHz shall be such ...

Page 58: ...www pepwave com Contact Us Sales http www pepwave com contact sales Support http www pepwave com contact Business Development and Partnerships http www pepwave com partners channelpartner program ...

Reviews:

No comments