background image

 

 

 

 

LevelOne 

 

 

EAP-200 

Enterprise Access Point 

 

User Manual

 

 

 

 

 

 

 

 

 

 

V1.00 

Содержание EAP-200

Страница 1: ...1 LevelOne EAP 200 Enterprise Access Point User Manual V1 00...

Страница 2: ...1 7 4 1 Change Password 71 7 4 2 Backup Restore 72 7 4 3 System Upgrade 73 7 4 4 Reboot 74 7 4 4 Upload Certificate 75 7 5 Status 76 7 5 1 Overview 76 7 5 2 Associated Clients 78 7 5 3 Repeater 79 7 5...

Страница 3: ...viduals with basic network system knowledge to complete the installation Section 1 02 1 2 Document Conventions Represents essential steps actions or messages that should not be ignored Note Contains r...

Страница 4: ...s Manual and QIG x1 Console Cable x1 Ethernet Cable x1 Power Adapter DC 12V x1 Antenna x2 Screw Pack x1 Ground Cable x1 It is recommended to keep the original packing materials for possible future sh...

Страница 5: ...ed Access WPA and WPA2 By pushing a purposely built button the WES Press n Connect feature makes it easy to bridge wireless links of multiple EAP 200s for forming wider wireless network coverage EAP 2...

Страница 6: ...above deployment scenario illustrates a deployment example using three access points AP 1 AP 2 and AP 3 Three EAP 200 systems construct a network comprising of wired and wireless segments AP 2 plays t...

Страница 7: ...nning WES process 3 Console Attach the serial cable here 4 LAN1 LAN2 Attach the Ethernet cable here for connection with wired local networks 5 Reset Hardware reset button press once to reset to the sy...

Страница 8: ...ED ON indicates wireless ready 4 WDS LED LED ON indicates WDS ready 5 WES LED To indicate WES status Master Slave WES Start LED Green OFF and then BLINKING SLOWLY LED Red OFF and then BLINKING SLOWLY...

Страница 9: ...existing wired LAN network 3 There are two ways to supply power over to EAP 200 a Connect the DC power adapter to the EAP 200 power socket b EAP 200 LAN port is capable of transmitting DC currents Co...

Страница 10: ...ssword is forgotten 1 In order to connect to the console port of EAP 200 a console modem cable and a terminal simulation program such as the Hyper Terminal are needed 2 If a Hyper Terminal is used ple...

Страница 11: ...om the console interface key in reset2def for login and password Confirm yes and EAP 200 will begin the reset process When the login prompt reappears the device has completed the reset to default proc...

Страница 12: ...PC to the LAN port of EAP 200 via an Ethernet cable Then set a static IP Address on the same subnet mask as the EAP 200 in TCP IP settings of your PC such as the following example IP Address 192 168 1...

Страница 13: ...13 The Web Management Interface System Overview Page...

Страница 14: ...er right hand corner of the interface to return to the Administrator Login Page Click OK to logout Logout Logout Prompt For security reasons it is strongly recommended to change the administrator s pa...

Страница 15: ...racters and retype it in the Re enter New Password field Congratulation Now LevelOne s EAP 200 is installed and configured successfully It is strongly recommended to make a backup copy of configuratio...

Страница 16: ...having prepared the EAP 200 s hardware for configuration set the TCP IP settings of administrator s computer to have a static IP Address of 192 168 1 10 and Subnet Mask of 255 255 255 0 Step 1 Config...

Страница 17: ...TP The default is Manual and requires individual setup every time the system starts up Simply choose a time zone and set the time accordingly When finished click SAVE Manually Time Setup The alternati...

Страница 18: ...t decides the AP will be getting dynamic IP Addresses from the connected network set Mode to DHCP otherwise set Mode to Static and fill in the required fields marked with a red asterisk IP Address Net...

Страница 19: ...al tab On this page we only need to choose the Band and Channel that we wish to use Wireless General Settings Page On this page select the Band with which the AP is to broadcast its signal The rest of...

Страница 20: ...figuration other VAP configuration can refer to the same setup steps as done for VAP 1 Click on the Overview tab to proceed Virtual AP Overview Page On this page click the hyperlink in the row and col...

Страница 21: ...afterwards enter an ESSID to represent the WLAN associated with AP s VAP 1 It is suggested that Profile Name is used to describe what this particular VAP will be used for otherwise leave it as default...

Страница 22: ...ls of services from the same physical AP device Please click on the Wireless icon to review the VAP Overview page VAP Overview Page To proceed with specific VAP configuration click on the correspondin...

Страница 23: ...tive Profile Name and an appropriate ESSID for clients to associate to A VLAN ID can be provided to indicate the traffics through this particular VAP It may allow further management control e g access...

Страница 24: ...for other VAP with security requirement Step 1 Ensure the intended VAP is Enabled VAP Overview Page On the VAP Overview page check the table to confirm the VAP State If it is Enabled skip to Step 2 If...

Страница 25: ...s desired skip to the Step3 MAC restriction can be coupled with wireless security to provide extra protection First click on the corresponding cell in the column labeled Security Type This hyperlink w...

Страница 26: ...28 bit or 152 bit Security Settings WEP 802 11 Authentication Select from Open System Shared Key or Auto WEP Key Length Select from 64 bit 128 bit 152 bit key length WEP Key Format Select from ASCII o...

Страница 27: ...cond RADIUS Server Settings o Host Enter the IP address or domain name of the RADIUS server o Authentication Port The port number used by the RADIUS server Specify a port number or use the default 181...

Страница 28: ...m TKIP WPA AES WPA TKIP WAP2 AES WAP2 or Mixed Pre shared Key Type Select a pre shared key type PSK Hex or Passphrase Pre shared Key Enter the key value for the pre shared key the format of the key va...

Страница 29: ...pecify a port number or use the default 1812 o Secret Key The secret key for the system to communicate with the RADIUS server o Accounting Service Enabling this option allows accounting of login and l...

Страница 30: ...entified by their MAC addresses listed in the Allow List allowed MAC addresses is granted with access to the system The administrator can temporarily block any allowed MAC address by checking Disable...

Страница 31: ...31 MAC ACL Deny List...

Страница 32: ...ected all incoming MAC addresses will be authenticated by an external RADIUS server Please note that each VAP MAC ACL and its security type shown on the Security Settings page share the same RADIUS co...

Страница 33: ...l be configured by the same way Step 1 Make sure the Band and Channel are matched between the WDS peers In order to create a valid WDS link the two EAP 200s must be configured to use the same channel...

Страница 34: ...t such occurrence please make sure Layer 2 STP is enabled To turn on this feature please click on the System and then Network Interface tab Network Settings Page Please select Enable in the field labe...

Страница 35: ...e WMI displayed in the center of the interface It is also referred to as the configuration page The Main Menu on the top of the WMI allows the administrator to traverse to various management functions...

Страница 36: ...ut the user must reboot the system upon the completion of all configurations for the changes to take effect Upon clicking SAVE the following message will appear Some modification has been saved and wi...

Страница 37: ...intenance purpose it is highly recommended to have the following information stated as clearly as possible Name The system name used to identify this system Description Further information about the s...

Страница 38: ...at one otherwise locate a nearby NTP server on the web 2 Manually set up By selecting Manually set up the administrator can manually set the system date and time Manual Time Configuration Fields Set D...

Страница 39: ...Domain Name System server o Alternate DNS Server The IP address of the substitute DNS server DHCP This configuration type is applicable when the system is connected to a network with the presence of a...

Страница 40: ...for Management When it is enabled management traffics from the system will be tagged with a VLAN ID In other words administrator who wants to access the WMI must send management traffics with the sam...

Страница 41: ...bled events on Cold Start Interface UP Down and Association Disassociation can be reported to an assigned server o Enable Disable Enable or Disable this function o Server IP Address Enter the IP addre...

Страница 42: ...WMI page will automatically open to confirm the changes Click Restart link and EAP 200 will restart to activate the tunnel A new window will automatically open and display the tunnel settings from the...

Страница 43: ...cate DNS SRV Discovery The way of using DNS SRV to discover acess controller Domain Name Suffix Enter the suffix of the access controller such as example com DHCP Option Discovery The way of using DHC...

Страница 44: ...44 Manage Certificates...

Страница 45: ...ts own settings e g ESSID VLAN ID security settings etc With such VAP capabilities different levels of service can be configured to meet network requirements a 7 2 1 VAP Overview An overall status is...

Страница 46: ...The hyperlink showing Enable or Disable connects to the VAP Configuration page VAP State Page Security Type The hyperlink showing the security type connects to the Security Settings Page VAP Security...

Страница 47: ...erlink showing Allow or Disable connects to the Access Control Settings Page VAP MAC ACL Page Advanced Settings The advanced settings hyperlink connects to the Advanced Wireless Settings Page VAP Adva...

Страница 48: ...is 802 11g 802 11n Double channel bandwidth to 40 MHz is supported to enhance throughput Channel Select the appropriate channel from the drop down menu to correspond with your network settings for exa...

Страница 49: ...136 140 6M 9M 12M 18M 24M 36M 48M 54M Auto Lowest Low Medium High Highest 802 11b 1 2 3 4 5 6 7 8 9 10 11 12 13 1M 2M 5 5M 11M 802 11g 1 2 3 4 5 6 7 8 9 10 11 12 13 6M 9M 12M 18M 24M 36M 48M 54M 802 1...

Страница 50: ...d in the profile as follows VAP Enable or Disable this VAP Profile Name The profile name of specific VAP for identity management purposes ESSID ESSID Extended Service Set ID serves as an identifier fo...

Страница 51: ...curity type includes None WEP 802 1X WPA PSK and WPA RADIUS None Authentication is not required and data is not encrypted during transmission when this option is selected This is the default setting a...

Страница 52: ...rovided Security Settings 802 1X Authentication Dynamic WEP Settings o Dynamic WEP For 802 1X security type Dynamic WEP is always enabled to automatically generate WEP keys for encryption o WEP Key Le...

Страница 53: ...cess Pre shared Key is a pre shared key authentication method a special mode of WPA Security Settings WPA PSK Cipher Suite Select an encryption method from TKIP WPA AES WPA TKIP WAP2 AES WAP2 or Mixed...

Страница 54: ...e IP address or domain name of the RADIUS server o Authentication Port The port number used by the RADIUS server Specify a port number or use the default 1812 o Secret Key The secret key for the syste...

Страница 55: ...the SSID of upper bound AP for uplink connection Security Type None WEP or WPA PSK can be configured for this Repeater connection Please note the security type configured here shall follow upper boun...

Страница 56: ...spectively Please fill in remote peer s MAC address and click SAVE to proceed if setting revision is necessary CLEAR button is used to clear the contents in the above WDS connection list Repeater Sett...

Страница 57: ...t each other Fragmentation Threshold Enter a value between 256 and 2346 The default is 2346 A packet size larger than this threshold will be fragmented sent with several pieces instead of one chunk be...

Страница 58: ...tion must support WMM WMM shall be enabled on EAP 200 WMM shall be enabled in the wireless adapter on client s computer IAPP IAPP Inter Access Point Protocol is a protocol by which access points share...

Страница 59: ...tings Page Maximum Number of Clients EAP 200 supports various methods of authenticating clients for wireless LAN access The default policy is unlimited access without any authentication required To re...

Страница 60: ...L Allow List only the client devices identified by their MAC addresses listed in the Allow List allowed MAC addresses are granted with access to the system The administrator can temporarily block any...

Страница 61: ...Deny List all client devices are granted with access to the system except those listed in the Deny List denied MAC addresses The administrator can allow any denied MAC address to connect to the syste...

Страница 62: ...external RADIUS When RADIUS ACL is selected all incoming MAC addresses will be authenticated by an external RADIUS Please note that each VAP s MAC ACL and its security type shown on the Security Setti...

Страница 63: ...o extend its wireless service coverage on this page SSID The SSID Service Set ID of the AP found in this system s coverage area MAC Address The MAC address of the respective AP Channel The channel num...

Страница 64: ...nfigure the WPA PSK setting for associating with the target AP The following configuration box will then appear at the bottom of the screen Information provided here must be consistent with the securi...

Страница 65: ...Settings a 7 3 1 Firewall List It provides an overview of firewall rules in the system 6 default rules with up to total 20 firewall rules are available for configuration Firewall List Page From the ov...

Страница 66: ...is specific rule will decide its priority among available firewall rules in the table Rule name The rule name can be specified here EtherType The drop down list will provide the available types of tra...

Страница 67: ...ination MAC IP Address Mask indicates the destination IP address when EtherType is IPv4 ARP IP MAC MASK indicate the ARP payload fields Action The rule can be chosen to be Block or Pass Remark The not...

Страница 68: ...68 Please make sure all desired rules state of rule are checked and saved in overview page the rule will be enforced upon system reboot...

Страница 69: ...ols These services are available to choose from drop down list of layer2 firewall rule edit page with Ether Type to be IPv4 The first 28 entries are default services and the administrator can add dele...

Страница 70: ...dated against ARP spoofing o Force DHCP option when enabled the AP only learns MAC IP pair information through DHCP packets Since devices configured with static IP address does not send DHCP traffic t...

Страница 71: ...is highly recommended to change the administrator s password to a secure password Only alpha numeric characters are allowed and it is also recommended to make use of a combination of both numeric and...

Страница 72: ...w will appear during the reboot period The system power must be kept turn on before the completion of the reboot process The System Overview page will appear upon the completion of reboot Backup Syste...

Страница 73: ...ation message appearing to notify the administrator to restart the system after a successful firmware upgrade Please restart the system after upgrading the firmware System Upgrade Page Note It is reco...

Страница 74: ...Click Reboot to restart the system Please wait for the blinking timer to complete its countdown before accessing the system s Web Management Interface again The System Overview page will appear after...

Страница 75: ...advanced configuration for the CAPWAP to manage Certificates Certificate It provides Certificate security for CAPWAP to ensures the safety between Access Controller and WAP Use Default Certificate Cli...

Страница 76: ...current condition and state of the system and includes the following functions Overview Associated Clients Repeater and Event Log a 7 5 1 Overview The System Overview page provides an overview of the...

Страница 77: ...ss of the LAN Interface IP Address The IP address of the LAN Interface Subnet Mask The Subnet Mask of the LAN Interface Gateway The Gateway of the LAN Interface Radio Status MAC Address The MAC addres...

Страница 78: ...on performance Associated Client Status Page Associated VAP The name of a VAP Virtual Access Point that the client is associated with ESSID The Extended Service Set ID which the client is associated w...

Страница 79: ...79 c 7 5 3 Repeater The administrator can review detailed information of the repeater function on this page Information of repeater s status mode and encryption is provided Repeater Status Page...

Страница 80: ...n the event happened Hostname Indicates which host recorded this event Note that all events on this page are local events so the hostname in this field is always the same However in remote SYSLOG serv...

Страница 81: ...7 06 7 6 Online Help The Help button is at the upper right corner of the display screen Click Help for the Online Help window and then click the hyperlink of the relevant information needed Online He...

Отзывы: