TP-Link AC50 Configuration Manual Download

Page: 77 / 112

Click

to add a new entry. There are two Match Modes, including Five Tuple Type and

URL Type.



Five Tuple Type

Five Tuple Type is configured based on the IP address range, MAC address, VLAN ID,

port and protocol. It is recommended to select Five Tuple Type when there are many

parameters to be configured in the free authentication policy.

Figure 7-34

Five Tuple Type

Strategy Name

Specify a name for the free authentication policy entry.

Match Mode

Specify a match mode for the free authentication policy.

Source IP Range

Specify the source IP address and subnet mask of the free authentication

policy entry.

Source MAC Address

Specify the source MAC address of the free authentication policy entry.

Source VLAN

Specify the source VLAN ID of the free authentication policy entry.

Source Port

Specify the source port range of the free authentication policy entry.

Destination IP Range

Specify the destination IP address and subnet mask of the free authentication

policy entry.

Destination Port

Specify the destination source MAC address of the free authentication policy

entry.

Protocol

Specify the service protocol of the free authentication policy entry.

Summary of Contents for AC50

Page 1: ...Configuration Guide Wireless Controller 1910012220 REV1 0 1 July 2017 AC50 AC500 ...

Page 2: ...2 Status 7 2 1 System Status 7 2 2 Client Status 8 2 3 AP Status 9 2 4 Authentication Status 10 2 4 1 Authentication Status 10 2 4 2 Non sense Authenticated User 11 3 Network 12 3 1 Interface 12 3 2 DHCP Server 13 3 2 1 DHCP Server 13 3 2 2 DHCP Client List 15 3 2 3 Address Reservation 15 3 3 VLAN 16 3 3 1 VLAN 16 3 3 2 Ports 18 3 3 3 Relations 19 3 4 Switch 20 3 4 1 Statistics 20 3 4 2 Mirror 21 ...

Page 3: ...37 6 Wireless 39 6 1 Wireless Service 39 7 Authentication 43 7 1 MAC Authentication 43 7 1 1 MAC Address 44 7 1 2 MAC Authentication 45 7 2 Portal Authentication 46 7 2 1 Splash Page 47 7 2 2 Web Authentication 49 7 2 3 Onekey Online 53 7 2 4 Voucher 54 7 2 5 SMS 56 7 2 6 Facebook 58 7 2 7 Remote Portal 60 7 3 Local User Management 64 7 4 Voucher Management 68 7 4 1 Create Voucher 68 7 4 2 Manage ...

Page 4: ... 81 7 7 4 Application for SMS 85 7 7 5 Application for Facebook 88 7 7 6 Application for Remote Portal 91 8 Link Backup 94 8 1 Dual link Backup 94 8 2 Application 95 9 System Tools 98 9 1 Account 98 9 1 1 Administrator Account 98 9 1 2 Operator Account 99 9 1 3 System Settings 99 9 2 Administration 100 9 2 1 Factory Default Restore 100 9 2 2 Backup Restore 100 9 2 3 Reboot 101 9 2 4 Firmware Upgra...

Page 5: ... or implied Users must take full responsibility for their application of any products In this Guide the following conventions are used Notes contains suggestions or references that helps you make better use of your device For GUI Menu Name Submenu Name Tab page indicates the menu structure Network DHCP Server DHCP Client List means the DHCP Client List page under the DHCP Server menu option that i...

Page 6: ...s wireless controller makes it easier to configure and manage dozens or hundreds of CAPs in a large public environment such as markets hotels companies and campuses etc AC500 wireless controller supports to manage 500 CAPs at the same time and AC50 wireless controller supports 50 CAPs 1 1 Determine the Network Topology You can use the AC to centrally manage the CAPs in the same or different networ...

Page 7: ...ion 60 and option138 in DHCP settings 1 2 Log in to the AC 1 2 1 Preparations Before login you should verify the following items The AC is powered on and correctly connected The management host is accessible to the AC Specify the management host with a static IP address on the 192 168 0 x subnet for example IP address 192 168 0 100 and subnet mask 255 255 255 0 Operating System Microsoft Windows X...

Page 8: ...n 1 Open a web browser and enter 192 168 0 253 in the address field then press Enter key Figure 1 1 Enter the IP Address 2 Create a username and a password for subsequent login attempts Figure 1 2 Create an account ...

Page 9: ...o log in to the webpage Figure 1 3 Log in to the webpage 4 After a successful login the main page will appear as in the figure below and you can configure the function by clicking the setup menu on the left side of the screen Figure 1 4 Main Page ...

Page 10: ...lick Save the modifications will be saved in the running configuration file However the configurations will be lost when the device reboots If you need to keep the configurations even if the device reboots please use the function to save the configurations in the start up configuration file Click Save Config on the top right of the interface especially before you power off or reboot the device ...

Page 11: ... utilization should be no more than 50 The CPU utilization above 85 indicates that the AC is under a high load and above 95 means AC is completely loaded When the CPU utilization keeps at high loads some functions of the AC may be abnormal Please check to find the real reason In the Quick Display section click the button to select the desired interface and its basic information such as interface n...

Page 12: ... operations Select the Group Select the group from the drop down list to see the clients information in the corresponding group Disconnect Disconnect one or more clients from the AP s Search Search the specified clients in the list Global Search Search the specified clients globally Refresh Refresh the list manually Auto Refresh Check the box to enable the Auto Refresh function With it enabled the...

Page 13: ...esponding CAPs and click this button to turn off their LEDs For example if the CAP s LED disturbs you at night you can turn off it Reboot Select the corresponding CAPs and click this button to reboot them Search Search the specified clients in the list Global Search Search the specified clients globally Refresh Refresh the list manually Auto Refresh Check the box to enable the Auto Refresh functio...

Page 14: ...by checking the boxes in front of the entries Click the buttons above the list for additional operations Delete Delete the users from the authentication list Search Search the specified users in the list Global Search Search the specified users globally Refresh Refresh the list manually Auto Refresh Check the box to enable the Auto Refresh function With it enabled the list will refresh every few s...

Page 15: ...e information of the non sense authenticated users on this page Select the desired users by checking the box in the front of the entries Click the buttons above the list for additional operations Delete Delete the users from the authentication list Search Search the specified users in the list Global Search Search the specified users globally Refresh Refresh the list manually Auto Refresh Check th...

Page 16: ...al interface and specify it to a specified VLAN Please refer to 3 3 1 VLAN to set VLANs first Figure 3 1 Interface Click to create a new interface The page will be shown as below Figure 3 2 Add an Interface Interface Name Specify a name for the interface to make it easier to search for and manage VLAN Specify a VLAN for the interface ...

Page 17: ...fy the secondary DNS server for the interface MAC Address The MAC address is filled automatically You can modify it manually Description Specify a description for the entry to make it easier to search for and manage Click OK to finish the settings 3 2 DHCP Server 3 2 1 DHCP Server Choose the menu Network DHCP Server DHCP Server to load the following page Figure 3 3 DHCP Server DHCP Dynamic Host Co...

Page 18: ... IP address Lease Time Enter the time duration of the IP address assigned by the DHCP server between 2 and 2880 minutes The default is 120 minutes Before the time is up DHCP server would not assign this IP address to other APs or clients Default Gateway Optional Specify the IP address of gateway for the server Default Domain Optional Specify the domain of for the server Primary DNS Optional Specif...

Page 19: ...e time of the connected clients Figure 3 5 DHCP Client List 3 2 3 Address Reservation Choose the menu Network DHCP Server Address Reservation to load the following page Figure 3 6 Address Reservation If the CAP or client requires a static IP address you can manually reserve an IP address for it Once reserved the IP address will only be assigned to the same client by the DHCP server ...

Page 20: ... specified AP or client to which you want to assign the static IP address IP Address Specify a static IP address to the specified AP or client The IP address should be in the same segment as the interface Description Specify a description for the entry to make it easier to search for and manage Status Check the box to enable the address reservation Click OK to finish the settings 3 3 VLAN 3 3 1 VL...

Page 21: ...ients to enhance network security VLANs group devices logically instead of physically so devices in the same VLAN can be located in different places Click to create a VLAN Figure 3 9 Create a VLAN VLAN ID Specify a VLAN ID between 2 to 4094 Name Specify an easy to remember name for the VLAN Ports Select the ports that belong to the VLAN Description Specify a description for the entry to make it ea...

Page 22: ...e current VLAN is deleted the PVID will be set to 1 by default Trunk The trunk port can be added in multiple VLANs The egress rule of the port is UNTAG if the arriving packet s VLAN tag is the same as the port s PVID otherwise the egress rule is TAG The PVID can be set as the VID number of any valid VLAN General The general port can be added in multiple VLANs and set various egress rules according...

Page 23: ...19 3 3 3 Relations Choose the menu Network VLAN Relations to load the following page This list displays the relations among ports link types and VLANs Figure 3 11 Relations ...

Page 24: ...itch 3 4 1 Statistics Choose the menu Network Switch Statistics to load the following page The statistics list displays the information of data packets received or transmitted by each port Figure 3 12 Statistics ...

Page 25: ...s received by the mirrored port will be copied to the mirroring port Egress When this mode is selected the outgoing packets sent by the mirrored port will be copied to the mirroring port A port cannot be set as the mirrored port and the mirroring port simultaneously Only one mirroring port can be set 3 4 3 Rate Control Choose the menu Network Switch Rate Control to load the following page Here you...

Page 26: ... enabled the device synchronizes the data transmission speed with the peer device thus avoiding the packet loss caused by congestion By default it is disabled Negotiation Mode Select the Negotiation Mode for the port including auto and duplex mode Duplex mode includes 10M Half duplex 10M Full duplex 100M Half duplex 100M Full duplex and 1000M Full duplex Note The AC50 doesn t support 1000M Full du...

Page 27: ...nection status speed duplex mode and flow control status of each port Disabled The port is disabled Link down The port is enabled but with physical connection Link up The Port is enabled and connected normally Note The data transfer rate ranges from 1 to 100Mpbs for AC50 and from 1 to 1000Mpbs for AC500 AC50 doesn t support 1000M Full duplex ...

Page 28: ...Ps will reboot at the specified time Reboot Date Select the date to reboot the APs If you want to reboot the APs everyday please select everyday in the list Reboot Time Specify the reboot time to reboot the APs in the format of HH MM SS Lock to AC Automatically With the lock to AC automatically enabled all the APs entries will be locked to AC automatically once APs connect to the AC The unlocked A...

Page 29: ...ries and click this button to move them to your desired group Lock to AC Select the corresponding entries and click this button to lock the APs to the AC Bulk Edit Select the corresponding entries and click this button to bulk edit the APs AP keep alive time client keep alive time and client idle time Refer to the following introduction below the table for details Search Click this button to searc...

Page 30: ...r the AP is online or not by receiving the echo packets Client Keep alive Time Specify the time interval for the client sending heartbeat packets to the AP APs can detect whether the client is online or not by receiving heartbeat packets Client Idle Time Specify a time interval for the client idle time The clients will be disconnected from the AP if there is no data transmission between AP and cli...

Page 31: ...t hardware version Firmware Version Displays the imported firmware version Upgrade Starting Time After the upgrade file has been imported successfully specify the upgrade starting time With upgrade enabled the APs of this model will automatically upgrade using the upgrade file Upgrade Process Displays the upgrade process The format is X Y Z which means there are Z APs of this model in the system w...

Page 32: ...r the CAPs reboot automatically the CAPs can only upgrade after ten minutes 3 The parameter of upgrade process and upgrade failure will be cleared when the AC reboots 4 The standby link doesn t support upgrade schedule 4 3 AP Database Import the AP database file to support the identification and management of new AP models on this page When there is an undetected AP model connecting to the AC the ...

Page 33: ...the maximum number that the load balancing set 20 as an example 2 The client is also in the coverage of other CAPs And the difference of the connected client number between CAP1 and one of the other CAPs is greater than the difference threshold set in load balancing 4 as an example 20 16 4 Due to load balancing AC will reject the client s request to connect to CAP1 and instead connect the client t...

Page 34: ... are exceeded Difference Threshod Set the maximum difference between the number of clients connected to the AP with the number of clients connected to other APs The client s requests to connect will be rejected when the threshold and difference threshold are exceeded Maximum Fail Number Set the maximum fail number for the client s connection request When the client s connection requests fail more ...

Page 35: ...g page Figure 5 1 Radio Settings On this page you can specify the radio parameters of multiple or individual CAPs Select the entries and click the buttons above the list to change the radio status or bulk edit the parameters Click at the operation row in the radio list the following figure will be shown ...

Page 36: ...e recommended to select 11a n ac mode allowing 802 11a 802 11n and 802 11ac wireless stations to access the AP Bandwidth Specify the bandwidth of the wireless network According to IEEE 802 11n standard using higher bandwidth can increase wireless throughput However users may choose lower bandwidth due to the following reasons 1 Increase the available number of channels within the limited total ban...

Page 37: ...to a particular receiving station and negotiates the sending of a data frame or else the packet will be sent immediately DTIM Period This value indicates the number of beacon intervals between successive Delivery Traffic Indication Messages DTIM and this number is included in each Beacon frame A DTIM is contained in Beacon frames to indicate whether the AP has buffered broadcast and or multicast d...

Page 38: ...the client with a signal strength lower than a certain value Click OK to complete the configuration Click Default Settings to restore the parameters to the default 5 2 Rate Settings Choose the menu Radio Rate Settings Rate Settings to load the following page Specify the data transmission rate on this page Figure 5 3 Rate Settings ...

Page 39: ...ed in the rate set 1Mbps 2Mbps 5 5 Mbps and 11Mbps are selected by default Supported Rate Specify the supported rate for 802 11g clients The supported rate set should not overlap with the basic rate set 6Mpbs 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps and 54Mbps are selected by default Multicast Rate Specify the multicast rate for the 802 11g multicast packets The rate should be selected from the ba...

Page 40: ...er 36 5GHz SSID TP Link Client Number 40 The 2 4GHz SSID and 5GHz SSID of the dual band CAP are set the same If a 2 4GHz client or 5GHz client requests to connect to the CAP the band steering won t take effect and the client will connect to the 2 4GHz or 5GHz directly If a dual band client requests to connect to the CAP due to band steering the CAP will lead the client to connect to the 5GHz band ...

Page 41: ...onnected to the 5GHz band and the number connected to the 2 4GHz band When the client connections meet the 5GHz maximum connection threshold and the difference threshold the AP will prevent more APs from connecting to the 5GHZ band Maximum Failure Number Specify the maximum number of failed connection attempts of the client If the clients continuously request to connect to the 5GHz band and the nu...

Page 42: ...t Choose to whether enable Wi Fi roaming feature With this option enabled Wi Fi roaming will take effect on the 2 4GHz band Neighbor List Dual Band Choose to whether enable Wi Fi roaming on both of the 2 4GHz and 5GHz bands Note Only when Neighbor List is enabled will Neighbor List Dual Band take effect Click Save to finish the settings ...

Page 43: ... Status Specify whether to enable the wireless network SSID Specify the SSID Service Set Identifier for the wireless network The SSID should be unique Description Specify a description for the entry to make it easier to search for and manage AP Isolation Enable AP isolation to isolate the wireless clients connected to the same AP so that they cannot communicate with each other This setting cannot ...

Page 44: ...s capability and request WPA PSK Pre shared key of WPA WPA2 PSK Pre shared key of WPA2 Encryption Select the encryption type including Auto TKIP and AES The default setting is Auto which can select TKIP Temporal Key Integrity Protocol or AES Advanced Encryption Standard automatically based on the wireless station s capability and request AES is more secure than TKIP and TKIP is not supported in 80...

Page 45: ...anced Encryption Standard automatically based on the wireless station s capability and request AES is more secure than TKIP and TKIP is not supported in 802 11n mode It is recommended to select AES as the encryption type Group Key Update Period Enter the number of seconds minimum 30 to control the time interval for the encryption key automatic renewal Radius Server IP Enter the IP address of the R...

Page 46: ...ound to the corresponding VLAN Bound Select the desired entries and click this button to bind the service to corresponding radios Unlocked APs cannot be bound Please refer to 4 1 AP Settings and check the box Lock to AC Automatically Unbind Select the desired entries and click this button to unbind the service in corresponding radios Back to Wireless Click this button to return to the wireless ser...

Page 47: ...or not Only the clients allowed to access the network can go for the further portal authentication process As the following diagram shows we configure Client 1 and Client 2 to the whitelist and Client 3 to the blacklist on the AC When these clients are trying to access the network the AC will check the MAC authentication entries According to these entries Client 1 and Client 2 will be allowed to a...

Page 48: ...an be restored to the AC and all MAC addresses can be added into the MAC address list To add multiple MAC address entries at a time 1 Save the MAC address entries as a CSV file with ANSI coding format in the AC You can use the Backup MAC Address function to obtain a CSV file to view the correct format 2 Click Browse to select the file path and then click Restore to restore the file Note Using Exce...

Page 49: ...o 4094 Number and range are both supported The ranges can be seperated by commas For example 1 11 20 1 3 5 4090 4094 7 1 2 MAC Authentication Choose the menu Authentication MAC Authentication MAC Authentication to load the following page Figure 7 4 MAC Authentication Here you can view the MAC Authentication List Click to add a new entry Figure 7 5 Add a MAC Authentication List ...

Page 50: ...service two kinds of servers are required web server which is used to provide login page for the clients and authentication server which is used to authenticate the clients The web server and authentication server can be the built in servers of the AC or the external connected servers Which kinds of servers are used to provide portal service is determined by the portal authentication types and you...

Page 51: ...s For Facebook the AC uses the authentication server of Facebook to authenticate the clients Note Before configuring portal authentication make sure that the IP address of the AC s interface that manages the AP and the IP addresses of the clients are routable 7 2 1 Splash Page Choose the menu Authentication Portal Authentication Splash Page to load the following page Figure 7 7 Splash Page Here yo...

Page 52: ...access the network after successful authentication Page Title Specify the page title for the authentication Background Select the background type Two types are supported Solid Color selected on the page and Picture uploaded from your local computer Background Color If Solid Color is selected configure your desired background color through the color picker or by entering the RGB values manually Bac...

Page 53: ...ur desired login button color through the color picker or by entering the RGB values manually Button Text Color Select your desired text color for the button through the color picker or by entering the RGB values manually On the right side of the page you can click the buttons Tablet PC Mobile Phone and PC to preview the login pages on these kinds of devices 7 2 2 Web Authentication In Web Authent...

Page 54: ...entication Server Success Redirect URL Specify the redirect URL address after successful authentication Fail redirect URL Specify the redirect URL address after the authentication failure Non sense Authentication With this option enabled the non sense authenticated users will pass the authentication automatically when connecting to the wireless network Advertisement Specify whether to enable the A...

Page 55: ... Sever Select Remote Authentication Server as the Authentication Server Type and the following the page will appear Figure 7 11 Remote Authentication Server Page Status Specify the status of the entry SSID Specify the SSIDs that will be enabled with Web authentication Note The SSIDs labeled Bound are being used by other authentication entries If these SSIDs are selected the original configuration ...

Page 56: ... With this feature enabled you can add advertisement pictures on the authentication page These advertisement pictures will be displayed before the login page appears The required parameters are as follows Picture Resouce You can add up to 5 advertisement pictures When several pictures are added they will be played in a loop There are two picture resources Local Upload and External Link Advertiseme...

Page 57: ... Add a New Onekey Online Entry Configure the related parameters and click OK Status Specify whether to turn on the Onekey Online authentication entry SSID Specify the SSIDs that will be enabled with Onekey Online authentication Note The SSIDs labeled Bound are being used by other authentication entries If these SSIDs are selected the original configuration will be replaced by the current configura...

Page 58: ...val Specify the picture carousel interval If this value is set as 5 seconds the first picture will be displayed for 5 seconds followed by the second picture for 5 seconds and so on Enter a value from 1 to 10 seconds Allow to Skip Advertisement Specify whether to enable this feature With this feature enabled the user can click the Skip button to skip the advertisement Description Specify a descript...

Page 59: ...ies If these SSIDs are selected the original configuration will be replaced by the current configuration Splash Page Select the splash page of Onekey Online authentication Success Redirect URL Specify the redirect URL address after successful authentication Fail redirect URL Specify the redirect URL address after the authentication failure Non sense Authentication If non sense authentication is en...

Page 60: ...l the pictures the rest will not be displayed Photo Carousel Interval Specify the picture carousel interval If this value is set as 5 seconds the first picture will be displayed for 5 seconds followed by the second picture for 5 seconds and so on Enter a value from 1 to 10 seconds Allow to Skip Advertisement Specify whether to enable this feature With this feature enabled the user can click the Sk...

Page 61: ...he SSIDs labeled Bound are being used by other authentication entries If these SSIDs are selected the original configuration will be replaced by the current configuration Splash Page Select the splash page of SMS authentication Twilio SID Enter the Account SID for Twilio API Credentials Authentication Token Enter the Authentication Token for Twilio API Credentials Phone Number Enter the phone numb...

Page 62: ...ture carousel interval If this value is set as 5 seconds the first picture will be displayed for 5 seconds followed by the second picture for 5 seconds and so on Enter a value from 1 to 10 seconds Allow to Skip Advertisement Specify whether to enable this feature With this feature enabled the user can click the Skip button to skip the advertisement Description Specify a description for the SMS ent...

Page 63: ...ginal configuration will be replaced by the current configuration Configuration Click this button to specify the Facebook Page For details refer to the following introduction Facebook Page Displays the name of the specified Facebook Page Description Specify a description for the Facebook entry to make it easier to search for and manage Click the Configuration button and log in to your Facebook acc...

Page 64: ...i code Users need to enter the Wi Fi code you configured here to access the network Session Length Select how long the users will have Wi Fi after they check in Terms of Service Optional Check the box and specify the terms of service 7 2 7 Remote Portal In Remote Portal you can build your own portal server on the network to provide the customized login page for clients In such scenario your custom...

Page 65: ...try There are two authentication server type Local Authentication Server and Remote Authentication Server Local Authentication Sever Select Local Authentication Server as the Authentication Server Type and the following page will appear Figure 7 22 Local Authentication Server Page Status Specify whether to turn on the remote portal authentication entry Splash Page Enter the splash page name of the...

Page 66: ... redirect URL Specify the redirect URL address after the authentication failure Non sense Authentication If non sense authentication is enabled the non sense authenticated users will pass the authentication automatically when connecting to the wireless network Description Specify a description for the remote portal authentication entry to make it easier to search for and manage Note When Local Aut...

Page 67: ...ion VLAN ID Select the VLAN ID used to remote portal authentication Remote Portal Address Enter the address of the server used for remote portal authentication Authenticaiton Server Type Select the server type used for remote portal authentication To configure Radius server refer to Authentication Server Authentication Server Group Select the server group used for remote portal authentication ...

Page 68: ...the authentication automatically when connecting to the wireless network Description Specify a description for the remote portal authentication entry to make it easier to search for and manage 7 3 Local User Management In Local User Management you can create and manage local user accounts for the Web authentication feature Clients need to use the local user accounts to pass the Web authentication ...

Page 69: ...he CSV file please set the cell format as text Rule List Here you can specify and view the local users Click to add a new entry There are two user types including Formal User and Free User Formal User You can provide formal users with continuous internet service When the user s account expires the account will be invalid Figure 7 25 Add a Formal User User Type Specify the user type as formal user ...

Page 70: ... to enable download rate limit With this option enabled you can specify the limit of download rate Rate Limit Upload Select whether to enable upload rate limit With this option enabled you can specify the limit of upload rate Traffic Limit Select whether to enable traffic limit With this option enabled you can specify the total traffic limit in a period of time Once the limit is reached in one per...

Page 71: ... use this account to pass the authentication Rate Limit Download Select whether to enable download rate limit With this option enabled you can specify the limit of download rate Rate Limit Upload Select whether to enable upload rate limit With this option enabled you can specify the limit of upload rate Traffic Limit Select whether to enable traffic limit With this option enabled you can specify t...

Page 72: ...ows only one client to pass the authentication with one voucher code Multi Use allows several clients to pass the authentication with one voucher code Max Users If Multi Use is selected specify the maximum number of the clients who can use the same voucher code to pass the authentication Duration Time Specify the permitted online time of clients who have passed the authentication Rate Limit Downlo...

Page 73: ... the voucher code is created Dscription Displays the description for the voucher code Duration Displays the permitted online time of the clients who have passed the authentication Status Displays whether the code is valid or not and if valid how many clients are permitted to pass the authentication Operation Click this button to print the codes created in the same batch Click this button to delete...

Page 74: ...Authentication Authentication Server Radius Server to load the following page Figure 7 29 Radius Server Here you can add edit or delete an external radius server Click to add a new entry Figure 7 30 Add a Radius Serve Server Name Specify a name for the Radius server Server Address Specify the address of the server It should be an IPv4 address or a DNS domain Authentication Port Specify a port for ...

Page 75: ...the authentication Generally it is the address by which the AC and Radius server communicate This field can be left empty Authentication Type The authentication type includes PAP CHAP MSCHAP and MSCHAPv2 7 5 2 Authentication Server Group Choose the menu Authentication Authentication Server Authentication Server Group to load the following page Figure 7 31 Server Group Here you can view or edit the...

Page 76: ...a description for the authentication server group 7 6 Authentication Config 7 6 1 Free Authentication Policy Free authentication policy is used to provide free resources for clients before they pass the portal authentication Choose the menu Authentication Portal Authentication Free Authentication Policy to load the following page Figure 7 33 Free Authentication Policy Here you can view the Free Au...

Page 77: ...e free authentication policy Source IP Range Specify the source IP address and subnet mask of the free authentication policy entry Source MAC Address Specify the source MAC address of the free authentication policy entry Source VLAN Specify the source VLAN ID of the free authentication policy entry Source Port Specify the source port range of the free authentication policy entry Destination IP Ran...

Page 78: ...uthentication policy URL Address Specify the URL address for the URL type of free authentication policy Source IP Range Specify the source IP address and subnet mask of the free authentication policy entry Source MAC Address Specify the source MAC address of the free authentication policy entry Source VLAN Specify the source VLAN ID of the free authentication policy entry Protocol Specify the serv...

Page 79: ...authentication is required again for users to connect to the AP Aging Time Enter the aging time within which the users could reconnect to the AP without authentication The default value is 5 Portal Authentication Port Specify the service port for portal authenticaiton The default setting is 8080 It should not be the same as other occupied service ports 7 7 Applications 7 7 1 Application for Web Au...

Page 80: ...te SSID Create an SSID for the clients in the Wireless module 2 Configure the Splash Page Choose the menu Authentication Portal Authentication Splash Page Click to add a new entry Set the Authentication Type as Web Authentication and set the related parameters Here you can upload the logo image and a promotional image of the hotel to the device ...

Page 81: ... Splash Page Configurations 3 Configure the Web Authentication Choose the menu Authentication Portal Authentication Web Authentication Click to add a new entry Enable Web Authentication and set the related parameters ...

Page 82: ...d user accounts to the device In this example we create accounts to meet the following requirements Each room is offered with a free account and up to three clients are able to use this account to pass the authentication at the same time The free time is two hours and the client needs to restart the authentication after the time expires ...

Page 83: ...79 Choose the menu Authentication Local User Management Local User Management Click to add a new entry Set the related parameters as shown below Figure 7 40 Add a Free Account ...

Page 84: ... to meet the requirements Network Topology Figure 7 41 Network Topology Clients CAP CAP Core Switch AC PoE Switch PoE Switch Router Internet Configuration Steps 1 Create SSID Create an SSID for the clients in the Wireless module 2 Configure the Splash Page Choose the menu Authentication Portal Authentication Splash Page Click to add a new entry Set the Authentication Type as Onekey Online and set ...

Page 85: ...nekey Online and set the related parameters Figure 7 43 Onekey Online Configurations 7 7 3 Application for Voucher Network Requirements A hotel wants to offer customers internet access To access the internet the customers should provide the correct codes which are got from the hotel to pass the authentication In this case the hotel can use the Voucher feature to generate voucher codes and assign t...

Page 86: ...witch Router Internet Configuration Steps 1 Create SSID Create an SSID for the clients in the Wireless module 2 Configure the splash page Choose the menu Authentication Portal Authentication Splash Page Click to add a new entry Set the Authentication Type as Voucher and set the related parameters ...

Page 87: ...gurations 3 Configure Voucher Authentication Choose the menu Authentication Portal Authentication Voucher Click to add a new entry Turn on the Voucher feature and set the related parameters Click OK Figure 7 46 Voucher Configurations ...

Page 88: ...nd click Save Figure 7 47 Create Vouchers 5 Print Vouchers Choose the menu Authentication Portal Authentication Voucher Management Manage Voucher Click to export the voucher codes Figure 7 48 View Vouchers The voucher codes in the table will be exported as the following figure shows You can print these codes and give them to your customers ...

Page 89: ...nts A hotel wants to offer customers internet access using the Twilio API service The customer needs to get authentication code using a mobile phone and access the network with the authentication code In this case the hotel can use the SMS feature to authenticate the clients ...

Page 90: ...oE Switch PoE Switch Router Internet Configuration Steps 1 Create SSID Create an SSID for the clients in the Wireless module 2 Configure the splash page Choose the menu Authentication Portal Authentication Splash Page Click to add a new entry Set the Authentication Type as SMS and set the related parameters ...

Page 91: ...he instructions to create an account Figure 7 52 Register Account 4 Apply for Twilio Service and get the related information After successful login to Twilio you need to buy the service for SMS according to the instructions on the website Then get the account information including ACCOUNT SID AUTH TOKEN and Phone number ...

Page 92: ...gure 7 55 SMS Authentication Page Enable SMS and configure the related parameters You can directly paste the Twilio account information from the website to this page Click OK 7 7 5 Application for Facebook Network Requirements A hotel wants to offer customers internet access and push hotel advertisement through the Facebook Page of the hotel And The customers will be redirected to the Facebook Pag...

Page 93: ... Facebook Servers PoE Switch PoE Switch Router Internet Configuration Steps 1 Create the Facebook Page Log in to Facebook and create a Facebook Page with advertisements of the hotel 2 Create SSID Create an SSID for the clients in the Wireless module 3 Configure the Facebook Authentication Choose the menu Authentication Portal Authentication Facebook Click to add a new entry ...

Page 94: ...thentication Page Click the Configuration button and specify the Facebook Page and the related parameters Click Save Settings and close this window Figure 7 58 Facebook Configurations Verify the configuration result and click OK ...

Page 95: ...net access and use the remote portal server to push hotel advertisement through the login page The clients can access the network only after pass the authentication In this case the hotel can use the Remote Portal feature The remote portal server provides login and authentication page and the local server of the AC authenticates the clients ...

Page 96: ...ortal Server Build your remote portal server on the network and make sure the connectivity between the AC and the server 2 Create SSID Create an SSID for the clients in the Wireless module 3 Configure the Remote Portal Authentication Choose the menu Authentication Portal Authentication Remote Portal Click to add a new entry Enable Remote Portal and set the related parameters ...

Page 97: ...93 Figure 7 61 Web Authentication Configurations ...

Page 98: ... CAP will get the peer address when obtaining the IP address from the DHCP server You should enable the DHCP service on the AC Click Save to complete the configuration Note If the priority and peer address are changed the CAPs in the standby link should be rebooted to make the settings take effect To keep the settings of the master link and standby link consistent please reboot all the CAPs in the...

Page 99: ...ch PoE Switch Router Internet AC2 192 168 0 253 Priority 100 Configuration 1 Configure the external DHCP server The external DHCP should support the configuration of the option field Refer to the corresponding guide for details of the option settings When an AP obtains an IP address from the DHCP server it also needs the DHCP server to deliver the IP addresses of the two ACs in the network You sho...

Page 100: ...priority will be connected first The higher value means higher priority In the above topology the priority of AC1 is 150 and AC2 is 100 Therefore the AC becomes the master controller of the CAPs and all CAPs will connect to AC1 first AC2 is the standby controller 3 Configure the standby AC The standby AC comes into use when the master AC breaks down and cannot work normally In this situation the C...

Page 101: ...andby AC 192 168 1 252 CAP Core Switch PoE Switch PoE Switch Master AC 192 168 1 252 Standby AC 192 168 1 253 Note Standby AC should be configured along with the link priority The AC with higher priority becomes the master AC and the lower one is the standby AC ...

Page 102: ...dministrator account to create the Operator account 9 1 1 Administrator Account Choose the menu System Tools Admin Setup Administrator Account to load the following page Figure 9 1 Administrator Account Here you can change the login username and password of the Administrator account Old Username Enter the current username Old Password Enter the current password New Username Enter a new username Le...

Page 103: ...re the login username and password of the Operator account If the Operator account already exists you can change the username and password of the Operator account New Username Specify a username for the account New Password Specify a password for the account Confirm New Password Enter the password again for confirmation 9 1 3 System Settings Choose the menu System Tools Account Systems to load the...

Page 104: ...m will log out automatically to secure the device and network The default setting is 6 minutes 9 2 Administration 9 2 1 Factory Default Restore Choose the menu System Tools Administration Factory Default Restore to load the following page Figure 9 4 Factory Default Restore Click Factory Restore to restore your device to its factory default settings Factory Restore will clear all the configurations...

Page 105: ...import the file to recover the configurations Note Please keep the power supply stable and avoid power off during the backup and import process If the version of the imported configuration file differs a lot from the current version of the controller the configuration information may be lost 9 2 3 Reboot Choose the menu System Tools Administration Reboot to load the following page Figure 9 6 Reboo...

Page 106: ...current hardware version Note DO NOT power off your device or refresh the page during the upgrade The device will reboot after the upgrade is complete The configurations may be lost after upgrading Please back up your configurations before upgrading 9 3 Traffic Statistics Choose the menu System Tools Traffic Statistics Interface Statistics to load the following page Figure 9 8 Interface Statice He...

Page 107: ...menu System Tools Diagnostics Diagnostics to load the following page Figure 9 9 Diagnostics Here you can use the diagnostic tools to detect the current network connection status The device provides Ping and Traceroute tools to help you troubleshoot network connection problems The Ping tool sends packets to a target IP Address or Domain Name and logs the results such as the number of packets sent a...

Page 108: ...Ping host or the traceroute host Ping Count Specify the ping count Ping Packet Size Specify the ping packet size Traceroute Max TTL Specify the number of hops to be reached in the Traceroute Max TTL Time to Live field 9 5 Time Settings Choose the menu System Tools Time Settings Time Settings to load the following page Figure 9 10 Time Settings ...

Page 109: ...tomatically from the Internet The AC will search available internal NTP Network Time Protocol server and get the system time If failed please set the IP address of the NTP server manually After the configuration click Save and the AC will get the system time from the NTP server Current Time Displays the current system time Set Time Specify the way the time is set get automatically from the interne...

Page 110: ... or manually Date Specify the time zone of the device Time IP Address for the NTP Server Synchronize with PC s Clock Click this button and the system time of the device will be matched with the current time on the host PC Note AC500 has a built in RTC Real time Clock chip the system time won t be restored to the default time setting when the AC is rebooted or powered off AC50 doesn t have an RTC c...

Page 111: ...l errors that may result in system breakdown ALERT Displays alert system logs These are serious errors that require urgent system repair CRITICAL Displays critical system logs These are fatal errors that may result in danger to the system ERRORS Displays error system logs These are ordinary errors in the system WARNING Displays warning system logs These are warning messages that remind the user th...

Page 112: ...AP database Displays the system s AP database log Radio Displays the system s radio setings log Link Backup Displays the system s link backup log Portal authentication Displays the system s portal authentication log MAC Authentication Displays the system s MAC authentication log User Management Displays the system s user management log Wireless service Displays the system s wireless service log Wi...

Search results

Summary of Contents for AC50

Reviews:

Related manuals for AC50

Brands by name

Popular brands

TP-Link AC50, Configuration Manual

Search results

Summary of Contents for AC50

Reviews:

Related manuals for AC50

Brands by name

Popular brands