background image

  WEP-2L. User manual

53

Enabling General VLAN on VAP

WEP-2L(config):/interface/wlan1-va0/vap# 

general-vlan-mode true 

(Enabling General VLAN on SSID. To 

disable, enter 

false

 

)

 

WEP-2L(config):/interface/wlan1-va0/vap# 

general-vlan-id X 

(where X – General VLAN number)

Enabling hidden SSID

WEP-2L(config):/interface/wlan1-va0/vap# 

hidden true 

(Enabling hidden SSID. To disable, enter 

 

false

 

)

 

Client limitation on VAP

WEP-2L(config):/interface/wlan1-va0/vap#

 sta-limit X 

(where X is the maximum allowable number of clients 

connected to the virtual network)

Enabling client isolation on VAP

WEP-2L(config):/interface/wlan1-va0/vap# 

station-isolation true 

(Enable traffic isolation between clients 

within a single VAP. To disable, enter 

 

false

 

)

Enabling minimal signal

WEP-2L(config):/interface/wlan1-va0/vap#

 

 

minimal-signal -X 

 

 

 

(where X - RSSI threshold, when reached, the 

point will disconnect the client from the VAP. The parameter can take values from -100 to 0.

 

)

Enabling TLS usage during authorization

WEP-2L(config):/interface/wlan1-va0/vap/radius#

 

 

tls-enable true 

 

 

 

(Use TLS during authorization. To 

disable enter

 

 

false

 

)

6.4  Radio configuration

In the Radio section, automatic selection of the working channel is used by default. To set the channel manually 
and change the power, use the following commands:

Содержание WEP-2L

Страница 1: ...IP address 192 168 1 10 Username admin Password password Wireless access point WEP 2L User manual Firmware version 1 1 0 ...

Страница 2: ...equired access points 11 3 4 Channel selection for neighboring access points 12 4 Installing WEP 2L 14 4 1 Wall mounting 14 4 2 Installing to false ceiling 15 4 3 Removing the device from the bracket 15 5 Device management via the WEB interface 16 5 1 Getting started 16 5 2 Applying configuration and discarding changes 17 5 3 WEB interface basic elements 18 5 4 The Monitoring menu 19 5 4 1 The Wi ...

Страница 3: ...ot submenu 44 5 9 4 The Password submenu 45 5 9 5 The Log submenu 45 5 9 6 The Date and Time submenu 46 6 Managing the device using the command line 48 6 1 Connection to the device 48 6 2 Network parameters configuration 48 6 3 Virtual Wi Fi access points VAP configuration 49 6 3 1 Configuration of VAP without encryption 49 6 3 2 Configuration of VAP with WPA Personal security mode 50 6 3 3 Config...

Страница 4: ...te and time 58 6 6 APB service configuration 58 6 7 Monitoring 59 6 7 1 Wi Fi Clients 59 6 7 2 Device info 60 6 7 3 Network information 61 6 7 4 Wireless interfaces 62 6 7 5 Event logging 62 6 7 6 Spectrum Analyzer 63 7 The list of changes 64 ...

Страница 5: ...ow radius to broadband networks equitable to speed of wired networks with high criteria to the quality of provided services WEP 2L is dedicated to be installed inside buildings as an access point and to create a seamless wireless network using several identical access points Roaming on a large area This manual specifies intended purpose main technical parameters design safe operation rules and ins...

Страница 6: ...strictions both for all subscribers and for everyone in particular The devices are designed to be installed in offices state buildings conference halls laboratories hotels etc The creation of virtual access points with different types of encryption allows clients to delimit access rights among users and groups of users 2 2 Device specification Interfaces 1 port of Ethernet 10 100 1000 Base T RJ 45...

Страница 7: ...lication scheme Figure 1 WEP 2L application scheme 2 3 The device technical parameters Table 1 Main Specifications WAN Ethernet interface parameters Number of ports 1 Electrical connector RJ 45 Data rate Mbps 10 100 1000 auto negotiation Standards BASE T Wireless interface parameters Standards 802 11a b g n ac Frequency range MHz 2402 2482 MHz 5170 5835 MHz Modulation DSSS CCK BPSK QPSK 16QAM 64QA...

Страница 8: ...Security Centralized authorization via RADIUS server WPA Enterprise WPA WPA2 data encryption Captive Portal Support for 2x2 MIMO Two Realtek Wi Fi chips RTL8197FS 2 4 GHz and RTL8812FR 5 GHz Control Remote control Web interface Telnet SSH SNMP monitoring NETCONF EMS management system Access restriction by password General parameters Processor Realtek RTL8197FS 1 GHz NAND 32 MB NAND Flash RAM 128 M...

Страница 9: ... main panel layout Connectors and controls located on the device main panel are listed in Table 2 Table 2 Description of ports and controls Main panel element Description 1 LAN GE PoE port status light indication 2 GE PoE GE port for PoE power supply connection 3 F Button for reseting to factory settings 4 Wi Fi Operation indicators of corresponding Wi Fi modules ...

Страница 10: ...N interface Power on the device top panel solid green the device power on normal operation solid orange the device is loaded but IP address is not received via DHCP solid red the device is loading 2 6 Reset to the default settings In order to reset the device to factory settings press and hold the F button until Power indicator starts flashing Device will be rebooted automatically DHCP client will...

Страница 11: ...iture and etc between access point and other wireless network devices Do not install the device near about 2 m electrical and radio devices It is not recommended to use radiophone and other equipment operating on the frequency of 2 4 GHz 5 GHz in Wi Fi effective radius Obstacles in the form of glass metal constructions brick concrete walls water cans and mirrors can significantly reduce Wi Fi acti...

Страница 12: ...nnel selection for neighboring access points It is recommended to set nonoverlapping channels to avoid interchannel interference among neighboring access points Figure 3 General diagram of frequency channel closure in the range of 2 4 GHz For the example of channel allocation scheme among neighboring access points in frequency range of 2 4 GHz when channel width is 20 MHz see Figure 4 Figure 4 Sch...

Страница 13: ...5 Scheme of channel allocation between neighboring access points that are located between floors When width of used channel is 40 MHz there is no non overlapping channels in frequency range of 2 4 GHz In such cases you should select channels maximally separated from each other Figure 6 Channels used in range of 5 GHz when channel width is 20 40 or 80 MHz ...

Страница 14: ...7 Attaching the bracket to a wall The figure shows the bracket allocation When installing the bracket pass wires through the corresponding channels of the bracket see figure 7 Pass the wires into the corresponding grooves on the bracket while installing the bracket Screw the brackets to the device surface by using screwdrive 2 Install the device Figure 8 Device installation front view Connect cabl...

Страница 15: ...es in metal bracket with holes of armstrong panel and plastic bracket Align together three boltholes on the plastic bracket and the boltholes on the metal bracket Screw the brackets to the device surface by using a screwdrive Install the device Connect cables to corresponding connector of the device Description of the connectors is given in section 2 4 Design Align the device and plastic bracket t...

Страница 16: ... in the browser address bar When the device is successfully detected username and password request page will be shown in the browser window 3 Enter your username into Login and password into Password field 4 Click the Log in button A menu for monitoring the status of the device will open in a browser window IP address by default 192 168 1 10 subnet mask 255 255 255 0 The device is capable to obtai...

Страница 17: ...y button icon in the tab name 2 Discarding changes The button for discarding changes appears as follows button starts the process of saving the configuration to the device flash memory and applying the new settings All the settings come into operation without device rebooting Clicking on the After pressing Apply the process of settings saving to device memory is launched This is indicated by the S...

Страница 18: ...al areas Menu tabs categorize the submenu tabs Monitoring Radio VAP Network settings External Services System Interface language selection and Logout button designed to to end a session in the WEB interface under a given user Submenu tabs allow you to control settings field Devcie configuration field displays data and configuration Information field displays current firmware version ...

Страница 19: ...ient at maximum modulation for the maximum nss type supported by the client The minimum value is 2 in the case when the packets are transmitted to the modulation nss1mcs0 for a client with MIMO 3x3 support The parameter value is calculated for the last 10 s Link Quality parameter that displays the status of the link to the client calculated based on the number of retransmit packets sent to the cli...

Страница 20: ...ries of transmission to the connected device in the last 10 s TX Retry Count packets the number of retries of transmission to the connected device during the entire connection Actual TX RX Rate Kbps the current traffic transmission rate at the moment 5 4 2 The Traffic Statistics submenu The Traffic Statistics section displays the diagrams of the speed of the transmitted received traffic for last 3...

Страница 21: ... Total bytes number of successfully sent bytes Total drop number of rejected packets Errors number of errors Receive table description Interface name of the interface Total packets number of successfully received packets Total bytes number of successfully received bytes Total drop number of rejected packets Errors number of errors ...

Страница 22: ...specifies the range of 2 4 GHz or 5 GHz to which the access point was detected SSID SSID of the detected access point Security security mode of the detected access point MAC MAC address of the detected access point Channel Bandwidth radio channel on which the detected access point operates RSSI the level with which the device receives the signal of the detected access point dBm Please note that du...

Страница 23: ...itpion 0 Emergency A critical error has occurred in the system the system may not work properly 1 Alert Immediate intervention is required 2 Critical A critical error has occurred on the system 3 Error An error has occurred on the system 4 Warning Warning non emergency message 5 Notice System notice non emergency message 6 Informational Informational system messages 7 Debug Debugging messages prov...

Страница 24: ...WAN IP address device IP address in external network RX Bytes number of bytes received on WAN TX Bytes number of bytes sent from WAN Ethernet Link Status Ethernet port status Speed Ethernet port connection speed Duplex data transfer mode Full full duplex Half half duplex ARP The ARP table contains information about the alignment between the IP and MAC addresses of neighboring network devices IP ad...

Страница 25: ...the route was added as a result of receiving an ICMP Redirect Message When the system learns the route from the ICMP Redirect message the route will be added into the routing table in order to exclude redirection of the following packets intended for the same destination M means that the route was modified likely by a dynamic routing protocol running on a local system with the mod parameter applie...

Страница 26: ...ast one active VAP on the radio interface Radio will be in On status otherwise Off Depending on the Radio status the following information is available for monitoring Off Status radio interface state MAC radio interface MAC address Mode radio interface operation mode according to IEEE 802 11 standards On Status radio interface state MAC radio interface MAC address Mode radio interface operation mo...

Страница 27: ...sion Factory MAC Address device WAN interface MAC address setted by manufacturer Serial Number device serial number setted by manufacturer Firmware Version device firmware version Backup Version previously installed firmware version Boot Version device firmware boot version System Time current time and date setted in system Uptime the time since the last turn on or restart the device ...

Страница 28: ...matic channel selection mode If the Use Limit Channels flag is not checked or there are no channels in the list the access point will select the operation channel from all available channels in the given band 2 4 GHz range channels 1 13 Channel Bandwidth MHz channel bandwidth on which the access point operates The parameter may take values of 20 and 40 MHz Primary Channel the parameter can only be...

Страница 29: ...vailable blue highlighted channels must be specified in the Use Limit Channels list Example No settings have been made on the access point yet Radio 1 is set to 20 MHz Channel Bandwidth by default and channels are specified in the Use Limit Channels list 1 6 11 Suppose the parameter Channel Bandwidth is set to 40 MHz When you change this parameter from 20 MHz to 40 MHz the following happens the Pr...

Страница 30: ...ss point operation when there are a lot of clients connected However decreasing of the parameter s value will reduce general bandwidth of wireless network The parameter takes values from 0 to 2347 by default 2347 Aggregation enable support for AMPDU AMSDU Short Preamble use of the packet short preamble Broadcast Multicast Rate Limiting p s when the flag is set transmission of broadcast multicast t...

Страница 31: ...The value of cwMax must exceed the value of cwMin TXOP Limit this parameter is used only for data transmitted from the client station to the access point The transmission capability is the time interval in milliseconds when the client WME station has the rights to initiate data transmission over the wireless medium to the access point the maximum value is 65535 milliseconds Station EDCA parameters...

Страница 32: ...ent dBm May take values between 11 and 19 dBm Fixed Transmit Rate fixed wireless data transmission rate which is defined by IEEE 802 11a n ac standards If the Use Limit Channels list contains a channel that is not available for selection it will be marked in grey In order for the new configuration to be applied to an access point only available blue highlighted channels must be specified in the Us...

Страница 33: ...ansmits one data flow through several antennas When unchecked the device does not transmit one data flow through several antennas Beacon Interval ms beacon frames transmission period The frames are sent to detect access points The parameter takes values from 20 to 2000 ms by default 100 ms Fragmentation Threshold frame fragmentation threshold bytes The parameter takes values 256 2346 by default 23...

Страница 34: ...time of data frames measured in slots takes values 1 255 cwMin the initial timeout value before resending a frame specified in milliseconds takes the values 1 3 7 15 31 63 127 255 511 1023 The value of cwMin cannot exceed the value of cwMax cwMax the maximum timeout value before resending a frame specified in milliseconds takes the values 1 3 7 15 31 63 127 255 511 1023 The value of cwMax must exc...

Страница 35: ...ure advanced device s radio interface parameters Global Isolation when checked traffic isolation between clients of different VAP and different radio interfaces is enabled To apply a new configuration and save setting to non volatile memory press Apply Press Cancel to discard the changes ...

Страница 36: ...rection untagged traffic from clients will be tagged with VLAN ID when VLAN Trunk mode is disabled SSID virtual wireless network name Broadcast SSID when checked SSID broadcasting is on otherwise it is disabled VLAN Trunk when the flag is set tagged traffic is transmitted to the subscriber General Mode when the flag is set transmission of untagged traffic jointly with tagged traffic is allowed ava...

Страница 37: ...raffic flows in the opposite direction untagged traffic from clients will be tagged with VLAN ID when VLAN Trunk mode is disabled SSID virtual wireless network name Broadcast SSID when checked SSID broadcasting is on otherwise it is disabled VLAN Trunk when the flag is set tagged traffic is transmitted to the subscriber General Mode when the flag is set transmission of untagged traffic jointly wit...

Страница 38: ... key password required to connect to the virtual access point The length of the key makes from 8 to 63 characters WPA Enterprise WPA2 Enterprise WPA WPA2 Enterprise wireless channel encryption mode in which the client is authorized on the centralized RADIUS server To configure this security mode you must specify the parameters of the RADIUS server You also need to specify a key for the RADIUS serv...

Страница 39: ...for Accounting port that will be used to collect accounts on the RADIUS server Password of RADIUS Server for Accounting password for the RADIUS server used for accounting Use Periodic Accounting enable periodic sending of Accounting messages to the RADIUS server You can set the interval for sending messages in the Accounting Interval field Shapers Show display configuration field VAP Limit Down re...

Страница 40: ...propriate VAP configuration VLAN ID the VLAN ID used to access the device takes values 1 4094 Protocol select protocol for connection of the device via Ethernet interface to service provider network DHCP operation mode when IP address subnet mask DNS server address defualt gateway and other parameters required for operation are obtained from DHCP server automatically Static operation mode where IP...

Страница 41: ...the device via the web interface via HTTPS protocol set the flag next to WEB HTTPS In the window that appears it is possible to change the HTTPS port by default 443 The range of acceptable values of ports in addition to the default from 1025 to 65535 inclusive WEP 2L software allows monitoring status of the device and it s sensors via SNMP In the SNMP submenu you can configure settings of SNMP age...

Страница 42: ...a SNMP is given below eltexLtd 1 127 1 monitoring access point parameters and connected client devices eltexLtd 1 127 3 access point management reboot where eltexLtd 1 3 6 1 4 1 35265 is Eltex Enterprise ID To apply a new configuration and save setting to non volatile memory press Apply Press Cancel to discard the changes 5 8 The External Services menu 5 8 1 The Captive Portal submenu The Captive ...

Страница 43: ...active a button that allows you to make a backup version of the firmware active this will require a reboot of the device The active firmware version will not be set as a backup Firmware update Download the firmware file from http eltex co com support downloads and save it on your computer To do this click the Browse button in the Firmware Image field and specify the path to the firmware file in ta...

Страница 44: ...d configuration will be applied automatically and does not require device reboot To change the passwords open the configuration file in text editor and change passwords Then save the changes in configuration archive The example of password changing is shown below Reset to Default Configuration To reset all the settings to default values press Reset button If the flag Save access setting is activat...

Страница 45: ...gure the output of various kinds of debugging messages of the system in order to detect the causes of problems in the operation of the device Mode Syslog agent operation mode Local File log information is stored in a local file and is available in the device s WEB interface on the Monitoring Events tab Server and File log information is sent to a remote Syslog server and stored in a local file Sys...

Страница 46: ... time or click the Set current date and time button to synchronize with the device Time Zone allows to set the timezone according to the nearest city for your region from the list Daylight Saving Time Enable when selected automatic daylight saving change will be performed automatically within the defined time period DST Start day and time when daylight saving time is starting DST End day and time ...

Страница 47: ...er IP address domain name You can specify an address or select from an existing list Time Zone allows to set the timezone according to the nearest city for your region from the list To apply a new configuration and store settings into the non volatile memory click the Apply button To discard changes click the Cancel button ...

Страница 48: ...ce br0 common netmask X X X X where X X X X Subnet mask WEP 2L config interface br0 common dns server 1 X X X X where X X X X IP address of the dns server 1 WEP 2L config interface br0 common dns server 2 X X X X where X X X X IP address of the dns server 2 WEP 2L config interface br0 common protocol static ip Change operation mode from DHCP to Static IP WEP 2L config interface br0 common save Sav...

Страница 49: ...A WPA2 security mode WPA2 WPA WPA2 security mode WPA_WPA2 WPA Enterprise security mode WPA_1X WPA2 Enterprise security mode WPA2_1X WPA WPA2 Enterprise security mode WPA_WPA2_1X Below are examples of VAP configuration with different security modes for Radio 5 GHz wlan1 6 3 1 Configuration of VAP without encryption Creation of VAP without encryption WEP 2L root configure WEP 2L config interface WEP...

Страница 50: ...ommon enabled true Enable VAP WEP 2L config interface wlan1 va0 common exit WEP 2L config interface wlan1 va0 vap WEP 2L config interface wlan1 va0 vap ssid SSID_WEP 2L_Wpa2 Change SSID name WEP 2L config interface wlan1 va0 vap security mode WPA_WPA2 Encryption mode WPA WPA2 WEP 2L config interface wlan1 va0 vap key wpa password123 Key password required to connect to the virtual access point The ...

Страница 51: ... RADIUS server IP address WEP 2L config interface wlan1 va0 vap radius auth port X where X RADIUS server port used for authentication and authorization By default 1812 WEP 2L config interface wlan1 va0 vap radius auth password secret where secret Password for RADIUS server used for authentication and authorization WEP 2L config interface wlan1 va0 vap radius acct enable true Enable the sending of ...

Страница 52: ...redirect virtual portal name default Specify portal name By default default WEP 2L config interface wlan1 va0 vap captive portal scenarios scenario redirect exit WEP 2L config interface wlan1 va0 vap captive portal scenarios exit WEP 2L config interface wlan1 va0 vap captive portal enabled true WEP 2L config interface wlan1 va0 vap captive portal exit WEP 2L config interface wlan1 va0 vap radius W...

Страница 53: ... Enabling client isolation on VAP WEP 2L config interface wlan1 va0 vap station isolation true Enable traffic isolation between clients within a single VAP To disable enter false Enabling minimal signal WEP 2L config interface wlan1 va0 vap minimal signal X where X RSSI threshold when reached the point will disconnect the client from the VAP The parameter can take values from 100 to 0 Enabling TLS...

Страница 54: ...nel X where X number of the static channel on which the point will operate 6 4 1 Advanced Radio settings Changing the channel bandwidth WEP 2L config interface wlan0 wlan radio 2g bandwidth X where X bandwidth Parameter can take the following value for Radio 1 20 40 Radio 2 20 40 80 Changing the primary channel WEP 2L config interface wlan0 wlan radio 2g control sideband lower Parameter may take v...

Страница 55: ...U To disable enter false Enabling the short preamble WEP 2L config interface wlan0 wlan radio 2g short preamble true Enabling the short packet preamble To disable enter false Enabling the Wi Fi Multimedia WMM WEP 2L config interface wlan0 wlan radio 2g wmm true Enabling the support for WMM Wi Fi Multimedia To disable enter false Enabling Broadcast Multicast shaper WEP 2L config interface wlan0 wla...

Страница 56: ...onds Takes the following values 1 3 7 15 31 63 127 255 511 1023 The value of cwMax must be greater than the value of cwMin WEP 2L config interface wlan0 wlan radio 2g qos edca ap bk txop X where X The time interval in milliseconds in which the client WME station is allowed to initiate data transmission over the wireless environment to the access point Max value 65535 ms WEP 2L config interface wla...

Страница 57: ...out management Download the device configuration file to tftp server WEP 2L root manage config download tftp tftp server IP address Example manage config download tftp 192 168 1 15 Download configuration file from tftp server to the device WEP 2L root manage config upload tftp tftp server IP address Configuration file name Example manage config upload tftp 192 168 1 15 config json WEP 2L root mana...

Страница 58: ...mezone Asia Novosibirsk Novosibirsk Timezone configuration WEP 2L config date time common save 6 6 APB service configuration The APB service is used to provide portal roaming of clients between access points connected to the service Commands for APB service configuration WEP 2L root configure WEP 2L config captive portal WEP 2L config captive portal apbd WEP 2L config captive portal apbd roam_serv...

Страница 59: ... tx retry count 2 rssi 1 36 rssi 2 28 snr 1 22 snr 2 25 tx rate OFDM 48 rx rate OFDM 36 rx bw 20M rx bw all 20M tx bw 20M uptime 00 00 24 multicast groups count 0 wireless mode g eltex serial number WP36000037 link capacity 48 not changed link quality 75 not changed link quality common 75 actual tx rate 0 actual rx rate 0 actual tx pps 0 actual rx pps 0 name 0 Rate Transmitted Received Total Packe...

Страница 60: ...ime 1 d 02 34 03 software version 1 1 0 build 444 secondary software version 1 0 3 6 boot version 1 1 0 build 444 memory usage 70 memory free 32 memory used 76 memory total 108 cpu 3 43 is default config false board type WEP 2L hw platform WEP 2L factory wan mac E8 28 C1 xx xx xx factory lan mac E8 28 C1 xx xx xx factory serial number WP39000026 hw revision 1v0 session password initialized false o...

Страница 61: ...4149 rx packets 13751 tx bytes 2462399 tx packets 20753 WEP 2L root monitoring ethernet link up speed 1000 duplex enabled rx bytes 4872597 rx packets 13844 tx bytes 2477091 tx packets 20923 WEP 2L root monitoring arp ip mac 0 192 168 1 1 02 00 48 xx xx xx 1 192 168 1 151 2c fd a1 xx xx xx WEP 2L root monitoring route Destination Gateway Mask Flags Interface 0 0 0 0 192 168 1 1 0 0 0 0 UG br0 192 1...

Страница 62: ...1 bandwidth 20 frequency 5660 6 7 5 Event logging WEP 2L root monitoring events Jan 23 00 00 07 WEP 2L daemon info syslogd 925 started BusyBox v1 21 1 Jan 23 00 00 09 WEP 2L daemon info configd 955 The AP startup configuration was loaded successfully Jan 1 03 00 14 WEP 2L daemon info networkd 987 Networkd started Jan 1 03 01 17 WEP 2L daemon info networkd 987 DHCP client Interface br0 obtained lea...

Страница 63: ... 81 2 40 3 14 4 10 5 36 6 60 7 40 8 8 9 14 10 38 11 75 12 37 13 18 36 14 40 12 44 10 48 18 52 3 56 5 60 8 64 6 132 0 136 0 140 0 144 1 149 30 153 1 157 3 161 2 165 1 Please note that all clients will disconnect from the access point during spectrum analyzer operation Clients will be connected again only when the spectrum analyzer finishes its work The analysis time for all the radio channels in tw...

Страница 64: ...P 2L User manual 64 7 The list of changes Document version Issue date Revisions Version 1 1 30 06 2020 Syncronization with firmware version 1 1 0 Version 1 0 16 03 2020 First issue Firmware version 1 1 0 ...

Страница 65: ...sibirsk Russian Federation 630020 E mail techsupp eltex co ru You are welcome to visit ELTEX official website to get the relevant technical documentation and software for ELTEX products or consult a Service Center Specialist on our technical forum https eltex co com https eltex co com support downloads http forum eltex co ru ...

Отзывы: