Home

4ipnet EAP-OWL User Manual

1. CPU RAM Usage 3 92 45 70 LAN Interface Ah AP Status MAC Address 00 1F D4 94 19 3B RF Card Name Er Card A x IP Address 10 1 121 21 Subnet Mask 255 255 0 0 Profile Security Online ikma BSSID ESSID Type Clients HI Gateway 10 1 3 40 R VAP 1 00 1F D4 94 19 3C 4ipnetAP A1 Open D x VAP 3 02 1F D4 94 19 3C felix220 a3 WPA P 1 x OO caPwap Status Disabled Wl IPv6 Status Disabled Web Management Interface Main Page System Overview From here click on the System icon to get to the following page On this Page you can make entries to the Name Description and Location fields as well as set the device s time 23 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH General FS Interface Port A CAPWAP IPv6 Home gt System gt General System Information Name 4ipnet EAP220 Description Location Time Device Time 2013 11 26 10 12 19 Time Zone GMT 08 00 Taipei z Time Enable NTP Manually set up NTP Server 1 time nist gov 8 NTP Server 2 pool ntp org System Information Page There are two methods of setting up the time Manual indicated by the option Set Date amp Time and NTP The default is Manual and requires individual setup every time the system starts up Simply choose a time zone and set the time accordingly When it is finished click SAVE
2. Time Zone GMT 08 00 Taipei v Time O Enable NTP manually set up Set Date M vaar Month SC bay Set Time YlHour 1 minl Ylsec Manually Time Setup The alternative method is NTP Upon selecting NTP under the Time field the configuration changes to allow up to two NTP servers Simply enter a local NTP server s IP Address if available or search online for an NTP server nearest to you Set the time zone and click SAVE Time Zone GMT 08 00 Taipei a Time Enable NTP O Manually set up NTP Server 1 NTP Server 2 NTP Setup 24 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Step 2 Configuring the AP s Network Settings While still on this Page click on the Network Interface tab to begin configuration of the network settings General Network Interface Port Management CAPWAP IPv6 Home gt System gt Network Interface Network Settings Mode Static DHCP Renew IP Address 192 168 1 1 Netmask 255 255 255 0 Default Gateway 192 168 1 254 Primary DNS Server 192 168 1 254 Alternate DNS Server Ethernet IGMP Snooping Disable Enable Layer2 STP Disable D Network Settings Page If the deployment decides that the AP will be getting dynamic IP Addresses from the connected network set Mode to DHCP otherwise set Mode to Static and fill in the re
3. Profile Name ESSID Uplink Bandwidth Downlink Bandwidth VLAN ID Uplink 802 1p Downlink 802 1p AC Mappping CAPWAP Tunnel Interface User s Manual Enterprise Access Point ENGLISH VAP Configuration Profile Name RF Card A VAP 1 x 5 Disable Enable VAP 1 4ipnetAP A1 o Kbits s 0 Kbits s Disable Enable VLAN ID 1 4094 Best Effort BE EN Background BK Best Effort D Best Effort BE Best Effort D Excellent Effort EE Best Effort Critical Applications CA Best Effort z Video VI Best Effort z Voice VO Best Effort Internetwork Control IC Best Effort D Network Control NC Best Effort sl o gt Uplink Downlink Bandwidth Bandwidth control is configurable on the VAP in Kbits per second Set 0 for unlimited bandwidth control and the maximum allowed value for this field is 999999999 gt Uplink 802 1P per VAP Priority levels for uplink traffic can be selected here The options available are Background Best Effort Excellent Effort Critical Applications Video Voice Internetwork Control Network Con 802 1P gt trol For more information please refer to IEEE Standards Downlink 802 1P AC Mapping Re mapping options are available on 802 1P downlink traffic The options available are Background Best Effort Video and Voice CAPWAP Tunnel established between CAPWAP Tunnel Interface Select Checkbox to d
4. Cipher Suite WPA2 sl Pre shared Key Type PSK Hex 64 chars Passphrase 8 63 chars Pre shared Key Group Key Update Period g6400 second s Security Settings WPA Personal gt Cipher Suite Select an encryption method from WPA2 or WPA2 WPA gt Pre shared Key Type Select a pre shared key type PSK Hex or Passphrase gt Pre shared Key Enter the key value for the pre shared key the format of the key value depends on the key type selected gt Group Key Update Period The time interval for the Group Key to be renewed the time unit is in seconds 36 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e WPA Enterprise Authenticates users by RADIUS and provides WPA data encryption Hi H eh S System Wireless Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced Access Control Home gt Wireless gt Security Security Settings Profile Name RF Card A VAP 1 z Security Type WPA Enterprise x Cipher Suite WPA2 sl Group Key Update Period 86400 second s Py Re eege Domain Name IP Address Authentication Port 1812 Secret Key gt Accounting Service Disable Enable Accounting Port 1813 Accounting Interim Update Interval ep second s Secondary RADIUS Server iost Domain Name IP Address Authentication Port Secret Key Accounting Service Disa
5. VAP Config Security Repeater Advanced Access Control Home gt Wireless gt General General Settings RF Card Name RF Card A Band 802 11g 802 11n E Pure Lin Short Preamble Disable Enable Short Guard Interval Disable Enable Channel Width 20 MHz Channel 6 D Max Transmit Rate Auto sl Transmit Power Level 1 D ACK Timeout 0 0 255 0 Auto Unit 4 micro seconds Beacon Interval 100 100 500ms Airtime Fairness Disable Fair Access Preferred Access Packet Delay Threshold 1000 millisecond s 100 5000ms 0 Disable Idle Timeout 300 second s Larger than 15 Band Steering Disable Enable Aggressive Interference Detection Adjacent Channel Utilization Threshold 0 0 99 O Disable Latency 10 second s Co Channel Utilization Threshold 0 0 99 0 Disable Invalid Packet Rate 90 0 99 Latency 10 second s WME Configuration Transmission Rate Threshold o kbps 0 Disable Wireless General Settings Page 42 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Please make sure both APs are using the same Band and Channel in order to establish a successful WDS link Click SAVE if any changes have been made Step 2 Prevent Loops when Connecting Multiple APs When many APs are linked in this manner undesired loops may form to lowe
6. are granted access to the system The administrator can temporarily block any allowed MAC address by checking Disable until the administrator re Enables the listed MAC VAP Overview General VAP Config Security Repeater Advanced Access Control Home gt Wireless gt Access Control Access Control Settings Profile Name RF Card A VAP 1 x Maximum Number of Clients 32 Range 1 256 per system Access Control Type MAC ACL Allow List EN No MAC Address State 1 Disable Enable 2 Disable Enable 3 Disable Enable MAC Allow List An empty Allow List means that there is no allowed MAC address Make sure at least the Note MAC of the management system is included e g network administrator s computer 75 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH gt MAC ACL Deny List When selecting MAC ACL Deny List all client devices are granted access to the system except those listed in the Deny List denied MAC addresses The administrator can allow any denied MAC address to connect to the system temporarily by checking Disable IVAP Overview General VAP Config N Security Repeater Advanced Access Control Home gt Wireless gt Access Control Access Control Settings Profile Name RF Card A VAP 1 E Maximum Number of Clients 32 Range 1 256 per system Access Control Type MAC ACL Deny List E
7. 4 LED lights Representation is listed at the bottom of the panel Top 2 reserved for RF Card B if applicable For Uplink connection This port can be used to connect to a controller gateway or directly to the internet PoE is supported Attach Ethernet cables here to connect to the wired local network A telephone can bypass to a connected phone line in the back of the AP when connected to the socket Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH OWL530 1 Ventilation Valve Due to extreme weather conditions water vapor in the OWL530 may condense The valve allows ventilation to prevent moisture buildup within the OWL530 2 Ground Connector For connecting the ground wire 3 PoE Connector For connecting to the Power Sourcing Equipment PSE 4 N type Connector x 2 For connecting to an antenna Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH OWL620 OWL610 PSE PoE Adaptor Data Link Figure 3 OWL620 OWL610 1 Console The system can be configured via a serial console port The administrator can use a terminal emulation program such as Microsoft s Hyper Terminal for troubleshooting purposes Ethernet LAN Attach Ethernet cables here for connecting to the wired local network PoE Connector For connecting to the Power Sourcing Equipment PSE N type Connector x 2 For connecti
8. Each VAP interface can be checked individually to mark as trusted interfaces security enforcements on DHCP ARP like DHCP snooping and ARP inspection will be carried out on non trusted interfaces e DHCP Snooping When enabled DHCP packets will be validated against possible threats like DHCP starvation attack in addition the trusted DHCP server IP MAC can be specified to prevent rouge DHCP server e ARP Inspection When enabled ARP packets will be validated against ARP spoofing O Proxy ARP option when enabled AP will reply ARP requests on behalf of downlink stations The ARP table maintained by the AP will be used as a look up table upon receipt of ARP request from AP uplink Adversely without Proxy ARP ARP request is broadcasted down into the AP s wireless network causing network inefficiencies Force DHCP option when enabled the AP only learns MAC IP pair information through DHCP packets Since devices configured with static IP address does not send DHCP traffic any clients with static IP address will be blocked from internet access unless its MACIIP pair is listed and enabled on the Static Trust List Trust List Broadcast can be enabled to let other APs with L2 firewall feature learn the trusted MAC IP pairs to issue ARP requests Static Trust List can be used to add MAC or MAC IP pairs of devices that are trusted to issue ARP request Other network nodes can still send their ARP requests however if their IP appear
9. Network Interface Network Settings Mode Static DHCP Renew IP Address 192 168 1 1 be Netmask 255 255 255 0 a Default Gateway 192 168 1 254 a Primary DNS Server 192 168 1 254 5 Alternate DNS Server Ethernet IGMP Snooping Disable Enable Layer2 STP Disable Network Settings Page Mode Determine the way to obtain the IP address by DHCP or Static gt Static The administrator can manually set up the static LAN IP address All required fields are marked with a red asterisk O O O O O IP Address The IP address of the LAN port Netmask The Subnet mask of the LAN port Default Gateway The Gateway IP address of the LAN port Primary DNS Server The IP address of the primary DNS Domain Name System server Alternate DNS Server The IP address of the substitute DNS server gt DHCP This configuration type is applicable when the system is connected to a network with the presence of a DHCP server all related IP information required will be provided by the DHCP server automatically Ethernet IGMP Snooping When Enabled the switch forwards traffic IGMP packets are transferred via the Access Points network interface and the IP multicast host Registration information is recorded and sorted into multicast groups The internal switch forwards traffic only to those ports that request multicast traffic Adversely without IGMP snooping multicast traffic is treated l
10. No MAC Address State 1 Disable Enable 2 Disable Enable 3 Disable Enable Deny List 76 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH gt RADIUS ACL Authenticate incoming MAC addresses by an external RADIUS When RADIUS ACL is selected all incoming MAC addresses will be authenticated by an external RADIUS Please note that each VAP s MAC ACL and its security type shown on the Security Settings page share the same RADIUS configuration VAP Overview General VAP Config Security Repeater Advanced Access Control Home gt Wireless gt Access Control Access Control Settings Profile Name RF Card A VAP 1 Je Maximum Number of Clients 32 Range 1 256 per system Access Control Type RADIUS ACL Primary RADIUS Server Note These settings will also apply to security settings which use RADIUS Server for this VAP Host Domain Name IP Address Authentication Port 1812 1 65535 Secret Key we Secondary RADIUS Server Host Authentication Port Secret Key RADIUS ACL 77 Copyright 4IPNET INC 4ipnet 7 3 Firewall User s Manual Enterprise Access Point ENGLISH The system provides an added security feature Layer2 Firewall in addition to the typical AP security Layer2 Firewall offers a firewall function that is tailored specifically for Layer2 traffic providing another choice of shield again
11. Open Open WPA Personal Open Open Open Open Open Open Open Open Open Open Open Open Open MAC ACL Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Advanced Settings Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit On this page click the hyperlink in the row and column that corresponds with VAP 1 s State This will bring up the following page 27 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH g gt gt H e S System Wireless Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced Access Control Home gt Wireless gt van Config VAP Configuration Profile Name RF Card A vap 1 gt VAP Disable Enable Profile Name VAP 1 ESSID 4ipnetAP A1 VLAN ID Disable Enable VLAN ID 1 4094 CAPWAP Tunnel Interface Ei VAP Configuration Page RF Card A VAP 1 shown The desired VAP profile can be selected from the drop down menu of Profile Name and VAP 1 configuration will serve as an example for all other VAPs Before proceeding further please make sure that the VAP field is marked Enable afterwards enter an ESSID to represent the WLAN associated with AP s VAP 1 It is suggested that Profile Name is used to describe what this particula
12. 3 Firewall The system supports the following firewall functions IP Port forwarding and DMZ Demilitarized Zone The administrator can allow a certain part of the network to be exposed to the Internet in limited and controlled ways for special purposes such as game and voice applications 8 3 1 IP Port Forwarding A certain part of the network can be exposed to the Internet in a limited and controlled way for special purpose Internet services such as on line game or video conferencing on this page Please ensure that the internal port to be used is not occupied by other applications g gt Hi 8 e S System Wireless EireWwall Utilities Status IP Port Forwarding DMZ Home gt Firewall gt 1P Port Forwerding IP Port Forwarding Service Name External Port Range Internal IP Address Protocol Se TCP UDP Add IP Port Forwarding Item Sovice Internal IP Address Protocol State Delete Edit Name Range e Service Name The administrator can provide an easy remembered alias for the specific forwarding e External Port Range The range of external port for forwarding traffic can be defined manually by the administrator e Internal IP Address Enter the LAN IP address to receive the forwarding traffic e Protocol Forwarding traffic protocol can be selected from drop down list to be TCP UCP TCP or UDP e Add Click Add to activate the new service es IP Port Forwarding Details of current services available Click Delete to remove t
13. 4ipnet User s Manual Enterprise Access Point ENGLISH o Lease Time It can be chosen from the drop down list to renew Leased LAN IP 107 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 1 4 Management The system supports SNMP Syslog and UPnP functions for easy management These functions can be configured on this page System Information Operating Mode Network Management Home gt System gt Management Services Management Services SNMP Configuration e Disable gt Enable Community String Read Write Trap Disable Enable Server IP System Log e Disable Enable SYSLOG Server IP 192 168 1 254 Server Port 514 SYSLOG Level Error UPnP Configuration Disable Enable e SNMP Configuration By enabling SNMP function the administrator can obtain the system information remotely gt Enable Disable Select Enable to activate this function or Disable to inactivate it Community String The community string is required when accessing the Management Information Base MIB of the system o Read Enter the community string for accessing the MIB with Read privilege o Write Enter the community string for accessing the MIB with Write privilege gt Trap When enabled events on Cold Start Interface UP amp Down and Association amp Disassociation can be reported to an assigned server o Enable Disable Select Enable to activate this function or
14. AP H H e S System Wireless Firewall Utilities Status VAP Overview General d VAP Config d Security 1 Repeater Advanced d Access Control d Site Survey Home gt Wireless gt Repeater Config Repeater Settings Repeater Type Universal Repeater v The SSID of Upper Bound AP ig Current wireless channel of the system is set at 6 Repeater connection may fail if the system is set to connect to upper AP with different channels Security Type None WEP WPA PSK Repeater Settings Universal Repeater 71 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 2 6 Advanced The advanced wireless settings for the Access Point s VAP Virtual Access Point profiles allow customization of data transmission settings The administrator can tune the following parameters to improve network communication performance if a poor connection occurs g gt Hi H e S System Wireless Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced Access Control Home gt Wireless gt Advanced Advanced Wireless Settings Profile Name RF Card A VAP 1 DN RTS Threshold 2346 1 2346 DTIM period 1 1 15 Consecutive Dropped Packets 5 2 50 O Disable Broadcast SSID Disable Enable Wireless Station Isolation Disable Enable WMM Disable Enable IAPP Disable Enable Multicast to Unicast Conversion
15. Access Point as well as specify particular MAC addresses that can or cannot access the device g gt H H e S Firewall Utilities Status System Wiese VAP Overview General VAP Config Security Repeater Advanced Y Access Control Home gt Wireless gt Access Control Access Control Settings Profile Name EE Card A VAP 1 Maximum Number of Clients 32 Range 1 256 per system Access Control Type Disable Access Control Access Control Settings Page e Maximum Number of Clients The 4ipnet Access Point supports various methods of authenticating clients for wireless LAN access The default policy is unlimited access without any authentication requirement To restrict the station number of wireless connections simply change the Maximum Number of Stations to a desired number For example when the number of stations is set to 20 only 20 stations are allowed to connect to the specified VAP 74 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e Access Control Type The administrator can restrict the wireless access of client devices based on their MAC addresses gt Disable Access Control When Disable is selected there is no restriction for client devices to access the system gt MAC ACL Allow List When selecting MAC ACL Allow List only the client devices identified by their MAC addresses listed in the Allow List allowed MAC addresses
16. Clients wos Link Status Event Log Monitor Home gt Status gt Repeater Status Real Eeee Eeee oo GG GG 6 Real Time E E E e E E e By clicking plot a dynamic graph for WDS link status is displayed Information on the plot includes Total RSSI Ant1 RSSI Ant2 RSSI Transmission Rate Receiving Rate Transmission Speed and Receiving Speed 97 Copyright 4IPNET INC 4ipnet RSSI Receiving Rate Transmission Rate 2013 11 18 17 59 06 User s Manual Enterprise Access Point ENGLISH RF Card B WDS Link 1 Status M Total RSS Y Ant1 RSSI Y Ant2 RSSI Receiving Rate Y Receiving Speed Y Transmission Rate Y Transmission Speed Voice Hint for None v Display Range 1min v Stop p d uolssiwsues paeds Bulalasay 17 59 17 59 10 Total RSSI 87 Ant1 RSSI 87 Ant2 RSSI 76 Receiving Rate Mbps 131 Receiving Speed bytes s 0 Transmission Rate Mbps 130 Transmission Speed bytes s 40 17 59 20 17 59 30 Total RSSI Current 87 Maximum 87 Anti RSSI Current 87 Maximum 87 Ant2 RSSI Current 76 Maximum 76 The Time Axis is configurable with the following options 1 minute 2 minutes 5 minutes or 10 minutes Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale Voice hint may also be enabled for convenience durin
17. Console Cable x1 e Ethernet Cable x1 e Power Adaptor 12V x1 e Detachable Antenna x4 The standard package of EAP320 includes e 4ipnet EAP320 x1 e Quick Installation Guide QIG x1 e CD ROM with User s Manual and QIG x1 e Console Cable x1 e Ethernet Cable x1 e Power Adaptor 12V x1 e Detachable Antenna x4 6 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH The standard package of EAP747 EAP750 EAP757 includes e 4ipnet EAP747 EAP750 EAP757 x1 e Quick Installation Guide QIG x1 e CD ROM with User s Manual and QIG x1 e Ethernet Cable x1 e Power Adaptor 12V Optional x1 e Mounting Kit x1 e Detachable Antenna EAP750 x4 The standard package of OWL530 includes e 4ipnet OWL530 DN e Quick Installation Guide QIG x1 e CD ROM with User s Manual and QIG x1 e Power Sourcing Equipment Optional x1 e Ground Wire x1 e Mounting Kit x1 The standard package of OWL620 OWL610 includes e 4ipnet OWL620 OWL610 x1 e Quick Installation Guide QIG x1 e CD ROM with User s Manual and QIG x1 e Power Sourcing Equipment Optional x1 e Mounting Kit x1 It is recommended to keep the original packing materials for possible future shipment when repair or maintenance is required Any returned product should be packed in its original packaging to prevent damage during delivery Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 2 Syst
18. Disable Enable Multicast Broadcast Rate 5 5M EN Management Frame Rate 5 5M 7 Receiving RSSI Threshold 0 0 100 0 Disable Advanced Wireless Settings Page e RTS Threshold Enter a value between 1 and 2346 RTS Request to Send Threshold determines the packet size at which the system issues a request to send RTS before sending the fragment to prevent the hidden node problem The RTS mechanism will be activated if the data size exceeds the value provided A lower RTS Threshold setting can be useful in areas where many client devices are associating with the AP or in areas where the clients are far apart and can detect only the AP but not each other e Fragmentation Threshold 802 11a 802 11b and 802 11g Modes Enter a value between 256 and 2346 A packet size larger than this threshold will be fragmented sent with several pieces instead of one chunk before transmission A smaller value results in smaller frames but allows a larger number of frames in transmission A lower Fragment Threshold setting can be useful in areas where communication is poor or disturbed by a serious amount of radio interference e DTIM Period Input the DTIM Interval that is generated within the periodic beacon at a specified frequency Higher DTIM will allow the wireless client to save more energy but the throughput will be 72 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH lowered
19. Disable to inactivate it o Server IP Address Enter the IP address of the assigned server for receiving the trap report 108 Copyright 4IPNET INC 4ipnet v Y V V s User s Manual Enterprise Access Point ENGLISH Remote Syslog By enabling this function specify a remote Syslog server to accept system log messages from the system remotely Enable Disable Select Enable to activate this function or Disable to inactivate it Server IP The IP address of the Syslog server for receiving the reported events Server Port The port number of the Syslog server Syslog Level Select the desired level of received events from the drop down list box UPnP Configuration This option can be enabled if UPnP service is required by LAN device Enable Disable Select Enable to activate this function or Disable to inactivate it 109 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 2 Wireless This section is for configuring wireless settings for this system to associate with its uplink access point 8 2 1 General Settings This section is for manual configuration of the system RF settings Manually enter the uplink ESSID to associate with on this page Security can be set on the Security tab to be discussed in section 8 2 3 For automatic configuration use the Site Survey tab discussed in section 8 2 4 to search for the desired SSID eS H e B System Wireless Firewall Utili
20. EAP320 Rear Panel Figure 2 EAP320 Back Panel 1 12V52A Power Jack Socket 2 Restart Reset Press once to restart the system to reset the system to factory default settings hold for more than 5 seconds 3 WES Button A B WDS Easy Setup Press the button to build up a WDS link with another peer 4 WDS links can be set up per RF card 4 LED Indicators 6 indicators that displays the states of 6 various functions or progresses The numbers are explained on the leftmost side of the rear panel 5 Uplink Port PoE The port for uplink connection to another gateway or device PoE is supported 6 LAN Ports 1 2 The ports for connections with LAN side devices 7 Console Port To access EAP320 via the console interface Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH EAP747 EAP750 EAP757 Rear Panel Reset Restart 3 eo Ki 1 gt il Li 12V 222A WES A Uplink LAN1 LAN2 Phone PoE f 1 Power 2 Status 3 WLAN A 4 WES A 1 12V 2A 2 Restart Reset Button 3 WES Button 4 LED Indicators 5 Uplink PoE Port LAN 1 2 Ports Phone Jack EAP747 Figure 3 EAP747 EAP750 EAP757 Back Panel Attach the power adaptor here Press once to restart the system Press and hold for more than 5 seconds to reset to factory default WDS Easy Setup Press the button to build up a WDS link with another peer
21. In Traffic Out W Packets Out Display Range 1 min z Stop 6 15k 5 46k 478k 3 42k 2 73k 2 05k Packets In Packets Out INO Dyed Uj Dyer 1 37k 699 4 17 25 45 17 25 50 17 25 55 17 26 Traffic In bytes s Packets In packets s Traffic Out bytes s Packets Out packets s The Time Axis is configurable with the following options 1 minute 2 minutes 5 minutes or 10 minutes Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale 94 Copyright 4IPNET INC 4ipnet 7 5 3 Associated Clients User s Manual Enterprise Access Point ENGLISH The administrator can remotely oversee the status of all associated clients on this page When a low SNR is found here the administrator can tune the corresponding parameters or investigate the settings of associated clients to improve network communication performance Overview Interfaces Associated Clients WDS Link Status Event Log Monitor Home gt Status gt Wireless Clients Associated Client Status Client List Packet Error Associated VAP ESSID MAC Address RSSI Ratio RF Card A VAP 3 felix220 a3 0 74 2 3d 23 c7 24 16 RF Card A VAP 3 felix220 a3 00 1f d4 02 c9 f4 71 0 Associated Client Status Page Idle Time secs 30 0 Up Time secs 780 egen Disconnect Plot Kick e Associated VAP The name of a VAP Vir
22. Length 64 bits 128 bits 152 bits WEP Key Format asctt Hex WEP Key Index 1 v WEP Keys 1 2 3 4 Security Settings WEP 65 Copyright 4IPNET INC 4ipnet VV V V User s Manual Enterprise Access Point ENGLISH 802 11 Authentication Select from Open System Shared Key or Auto WEP Key Length Select a key length from 64 bit 128 bit or 152 bit WEP Key Format Select a WEP key format from ASCII or Hex WEP Key Index Select a key index from 1 4 The WEP key index is a number that specifies which WEP key will be used for the encryption of wireless frames during data transmission WEP Keys Provide the pre defined WEP key value the system supports up to 4 sets of WEP keys e 802 1X When 802 1X Authentication is selected RADIUS authentication and Dynamic WEP are Security Settings Profile Name RF Card A VAP 1 e 802 1X X Disable Enable WEP Key Length 64 bits 128 bits Rekeying Period 300 second s Host Domain Name IP Address Authentication Port 1812 Secret Key m Accounting Service Disable Enable Accounting Port 1813 D Accounting Interim Update Interval 60 second s Host Domain Name IP Address Authentication Port Secret Key Accounting Service Disable Enable Accounting Port Accounting Interim Update Interval second s Security Settings 802 1X Authentication Dynamic WEP For 802 1X security type Dynamic WEP is alw
23. Manual Enterprise Access Point ENGLISH 7 1 6 IPv6 The 4ipnet Access Point supports IPv6 and IPv4 dual stack addressing capability IPv6 by default is disabled but it can be enabled on this tab page General Network Interface Port Management CAPWAP IPv6 Home gt System gt 1Pv Configuration IPv6 Configuration Status Disable Enable Mode Static DHCP Mode There are two options for acquiring an IPv6 address for this device gt Static Configuring IPv6 address manually via this option if you have already acquired a permanent IPv6 address for operation gt DHCP Acquire IPv6 address automatically from upstream server 56 Copyright 4IPNET INC 4ipnet 7 2 Wireless User s Manual Enterprise Access Point ENGLISH This section includes the following functions VAP Overview General VAP Configuration Security Repeater Advanced and Access Control The 4ipnet Access Point supports up to eight Virtual Access Points VAPs per RF card Each VAP can have its own settings e g ESSID VLAN ID security settings etc With such VAP capabilities different levels of service can be configured to meet network requirements 7 2 1 VAP Overview An overall status is collected on this page including ESSID State Security Type MAC ACL and Advanced Settings where the AP features 16 VAPs per radio with respective settings In this table please click on the hyperlink to further
24. Portmap gt No The item number of an UPnP device Protocol The Protocol used by the UPnP device Internal Port The internal port number of the UPnP device External Port The mapped external port number of the system IP Address The IP address of the UPnP device VV V WV 13 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 9 Console Interface Configuration Via the console port administrators are able to enter the console interface to reset the access point to its factory default settings In order to connect to the console port of a 4ipnet access point a console modem cable and a terminal simulation program such as PuTTy are needed There are 2 ways to access the console interface 1 Direct Connection Notebook gt USB to RS232 with DB9 connector gt Console Cable gt Console Port The USB to RS232 cable is not supplied with standard packaging It is recommended to use only the console cable provided with the packaging g gt ont USB RS232 Console Cable RS232 Console Cable RJ45 The speed baud rate needs to be selected for direct connections and the baud rate is summarized as follows Model Baud Rate bps EAP210 115200 EAP220 115200 EAP320 115200 EAP747 115200 EAP750 115200 EAP757 115200 OWL530 115200 OWL610 115200 OWL620 115200 132 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Acc
25. Rate 90 0 99 Latency 10 second s kbps 0 Disable WME Configuration Transmission Rate Threshold o Wireless General Settings Page On this page choose the RF card you would like to set up and select the band in which the AP is to broadcast its signal The rest of the fields are optional and can be configured at another time Click SAVE if any changes have been made For EAP220 the RF Card A supports only 2 4GHz bands b g n and RF Card B supports only 5GHz bands a n EAP320 EAP750 EAP757 OWL620 supports both 2 4GHz and 5GHz bands on both RF Cards A and B Note 26 Copyright 4IPNET INC 4ipnet Step 4 Configuring Wireless Coverage VAP 1 User s Manual Enterprise Access Point ENGLISH To set up the AP s wireless access refer to the following VAP 1 configuration other VAP configuration can refer to the same setup steps as done for VAP 1 Click on the Overview tab to proceed VAP No ESSID 1 4ipnetAP Al 2 4ipnetAP A2 3 4ipnetAP A3 4 4ipnetAP A4 5 4ipnetAP A5 6 4ipnetAP A6 z 4ipnetAP A7 8 4ipnetAP A8 9 4ipnetAP A9 10 4ipnetAP A10 11 4ipnetAP A11 12 4ipnetAP A12 13 4ipnetAP A13 14 4ipnetAP A14 15 4ipnetAP A15 16 4ipnetAP A16 State Enabled Disabled Enabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Virtual AP Overview Page VAP Overview RF Card A Security Type
26. SAVE to save the new password In addition to the admin account there is a user account capable of accessing the web management interface with configuration limitations The user account will not be able to reboot AP change wireless settings or enable the Channel Analysis function This account is typically issued by IT staff for employees to monitor AP statuses 84 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 4 2 Backup amp Restore This function is used to backup and restore the Access Point s settings The AP can also be restored to factory default using this function It can be used to duplicate settings to other access points backup settings of this system and then restore on another AP T g gt N e S System Wireless Firewall Utilities Status Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities gt Config Save amp Restore Configuration Backup amp Restore Reset to Default Backup System Settings Restore System Settings No file selected Restore Backup amp Restore Page e Reset to Default gt Click Reset to load the factory default settings of the Access Point A pop up Page will appear to re confirm the request to reboot the system Click OK to proceed or click Cancel to cancel the reboot request Message from webpage J This action will reboot the
27. Ser Set Date Select the appropriate Year Month and Day from the drop down list box Set Time Select the appropriate Hour Min and Sec from the drop down list box 103 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 1 2 Operating Mode OWL530 EAP210 supports two operation modes CPE mode and AP mode The administrator can set the desired mode on this page and then configure the system according to deployment needs System Information Operating Mode Network Management Home gt System gt Operating Mode Operating Mode Operating Mode CPE Mode O AP Mode e Operating Mode Select CPE Mode and then click SAVE to save the setting 104 Copyright 4IPNET INC 4ipnet 8 1 3 Network Settings User s Manual Enterprise Access Point ENGLISH WAN and LAN settings can be configured on this page Home gt System gt Network Interface Mode Bandwidth Limit DDNS Provider Host Name User Name E mail Password Key IP Address Netmask DHCP Server Start IP End IP Preferred DNS Server Alternated DNS Server WINS Server IP Domain Name Lease Time WAN Configuration Static DHCP Renew IP Address 192 168 10 1 S Netmask 255 255 255 0 ha Default Gateway 192 168 10 254 be Primary DNS Server 192 168 10 254 Alternate DNS Server Mbps Mbps Down
28. Time Device Time 2000 01 03 04 32 49 Time Zone GMT 08 00 Taipei EN Time Enable NTP O Manually set up NTP Server 1 NTP Server 2 NTP Time Configuration Fields Generally networks should have a common NTP server internal or external If there isn t locate a nearby NTP server on the web 2 Manually set up By selecting Manually set up the administrator can manually set the system date and time Time Device Time 2000 01 03 04 32 49 Time Zone GMT 08 00 Taipei K Time O Enable NTP Manually set up Set Date Miyear Month B Day Set Time Stour an SC Min Hsec Manual Time Configuration Fields Set Date Select the appropriate Year Month and Day from the drop down menu Gei Time Select the appropriate Hour Min and Sec from the drop down menu Unless Internet connection or NTP becomes unavailable it is recommended to use NTP server for time synchronization because system time needs to be reconfigured upon reboot 48 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 1 2 Network Interface General On this page the network settings of the device can be configured fields with a red asterisk i e IP Address Netmask Default Gateway and Primary DNS Server are mandatory Network Interface Port Management CAPWAP IPv6 Home gt System gt
29. VLAN ID is provided to associate with certain VLAN tagging traffic gt Priority when EtherType is 802 1 Q It denotes the priority level with associated VLAN traffic gt Encapsulated Type when EtherType is 802 1 Q It can be used to indicate the type of encapsulated traffic gt Opcode when EtherType is ARP RARP This list can be used to specify the ARP Opcode in ARP header gt Source MAC Address Mask indicates the source MAC IP Address Mask indicates the source IP address when EtherType is IPv4 ARP IP MAC amp MASK indicate the ARP payload fields gt Destination MAC Address Mask indicates the destination MAC IP Address Mask indicates the destination IP address when EtherType is IPv4 ARP IP MAC amp MASK indicate the ARP payload fields 79 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH gt Action The rule can be chosen to be Block or Pass gt Remark Any note of this rule can be specified here When the configuration for firewall rule is completed please click SAVE and Reboot system to let the firewall rule take effect gt gt To insert a specific rule In in the Setting column of the firewall list will lead to the following page for detail configuration with rule ID for the current inserted rule From this page a rule can be added or edited from an existing rule for revision gt gt To move a specific rule Mv in the Setting column of the firewall list will
30. Whole Channel button triggers the AP to scan all channels in the configured band Note that the Scan whole channel Radio is only capable of scanning in its configured band 90 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 5 Status This page is used to view the current condition and state of the system and it includes the following functions Overview Interfaces Associated Clients WDS Link Status Event Log and Monitor 7 5 1 Overview The System Overview page provides an overview of the system status for the administrator System Wireless Firewall Utilities SEWE E Associated Clients WDS Link status Event too Monitor Overview Home gt Status gt System Overview System Overview g gt System Radio Status System Name Enterprise Access Point EA RF Card MAC Address Band Channel DA Firmware Version 1 10 00 RF CardA 00 1F D4 94 19 3C 802 11g n 9 27 dBm Build Number 1 20 1 6887 RF CardB 00 1F D4 94 19 3D 802 11a n 36 23 dBm Location Site EN A Device Time 2013 11 29 17 01 59 System Up Time 1 days 2 46 29 CPU RAM Usage 100 00 45 10 LAN Interface AP Status MAC Address 00 1F D4 94 19 3B RF Card Name RF Card Aly IP Address 10 1 121 21 Subnet Mask 255 255 0 0 Profile Security Online Name BSSID ESSID Type Clients U Gateway 10 1 3 40 z VAP 3 00 1F D4 94 19 3C felix220 a3 WPA P D Q CAPWAP wl IPv6 Status Disabled S
31. and enter the IP Address of the AP 192 168 1 1 at the address field and then press Enter The following Administrator Login Page will appear Enter admin for both the Username and Password fields and then click Login Username admin Password eeeee Administrator Login Page e After a successful login into AP a System Overview page of the Web Management Interface WMI will appear Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Home gt Status gt System Overview System Overview w System Radio Status System Name felix EAP220 RF Card MAC Address Band Channel E Firmware Version 1 10 00 RF CardA 00 1F D4 94 19 3C 802 11g n 9 27 dBm Build Number 1 20 1 6887 RF CardB 00 1F D4 94 19 3D 802 11a n 36 23 dBm Location Site EN A Device Time 2013 11 25 18 04 13 System Up Time 6 days 5 11 27 CPU RAM Usage 7 69 45 42 LAN Interface AP Status MAC Address 00 1F D4 94 19 3B RF Card Name RF Card A EN IP Address 10 1 121 21 Subnet Mask 255 255 0 0 Profile Security Online Name BSSID ESSID Type Clients UD Gateway 10 1 3 40 7 V VAP 1 00 1F D4 94 19 3C 4ipnetAP Al Open D x VAP 3 02 1F D4 94 19 3C felix220 a3 WPA P 1 x caPpwaP Status Disabled Wl IPv6 Status Disabled The Web Management Interface System Overview Page e To logout simply click on the Logout button at the upper right hand corner of the interface to return to the Ad
32. lead to the following page for reordering confirmation After the SAVE button is clicked and system is rebooted the order of rules will be updated Firewall List Service Advanced Home gt Firewall hove rule Move Rule ID 1 Move to Before O After ID _ 1 20 Please make sure all desired rules state of rule are checked and saved in the overview page the rules will be enforced upon system reboot 80 Copyright 4IPNET INC 4ipnet Firewall use service Advanced User s Manual Enterprise Access Point ENGLISH 10 Home gt Firewall gt Firewall List Layer 2 Firewall Settings Enable Layer 2 Firewall Disable Enable State Action DROP DROP DROP DROP DROP MiM MM D DROP Name CDP and VTP STP BPDU GARP RIP HSRP OSPF EtherType Remark IEEE_8023 IEEE_8023 IEEE_8023 IPv4 IPv4 IPv4 First Prev Next Last total 20 EI Setting Del Ed In Mv Del Del Del Del Del Del Del Del Del Ed Ed Ed Ed Ed Ed Ed Ed Ed In In In In In In In Mv Mu Mv Mv Mv Mv Mv Mv Mv Copyright 4IPNET INC 4ipnet 7 3 2 Service User s Manual Enterprise Access Point ENGLISH The administrator can add or delete firewall services here the services in this list will become options to choose in firewall rule when EtherType is
33. time length required the time unit is in second 113 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 2 4 Site Survey The system is able to scan and display all surrounding available access points APs The administrator can then select an AP to be associated with the system on this page Site Survey is a useful tool to provide information on the surrounding wireless environment available APs are shown with their respective SSID MAC Address Channel Rate setting Signal reading and Security type The administrator can click Setup or Connect to configure the wireless connection according to the mentioned readings General Advanced Security Site Survey Home gt Wireless gt Site Surve Scan Result SSID MAC Address Channel Rate Signal Security Setup Connect Cip AP 0A 11 A3 08 09 56 6 5438 None Cip Cherry 06 11 A3 08 09 56 6 54 37 WPA PSK Cip wep 00 11 A3 08 09 56 6 54 37 WEP Pre shared Cipher TKIP x Pre shared Key Type PSK Hex 64 chars Passphrase 8 63 chars Pre shared Key Connect AP Scan Result example e SSID The SSID Service Set ID of the AP found in the system s coverage area e MAC Address The MAC address of the respective AP e Channel The channel number currently used by the respective AP e Rate The transmitting rate of the respective AP e Signal The signal strength of the respective AP e Security The encr
34. to its peer APs per radio Security Type None WEP or WPA PSK can be configured to decide which encryption is to be used for WDS connections respectively Please fill in remote peer s MAC address and click SAVE to proceed if setting revision is necessary the CLEAR button can be used to clear the contents in the above WDS connection list Se H VM e S System Wireless Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced Access Control Home gt Wireless gt Repeater Config Repeater Settings Repeater Type wos WDS Profile RF Card A WDS Link 1 wps Disable MAC Address Security type None D CAPWAP Tunnel Interface E Repeater Settings WDS o WDS Select Enable to enable the respective WDS links Select Disable to remove them o MAC Address To input remote peer s MAC address o Security Type None WEP or WPA PSK o CAPWAP Tunnel Interface Select Checkbox to designate WDS traffic to pass through CAPWAP Tunnel established between the AP and the controller 70 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e When the Repeater Type is set to Universal Repeater EAP210 and OWL530 only enter the SSID of upper bound AP for uplink connection Security Type None WEP or WPA PSK can be configured for this Repeater connection but note that the security type configured here needs to be the same as upper bound
35. 0 Disable 300 second s Larger than 15 Disable Enable Aggressive Adjacent Channel Utilization Threshold 0 0 99 O Disable Latency 10 second s Co Channel Utilization Threshold 0 0 99 O Disable Invalid Packet Rate 90 0 99 Latency 10 second s Configure 0 kbps 0 Disable AP General Settings Page e RF Card Name Select one RF card for further configuration e Band Select an appropriate wireless band 802 11a 802 11b 802 119 802 11b 802 119 802 119 802 11n 802 11a 802 11n or select Disable if the wireless function is not required gt Pure 11n Enable 802 11n network only 60 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e Short Preamble The short preamble with a 56 bit synchronization field can improve WLAN transmission efficiency Select Enable to use Short Preamble or Disable to use Long Preamble with a 128 bit synchronization field e Short Guard Interval available when Band is 802 11g 802 11n or 802 11a 802 11n The guard interval is the space between symbols characters being transmitted to eliminate inter symbol interference In order to further boost throughput with 802 11n short guard interval is half of what it used to be please select Enable to use Short Guard Interval or Disable to use normal Guard Interval e Channel Width available when Band is 802 11g 802 11n or 802 11a 802 11n Double channel bandwidth to 40 MHz to enhance thr
36. 04 00 06 00 08 00 10 00 12 00 14 00 2013 11 18 01 25 CPU Usage 15 46 Free Memory 36 Cached Memory 16 31 The begin and end time for the RRD graph can be selected for filtering data Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale 129 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 5 5 DHCP Leases The table provides information about the leased LAN IP address with binding MAC address and expiration time H H e S System Wireless Firewall Utilities TEE System Overview Interfaces Event Log Monitor DHCP Lease UPnP Home gt Status gt DHCP Leases DHCP Leases DHCP Leases No IP MAC Address Expires in e No The item number of the LAN IP leased e IP The IP address assigned by DHCP server to a specific LAN device e MAC Address The MAC address of the LAN device e Expires in The expiration time of the leased IP address 130 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 5 6 UPnP Status The table provides information about the UPnP overview such as Protocol Internal Port External Port and IP Address g gt H H e S System Wireless Firewall Utilities SEWE System Overview Interfaces Event Log Monitor DHCP Lease UPnP Home gt Status gt UPnP Status UPnP Status IGD Portmap No Protocol Internal Port External Port IP Address e IGD
37. 30 OWL610 OWL620 The 4ipnet OWL530 OWL610 OWL620 Outdoor Access Point is embedded with dual OWL620 single OWL610 and OWL530 radio RF cards 802 11 a b g n MIMO in weatherproof housing designed for building municipal or campus wide wireless networks in harsh outdoor environments The OWL Series rust free die cast Aluminum housing is IP68 compliant and high wind load resilient All the components are designed to operate in a wide range of temperature The OWL Series Outdoor Access Point makes wireless communication fast secure and easy It supports business grade security namely 802 1X and Wi Fi Protected Access WPA and WPA2 Combined with a variety of directional antennas chosen by professionals one OWL620 with dual radios is easy to serve clients located in different directions as well as to cover longer range With all modules supporting a b g n bands more channels are available for better channel planning For example to reduce radio interferences network planners may select channels in 5 GHz for backhaul or bridges while allocating non overlapping channels in 2 4 GHz for serving clients e Please note that screenshots are taken from APs which feature dual RF cards Single RF Card APs can be configured in the same manner from the User Interface Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 2 2 Hardware Description This section depicts the hardware information including all
38. 4ipnet our IP network Enterprise Access Point Indoor EAP Series Outdoor OWL Series 4ipnet User s Manual Enterprise Access Point ENGLISH Copyright amp Disclaimer Copyright The contents of this publication may not be reproduced in any part or as a whole stored transcribed in an information retrieval system translated into any language or transmitted in any form or by any means mechanical magnetic electronic optical photocopying manual or otherwise without the prior written permission of 4IPNET INC Disclaimer AIPNET INC does not assume any liability arising out the application or use of any products or software described herein Neither does it convey any license under its parent rights not the parent rights of others 4IPNET further reserves the right to make changes in any products described herein without notice The publication is subject to change without notice Trademarks AIPNET 4ipnet is a registered trademark of 4IPNET INC Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Table of Contents Mgr Before You FT E 5 ii EE 5 1 2 Document Conventions gaseicccesezsse otacoeecnieartainnecen caesarean aaa 5 1 3 E EE 6 2 System Overview and Getting Started icscccisissssssossissssnsssensonesntvasvasssvasiavsesec
39. 620 Now the Hardware Installation is complete Please use only the power adapter supplied with the package Using a different power adapter may damage this system To verify the wired connection between the AP and your switch router hub please also check the LED status indicator of the respective network devices Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 2 4 Access Web Management Interface 4ipnet Access Points support web based configuration When hardware installation is complete the AP can be configured through a PC by using a web browser The default values of the AP s LAN IP Address and Subnet Mask are IP Address 192 168 1 1 Subnet Mask 255 255 255 0 Aipnet Windows Internet Explorer 6 Le T http 192 168 1 1 File Edit View Favorites Tools Help w di B8 gt 4ipnet x Example of entering the AP s default IP Address into a web browser To access the web management interface WMI connect the administrator PC to the LAN port of the AP via an Ethernet cable Then set a static IP Address on the same subnet mask as the AP in TCP IP settings of your PC such as the following example IP Address 192 168 1 100 Subnet Mask 255 255 255 0 Please note that the IP Address used should not overlap with the IP Addresses of Note SA any other device within the same network to avoid IP conflict e Launch the web browser on your PC
40. 7 File Name Browse No file selected Upload Upgrade by TFTP IP Address Port File Name Apply System Upgrade Page e It is recommended to check the firmware version number before proceeding further Please make sure you have the correct firmware file Note e Firmware upgrade may sometimes result in the loss of data Please ensure that all necessary settings are written down before upgrading the firmware e During firmware upgrade please do not turn off the power This may permanently damage the system 7 4 4 Reboot This function allows the administrator to restart the AP safely The process takes approximately three minutes Click Reboot to restart the system Please wait for the blinking timer to complete its countdown before accessing the system s Web Management Interface again The System Overview page will appear after a successful reboot Occasionally it is necessary to reboot the AP to ensure that parameter changes are submitted 87 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH gt V e S Firewall Utilities Status System Wireless Upload Certificate Channel Analysis Background Scan Change Password Backup amp Restore System Upgrade Reboot Home gt Utilities gt Reboot Reboot the System Reboot may take several minutes to complete The Admin Login Page will be shown after system boots up Reboot Page 7 4 5 Upload Cert
41. IPv4 The Access Point provides a list of rules to block or pass traffic of layer 3 or above protocols These services are available to choose from a drop down list of over firewall rule edit page with Ether Type IPv4 The first 28 entries are default services and the administrator can add delete any extra desired services There are 28 firewall services available in default settings these default services cannot be deleted but can be disabled If changes are made please click SAVE to save the settings before leaving this page Firewall List Service Advanced Home Firewall gt Service Config uw wN 10 Name ALL ALL TCP ALL UDP ALL ICMP FTP HTTP HTTPS POP3 SMTP DHCP Firewall Service Description Delete ALL TCP Source Port 0 65535 Destination Port 0 65535 UDP Source Port 0 65535 Destination Port 0 65535 ICMP TCP UDP Destination Port 20 21 TCP UDP Destination Port 80 TCP UDP Destination Port 443 TCP Destination Port 110 TCP Destination Port 25 UDP Destination Port 67 68 First Prev Next Last total 28 Add Firewall Service Page 82 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 3 3 Advanced At Firewall gt Advanced more advanced settings on firewall rules can be configured providing extra security enhancement against DHCP and ARP traffic traversing the available interfaces of the system es Trust Interface
42. Key Length 64 bits O 128 bits O 152 bits WEP Key Format ascii Hex WEP Key Index iv WEP Keys 802 11 Authentication Select from Open System Shared Key or Auto WEP Key Length Select from 64 bit 128 bit or 152 bit key length WEP Key Format Select from ASCII or Hex format for the WEP key WEP Key Index Select a key index from 1 through 4 The WEP key index is a number that VV V Y specifies which WEP key to use for the encryption of wireless frames during data transmission gt WEP Keys Provide WEP key value the system supports up to 4 sets of WEP keys 112 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e WPA Personal WPA Personal supports pre shared key authentication and WPA2 data encryption General Advanced Security Site Survey Home gt Wireless gt Security Security Settings Security Type WPA Personal z Cipher Suite WPA2 z Pre shared Key Type PSK Hex 64 chars Passphrase 8 63 chars Pre shared Key Group Key Update Period 600 second s gt Cipher Suite The standard encryption method for WPA Personal is WPA2 Pre shared Key Type Select a pre shared key type PSK Hex or Passphrase Vv gt Pre shared Key Enter the key value for the pre shared key the format of the key value depends on the key type selected gt Group Key Update Period The time interval for the Group Key to be renewed Enter the
43. P Address Authentication Port Secret Key Accounting Service Disable Enable Accounting Port Accounting Interim Update Interval second s Security Settings WPA Enterprise gt WPA Settings o Cipher Suite Select an encryption method from WPA2 or WPA2 WPA o Group Key Update Period The time interval for the Group Key to be renewed the time unit is in seconds gt RADIUS Server Settings Primary Secondary o Host Enter the IP address or domain name of the RADIUS server o Authentication Port The port number used by the RADIUS server Specify a port number or use the default 1812 o Secret Key The secret key for the system to communicate with the RADIUS server o Accounting Service Enabling this option allows accounting of login and logouts through the 68 Copyright 4IPNET INC q pnet User s Manual Enterprise Access Point ENGLISH RADIUS server o Accounting Port The port number used by the RADIUS server for accounting purposes Specify a port number or use the default 1813 o Accounting Interim Update Interval The system will update accounting information to the RADIUS server every interval period 69 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 2 5 Repeater 4ipnet Access Points are capable of utilizing WDS or Universal Repeater EAP210 and OWL530 only to extend wireless network coverage If WDS is enabled the AP can support up to 8 WDS links
44. PC functions properly in its real network environments 21 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 3 Connect your AP to your Network The following instructions depict how to establish the wireless coverage of your network The AP will connect to the network through its LAN port and provide wireless access to your network After having prepared the AP s hardware for configuration set the TCP IP settings of administrator s computer to have a static IP Address of 192 168 1 10 and Subnet Mask of 255 255 255 0 Step 1 Configuring the AP s System Information gt Enter the AP s default IP Address 192 168 1 1 into the URL of a web browser gt Log in using Username admin and Password admin The Web Management Interface will appear as shown below 22 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Utilities SEWE Overview d Interfaces Associated Clients WDS Link Status Event Log Monitor Home gt Status gt System Overview Se System H Wireless Firewall System Overview Device Time System Up Time 2013 11 26 09 38 54 6 days 20 46 08 gp System Radio Status System Name felix EAP220 RF Card MAC Address Band Channel Pp eo Firmware Version 1 10 00 RF CardA 00 1F D4 94 19 3C 802 11g n 9 27 dBm Build Number 1 20 1 6887 RF CardB 00 1F D4 94 19 3D 802 11a n 36 23 dBm Location Site EN A
45. Page e Security Type The hyperlink showing the security type links to the Security Settings Page H H e 2 ee System Wireless Firewall Utilities Status we oie Es Home gt Wireless gt Security Security Settings Profile Name RF Card A VAP 1 x Security Type Open a 802 1X WPA Personal WPA Enterprise VAP Security Type Page e MAC ACL The hyperlink showing Allow or Disable links to the Access Control Settings Page 58 Copyright 4IPNET INC 4ipnet eS System Wireless Firewall e Utilities User s Manual Enterprise Access Point ENGLISH S Status vap Overview General vaP config Security Repeater advanced access Control Home gt Wireless gt Access Control Maximum Number of Clients Access Control Type Page System watss fi Home gt Wireless gt Advanced Access Control Settings Profile Name RF Card A VAP 1 x 32 Range 1 256 per system Disable Access Control z VAP MAC ACL Page Firewal e Utilities Advanced Settings The advanced settings hyperlink links to the Advanced Wireless Settings S Status Advanced Wireless Settings RTS Threshold DTIM period Consecutive Dropped Packets Broadcast SSID Wireless Station Isolation WMM IAPP Multicast to Unicast Conversion Multicas
46. Security Repeater Advanced Access Control Home gt Wireless gt Access Contro Access Control Settings Profile Name RF Card A VAP 1 Maximum Number of Clients 32 Range 1 256 per system Access Control Type Disable Access Control EN Access Control Settings Page Please choose among Disable Allow Deny and RADIUS ACL from the drop down menu of Access Control Type 1 Disable Access Control This means that there is no restriction for client devices to access the system 2 MAC ACL Allow List This means that only the client devices identified by their MAC addresses listed in the Allow List allowed MAC addresses are granted with access to the system The administrator can temporarily block any allowed MAC address by checking Disable until the administrator renews the listed MAC 38 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Access Control Settings Profile Name RF Card A VAP 1 Maximum Number of Clients 32 Range 1 256 per system Access Control Type MAC ACL Allow List E No MAC Address State 1 Disable Enable 2 Disable Enable 3 Disable Enable 4 Disable Enable 5 Disable Enable 6 Disable Enable 7 Disable O Enable 8 Disable Enable 9 Disable Enable 10 Disable Enable First Prev Next Last total 100 MAC ACL Allow List An empty Allo
47. Time The current time on the device System Up Time The system elapsing time since last reboot CPU RAM Usage The system s resource usage CPU Utilization and RAM usage Operating Mode Either CPE or AP LAN Interface MAC Address The MAC address of LAN Interface IP Address The IP address of the LAN Interface Subnet Mask The Subnet Mask of the LAN Interface DHCP Server DHCP server status Radio Status Status The RF status SSID The SSID of the associated AP MAC Address The MAC address of the associated AP Channel The operating channel Signal Strength The signal strength reading of the wireless connection Security The security type used for wireless connection Mode The method to obtain IP for the WAN interface MAC Address The MAC address of the WAN RF Interface IP Address The IP address of the WAN interface WAN Status e Subnet Mask The Subnet Mask of the WAN interface Gateway The gateway IP address Bandwidth The bandwidth setting of the WAN interface The system supports graph displays of CPU RAM usage and Signal Strength RSSI on the status page The Time Axis is configurable with the following options 1 minute 2 minutes 5 minutes or 10 minutes Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale 124 Copyright 4IPNET INC 4ipnet User s M
48. User s Manual Enterprise Access Point ENGLISH The system is able to plot a dynamic graph for CPU RAM usage with the time Axis CPU Memory Usage WICPU Usage V Memory Usage Display Range 1 min Le l Start 60 4o 30 Usage 20 17 08 30 17 08 35 17 08 40 17 08 45 17 08 50 CPU Usage CPU Usage Current 23 53 Memory Usage Maximum 58 82 Mem Usage Current 44 55 Maximum 44 9 The Time Axis is configurable with the following options 1 minute 2 minutes 5 minutes or 10 minutes Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale 7 5 2 Interfaces Traffic information is available per interface Recorded data includes Packets In Packets Out Traffic In kb and Traffic Out kb 73 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH H H e S System Wireless Firewall Utilities SES Overview interfaces associated Clients d WDS Link status Event Log Monitor Home gt Status gt Interface Interface Traffic Interface List Interface Traffic Out KB Packets Out Traffic In KB Packets In Real Time Uplink 354627 5267468 294976 1474959 RF Card A VAP3 57180 186780 4121 32498 RF Card B VAP3 4268 16794 9 221 A real time plot is also available for each interface as such Uplink Traffic Traffic In Wi Packets
49. abled the service Provider must be chosen from the drop down list with provided Host Name User Name User Email and Password gt DDNS Select Enable to activate this function or Disable to inactivate it Provider The name of the DDNS provider that the system is registered with Select a DDNS provider from the drop down list box Host Name The FQDN registered with the selected DDNS provider User name E mail The account ID user name or e mail registered with the DDNS provider gt Password Key The password of the account registered with the DDNS provider e LAN Configuration Configure LAN and DHCP settings on this page IP Address and Netmask are required fields to set up LAN interface IP Address The IP address of the LAN port Netmask The Subnet mask of the LAN port gt DHCP Server If enabled devices connected to this system can obtain an IP address automatically o Enable Disable Select Enable to activate this function or Disable to inactivate it o Start IP End IP Specify the range of IP addresses to be distributed by the DHCP server to clients o Preferred DNS Server Enter the IP address of a preferred DNS server this field is required o Alternate DNS Server Enter the IP address of a secondary DNS server this is optional o WINS Server IP Enter the IP address of a WINS Windows Internet Name Service server this is optional o Domain Name Enter the domain name for this network 106 Copyright 4IPNET INC
50. ame RF Card A VAP 1 Security Type WPA Personal x Cipher Suite WPA2 z Pre shared Key Type PSK Hex 64 chars Sg Passphrase 8 63 chars Vv Pre shared Key Group Key Update Period g6400 second s Security Settings WPA Personal Cipher Suite Select an encryption method from WPA2 or WPA2 WPA Pre shared Key Type Select a pre shared key type PSK Hex or Passphrase Pre shared Key Enter the key value for the pre shared key the format of the key value depends on the key type selected Group Key Update Period The time interval for the Group Key to be renewed the time unit is in seconds 67 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH es WPA Enterprise If this option is selected the RADIUS authentication and data encryption will both be enabled H H e S System Wireless Firewall Utilities Status VAP Overview General VAP Config Y Security Repeater Advanced Access Control Home gt Wireless gt Security Security Settings Profile Name RF Card A VAP 1 z Security Type WPA Enterprise z Cipher Suite WPA2 E Group Key Update Period g6400 second s DEE EES SL ees Domain Name IP Address Authentication Port 1812 i Secret Key d Accounting Service Disable 5 Enable Accounting Port 1813 ig Accounting Interim Update Interval 60 second s Secondary RADIUS Server Host Domain Name I
51. anced Operating Mode Wireless Settings FUNCTION Network Security Settings rae Demilitarized Backup amp Zone Restore Event Log DHCP Lease Management Site Survey Reboot UPnP Status Upload Certificate Table of CPE Mode Functions 100 Copyright 4IPNET INC User s Manual Enterprise Access Point ENGLISH 4ipnet eS H eh amp mmm ery emm C1CC CSS G mmm JUICES ey Sette System Overview Interfaces Event Lo X Monitor L Home gt Status gt System Overview System Overview amp System amp Radio Status System Name Enterprise Access Point OWLS Status Connected Firmware Version 1 10 00 SSID felix220 a3 Build Number 1 13 1 6891 MAC Address 00 1F D4 94 19 3C Location Channel 9 Site EN A Signal Strength 94 Device Time 2013 12 02 07 48 20 Security WPA PSK System Up Time 0 days 5 32 07 CPU RAM Usage 1 92 30 70 Operating Mode CPE LAN Interface _______ eo WAN Interface MAC Address 00 1F D4 02 C9 F3 Mode DHCP IP Address 192 168 21 1 MAC Address 00 1F D4 02 C9 F4 Subnet Mask 255 255 255 0 IP Address 10 1 121 10 DHCP Server Enabled Subnet Mask 255 255 0 0 Gateway 10 1 3 40 Bandwidth Down Unlimited UP Unlimited CPE Mode Main Page 101 Copyright 4IPNET INC hg 4ipnet User s Manual Enterprise Access Point ENGLISH 8 1 System This section provides information in con
52. and time of the record when the event happened e Hostname Indicate which Host records this event Note that all events in this page are local events and this field of all events is the same However in remote syslog service this field will help the network administrator identify which event is from this system For more information please refer to Section 8 1 4 Management Services e Process name with square brackets Indicate which process with the specific event is associated e Description Description of the event 128 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 5 4 Monitor For a quick overview on the AP s performance the Monitor feature displays an RRD graph recording CPU utilization memory usage associated station numbers TX rate distribution airtime utilization and short retries System Overview Interfaces Event Log Y Monitor DHCP Lease UPnP Home gt Status gt Monitor Monitor Category CPU and Memory DH CPU and Memo Transmission Rate Distribution ew Hour 14 Minute 00 To Short Retry riore ooye D Hour 1 lsl Minute 00 From 4 4 CPU Usage Y Free Memory l Cached Memory System Information a ee ffe dE Ab A 35 30 v Si 25 E w LA o a 20 H Hu ee IN UA OU TERT like MR INN MI RON Aal II MAU 15 16 00 18 00 20 00 22 00 18Nov 02 00
53. anual Enterprise Access Point ENGLISH CPU Memory Usage CPU Usage Ni Memory Usage Display Range 1 min EN 60 j DO Die i o D 30 uw 20 10 0 i J 17 08 30 17 08 35 17 08 40 17 08 45 17 08 50 CPU Usage CPU Usage Current 23 53 Memory Usage Maximum 58 82 Mem Usage Current 44 55 Maximum 44 9 8 5 2 Interfaces Traffic information is available per interface Recorded data includes Packets In Packets Out Traffic In kb and Traffic Out kb The Time Axis is configurable with the following options 1 minute 2 minutes 5 minutes or 10 minutes Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale 125 Copyright 4IPNET INC PPreE ser an Enterprise Access Point ENGLISH me acces see Interfaces Home gt Status gt Interface Interface Traffic Interface List Interface Traffic Out KB Packets Out Traffic In KB Packets In WAN 6827 17515 7127 47853 LAN 17 39 46 293 WAN Status M Total RSSI X Ant1 RSSI Y Ant2 RSSI M Receiving Rate Y Receiving Speed Y Transmission Rate Y Transmission Speed Voice Hint for Display Range Tmin v Stop RSSI Receiving Rate Transmission Rate p d uolssitusues paads Dua v LEA 59 10 Ev 59 30 2013 11 18 17 59 06 Total RSSI 87 Total RSSI Current 87 Ant1 RSSI 87 Maximum 87 Ant2 RSSI 76 Ant1 RSSI Current 87 Receivi
54. ation Fields gt Enable Disable Enable or Disable this function gt Community String The community string is required when accessing the Management Information Base MIB of the system o Read Enter the community string to access the MIB with Read privilege o Write Enter the community string to access the MIB with Write privilege gt SNMPv3 User List The system allows 5 SNMP Users with Read or Read amp Write Access Determine the Name and Authentication Password on the SNMP Account List SNMP Account List D D Read Only MD5 Read Only MD5 Read Only MD5 LI EI a EJE EJE KI EJ EJE E gt Trap When enabled events on Cold Start Interface UP amp Down and Association amp Disassociation can be reported to an assigned server o Enable Disable Enable or Disable this function o Server IP Address Enter the IP address of the assigned server that will receive the trap report 53 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e System Log When this function is enabled specify an external SYSLOG server to accept SYSLOG messages from the system remotely System Log Disable Gi Enable SYSLOG Server IP 192 168 1 254 Server Port 514 SYSLOG Level Error E System Log Fields Enable Disable Enable or Disable this function SYSLOG Server IP The IP address of the Syslog server that will receive the reported ev
55. ays enabled to automatically WEP Key Length Select a key length from 64 bit or 128 bit Re keying Period The time interval for the dynamic WEP key to be updated the time unit is in RADIUS Server Settings Primary Secondary Host Enter the IP address or domain name of the RADIUS server provided Home gt Wireless gt Security Security Type Dynamic WEP Primary RADIUS Server Secondary RADIUS Server gt Dynamic WEP Settings O generate WEP keys for encryption O O seconds gt O O Authentication Port The port number used by the RADIUS server Specify a port number or 66 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH use the default 1812 Secret Key The secret key for the system to communicate with the RADIUS server Accounting Service Enabling this option allows accounting of login and logouts through the RADIUS server Accounting Port The port number used by the RADIUS server for accounting purposes Specify a port number or use the default 1813 Accounting Interim Update Interval The system will update accounting information to the RADIUS server every interval period e WPA Personal WPA Personal is a pre shared key authentication method g gt Hi H e S System Wireless Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced Access Control Home gt Wireless gt Security Security Settings Profile N
56. ble Enable Accounting Port Accounting Interim Update Interval second s Security Settings WPA Enterprise gt WPA Settings o Cipher Suite Select an encryption method from WPA2 or WPA2 WPA o Group Key Update Period The time interval for the Group Key to be renewed the time unit is in seconds gt RADIUS Server Settings o Host Enter the IP address or domain name of the RADIUS server o Authentication Port The port number used by the RADIUS server Specify a port number or use the default 1812 o Secret Key The secret key for the system to communicate with the RADIUS server o Accounting Service Enabling this option allows accounting of login and logouts through the RADIUS server o Accounting Port The port number used by the RADIUS server for accounting purposes 37 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Specify a port number or use the default 1813 o Accounting Interim Update Interval The system will update accounting information to the RADIUS server every interval period When these configurations are finished and MAC restriction is not needed click SAVE and Reboot the system Otherwise click on the Overview tab and proceed to the next step Step 3 Configuring MAC ACL Access Control List Clicking on the hyperlink corresponding with intended VAP in the MAC ACL column will bring the user to the Access Control Settings page VAP Overview General VAP Config
57. boot the system A warning message as displayed below will appear during the reboot period The system power must be turned on before the completion of the reboot process a E gt gt gt Change Password Backup amp Restore N System Upgrade i Reboot Upload Certificate Home gt Utilities gt Reboot Now rebooting the System Reboot may take several minutes to complete The home page will be shown after system boots up If the web page does not go back for a long time please click the following link Enterprise Access Point The System Overview page will appear upon the completion of reboot 12 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 4 5 Upload Certificate In CPE mode a certificate can be uploaded for HTTPS protected login Click Browse to select the desired certificate and the matching Private Key Uploading a certificate allows encrypted content transfer Hi H e S System Wireless Firewall Utilities Status Change Password V Backup amp Restore System Upgrade Reboot upload Certificate Home gt Utilities gt Upload Certificate Upload Certificate Upload Private Key ms O Use Default Certificate 122 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 5 Status This section displays the status of System Overview Interfaces Event Log Monitor DHCP Lease and UPnP 8 5 1 System Ove
58. c WEP For 802 1X security tyoe Dynamic WEP is always enabled to automatically generate WEP keys for encryption o WEP Key Length Select a key length from 64 bits or 128 bits o Re keying Period The time interval for the dynamic WEP key to be updated the time unit is in 35 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH seconds gt RADIUS Server Settings A redundant server can also be added to the system o Host Enter the IP address or domain name of the RADIUS server o Authentication Port The port number used by the RADIUS server Specify a port number or use the default 1812 o Secret Key The secret key for the system to communicate with the RADIUS server o Accounting Service Enabling this option allows accounting of login and logouts through the RADIUS server o Accounting Port The port number used by the RADIUS server for accounting purposes Specify a port number or use the default 1813 o Accounting Interim Update Interval The system will update accounting information to the RADIUS server every interval period e WPA Personal Provides shared key authentication in WPA data encryption e A H eh S System Wireless Firewall Utilities Status VAP Overview General VAP Config Y Security Repeater Advanced Access Control Home gt Wireless gt Security Security Settings Profile Name RF Card A VAP 1 Security Type WPA Personal
59. ckup amp Restore System Upgrade Reboot Upload Certificate Home gt Utilities gt Change Password Change Password Name admin New Password up to 32 characters Re enter New Password Name user New Password up to 32 characters Re enter New Password gt admin account Enter a new password and then re enter it in the Re enter New Password field Click SAVE to activate the new password gt user account Enter a new password and then re enter it in the Re enter New Password field Click SAVE to activate the new password In addition to the admin account there is a user account capable of accessing the web management interface with configuration limitations The user account will not be able to reboot AP or change wireless settings This account is typically issued by IT staff for employees to monitor AP statuses 118 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 4 2 Backup amp Restore This function is used to backup or restore the current settings The system can be restored to the default setting by clicking on Reset The setting of the device can be backup to a file It can be used to duplicate setting to the other OWL530 devices g gt H H e S System Wireless Firewall Jtilities Status Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Home gt Utilities gt Config Save amp Restore Config
60. configure each individual VAP VAP No ESSID 1 4ipnetAP A1 2 4ipnetAP A2 3 4ipnetAP A3 4 4ipnetAP A4 5 4ipnetAP A5 6 4ipnetAP A6 Z 4ipnetAP A7 8 4ipnetAP A8 9 4ipnetAP A9 10 4ipnetAP A10 11 4ipnetAP A11 12 4ipnetAP A12 13 4ipnetAP A13 14 4ipnetAP A14 15 4ipnetAP A15 16 4ipnetAP A16 State Enabled Disabled Enabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled VAP Overview RF Card A Security Type Open Open WPA Personal Open Open Open Open Open Open Open Open Open Open Open Open Open VAP Overview Page MAC ACL Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Advanced Settings Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit State The hyperlink showing Enable or Disable links to the VAP Configuration page 57 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH gt N e S EE System Wireless Firewall Utilities Status ott Gama perons aane pasco Home gt Wireless gt vA Config VAP Configuration Profile Name VAP Disable Enable Profile Name VAP 1 ESSID 4ipnetAP A1 VLAN ID Disable Enable VLAN ID 1 4094 CAPWAP Tunnel Interface VAP State
61. e 78 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH gt gt To delete a specific rule Del in the Setting column of firewall list will lead to the following page for removal confirmation After the SAVE bution is clicked and system is rebooted the rule will be removed Firewall List Service Advanced Home gt Firewall gt Firevall List Layer 2 Firewall Settings Remove rule 1 gt gt To edit a specific rule Ed in the Setting column of the firewall list will lead to the following page for detail configuration From this page the rule can be edited from scratch or from an existing rule for revision The following fields will be displayed gt Rule ID The numbering of this specific rule will decide its priority among available firewall rules in the table gt Rule name The rule name can be specified here gt EtherType The drop down list will provide the available types of traffic subjected to this rule gt Interface It indicates inbound outbound direction with desired interfaces gt Service when EtherType is IPv4 Select the available upper layer protocols services from the drop down list gt DSAP SSAP when EtherType is IEEE 802 3 The value can be further specified for the fields in 802 2 LLC frame header gt Type when EtherType is IEEE802 3 The field can be used to indicate the type of encapsulated traffic gt VLAN ID when EtherType is 802 1 Q The
62. e Consecutive Dropped Packets This is the maximum number of transmission retries the AP will attempt when packet transmission is dropped before deciding the client is out of transmission reach When transmission retries fails for the set number of times the Access Point kicks the client to optimize performance for other connected clients e Broadcast SSID Disabling this function will stop the system from broadcasting its SSID If broadcast of the SSID is disabled only devices that have the correct SSID can connect to the system e Wireless Station Isolation By enabling this function all stations associated with the system are isolated and can only communicate with the system e WMM The default is Disable Wi Fi Multimedia WMM is a Quality of Service QoS feature that prioritizes wireless data packets based on four access categories voice video best effort and background Applications without WMM and applications that do not require QoS are assigned to the best effort category which receives a lower priority than that of voice and video Therefore WMM decides which data streams are more important and assigns them a higher traffic priority This option works with WMM capable clients only lt To receive the benefits of WMM QoS gt The application must support WMM WMM shall be enabled on the Access Point WMM shall be enabled in the wireless adapter on client s computer e IAPP IAPP Inter Access Point Protocol is a protoco
63. ed threshold in the AP switches to a different Channel e WME Configuration Access priority can be configured using with different parameters CW Min Contention Window Minimum CW Max Contention Window Maximum AIFS Arbitration Inter Frame Spacing TXOP Limit Transmission Opportunity Limit e Transmission Rate Threshold The associated client will be kicked when transmission rate is lower than the configured threshold This ensures high connection speed for all associated clients Table 2 RF Configurations under normal circumstances in certain countries 11 12 13 36M 48M 54M 802 11b 802 11g 1 2 3 4 5 6 7 8 9 10 11 12 13 1M 2M 5 5M 6M 9M 11M 12M 18M 24M 36M 48M 54M Band Channel Rate Power Disable N A N A N A 36 40 44 48 52 56 60 6M 9M 12M 18M 24M SE 64 100 104 108 112 116 120 124 128 132 36M 48M 54M 136 140 802 11b 1 2 3 4 5 6 7 8 9 10 1M 2M 5 5M 11M 11 12 13 Auto 802 119 1 2 3 4 5 6 7 8 9 10 6M 9M 12M 18M 24M 802 11a 802 11n 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 6M 9M 12M 18M 24M 36M 48M 54M MCS0 15 802 11N 802 11g 1 2 3 4 5 6 7 8 9 10 11 12 13 1M 2M 5 5M 11M 12M 18M 24M 36M 48M 54M MCS0 15 Level 1 Level 25 model dependent Please note that available values above will vary depending on the regulat
64. el 1 Power LED On indicates power on On indicates the system is ready For indicating WDS connection status Master Press for more than Slave Press once and 3 seconds then release right away BLINKING SLOWLY BLINKING RAPIDLY WES Negotiate Green Green LED Green ON LED Green ON WES Fail Timeout LED Green OFF LED Green OFF 4 N Wireless LED On indicates wireless network interface is ready for service ba 2 41 5 GHz 1 Copyright 4IPNET INC hd KE 4ipnet User s Manual Enterprise Access Point ENGLISH Rear Panel Restart mmm Reset a cesses t mme Console LAN3 LAN Uplink 12V 2A POE EAP220 Rear Panel 1 Restart Reset Press once to restart the system to reset the system to factory default settings hold for more than 5 seconds 2 WES Button RF B WDS Easy Setup Press the button to build up a WDS link with another peer 4 WDS links can be set up per RF card Note that the WES Button only runs on the 5 GHz RF Card B 3 Console Port To access EAP220 via the console interface 4 LAN 1 4 Ports The ports for connections with LAN side devices 5 Uplink Port PoE The port for uplink connection to another gateway or device PoE 802 3at is supported 6 12V 2A Power Socket for the power adaptor 12 Copyright 4IPNET INC hg 4ipnet User s Manual Enterprise Access Point ENGLISH EAP320 Front Panel 4ipnet
65. em Overview and Getting Started 2 1 Introduction of 4ipnet Access Points Indoor EAP210 EAP220 EAP320 EAP747 EAP750 EAP757 The 4ipnet s Enterprise Access Point EAP Series are embedded with 802 11 a b g n MIMO technology designed for seamless wireless connectivity in enterprise or industrial environments of all dimensions EAP220 EAP320 EAP750 EAP757 feature dual radio RF cards to offer flexible implementations needed for the growing wireless networking applications The EAP Series make wireless communication fast secure and easy They support business grade security namely 802 1X and Wi Fi Protected Access WPA and WPA2 By pushing a purposely built button the 4ip WES Press n Connect feature makes it easy to bridge wireless links of multiple access points for forming a wider wireless network coverage The EAP Series also features multiple ESSIDs with VLAN tags and multiple Virtual APs great for enterprise applications such as separating traffic from different departments using different ESSIDs The PoE LAN port is able to receive power from Power over Ethernet PoE sourcing devices EAP210 EAP220 and EAP320 s metal housing is IP50 anti dust compliant which means that these Access Points are well suited to WLAN deployment in industrial environments EAP747 EAP750 EAP75 7 are packed in fire retardant wall ceiling mountable plastic enclosures and are built perfectly to blend in with your d cor Outdoor OWL5
66. ents Server Port The port number of the Syslog server SYSLOG Level Select the desired level of received events from the drop down menu VV V V 54 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 1 5 CAPWAP CAPWAP is a standard interoperable protocol that enables a controller to manage a collection of wireless access points There are 5 methods of auto AP discovery namely DNS SRV DHCP option Broadcast Multicast and Static Please refer to the Web page at System gt CAPWAP e CAPWAP The CAPWAP feature can be turned on by selecting Enable or turned off by selecting Disable e Certificate Date Check To enable this item select Enable and click Manage Certificates to enter the Upload Certificate page Please refer to the section 7 4 4 Upload Certificate e DNS SRV Discovery Using DNS SRV to discover acess controller gt Domain Name Suffix Enter the suffix of the access controller such as example com DHCP Option Discovery Using DHCP option to discover access controller Broadcast Discovery Using Broadcast to discover access controller e Multicast Discovery Using muticast to discover access controller e Static Discovery Using Static approach to discover access controller gt AC Address The IP address of the access controller If it can not discover the first AC it will try to discover the second AC 55 Copyright 4IPNET INC hg 4ipnet User s
67. ery Utility provided by 4ipnet Simply connect via an Ethernet cable and run the Discovery Utility Note that the laptop PC connecting to the AP must run in Windows XP compatible mode and a static IP must be set P N V10020 140326 134 Copyright 4IPNET INC
68. esignate traffic for the VAP to pass through the AP and the controller gt Note 802 1P is supported when the Airtime Fairness function is Disabled 64 Copyright 4IPNET INC hg 4ipnet User s Manual Enterprise Access Point ENGLISH 7 2 4 Security The Access Point supports various wireless authentication and data encryption methods in each VAP profile With this the administrator can provide different service levels to clients The security type includes Open WEP 802 1X WPA Personal and WPA Enterprise e Open Authentication is not required and data is not encrypted during transmission when this option is selected This is the default setting as shown in the following figure eS H H e S System Wireless Firewall Utilities Status VAP Overview d General i VAP Config mt Repeater Advanced d Access Control Home gt Wireless gt Security Security Settings Profile Name RF Card A VAP 1 E Security Type open Kl Open WEP 802 1X WPA Personal Security Settings Open e WEP WEP Wired Equivalent Privacy is a data encryption mechanism based on a 64 bit 128 bit or 152 bit shared key algorithm Home gt Wireless gt Security Security Settings Profile Name RF Card A VAP 1 v Security Type WEP e Note The WEP keys are global setting for all virtual APs The key value will apply to all VAPs 802 11 Authentication Open System Shared Key Auto WEP Key
69. ess Point ENGLISH Proxy i Telnet H SSH i Serial 2 Remote Connection Basic options for your PuTTY session Specify the destination you want to connect to Serial line Connection type Raw Tene Rlogin SSH Load save or delete a stored session Saved Sessions Default Settings The system supports access to the console interface via SSH Typically SSH utilizes Port 22 and would require the WAN IP address for access Category Session Bs Logging B Terminal Keyboard i Bell i Features B Window Appearance Behaviour Translation i Selection i Colours Connection ___ Basic options for your PUTTY session Specify the destination you want to connect to Host Name or IP address 22 Connection type Raw Telnet Hoon Serial Load save or delete a stored session Saved Sessions Default Settings Load Save Close window on exit Aways Never Only on clean exit Open Cancel 133 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH To reset the system to factory default through the console interface Login as reset2def and enter reset2def as your password Zi COM4 Pu TY ef y want to reset to fa efault and reboot If the console connection is not readily available the IP address of the AP can be retrieved with an IP Discov
70. figuring the following functions System Information Operating Mode Network and Management A system restart is required when a reminding message appears after clicking the SAVE gt gt Note i button all settings entered and saved will take effect only after a system restart 8 1 1 System Information For maintenance purpose it is required to specify the system name its location and corresponding basic parameters Fields such as Name Description and Location are used for mnemonic purpose It is recommended to have different values in each AP N eh S SVsteln Wireless Firewall Utilities Status e 3 A A System Information Operating Mode Network Management Home gt System gt General System Information Name Enterprise Access Point Description Location Time Device Time 1970 01 01 09 13 02 Time Zone GMT 08 00 Taipei x Time Enable NTP Manually set up Set Date v Year sz Month v Day Set Time v Hour e Min Sec e System Information For maintenance purpose it is recommended to have the following information stated as clearly as possible Fields Name Description and Location are used for mnemonic purpose It is recommended to have different values in each wireless device gt Name The system name used to identify this system 102 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH gt Descript
71. g antenna adjustment 7 5 5 Event Log The Event Log provides a record of system activities The administrator can monitor the system status by checking this log wm os gt Gm Overview Interfaces Associated Clients Home gt Status gt Event Log Nov 29 13 18 16 logd localhost hostapd athOap2 STA 00 18 de c9 18 e1 IEEE 802 11 gt Event Log deauthenticated due to local deauth request Nov 29 13 18 16 logd localhost hostapd athOap2 STA 00 18 de c9 18 e1 IEEE 802 11 disassociated l WDS Link Status Y Event Log Monitor jan Event Log Page Each line in the log represents an event record in each line there are 4 fields 98 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e Date Time The time amp date when the event happened e Hostname Indicates which host recorded this event Note that all events on this page are local events so the hostname in this field is always the same In remote SYSLOG service however this field will help the administrator identify which event is from this Access Point e Process name Indicate the event generated by the running instance e Description Description of the event To save the file locally click SAVE LOG to clear all of the records click CLEAR 7 5 6 Monitor For a quick overview on the AP s performance the Monitor feature displays an RRD graph recording CPU utilization memo
72. h for a previously saved backup file and then click Upload to restore the settings The backup file will replace the active configuration file currently running on the system After network parameters have been reset restored the network settings of the administrator PC may need to be changed to ensure that the IP address of the administrator PC is on the same subnet mask as the AP 86 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 4 3 System Upgrade The EAP Access Point supports two methods of firmware upgrade from the web management interface or through TFTP The administrator can download the latest firmware from the 4ipnet Support Team and save it on the administrator s PC To upgrade the system firmware click Browse to choose the new firmware file you downloaded onto your PC and then click Upload to execute the process There will be a prompt confirmation message to notify the administrator to restart the system after a successful firmware upgrade To upgrade by TFTP enter the designated IP address Port and File Name then click Apply Please restart the system after upgrading the firmware System Wireless Firewall Utilities Status Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities gt system Upgrade System Upgrade Current Version 1 10 00 Current Build Number 1 20 1 688
73. he power to prevent from damaging the device permanently H H e S System Wireless Firewall Utilities Status gt gt Change Password d Backup amp Restore Y System Upgrade Reboot Upload Certificate Home gt Utilities gt system Upgrade System Upgrade Current Version 1 10 00 Current Build Number 1 13 1 6891 File Name No file selected Upgrade by TFTP IP Address Port File Name Apply e To prevent data loss during firmware upgrade please back up the current settings before gt gt Note proceeding further e Please restart the system after the upgrade Do not interrupt the system i e power on off during the upgrade or restart process as this may damage the system 120 Copyright 4IPNET INC hg 4ipnet User s Manual Enterprise Access Point ENGLISH 8 4 4 Reboot The administrator can reboot the device remotely Click Reboot to restart the system immediately _ gt Y DA o S System Wireless Firewall Utilities Status N N gt gt Change Password j Backup amp Restore d System Upgrade Reboot upload Certificate Home gt Utilities gt Reboot Reboot the System Reboot may take several minutes to complete The Admin Login Page will be shown after system boots up Reboot A pop up will appear to confirm the request to restart the system Click OK to proceed or click Cancel to cancel the restart request Windows Internet Explorer 2 H Do you want to re
74. he specified service Click Edit to configure the current setting 116 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH IP Port Forwarding Item msg External Port Internal IP Address Protocol State Delete Edit ame Range 1 GAME 6112 10 30 5 112 TCP UDP dDisable Enable 2 Phone 6670 10 30 5 250 TCP UDP ODisable Enable 8 3 2 Demilitarized Zone The DMZ Demilitarized Zone allows one local computer or server used as a DMZ host to be exposed to the Internet for special purpose Internet services such as functioning as a web server External users can access the DMZ host without authentication IP Port Forwarding DMZ Home gt Firewall gt Demilitarized Zone Demilitarized Zone State O Disable 217 Enable Internal IP Address 192 168 10 0 7 e Enable Select Enable to activate this function or Disable to deactivate it e Internal IP Address Fill in the internal IP address to allow system forwarding traffic other than those specifically listed in IP Port Forwarding 117 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 4 Utilities The system provides Change Password Backup amp Restore System Upgrade Reboot and Upload Certificate functions for system maintenance 8 4 1 Change Password The administrator can update or change password g gt H H e S Firewall Utilities Status System Wireless Change Password Ba
75. iate this effect of the hidden terminal problem the administrator can tune this RTS threshold value A lower RTS Threshold setting can be useful in areas where many client devices are associating with the Access Point or in areas where the clients are far apart and can detect only Access Point and not each other e Roaming When the Access Point is mobile and is operating in CPE mode Enable the Roaming feature to determine gt Background Scanning Period The AP scans in the background for a signal with a higher RSSI at each configured time interval in seconds gt Roaming Check RSSI Threshold When the signal falls below the configured RSSI threshold the AP begins scanning for higher RSSI signals to associate to 111 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 2 3 Security Settings The system supports various authentication and data encryption methods when wireless settings are manually configured The security type includes None WEP and WPA PSK General Advanced Y Security Site Survey Home gt Wireless gt Security Security Settings Security Type Open DN e Open No authentication is required e WEP WEP Wired Equivalent Privacy supports key length of 64 128 152 bits General Advanced Security Site Survey Home gt Wireless gt Securit Security Settings Security Type WEP v 802 11 Authentication Open System O Shared Key O Auto WEP
76. ick on the Wireless button on the main menu 2 Select the Repeater Settings tab 3 Choose WDS as the Repeater Type 4 Choose the desired WDS profile a Enable WDS b Enter the MAC Address peer AP and then Click SAVE If you are using another 4ipnet APs as the peer AP simply repeat the above mentioned steps to configure another peer AP s To support traffic with unlimited VLAN tags via WDS EAP220 has to be set to Tag Based Note Mode Cross brand model WES WDS link performance may vary with different Access Points depending on hardware compatibility 44 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 Web Management Interface Configuration This chapter will guide the user through the AP s detailed settings The following table shows all the User Interface UI functions of 4ipnet s Enterprise Access Points The Web Management Interface WMI is the page where the status is displayed control is issued and parameters are configured In the Web Management Interface there are two main interface areas Main Menu and Working Area The Working Area occupies the major area of the WMI displayed in the center of the interface It is also referred to as the configuration page The Main Menu on the top of the WMI allows the administrator to traverse to various management functions of the system The management functions are grouped into branches System Wireless Fire
77. ificate This function is used to configure a valid certificate for security validation required in CAPWAP Upload Certificate Upload Private Key File Name Browse Upload Certificate File Name Browse Upload Trusted Certificate File Name Use Default Certificate gt Upload Certificate It provides flexibility to support customer s own Certificate Private Key or Trusted Certificate for a means of security verification for CAPWAP or other security needs to ensure the authenticity of this AP to other network entities gt Use Default Certificate Click Use Default Certificate to use the default certificate and key 88 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 4 6 Channel Analysis The Channel Analysis is an excellent tool for IT staff to quickly grasp an idea of what the channel dynamics are Included for channel analysis is a spectrogram density graph and other charts to detect interference from Bluetooth devices Microwave devices Cordless phones and etc H H e S System Wireless Firewall Utilities Status Change Password Backup amp Restore V System Upgrade Reboot d Upload Certificate Channel Analysis Background Scan Home gt Utilities gt Channel Analysis Channel Analysis Analyzer Configuration Disable Enable RF Card Name RF Card A e Please be reminded that when Channel Analysis is in progress the RF card loses its capab
78. ike broadcast traffic with packets forwarded to all ports causing network inefficiencies Layer 2 STP If the AP is set up to bridge other network components this option can be enabled to 49 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH prevent undesired loops because a broadcasting storm may occur in a multi switch environment where broadcast packets are forwarded in an endless loop between switches Moreover a broadcast storm may consume most of the available system resources in addition to available bandwidth Thus enabling the Layer 2 STP can lower such undesired occurrence and derive the best available data path for network communication The AP also supports RSTP Operation Configurable parameters include Bridge Priority Hello Time Max Age and Forward Delay Please refer to IEEE standards for recommended parameter values 50 Copyright 4IPNET INC hg 4ipnet User s Manual Enterprise Access Point ENGLISH 7 1 3 Port The physical Ethernet ports of the AP can be configured to append a VLAN tag for upstream delivery g gt HI H e S System Wireless Firewall Utilities Status General Network Interface Port Management CAPWAP IPv6 Home gt System gt Port Config Port Configuration Switch Mode Port Based Tag Based Port LAN1 VLAN ID Disable Enable VLAN ID 1 4094 CAPWAP Tunnel Interface La tunneled LAN port
79. ility to serve clients and kicks off current users Note e The browser used to implement Channel Analysis must have Java Runtime Environment installed or it would not display correctly e The system allows only 1 operator to use this function at one time e Channel Analysis only runs on 2 4GHz Band 89 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 4 7 Background Scan The Access Point is capable of doing background scanning without affecting service This works in complement with Channel Analysis so administrators have a complete overview of the wireless environment H H e S System Wireless Firewall Utilities Status N p N TA Change Password d Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities gt Background Scan Background Scan RF Card Name RF Card B SSID MAC Signal Strength Channel OWL410 1 00 1F D4 02 87 58 71 36 OWL400 1 00 1F D4 02 87 58 75 36 OWL410 1 00 1F D4 02 87 E0 83 36 OWL400 1 00 1F D4 02 87 E0 80 36 4ipnetAP B1 00 CO CA 5F 8B 35 88 36 OWL410 1 00 1F D4 02 87 78 61 36 OWL400 1 00 1F D4 02 87 78 86 36 OWL410 1 00 1F D4 02 86 A0 55 36 JamesIWF2220 B1 00 1F D4 02 B4 88 90 36 4ipnetAP B1 00 1F D4 02 BE F4 89 36 CAP320 B1 00 C0 CA 5F 89 B0 87 36 GONZO A1 00 CO CA 5F 8B 49 83 36 SEB B1 00 CO CA 5F 89 9E 86 36 OWL410 1 00 1F D4 02 86 CO 64 36 The Scan
80. in their network environments It contains step by step procedures and pictures to guide users with basic network system knowledge to complete the installation Corresponding Software Versions for each Model EAP210 Up to software version 1 10 EAP220 Up to software version 1 10 EAP320 Up to software version 2 10 EAP747 Up to software version 1 30 EAP750 Up to software version 2 10 EAP757 Up to software version 2 10 OWL530 Up to software version 1 10 OWL610 Up to software version 1 40 OWL620 Up to software version 1 40 1 2 Document Conventions A Represents essential steps actions or messages that should not be ignored Note Contains related information that corresponds to a topic Indicates that clicking this button will save the changes you made but you must reboot the system for the changes to take effect Indicates that clicking this button will clear what you have set before the settings are applied Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 1 3 Package Content The standard package of EAP210 includes e 4ipnet EAP210 x1 e Quick Installation Guide QIG x1 e CD ROM with User s Manual and QIG x1 e Console Cable x1 e Power Adaptor 12V x1 e Detachable Antenna x2 The standard package of EAP220 includes e 4ipnet EAP220 x1 e Quick Installation Guide QIG x1 e CD ROM with User s Manual and QIG x1 e
81. ion Further information of the system gt Location Information about the geographical location of the system which can help the administrator locate it easily Time Time settings allow the system time synchronized with NTP server or manually set gt Device Time Display the current time of the system gt Time Zone Select an appropriate time zone from the drop down list box gt Synchronization Synchronize the system time either by NTP server or manual setup 1 Enabled NTP By selecting Enabled NTP the Access Point synchronizes its system time with the NTP server automatically While this method is chosen at least one NTP server s IP address or domain name must be provided If FQDN Full Qualified Domain Name is used as the IP address of NTP server the DNS server must also be activated please refer to 8 1 3 Network Settings Device Time Time Zone Time NTP Server 1 NTP Server 2 2 Manually set up Time 1999 12 31 16 05 36 GMT 08 00 Pacific Time US amp Canada Tijuana H Enable NTP O Manually set up tock stdtime gov tw By selecting Manually set up the administrator can manually set the system date and time Device Time Time Zone Time Set Date Set Time Time 1999 12 31 16 02 29 GMT 08 00 Pacific Time US amp Canada Tijuana v O Enable NTP Manually set up sites Month B Day Hour Min v
82. ion of different countries Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 2 3 VAP Configuration This section provides configuration of each Virtual Access Point with settings such as Profile Name ESSID and VLAN ID g gt H ZS e S System Wireless Firewall Utilities Status VAP Overview General VAP Config Secunty Repeater Advanced Access Control Home gt Wireless gt vAP Config VAP Configuration Profile Name RF Card A vap 1 gt VAP Disable Enable Profile Name VAP 1 ESSID 4ipnetAP A1 VLAN ID Disable Enable VLAN ID 1 4094 CAPWAP Tunnel Interface VAP Configuration Page To enable specific VAP select the VAP from the drop down list of Profile Name The basic settings of each VAP are collected in the profile as follows e VAP Enable or Disable this VAP e Profile Name The profile name of a specific RF card and its VAP for identity management purposes e ESSID ESSID Extended Service Set ID serves as an identifier for clients to associate with the specific VAP It can be coupled with different service levels like a variety of wireless security types e VLAN ID The 4ipnet Access Point supports tagged VLANs virtual LANs To enable VLAN function each VAP shall be given a unique VLAN ID with valid values ranging from 1 to 4094 Once VLAN is Enabled QoS is supported on the VAP 63 Copyright 4IPNET INC 4ipnet VAP
83. l by which access points share information about the stations connected to them When this function is enabled the system will automatically broadcast information of associated wireless stations to its peer access points This will help wireless stations roam smoothly among IAPP enabled access points in the same wireless LAN e Multicast to Unicast Conversion When Multicast to Unicast Conversion is enabled the Access Point intelligently forwards traffic only to those ports that request multicast traffic Adversely when disabled multicast traffic is treated like broadcast traffic with packets forwarded to all ports causing network inefficiencies e Multicast Broadcast Rate Bandwidth configuration for multicast broadcast packets If your wireless clients require a larger or smaller bandwidth for sending multicast broadcast packets the administrator can customize the Access Point s multicast broadcast bandwidth here e Management Frame Rate This feature controls the bandwidth for Management Frames The higher the rate it the shorter range the transmission covers e Receiving RSSI Threshold To keep connected stations with high connection speeds the station is kicked out when its receiving sensitivity is lower than the threshold 73 Copyright 4IPNET INC e 4ipnet User s Manual Enterprise Access Point ENGLISH 7 2 7 Access Control On this page the network administrator can restrict the total number of clients connected to the
84. lect the desired Security Type from the drop down menu which includes Open WEP 802 1X WPA Personal and WPA Enterprise 33 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e Open Authentication is not required and data is not encrypted during transmission when this option is selected This is the default setting as shown in the following figure H H e B System Wireless Firewall Utilities Status RS en s v RS vap Overview EEN VAP Config Security Repeater Advanced Access Control Home gt Wireless gt Security Security Settings Profile Name RF Card A VAP 1 x Security Type Open ll WPA Personal WPA Enterpri Security Settings None e WEP WEP Wired Equivalent Privacy is a data encryption mechanism with key length selected from 64 bit 128 bit or 152 bit a gi n VAP Overview f EEN VAP Config Security d SN oe Access Control Home gt Wireless gt Security Security Settings Profile Name RF Card A VAP 1 e Security Type WEP v Note The WEP keys are global setting for all virtual APs The key value will apply to all VAPs 802 11 Authentication Open System Shared Key Auto WEP Key Length 64 bits 128 bits 152 bits WEP Key Format ASCII Hex WEP Key Index 1 v WEP Keys 4 2 Security Settings WEP gt 802 11 Authentication Select from Open System Shared Ke
85. load 0 Upload 0 0 999 for Kbps 0 300 for Mbps O unlimited Dynamic DNS DDNS Disable Enable DynDNS org Dynamic H LAN Configuration 192 168 1 1 k 255 255 255 0 S Disable Enable 192 168 1 2 bd 192 168 1 254 168 95 1 1 ZS i Day 105 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e WAN Configuration Determine the way to obtain the IP address by static or DHCP gt Mode Determine the way to obtain the IP address by DHCP or Static o Static The administrator can manually set up the static WAN IP address IP Address The IP address of the WAN port Netmask The subnet mask of the WAN port Gateway The gateway IP address of the WAN port Primary DNS Server The IP address of the primary DNS Domain Name System server Secondary DNS Server The IP address of the substitute DNS server o DHCP This connection type is applicable when the system is connected to a network with the presence of a DHCP server all related IP information required will be provided by the DHCP server automatically gt Bandwidth Limit o Download The maximum download bandwidth of WAN interface to be shared by clients o Upload The maximum upload bandwidth of the WAN interface to be shared by clients e Dynamic DNS The option can be enabled to bind FQDN compliant Host Name with this device If en
86. management services e g VLAN for Management SNMP and System log can be configured here o General Network Interface Port Management CAPWAP d IPv6 Home gt System gt Management Services Management Services VLAN for Management Disable Enable VLAN ID 1 4094 SNMP Configuration e Disable Enable Community String Read Write Edit SNMPv3 User List Trap Disable Enable Server IP SystemLog A Disable Enable SYSLOG Server IP 192 168 1 254 Server Port 514 SYSLOG Level Debug z ee mT Edit Management IP List Management Services Page e VLAN for Management When this is enabled management traffic from the system will be tagged with a VLAN ID In other words administrator who wants to access the WMI must send management traffic with the same VLAN ID such as connecting to a specific VAP with the same VLAN ID Enter a value between 1 and 4094 for the VLAN ID if the option is enabled Note Management is done without the utilization of VLAN IDs on selected AP models 52 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e SNMP Configuration By enabling the SNMP function the administrator can obtain the system information remotely SNMP Configuration Disable Enable Community String Read Write Edit SNMPv3 User List Trap Disable Enable Server IP SNMP Configur
87. ministrator Login Page Click OK to logout Message from webpage E 2 re you sure to logoff Cancel Logout Prompt For security reasons it is strongly recommended to change the administrator s password upon the completion of all configuration settings 20 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Please follow the following steps to change the administrator s password g gt H H e S System Wireless Firewall Utilities Status Change Password Backup amp Restore d System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities gt Change Password Change Password Name admin New Password up to 32 characters Re enter New Password Name user New Password up to 32 characters Re enter New Password Change Password Page gt Click on the Utilities icon on the main menu and select the Change Password tab gt Enter the old password and then a new password with a length of up to 32 characters and retype it in the Re enter New Password field Congratulation Now the 4ipnet Access Point is installed and configured successfully It is strongly recommended to make a backup copy of your configuration settings After the AP s network configuration is completed please remember to change the IP Address of your PC Connection Properties back to its original settings in order to ensure that your
88. mouse to zoom in on desired regions Double click to return the plot to its original scale e Disconnect Upon clicking Kick the client will be disconnected from the system 7 5 4 WDS Link Status The administrator can review detailed information of the repeater function at Status gt WDS Link Status Information of WDS status traffic statistics encryption and other details are provided 96 Copyright 4IPNET INC 4ipnet Se System Wireless Firewall Item 1 2 Item Status Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Status Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled WDS Link List MAC Address MAC Address Repeater Status RF Card A RSSI TXRate TX Count N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A RF Card B RSSI TXRate TX Count N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A N A User s Manual Enterprise Access Point ENGLISH Utilities TX Error N A N A N A N A N A N A N A N A TX Error N A N A N A N A N A N A N A N A Encryption Tunnel N A N A N A N A N A N A N A N A Encryption Tunnel N A N A N A N A N A N A N A N A S STEWS Overview Interfaces Associated
89. ng Rate Mbps 131 Maximum 87 Receiving Speed bytes s 0 Ant2 RSSI Current 76 Transmission Rate Mbps 130 Maximum 76 Transmission Speed bytes s 40 126 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH LAN Traffic Traffic In Fl Packets In i Traffic Out Mi Packets Out Display Range 1 min z Stop Packets In Packets Out INO 20061 Uj YLI 17 25 45 17 25 50 17 25 55 17 26 Traffic In bytes s Packets In packets s Traffic Out bytes s Packets Out packets s 127 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 5 3 Event Log Event log provides the records of the system activities All the system events are shown here H H e S System Wireless Firewall Utilities JEE System Overview Interfaces 2 Event Log Monitor DHCP Lease UPnP Home gt Status gt Event Log Event Log Jan 1 00 00 01 syslogd started BusyBox v1 12 4 Jan 1 00 00 01 logd localhost crond 1835 crond busybox 1 12 4 started log level 8 Jan 1 00 02 01 logd localhost crond 1835 USER root pid 2241 cmd etc rc d rc systime sync_ntp As the Event Log is stored in RAM it will be refreshed after the system is restarted The system Note also supports a Syslog reporting function of reporting the events to an external Syslog server e Date Time The date
90. ng to an antenna OWL610 A A Gol DN N type Connector x 4 For connecting to an antenna OWL620 RF Card A x 2 RF Card B x 2 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 2 3 Hardware Installation Please follow the steps mentioned below to install the hardware of EAP210 EAP220 EAP320 Step 1 Place the EAP210 EAP220 EAP320 at the best location The best location is usually at the center of your intended wireless network Step 2 Connect the EAP210 EAP220 EAP 320 to your network device Connect one end of the Ethernet cable to the Uplink port of EAP210 EAP220 EAP320 and the other end of the cable to a switch a router or a hub EAP210 EAP220 EAP320 is then connected to your existing wired LAN network Step 3 There are two ways to supply power to EAP210 EAP220 EAP320 a Connect the DC power adaptor to the EAP210 EAP220 EAP320 power jack socket b The EAP210 EAP220 EAP320 Uplink port is capable of receiving DC currents Connect a IEEE 802 3at compliant for EAP220 and 802 3af at compliant for EAP210 EAP320 PSE device e g a PoE switch to the Uplink port of EAP210 EAP220 EAP320 with the Ethernet cable Please follow the steps mentioned below to install the hardware of EAP747 EAP750 EAP757 Step 1 Place the EAP747 EAP750 EAP757 at the best location The best location is usually at the center of your intended wireless netwo
91. ns General Network Interface Port Management CAPWAP and IPv6 7 1 1 General Genera Network Interface Port Management CAPWAP IPv6 Home gt System System Information Name OWL620 SZ Description Location Time Device Time 2012 05 08 17 11 45 Time Zone GMT 08 00 Taipei z Time Enable NTP Manually set up Set Date Year mMonth Lean Set Time z Hour y Min sec System Information Page e System Information For maintenance purposes it is highly recommended to have the following information stated as clearly as possible gt Name The system name used to identify this system gt Description Further information about the system e g device model firmware version and active date gt Location The information on geographical location of the system for the administrator to locate the system easily e Time gt Device Time Display the current time of the system gt Time Zone Select an appropriate time zone from the drop down list box gt Time Synchronize the system time by reachable NTP servers or manual setup 47 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 1 Enable NTP By selecting Enabled NTP the AP can synchronize its system time with the NTP server automatically When this method is chosen at least one NTP server s IP address or domain name must be provided
92. oint ENGLISH Home gt Wireless gt Access Control Maximum Number of Clients Access Control Type Primary RADIUS Server Secondary RADIUS Server Access Control Settings Profile Name VAP Overview General VAP Config Security Repeater Advanced access Control RF Card A VAP 1 x 32 Range 1 256 per system RADIUS ACL e Note These settings will also apply to security settings which use RADIUS Server for this VAP Host igs Domain Name IP Address Authentication Port 1812 1 65535 Secret Key S Host Authentication Port Secret Key RADIUS ACL Click SAVE and Reboot upon completing the related configurations to take effect 4 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 6 Creating a WDS Bridge between two APs WDS link creation is convenient for extending network coverage where running wires is not an option effectively transferring the traffic to the other end of WLAN LAN through the AP Since this is a peer to peer connection both APs will be configured the same way Step 1 Make sure the Band and Channel are matched between the WDS peers In order to create a valid WDS link the two APs must be configured to use the same channel and band for their wireless settings Click the Wireless icon and then General tab to go to the following page VAP Overview General
93. otenveossianssesasinvesvonsnvensa 8 2 1 Introduction of Aipiiet ACCESS Points agi coiiacessecictersecssneadtelemarriodnimeerindmd een 8 2 2 Hardware reet 9 2 3 Hardwar Installati n E 17 2 4 Access Web Management Interface ccccscessssssssscesssescessoesssesseessessecesecteenssserseetssesseerss 19 3 Connect your AP to your NS E 22 4 Adding Virtual Access Points gc ccc ctnccsdeespesveue deca eteessaesencsizenedunsetactiedese eege edel 29 5 Securing The E 31 6 Creating a WDS Bridge between two APG cccsscssssssessscsssesseessssesceneaescessecsseerseessacsseatsecnsenses 42 7 Web Management Interface Configuration ccccccssssscsseesseesssssseesesescescossseerseesescsseetseeseocees 45 FAL E EE 47 EE ee 47 7 1 2 Network e E 49 OF Mg EE 51 714 IVT AP E E 52 OF Mg AE EE 55 RA BR 56 7 Pe Mmmm C oc eMC ete a R NTE Oe eT ee OCT ren RCE MRCP MoE Ree 57 mL VAP OVET VIEW aE E E TE E E ETO EE 57 eege 60 7 2 VAP Oia lial AIO EE 63 S KEE 65 Timed ROD EE 70 7 26 EE EEN 72 FF Access Control eege 74 wo Arewa seneturi a E A E ae aiaee 78 7 3 1 Fitewall Dist ossoicneniar a N A E R 78 EE EE 82 7 3 3 PON DEE 83 SC Bn TE 84 7A Change PassWord WER 84 TAD ee 85 2 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH FEIEREN 87 FAA TRG EE 87 74 5 Upload C rtificate sniene ee nu r E aE NE E EA end odieeaaemeines 88 S OC Nt AH ANY S1S asics nitaca sassnanaana
94. oughput e Channel Select the appropriate channel from the drop down menu to correspond with your network settings for example Channel 1 11 is available in North American and Channel 1 13 in Europe or choose the default 6 e Max Transmit Rate The maximum wireless transmit rate can be selected from the drop down menu The system will use the highest possible rate when Auto is selected Please note that MCSO MCS15 are transmit rates only for n bands e Transmit Power The signal strength transmitted from the system can be selected by Levels Each Level signifies a decrement of 1dBm from the highest power Level 7 is the actual highest power Level 2 is the highest power minus 1dBm so on and so forth e ACK Timeout It indicates a period of time when the system waits for an Acknowledgement frame sent back from a station without retransmission In other words upon timeout if the Acknowledgement frame is still not received the frames will be retransmitted This option can be used to tune network performance for extended coverage For regular indoor deployments please keep the default setting e Beacon Interval ms The entered amount of time indicates how often the beacon signal will be sent from the access point e Airtime Fairness Networks often are backward compatible supporting 802 11b and or 802 11g devices But when these devices occupy airtime throughput for 802 11n devices is affected When enabled this feature ensures all devices
95. panel description EAP210 Front Panel 4ipnet Ear210 Rear Panel EAP210 Front Panel Power Status Uplink WES Restart PoE 1 2 3 4 5 6 7 1 EAP210 Rear Panel 1 Antenna Reverse SMA connectors for attaching antennas Connector 2 12V 52A Power Socket for the power adaptor 3 Uplink Port The port for uplink connection to another gateway or device PoE 802 3af at is supported 4 WES Button WDS Easy Setup Press the button to build up a WDS link with another peer 4 WDS links can be set up 5 Restart Button Press to restart the system Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 6 LED Indicators Power On indicates power on Status On indicates the system is ready WLAN On indicates wireless network interface is ready for service WES For indicating WDS connection status Slave Press once and oo RE then release right away LED Green OFF and LED Green BLINKS ME Satan then BLINKING SLOWLY SLOWLY e BLINKING SLOWLY BLINKING RAPIDLY WES Negotiate Green Green WES Success LED Green ON LED Green ON WES Fail Timeout LED Green OFF LED Green OFF 7 Console Port To access EAP210 via the console interface Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH EAP220 Front Panel EAP220 Front Pan
96. pseaseesesntecanrasegasenuameiuayaasieassantedaeraas isan tensapeas Sarasin iss aaaka 89 7 47 B ckground EE 90 7 5 Eege 91 DEENEN 91 75 2 Tt 93 75 3 Associated CGMS E 95 75 4 RR EE TE 96 TAAS e E 98 TE e EE 99 8 CPE Mode Configuration QWL530 EAP2I0 oysiissssessssenssapsitndsadsssvsvesiotescasusianvaiionsdeaisasansanienies 100 SL SUN EE 102 8 1 1 System Tora EE 102 8 1 2 Operating TO EE 104 8 1 93 Jare ee elen ee ee 105 B14 Maj gement cir srini a E R EE EA E aE EEE i 108 82 EE 110 BY Wy General Settings E 110 8 2 2 Advanced Wireless Geteste Ehe ees 111 8 2 3 Security EE 112 8 24 Site SU VON eiei a E E a EEEE Eis 114 83 PireWwall EE 116 8 3 1 TP Port Forwarding sisirsnstceieteces eteeni na E E EE E E E E EEEa 116 8 3 2 Demilit riz d EE ee 117 E BER Ee EE 118 8 4 1 Change PASS EE 118 8 4 2 Backup amp E 119 84 3 System EE E 120 BA EE 121 8 4 5 Upload CEA 122 8 5 StAtUs EE 123 8 5 1 EE 123 8 5 2 Interfaces sposarsi nnn aaaea na EEEN Aa TE AA E TEEI Ta 125 8 5 3 Event DEN 128 E eet 129 ey D m LO Ee 130 3 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 5 0 UPnP SUA CUS ee 131 9 Console Interface Configuration ee 132 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 1 Before You Start 1 1 Preface This manual is intended for using by system integrators field engineers and network administrators to help them set up Access Points
97. quired fields marked with a red asterisk IP Address Netmask Gateway and Primary DNS Server with the appropriate values for the network Click SAVE when you are finished to save changes that have been made Step 3 Configure the AP s Wireless General Settings Click on the Wireless icon followed by the General tab On this page we need to choose the Band and Channel that we wish to use 25 Copyright 4IPNET INC User s Manual Enterprise Access Point ENGLISH 4ipnet VAP Overview General vap Config Security Repeater advanced access Control Home gt Wireless gt General Band Short Preamble Short Guard Interval General Settings RF Card Name RF Card Alsl 802 11g 802 1in Pure 11n Disable Enable Disable Enable Channel Width 20 MHz Channel 6 E Max Transmit Rate Auto EN Transmit Power Level 1 z ACK Timeout 0 0 255 0 Auto Unit 4 micro seconds Beacon Interval 100 100 500ms Airtime Fairness Disable Fair Access Preferred Access Packet Delay Threshold 1000 millisecond s 100 5000ms 0 Disable Idle Timeout 300 second s Larger than 15 Band Steering Disable Enable Aggressive Interference Detection Adjacent Channel Utilization Threshold 0 0 99 O Disable Latency 10 second s Co Channel Utilization Threshold H 0 99 0 Disable Invalid Packet
98. r VAP will be used for otherwise leave it as default VLAN ID can be chosen at another time Click SAVE to save all changes up to this point and Reboot the system to apply these revised settings Congratulations After reboot the AP can start to operate with these revised settings 28 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 4 Adding Virtual Access Points The AP possesses the feature of multi ESSID namely it can behave as multiple virtual access points providing different levels of services from the same physical AP device Please click on the Wireless icon to review the VAP Overview page VAP No ESSID a 4ipnetAP Al 2 4ipnetAP A2 3 4ipnetAP A3 4 4ipnetAP A4 5 4ipnetAP A5 6 4ipnetAP A6 7 4ipnetAP A7 8 4ipnetAP As 9 4ipnetAP A9 10 4ipnetAP A10 11 4ipnetAP A11 12 4ipnetAP A12 13 4ipnetAP A13 14 4ipnetAP A14 15 4ipnetAP A15 16 4ipnetAP A16 State Enabled Disabled Enabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled VAP Overview RF Card A Security Type Open Open WPA Personal Open Open Open Open Open Open Open Open Open Open Open Open Open VAP Overview Page MAC ACL Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Advanced Settings Edit Edit Edit Edi
99. r overall WLAN performance To prevent such occurrence please make sure Layer 2 STP is enabled To turn on this feature please click on the System icon and the Network Interface tab General Network Interface Port Management CAPWAP IPv6 Home gt System gt Network Interface Network Settings Mode Static DHCP Renew IP Address 192 168 1 1 i Netmask 255 255 255 0 Default Gateway 192 168 1 254 3 Primary DNS Server 192 168 1 254 Alternate DNS Server Ethernet IGMP Snooping Disable Enable Layer2 STP Disable D Network Settings Page Please select Enable in the field labeled Layer2 STP This will prevent data from looping or creating a broadcast storm Click SAVE when completed and then Reboot to allow updated settings to take effect Step 3 Building the WDS Link To extend the wireless coverage each RF card supports up to 8 WDS links for connecting wirelessly to other WDS capable APs peer APs By default all WDS profiles are disabled 43 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH System Wireless Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced l Access Control Home gt Wireless gt Repeater Config Repeater Settings Repeater Type wps z WDS Profile BE Card A WDS Link 1 WDS Disable MAC Address Security type None D CAPWAP Tunnel Interface E 1 Cl
100. rk If admin would like to mount the AP on the wall on a socket the figure below indicates how the mounting kit can be used on the back of the device Screw the metal panel to the wall and then turn the EAP747 EAP750 EAP757 clockwise to fasten to the panel For installation instructions on the Ceiling Mount Kit please refer to the included Installation Guide Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Step 2 Connect one end of the Ethernet cable to the Uplink port and the other end of the cable to a switch a router or a hub The EAP747 EAP750 EAP757 is now connected to your existing wired LAN network Step 3 There are two ways to supply power to EAP747 EAP750 EAP757 a Connect the DC power adaptor to the power jack socket b The Uplink port is capable of receiving PoE Connect an IEEE 802 3af at compliant PSE device e g a PoE switch to the Uplink port of EAP747 EAP750 EAP757 with the Ethernet cable Please follow the steps mentioned below to install the hardware of OWL530 OWL610 OWL620 Step 1 Connect an antenna to the Access Point s antenna connector Step 2 Connect the Ethernet Port of OWL530 OWL610 OWL620 to the POWER amp DATA OUT Port of a 802 3af PSE device Step 3 Connect one end of an Ethernet cable to the Data In Port of PSE and the other end to the computer Step 4 Power on the PSE in order to supply adequate power to the OWL530 OWL610 OWL
101. rview The System Overview page provides an overview of the system status for the administrator H H e S System Wireless Firewall Utilities SEWE i System Overview Interfaces Event Log Monitor DHCP Lease UPnP Home gt Status gt System Overview System Overview gp System Radio Status System Name Enterprise Access Point OWLS Status Connected Firmware Version 1 10 00 SSID felix220 a3 Build Number 1 13 1 6891 MAC Address 00 1F D4 94 19 3C Location Channel 9 Site EN A Signal Strength 94 Device Time 2013 12 02 07 48 20 Security WPA PSK System Up Time 0 days 5 32 07 CPU RAM Usage 1 92 30 70 Operating Mode CPE LAN Interface WAN Interface MAC Address 00 1F D4 02 C9 F3 Mode DHCP IP Address 192 168 21 1 MAC Address 00 1F D4 02 C9 F4 Subnet Mask 255 255 255 0 IP Address 10 1 121 10 DHCP Server Enabled Subnet Mask 255 255 0 0 Gateway 10 1 3 40 Bandwidth Down Unlimited UP Unlimited 123 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH The description of the table is shown below ITEM DESCRIPTION System System Name The name provided in System Information Firmware Version The present firmware version of the system Build Number The Build Number of the firmware Location The location provided in System Information Site The firmware version for specific region Device
102. ry usage associated station numbers TX rate distribution airtime utilization and short retries Overview Interfaces Associated Clients WDS Link Status Event Log Monitor Home gt Status gt Monitor Monitor Go Category Station Number From Transmission Rate Distribution Hour14 Y Minute 16 Y To Airtime Utilization Hour 14 V Minute 16 v Short Retr icPU Usage Free Memory Cached Memory System Information LEE 35 30 Percentage 16 00 18 00 20 00 22 00 18Nov 02 00 04 00 06 00 08 00 10 00 12 00 14 00 2013 11 18 01 25 CPU Usage 15 46 Free Memory 36 Cached Memory 16 31 The begin and end time for the RRD graph can be selected for filtering data Left click on the mouse to zoom in on desired regions Double click to return the plot to its original scale 77 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 CPE Mode Configuration OQWL530 EAP210 The OWL530 and EAP210 support CPE mode which acts as a gateway where it connects to the WAN wirelessly and provides Ethernet connection to users via wired LAN This chapter will guide you through setting up the CPE mode with graphical illustrations The following table shows all the functions of the Access Point in CPE mode OPTION System Wireless Firewall Utilities Status System IP Port Change System Information SEHR Forwarding Password Overview Adv
103. s Service Zones to VLAN ID Mappings are 1004 S25 1005 S26 1006 27 1007 S28 1008 Misia E gt Switch Mode Select Port Based to set VLAN IDs on physical LAN ports Select Tag Based for uplink traffic to recognize unlimited VLAN tags gt VLAN ID Enable selected implies that network traffic sent upstream from this LAN port will be tagged with the VLAN ID configured in the field below Disable selected implies that traffic from this LAN port will not be tagged with a VLAN ID gt CAPWAP Tunnel Interface Select a LAN VAP or WDS interface to designate its traffic to pass through the CAPWAP Tunnel established between the AP and the controller For network interfaces that are unchecked their traffic will be forwarded locally into the internet if this AP is deployed remotely on the WAN side of a controller gt The TIP in red at the bottom of the page explains that each service zone from default to Service Zone 8 has its fixed pre determined VLAN ID number when utilizing CAPWAP Admin needs to enter one of the numbers in order to direct traffic back to a certain Service Zone Applicable to EAP220 only When Port Based is selected and VLAN IDs are set on physical ports the uplink traffic recognizes ONLY the VLANs set all other VLAN tags will be dropped such as traffic from an Access Point linked via WDS 51 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 1 4 Management The
104. s on the static list with different MAC their ARP requests will be dropped to prevent eavesdropping If any settings are changed please click SAVE to save the configuration before leaving this page 83 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 7 4 Utilities The following utility features on this page allow the administrator to maintain the system Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan 7 4 1 Change Password To protect the Web Management Interface from unauthorized access it is highly recommended to change the administrator s password to a secure password Only alpha numeric characters are allowed and it is also recommended to make use of a combination of both numeric and alphabetic characters g gt Hi H e 2 System Wireless Firewall Utilities Status Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities gt Change Password Change Password Name admin New Password up to 32 characters Re enter New Password Name user New Password up to 32 characters Re enter New Password Change Password Page The administrator can change password on this page Enter the original password admin and new password and then re enter the new password in the Re enter New Password field Click
105. ser s Manual Enterprise Access Point ENGLISH setting up different types of security for a particular VAP Simply repeat the following steps for other VAP with security requirement Step 1 Ensure the intended VAP is Enabled VAP No ESSID 1 4ipnetAP Al 2 4ipnetAP A2 3 4ipnetAP A3 4 4ipnetAP A4 5 4ipnetAP AS5 6 4ipnetAP A6 7 4ipnetAP A7 8 4ipnetAP As 9 4ipnetAP Ag9 10 4ipnetAP A10 11 4ipnetAP A11 12 4ipnetAP A12 13 4ipnetAP A13 14 4ipnetAP A14 15 4ipnetAP A15 16 4ipnetAP A16 State Enabled Disabled Enabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled VAP Overview RF Card A Security Type Open Open WPA Personal Open Open Open Open Open Open Open Open Open Open Open Open Open VAP Overview Page MAC ACL Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Advanced Settings Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit On the VAP Overview page check the table to confirm the VAP State If it is Enabled skip to Step 2 If not click on to proceed with VAP Configuration for that particular VAP 31 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH g gt 4b H e S System Wireless Firewall Utilities Status VAP Over
106. st possible security threats coming from going to WLAN AP interfaces hence besides firewall policies configured on gateways this extra security feature will assist to mitigate possible security breach This section provides information in the following functions Firewall Lists Service and Advanced Firewall Settings 7 3 1 Firewall List It provides an overview of firewall rules in the system 6 default rules with up to a total of 20 firewall rules are available for configuration Firewall List Service Advanced Firewall gt Firevall List Home Layer 2 Firewall Settings Enable Layer 2 Firewall O Disable Enable No State Action Name EtherType Remark 1 E DROP CDP IEEE_8023 2 Fi DROP STP IEEE_8023 3 o DROP GARP IEEE_8023 Firewall List Page From the overview table each rule is designated with the following field Setting Del Ed In Mv Del Ed In Mv Del Ed In Mv e No The numbering will decide the priority for the system to carry out the available firewall rules in the tables e State The check marks will enable the respective rules e Action DROP denotes a block rule ACCEPT denotes a pass rule e Name Shows the name of the rule EtherType Denotes the type of traffic subjected to this rule Remark Shows the note of this rule Setting 4 actions are available Del denotes to delete the rule Ed denotes to edit the rule In denotes to insert a rule and Mv denotes to move the rul
107. system Do you want to continue Reboot Confirmation Prompt gt A warning message as displayed below will appear during the reboot period The system power must be kept on before the completion of the reboot process gt The System Overview page will appear upon reboot completion Additionally there are two ways to reset the system to factory default settings from the console interface 1 COM Port connection Should the administrator forget the AP s IP address with the right baud rate and a termination simulation program such as PuTTy or Hyper Terminal a login prompt should be seen as such 85 Copyright 4IPNET INC User s Manual Enterprise Access Point ENGLISH Login as reset2def and enter reset2def as your password Type yes to reset the AP to factory default 2 Console connection via SSH the IP address of the AP can be retrieved with an IP Discovery Utility provided by 4ipnet Simply connect via an Ethernet cable and run the Discovery Utility Note that the laptop PC connecting to the AP must run in Windows XP compatible mode and a static IP must be set Login as reset2def and enter reset2def as your password Type yes to reset the AP to factory default Backup System Settings Click Backup to save the current system settings to a local disk such as the hard disk drive HDD of a local computer or a compact disc CD Restore System Settings Click Browse to searc
108. t Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit Edit To proceed with specific VAP configuration click on the corresponding cell in the State column and row of the VAP the particular VAP s Configuration page will then appear for further configuration 29 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e A H e S System Wireless Firewall Utilities Status D 1 VAP Overview General VAP Config Security Repeater Advanced noos Control Home gt Wireless gt vap Config VAP Configuration Profile Name BE Card A vap ilsl VAP Disable Enable Profile Name VAP 1 ESSID 4ipnetAP A1 VLAN ID Disable Enable VLAN ID 1 4094 CAPWAP Tunnel Interface Ei VAP Configuration Page VAP 1 shown Please select the desired RF card and VAP profile from the drop down menu of Profile Name Choose Enable for the VAP field Pick a descriptive Profile Name and an appropriate ESSID for clients to associate to A VLAN ID can be provided to indicate the traffic through this particular VAP It may allow further management control e g access rights and Internet usage etc of each VAP with a management gateway Click SAVE and then Reboot for the changes to take effect 30 Copyright 4IPNET INC 4ipnet 5 Securing the AP Different VAP may require different levels of security These instructions will guide the user through U
109. t Broadcast Rate Management Frame Rate Receiving RSSI Threshold Profile Name RF Card A VAP 1 x 2346 1 2346 2 1 15 5 2 50 O Disable Disable Enable Disable Enable Disable Enable Disable Enable Disable Enable 5 5m 5 5m D 0 100 O Disable VAP Advanced Settings Page 59 ove cara yar can sea parana sr con Copyright 4IPNET INC 4ipnet 7 2 2 General User s Manual Enterprise Access Point ENGLISH AP s general wireless settings can be configured here eS System Wireless e amp d IVAP Overview General vap Config d Security Repeater d Advanced i Access Control A Home gt Wireless gt General Band Short Preamble Short Guard Interval Channel Width Channel Max Transmit Rate Transmit Power ACK Timeout Beacon Interval Airtime Fairness Packet Delay Threshold Idle Timeout Band Steering Interference Detection WME Configuration Transmission Rate Threshold Firewall Utilities Status General Settings RF Card Name RF Card A 802 11g 802 11n x Pure 11n Disable Enable 5 Disable Enable 20 MHz x 6 zl Auto D Level 1 EN 0 0 255 0 Auto Unit 4 micro seconds 100 100 500ms Disable Fair Access Preferred Access 1000 millisecond s 100 5000ms
110. tatus Disabled System Overview Page 91 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Table 3 Status Pages Organizational Layout Item Description System Name The system name of the Access Point Firmware Version The current firmware version of the Access Point The current firmware build number of the Build Number Access Point System Location The location of the Access Point Site The site of the Access Point Device Time The system time of the Access Point System Up Time The time that the system has been in operation CPU RAM Usage Displays the current CPU RAM utilization MAC Address The MAC address of the LAN Interface LAN Interface IP Address The IP address of the LAN Interface Subnet Mask The Subnet Mask of the LAN Interface Gateway The Gateway of the LAN Interface MAC Address The MAC address of the RF Card Band The RF band in use Radio Status Channel The channel specified Tx Power Transmit Power level of RF card Profile Name The profile name of AP BSSID Basic Service Set ID AP Status ESSID Extended Service Set ID Security Type Security type of the Virtual AP Online Clients The number of online clients Tunnel The status of the used Tunnel IPv6 Status Enabled Disabled CAPWAP Status Enabled Disabled Copyright 4IPNET NC 4ipnet
111. ties Status General Advanced Security Site Survey Home gt Wireless gt General General Settings ESSID 4ipnetAP A1 S Transmit Power Level1 Le ACK Timeout 0 0 255 0 Auto Unit 4 micro seconds e ESSID The ESSID Service Set ID of the client device that the system is to be associated with e Transmit Power The signal strength transmitted from the system Select the Transmit Power Level from the drop down list box Level 7 is the actual highest power Level 2 is the highest power minus 1dBm so on and so forth e ACK Timeout When packet loss is increasing over longer distance ACK Timeout can be used to alleviate this issue 110 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 2 2 Advanced Wireless Settings The administrator can set the RTS threshold on this page In most circumstance the default settings can meet general requirements If occasionally wireless network needs to be tuned the following parameters will assist with that purpose eS H N e S System Wireless Firewall Utilities Status General Advanced Security Site Survey Home gt Wireless gt Advanced Advanced Wireless Settings RTS Threshold 2346 1 2346 Roaming Disable Enable Background Scanning Period 300 10 600 seconds Roaming Check RSSI Threshold 15 15 85 e RTS Threshold To control station access to the medium and to allev
112. tual Access Point that the client is associated with e ESSID The Extended Service Set ID which the client is associated with e MAC Address The MAC address of associated clients e RSSI The Received Signal Sensitivity Index of respective client s association e Packet Error Ratio Indication of the associated client s service quality to see if packets are not received e Idle Time Time period that the associated client is inactive for the time unit is in seconds e Up time Time period that the client is associated for the time unit is in seconds e Real Time A real time plot of each associated client s traffic information including Packets In Out Traffic In Out in Ko RSSI Uplink Downlink Rates and etc 95 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Client 0c 74 c2 3d 23 c7 Status M RSSI M Uplink Rate Y Uplink Speed Y Downlink Rate M Downlink Speed Display Range 1 min Stop 140 3 22M RSSI Uplink Rate Downlink Rate paeds yullumog p ds guud 13 58 50 13 59 13 59 10 13 59 20 13 59 30 13 59 40 2013 11 18 13 59 16 RSSI 51 RSSI Current 49 Uplink Rate Mbps 90 Maximum 55 Uplink Speed bytes s 1M Downlink Rate Mbps 21 Downlink Speed bytes s 26 72k The Time Axis is configurable with the following options 1 minute 2 minutes 5 minutes or 10 minutes Left click on the
113. uration Backup amp Restore Reset to Default Reset Backup System Settings Backup Restore System Settings l Browser Restore e Reset to Default gt Click Reset to load the factory default settings of OWL530 A pop up will appear to re confirm the request to restart the system Click OK to proceed or click Cancel to cancel the restart request Microsoft Internet Explorer 2 This action will reboot system Do you want continue Cancel gt A warning message as displayed below will appear during the reboot period The system power must be turned on before the completion of the reboot process gt The System Overview page will appear upon the completion of reboot e Backup Settings Click Save to save the current system settings to a local disk such as the hard disk drive HDD of a local computer or a compact disc CD e Restore Settings Click Browse to search for a previously saved backup file and then click Upload to restore the settings The backup file will replace the active configuration file currently running on the system 119 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8 4 3 System Upgrade To upgrade the system firmware click Browse to search for the new firmware file and then click Upload to execute the upgrade process The first step is to acquire the correct firmware file and supply it in the UI field During firmware update please don t turn off t
114. view General Y VAP Config Security Repeater Advanced Access Control Home gt Wireless gt van Config VAP Configuration Profile Name RF Card A vap 1 VAP Disable Enable Profile Name VAP 1 ESSID 4ipnetAP A1 VLAN ID Disable Enable VLAN ID 1 4094 CAPWAP Tunnel Interface E VAP Configuration Page RF Card A VAP 1 as shown for example Select Enable for the VAP field and click SAVE Click the Overview tab to return to the previous table to begin the next step Step 2 Configure Security Settings for your VAP The following instructions will guide the user to set up wireless security with a specific VAP If only restricted access of certain MAC addresses is desired skip to Step3 MAC restriction can be coupled with wireless security to provide extra protection First click on the corresponding cell in the column labeled Security Type This hyperlink will direct the user to the following Security Settings page 32 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH System Wireless Firewall Utilities Status SEN D A A ap Overview d General VAP Config Security Repeater f Advanced d Access Control Home gt Wireless gt Security Security Settings Profile Name RF Card A VAP 1 E Security Type Open l 802 1X WPA Personal WPA Enterprise Security Settings Page RF Card A VAP 1 shown Se
115. w List means that there are no allowed MAC addresses Make sure at least the MAC of the modifying system is included e g network administrator s computer 3 MAC ACL Deny List This means that all client devices are granted with access to the system except those listed in the Deny List denied MAC addresses The administrator can allow any denied MAC address to connect to the system temporarily by checking Enable 39 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Access Control Settings Profile Name RF Card A VAP 1 z Maximum Number of Clients 32 Range 1 256 per system Access Control Type MAC ACL Deny List No 1 2 10 MAC Address el State Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable First Prev Next Last total 100 MAC ACL Deny List Enable D Enable Enable J Enable J Enable Enable Enable Enable Enable Enable RADIUS ACL Authenticate incoming MAC addresses by an external RADIUS server When RADIUS ACL is selected all incoming MAC addresses will be authenticated by an external RADIUS server Please note that each VAP MAC ACL and its security type shown on the Security Settings page share the same RADIUS configuration 40 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access P
116. wall Utilities and Status Table 1 4ipnet Access Points Function Organization OPTION FUNCTION System General Network Interface Port Management CAPWAP IPv6 Wireless VAP Overview General VAP Config Security Repeater Advanced Access Control Firewall Firewall List Service Advanced Utilities Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan AN Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Overview Interfaces Associated Clients WDS Link Status Event Log Status Monitor On each configuration page you may click SAVE to save the changes of your configured settings but you must reboot the system for the changes to take effect After clicking SAVE the following message will appear Some modification has been saved and will take effect after Reboot All online users will be disconnected during reboot or restart Note 46 Copyright 4IPNET INC hg 4ipnet User s Manual Enterprise Access Point ENGLISH 7 1 System Upon clicking the System icon users can utilize this section for general configurations of the devices e g Time Setup Network Configurations and System Logs This section includes the following functio
117. with different band compatibilities have the same air time This feature is ideal for networks with devices supporting different bands When set to Preferred Access N band clients are prioritized This feature is ideal for networks with devices supporting different bands e Packet Delay Threshold ms An Access Point may be occupied trying to transmit a packet to a busy client or a client out of range hence delaying transmission to other connected clients When Enabled this Tx queue flushing mechanism drops packets and immediately begins to process others if the queue has been processed for more than x milliseconds where Default 0 disabled This feature improves the performance of complex wireless networks but may require some packets to be resent e Idle Timeout s Client disconnects when inactivity reaches the configured amount of time in seconds where default 300s 6l Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH e Band Steering When enabled clients with 5GHz connectivity will be steered towards the 5GHz band to reduce congestion in the 2 4GHz band This is applicable only when the AP is set to 2 4GHz and 5GHz on the 2 RF Cards When Aggressive is checked clients with 5GHz connectivity are forced to connect to the 5GHz band e Interference Detection When Utilization Latency and Invalid Packet Rate of the current channel or adjacent channel reaches the configur
118. y or Auto 34 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH gt WEP Key Length Select a key length from 64 bit 128 bit 152 bit WEP Key Format Select from ASCII or Hex format for the WEP key gt WEP Key Index Select a key index from 1 through 4 The WEP key index is a number that specifies which WEP key is used for the encryption of wireless frames during data transmission Vv gt WEP Keys Provide the pre defined WEP key value the system supports up to 4 sets of WEP keys e 802 1X When 802 1X Authentication is selected RADIUS authentication and enhanced dynamic WEP are provided VAP Overview General VAP Config Security Repeater Advanced Access Control Home gt Wireless gt Securit Security Settings Profile Name RF Card A VAP 1 e Security Type 802 1X v Dynamic WEP Disable oe Enable WEP Key Length 64 bits 128 bits Rekeying Period 300 second s Primary RADIUS Server zl Host Domain Name IP Address Authentication Port 1812 Secret Key i Accounting Service Disable Enable Accounting Port 1813 ig Accounting Interim Update Interval 60 second s Secondary RADIUS Server Host Domain Name IP Address Authentication Port Secret Key Accounting Service Disable Enable Accounting Port Accounting Interim Update Interval second s Security Settings 802 1X Authentication gt Dynamic WEP Settings o Dynami
119. yption type used by the respective AP e Setup Connect gt Connect Click Connect to associate with the respective AP directly no further configuration is required 114 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH Cip AP 0A 11 A3 08 09 56 6 54 38 None gt Setup Click Setup to configure security settings for associating with the respective AP or repeater o WEP Click Setup to configure the WEP setting for associating with the target AP Cip wep 06 1F D4 39 10 74 11 54 50 WEP The following configuration box will then appear at the bottom of the screen For more information on the WEP security settings please refer to Section 8 2 3 Security Settings WEP Key Type Open O Shared O Auto WEP Key Length 64 bits 128 bits O 152 bits WEP Key Format ASCH O Hex WEP Key Index v WEP Keys 1 2 3 4 o WPA PSK Click Setup to configure the WPA PSK setting for associating with the target AP Cip Cherry 06 11 A3 08 09 56 6 54 37 WPA PSK The following configuration box will then appear at the bottom of the screen For more information on the WPA PSK security settings please refer to Section 8 2 3 Security Settings Pre shared Cipher TKIP Pre shared Key Type PSK Hex 64 chars Passphrase 8 63 chars Pre shared Key 115 Copyright 4IPNET INC 4ipnet User s Manual Enterprise Access Point ENGLISH 8

4ipnet EAP-OWL User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents